ROSECURIFY
Subscribe
~/ seclog/ #56

Seclog - #56

31 curated links

g3n3r4l18

  1. Privacy is sexy 🍑🍆 - Enforce privacy & security on Windows, macOS and Linux (privacy.sexy)

    A comprehensive guide to enhancing privacy and security across major operating systems.

  2. Certificate Transparency (certificate.transparency.dev)

    Delve into the world of certificate transparency and its pivotal role in internet security.

  3. Quishing Simulator - Keepnet Labs (keepnetlabs.com)

    An interactive simulator to understand and defend against quishing attacks.

  4. Exploiting XSS using Polyglot JPEGs+Javascript to bypass CSP (en.hacks.gr)

    A novel approach to exploiting XSS vulnerabilities using polyglot JPEGs and JavaScript.

  5. Privilege Escalation in Cloudflare Pages (blog-ryotak-net.translate.goog)

    Exploration of privilege escalation and page tampering issues in Cloudflare Pages.

  6. Adtech Catalyzing Fraud: Unverified Vanity URLs & Interest Tracking by Eli Grey (eligrey.com)

    An analysis of how adtech, including unverified vanity URLs, is catalyzing online fraud.

  7. 2023 CVE Data Review (jerrygamblin.com)

    A comprehensive review of CVE data from the year 2023.

  8. Control-M Web Security Advisory (errno.fr)

    Important security update and advisory for Control-M Web users.

  9. Unauthenticated RCE in Adobe Coldfusion (CVE-2023-26360) (blog.securelayer7.net)

    A detailed analysis of a remote code execution vulnerability in Adobe Coldfusion.

  10. GitLab Critical Security Release (Versions 16.7.2, 16.6.4, 16.5.6) (about.gitlab.com)

    Details on GitLab's critical security update addressing significant vulnerabilities.

  11. Defending Websites with ZIP Bombs (blog.haschek.at)

    Strategies on using ZIP bombs to protect websites.

  12. Analysis of HTTP2 Request Smuggling (paper.seebug.org)

    In-depth exploration of utilizing HTTP2 request smuggling.

  13. Best Security Movies (and some yet to be made) by Phil Venables (philvenables.com)

    A curated list of the best security movies and some ideas for future films.

  14. 5 Katana Tricks for OSINT (osintteam.blog)

    Advanced techniques for open-source intelligence gathering.

  15. Sink Tracing in Modern Web Applications (ecsypno.com)

    Techniques for tracing and securing web application sinks.

  16. PaperCut WebDAV Vulnerability (CVE-2023-39143) (horizon3.ai)

    : Comprehensive writeup on the PaperCut WebDAV vulnerability.

  17. Opsec for Security Investigators by Cosive (cosive.com)

    Essential operational security tips for professionals in the security field.

  18. Introducing ShellSweep: Web Shell Detection Tool by Splunk (splunk.com)

    a new tool for detecting web shells.

g1thub13

  1. MobSF Remote Code Execution (CVE-2024-21633) by 0x33c0unt (github.com)

    In-depth analysis of a critical remote code execution vulnerability in MobSF.

  2. Chrome V8 Engine Exploit (CVE 2023-4069) - GitHub Security Lab (github.com)

    Technical details of exploiting vulnerabilities in Chrome's V8 engine.

  3. MSRC Security Report Analysis (gist.github.com)

    A detailed examination of a security report from the Microsoft Security Response Center.

  4. Paper-based Secret Sharing Technique - Sjlver/psst (github.com)

    innovative approach to secret sharing using paper-based techniques. Explore on GitHub

  5. SSH-Snake by MegaManSec (github.com)

    A self-propagating, self-replicating, file-less script for automating SSH private key and host discovery. Explore on GitHub

  6. Swarmsecurity/swarm (github.com)

    The next generation of distributed cloud scanning and attack surface monitoring, evolved from Axiom. Explore on GitHub

  7. Automating AWS Resource Import into Terraform - aws-samples/aws2tf (github.com)

    Automate the importing of existing AWS resources into Terraform and outputs Terraform HCL code. Explore on GitHub

  8. Secator by freelabz (github.com)

    a unique tool in the realm of cybersecurity. Explore on GitHub

  9. BypassFuzzer by intrudir (github.com)

    A specialized tool for fuzzing 401/403/404 pages to discover bypass vulnerabilities. Explore on GitHub

  10. LL-RASP: Protecting High-level Programming Languages - h2-stack (github.com)

    Learn about low-level RASP techniques for protecting applications implemented in high-level programming languages. Explore on GitHub

  11. PostMessage Logger - opnsec (github.com)

    A simple Chrome extension for logging "postMessage" data, useful in security analysis. Explore on GitHub

  12. Eval Villain: Discovering DOM XSS - swoops (github.com)

    A Firefox Web Extension aimed at improving the discovery of DOM XSS vulnerabilities. Explore on GitHub

  13. Damn Vulnerable LLM Agent - WithSecureLabs (github.com)

    A repository dedicated to studying and understanding vulnerabilities in LLM agents. Explore on GitHub

← All Seclogs