ROSECURIFY
Subscribe
~/ seclog/ #45

Seclog - #45

22 curated links

g3n3r4l14

  1. What Happens After You Shift Security Left? (betterappsec.com)
  2. Root takeover via signature spoofing vulnerability found in kernelsu (huntr.com)
  3. CVE-2023-4427 enum cache indices array out of bound access (docs.google.com)
  4. Hackers Stole Access Tokens from Okta’s Support Unit (krebsonsecurity.com)
  5. Tracking Unauthorized Access to Okta's Support System | Okta Security (sec.okta.com)
  6. You Are Not Where You Think You Are, Opera Browsers Address Bar Spoofing Vulnerabilities (medium.com)
  7. Customizing Sliver - Part 1 (security.humanativaspa.it)
  8. Kubernetes | Report 2039464 - Code inject via (hackerone.com)

    nginx.ingress.kubernetes.io/permanent-redirect annotation

  9. Cloudflare sees surge in hyper-volumetric HTTP DDoS attacks (bleepingcomputer.com)
  10. Arkime (arkime.com)
  11. Home - KubeHound (kubehound.io)
  12. iLeakage (ileakage.com)
  13. Invisible Internet Protocol Daemon (i2pd.website)
  14. Internet Artifacts (neal.fun)

y0utube3

  1. Securing AND Pentesting the Great Spaghetti Monster (k8s) by Kat FItzgerald (youtube.com)
  2. Purple Teaming (Black Hat USA 2023 Booth Talk) (youtube.com)
  3. Automating Boolean SQL Injection and Evading Filters (youtube.com)

g1thub5

  1. nopcorn/CuteRAT (github.com)
  2. dekadentno/beagle.js (github.com)
  3. Hakky54/certificate-ripper (github.com)
  4. kevin-mizu/domloggerpp (github.com)
  5. xnl-h4ck3r/LookMark (github.com)
← All Seclogs