ROSECURIFY
Subscribe
~/ seclog/ #75

Seclog - #75

20 curated links

g3n3r4l13

  1. DNSBomb (dnsbomb.net)

    Exploit various DNS server vulnerabilities for network penetration testing.

  2. LangChain JS Arbitrary File Read Vulnerability (evren.ninja)

    Discusses a critical vulnerability in LangChain JS allowing arbitrary file reads.

  3. Old new email attacks - Slonser Notes (blog.slonser.info)

    Analysis of old and new techniques in email attacks.

  4. Abusing URL handling in iTerm2 and Hyper for code execution (vin01.github.io)

    Exploiting URL handlers in terminal emulators for arbitrary code execution.

  5. Exploit Archeology - Exploiting an old unknown Server Side Browser | Alex Chapman’s Blog (blog.ajxchapman.com)

    Techniques for exploiting an old server-side browser.

  6. CVE-2024-4367 - Arbitrary JavaScript execution in PDF.js — Codean Labs (codeanlabs.com)

    Details on a vulnerability in PDF.js allowing arbitrary JavaScript execution.

  7. Exploiting CVE-2024-32002: RCE via git clone | Amal Murali (amalmurali.me)

    A deep dive into a remote code execution vulnerability through git clone.

  8. Cyber Security: A Pre-War Reality Check - Bert Hubert's writings (berthub.eu)

    Reflections on cybersecurity in the context of geopolitical tensions.

  9. Password cracking: past, present, future (OffensiveCon 2024) (openwall.com)

    Comprehensive insights into the evolution of password cracking techniques.

  10. CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive (horizon3.ai)

    - Analyzing a command injection vulnerability in Fortinet FortiSIEM.

  11. Holes in Your Bitbucket: Why Your CI/CD Pipeline Is Leaking Secrets | Google Cloud Blog (cloud.google.com)

    Investigating secret leakage issues in Bitbucket CI/CD pipelines.

  12. ChatGPT: Hacking Memories with Prompt Injection · Embrace The Red (embracethered.com)

    Exploring vulnerabilities in ChatGPT's memory through prompt injection.

  13. Random thoughts on physical security measures – DiabloHorn (diablohorn.com)

    Discussing various physical security measures and their effectiveness.

X1

  1. Cybertruck Design Flaw Alert (@garageklub)

    Highlighting a significant design flaw in Cybertruck that causes unintended acceleration due to the accelerator pedal issue. Watch Here

y0utube1

  1. Backdooring Keras Models and How to Detect It (Machine Learning Attack Series) (youtube.com)

    Insights into backdooring Keras models and detection techniques. Watch Here

g1thub5

  1. scalar/scalar (github.com)

    Beautiful API references from OpenAPI/Swagger files ✨ Explore on GitHub

  2. hmgle/graftcp (github.com)

    A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy. Explore on GitHub

  3. FoxIO-LLC/ja4 (github.com)

    JA4+ is a suite of network fingerprinting standards. Explore on GitHub

  4. idealeer/xmap (github.com)

    XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. Explore on GitHub

  5. mozillazg/ptcpdump (github.com)

    Process-aware, eBPF-based tcpdump. Explore on GitHub

← All Seclogs