ROSECURIFY
Subscribe
~/ seclog/ #71

Seclog - #71

20 curated links

g3n3r4l18

  1. Search for leaked passwords inside the largest dataset of all time (Combination Of Many Breaches) (proxynova.com)

    This platform allows you to search for leaked passwords in a combined dataset of major breaches.

  2. SadServers - Linux & DevOps Troubleshooting Interviews (sadservers.com)

    Linux and DevOps troubleshooting interviews.

  3. ESPHome (esphome.io)

    ESPHome is a system for controlling your ESP8266/ESP32-based devices in Home Assistant.

  4. Start Your Own ISP (startyourownisp.com)

    A comprehensive guide to help you start your own Internet Service Provider.

  5. 10 Things Your First Security Hire Shouldn’t Do (ramimac.me)

    Exploring ten things your first security hire shouldn't do.

  6. (The) Postman Carries Lots of Secrets (trufflesecurity.com)

    Insights into secrets carried by the Postman.

  7. Baldur (baldur.dk)

    Exploration of embedded Mitel exploitation.

  8. LLM Agents can Autonomously Exploit One-day Vulnerabilities (arxiv.org)

    Details on LLM Agents autonomously exploiting one-day vulnerabilities.

  9. Multiple Vulnerabilities in Open Devin (Autonomous AI Software Engineer) (evren.ninja)

    Discussion on multiple vulnerabilities in Open Devin.

  10. How we escalated a DOM XSS to a sophisticated 1-click Account Takeover for $8000 - Part 1 (thefrogsec.github.io)

    A detailed account of escalating a DOM XSS to a sophisticated account takeover.

  11. What’s new in security for Ubuntu 24.04 LTS? (ubuntu.com)

    Updates on security features in Ubuntu 24.04 LTS.

  12. 18 vulnerabilities in Brocade SANnav - IT Security Research by Pierre (pierrekim.github.io)

    Analysis of 18 vulnerabilities in Brocade SANnav.

  13. GitLab affected by GitHub-style CDN flaw allowing malware hosting (bleepingcomputer.com)

    Details on GitLab being affected by a GitHub-style CDN flaw.

  14. IPv6 for the remotely interested (ssg.dev)

    Introduction to IPv6 for the remotely interested.

  15. Unauthenticated CrushFTP Zero-Day Enables Complete Server Compromise (rapid7.com)

    Insights into an unauthenticated CrushFTP zero-day vulnerability.

  16. Comparison and Evaluation on Static Application Security Testing (SAST) Tools for Java (linkedin.com)

    Analysis of SAST tools for Java.

  17. DevSecOps Best Practices- Secure Everything You Have (speakerdeck.com)

    Best practices for securing everything in DevSecOps.

  18. GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining (decoded.avast.io)

    Insights into GuptiMiner hijacking antivirus updates.

g1thub2

  1. Microsoft/MS-DOS (github.com)

    The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes. Explore on GitHub

  2. CVE-2024-21111: Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability (github.com)

    Vulnerability details regarding Oracle VirtualBox. Explore on GitHub

← All Seclogs