ROSECURIFY
Subscribe
~/ seclog/ #48

Seclog - #48

30 curated links

g3n3r4l20

  1. SSRFUtility - SSRF Exploitation Tool (ssrf.cvssadvisor.com)
  2. THE CLOUD & APP SECURITY LIST (list.latio.tech)
  3. Uncovering a crazy privilege escalation from Chrome extensions (0x44.xyz)
  4. Escaping the sandbox: A bug that speaks for itself (microsoftedge.github.io)
  5. Okta for Red Teamers (medium.com)
  6. State of Cloud Security (datadoghq.com)
  7. Playing with NFC Cards (blog.anantshri.info)
  8. Security Vulnerabilities in AppsAnywhere (gaelan.me)
  9. CISA Has a New Road Map for Handling Weaponized AI (wired.com)
  10. All the Small Things: Azure CLI Leakage and Problematic Usage Patterns (paloaltonetworks.com)
  11. Caricatures of Security People (philvenables.com)
  12. Abusing Client-Side Desync on Werkzeug (mizu.re)
  13. Building a free Burp Collaborator with Cloudflare Workers (blog.gbrls.space)
  14. The Spelling Police: Searching for Malicious HTTP Servers by Identifying Typos in HTTP Responses (blog.fox-it.com)
  15. Exploring GPTs: ChatGPT in a trench coat? (simonwillison.net)
  16. Bypass Two-Factor Authentication of Facebook Accounts ($25,300) (medium.com)
  17. HackAPrompt (paper.hackaprompt.com)
  18. Teams external participant splash screen bypass (badoption.eu)
  19. From Akamai to F5 to NTLM... with love. (blog.malicious.group)
  20. Denial of Pleasure: Attacking Unusual BLE Targets with a Flipper Zero (whid.ninja)

X1

  1. Ivan at Wallarm / API security tweeted about of OpenAI bypassing (@d0znpp)

g1thub9

  1. yunuscadirci/DIALStranger (github.com)
  2. kljunowsky/CVE-2023-36845 (github.com)
  3. Aqua-Nautilus/CVE-Half-Day-Watcher (github.com)
  4. marcinguy/betterscan-ce (github.com)
  5. hackerschoice/bpfhacks (github.com)
  6. protectai/ai-exploits (github.com)
  7. AgentOps-AI/BestGPTs (github.com)
  8. qsocket/qs-netcat (github.com)
  9. xcanwin/CVE-2023-4357-Chrome-XXE (github.com)
← All Seclogs