ROSECURIFY
Subscribe
~/ seclog/ #82

Seclog - #82

22 curated links

g3n3r4l16

  1. beaconDB (beacondb.net)

    An advanced database for security researchers and analysts.

  2. BLAST RADIUS (blastradius.fail)

    A platform focused on visualizing and understanding the impact of security breaches.

  3. Deep-ML (deep-ml.com)

    A cutting-edge tool leveraging deep learning for security applications.

  4. Crooks Steal Phone, SMS Records for Nearly All AT&T Customers (krebsonsecurity.com)

    A major breach impacting nearly all AT&T customers, compromising phone and SMS records.

  5. Thwacking DDOS with AWS WAF (ramimac.me)

    Insights into using AWS WAF to mitigate DDOS attacks effectively.

  6. Secure by Design Alert: Eliminating OS Command Injection Vulnerabilities (cisa.gov)

    Guidelines from CISA on preventing OS command injection vulnerabilities.

  7. Chaining Three Bugs to Access All Your ServiceNow Data (assetnote.io)

    A detailed analysis of exploiting multiple vulnerabilities to gain unauthorized access to ServiceNow data.

  8. plORMbing your Prisma ORM with Time-based Attacks (elttam.com)

    Examining time-based attacks on Prisma ORM to understand potential vulnerabilities.

  9. Binary secret scanning helped us prevent (what might have been) the worst supply chain attack you can imagine (jfrog.com)

    How binary secret scanning averted a significant supply chain attack.

  10. How I found DOM XSS via postMessage on (namcoder.com)

    Bing.com - Microsoft Bug Bounty - A write-up on discovering a DOM XSS vulnerability on Bing.com.

  11. Security Cameras - A Penetration Tester's Journey (tobiabocchi.me)

    Exploring vulnerabilities in security cameras through penetration testing.

  12. PySkyWiFi: completely free, unbelievably stupid wi-fi on long-haul flights (robertheaton.com)

    An innovative approach to accessing free Wi-Fi on long-haul flights.

  13. RockYou2024: 10 billion passwords leaked in the largest compilation of all time (cybernews.com)

    An overview of the massive RockYou2024 password leak.

  14. Context window overflow: Breaking the barrier (aws.amazon.com)

    Discussing the implications and solutions for context window overflow in security.

  15. Don't Click Evil.txt: CVE-2024-30050 and Other Windows Silliness (research.aurainfosec.io)

    An analysis of a new CVE and other security quirks in Windows.

  16. Interactive Arithmetization and Iterative Constraint Systems (cryptologie.net)

    A dive into advanced cryptographic techniques and their applications.

g1thub6

  1. Bypassing Discord's masked links filter (gist.github.com)

    Techniques to bypass Discord's security filters on masked links.

  2. mbadanoiu/CVE-2024-22274 (github.com)

    Authenticated Remote Code Execution in VMware vCenter Server. Explore on GitHub

  3. FLOCK4H/AtomDucky (github.com)

    WiFi Rubber Ducky with a web interface using CircuitPython. Explore on GitHub

  4. efeali/fragtunnel (github.com)

    A PoC TCP tunnel tool for bypassing firewalls. Explore on GitHub

  5. kpolley/PIIDetective (github.com)

    A PII detection platform leveraging human-in-the-loop AI. Explore on GitHub

  6. NetSPI/gcpwn (github.com)

    A pentesting framework for GCP, modeled like Pacu for AWS. Explore on GitHub

← All Seclogs