ROSECURIFY
Subscribe
~/ seclog/ #58

Seclog - #58

20 curated links

g3n3r4l12

  1. Owning a Bitcoin ATM (labs.ioactive.com)

    Security analysis of Bitcoin ATMs, discussing vulnerabilities and implications.

  2. Rook to XSS: How I hacked (skii.dev)

    chess.com with a rookie exploit - A detailed case study of exploiting a cross-site scripting vulnerability on a popular website.

  3. Attack of the week: Airdrop tracing (blog.cryptographyengineering.com)

    Exploration of security flaws in airdrop technology and their potential impacts.

  4. Gambio 4.9.2.0 - Insecure Deserialization (herolab.usd.de)

    \- Technical breakdown of a specific security vulnerability.

  5. Cloud Threat Landscape: A Cloud Threat Intelligence Database | Wiz (wiz.io)

    An overview of the current threats in cloud computing.

  6. Top 10 web hacking techniques of 2023 - PortSwigger (portswigger.net)

    Review of the most influential web hacking methods of the past year.

  7. “MyFlaw” — Cross Platform 0-Day RCE Vulnerability Discovered in Opera’s Browser (labs.guard.io)

    Analysis of a critical vulnerability found in Opera's browser.

  8. Ivanti vulnerabilities - recap - Koen Van Impe (vanimpe.eu)

    A recap of recent vulnerabilities discovered in Ivanti products.

  9. Yin Yang Metaphor of DNS Privacy (ekremcelikel.medium.com)

    Discussion on the balance between DNS functionality and privacy.

  10. CVE-2023-5480: Chrome new XSS Vector - Slonser Notes (blog.slonser.info)

    Examination of a new XSS vector found in Chrome.

  11. Bypassing browser tracking protection for CORS misconfiguration abuse (swarm.ptsecurity.com)

    Insights into how CORS misconfigurations can be exploited.

  12. GitLab Critical Security Release: 16.8.1, 16.7.4, 16.6.6, 16.5.8 (about.gitlab.com)

    Information on critical security updates for GitLab.

X1

  1. Massimo on X (@Rainmaker1973)

    Tweet about a tool for replicating keys without the original. View Tweet

y0utube1

  1. Securing CI/CD Runners Through eBPF Agent (youtube.com)

    A video discussing the security of CI/CD runners using eBPF Agent. Watch Here

g1thub6

  1. kondukto-io/kntrl (github.com)

    An eBPF based CI/CD security tool. Explore on GitHub

  2. horizon3ai/CVE-2024-0204 (github.com)

    Authentication Bypass in GoAnywhere MFT. Explore on GitHub

  3. RedTeamPentesting/pretender (github.com)

    A tool for relaying attacks featuring multiple spoofing techniques. Explore on GitHub

  4. kunai-project/kunai (github.com)

    A threat-hunting tool for Linux. Explore on GitHub

  5. ACK-J/postMessage-tracker-firefox (github.com)

    A Firefox Extension for tracking postMessage usage. Explore on GitHub

  6. nicocha30/ligolo-ng (github.com)

    An advanced tunneling/pivoting tool using a TUN interface. Explore on GitHub

← All Seclogs