ROSECURIFY
Subscribe
~/ seclog/ #41

Seclog - #41

26 curated links

g3n3r4l16

  1. Post Account Takeover? Account Takeover of Internal Tesla Accounts (evanconnelly.github.io)
  2. Getting RCE in Chrome with incorrect side effect in the JIT compiler (github.blog)
  3. Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to Attackers (thehackernews.com)
  4. CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution (pyn3rd.github.io)
  5. I hacked macOS! (CVE-2022-32947) (asahilina.net)
  6. 38TB of data accidentally exposed by Microsoft AI researchers (wiz.io)
  7. Orange: From 2013 to 2023: Web Security Ten Years of Evolution and Trends! (blog.orange.tw)
  8. A Deep Dive into DNS Debugging (checklyhq.com)
  9. A tale about a Red Team exercise and the Forcepoint Endpoint One DLP client (vicarius.io)
  10. CODE WHITE - Finest Hacking (code-white.com)
  11. Attacking an EDR - Part 1 (riccardoancarani.github.io)
  12. The massive bug at the heart of the npm ecosystem (blog.vlt.sh)
  13. SocketSleuth: Improving security testing for WebSocket applications (snyk.io)
  14. AppSec: SecDevOps or DevSecOps? Do We Need to Choose? Guide to the What and the Why (hackernoon.com)
  15. 10x Your AppSec Program with this One Simple Trick (securing.dev)
  16. Introducing Session Hijacking Visual Exploitation (SHVE): An Innovative Open-Source Tool for XSS Exploitation (blog.doyensec.com)

g1thub10

  1. irsl/curlshell (github.com)
  2. vulncheck-oss/go-exploit (github.com)
  3. godaddy/tartufo (github.com)
  4. yeswehack/vulnerable-code-snippets (github.com)
  5. certsio/certsio (github.com)
  6. challenge writeup content-type shenanigans (gist.github.com)
  7. g0h4n/REC2 (github.com)
  8. laiyer-ai/llm-guard (github.com)
  9. jamf/aftermath (github.com)
  10. g0ldencybersec/CloudRecon (github.com)
← All Seclogs