ROSECURIFY
Subscribe
~/ seclog/ #84

Seclog - #84

21 curated links

g3n3r4l14

  1. Introduction | Qubes OS (qubes-os.org)

    An overview of Qubes OS, a security-focused operating system that uses Xen-based virtualization. -

  2. 2024 Stack Overflow Developer Survey (survey.stackoverflow.co)

    Insights and trends from the annual survey of developers on Stack Overflow. -

  3. Reverse Engineering For Everyone! (0xinfection.github.io)

    A beginner-friendly guide to reverse engineering by 0xInfection. -

  4. Studying 0days: How we hacked Anki, the world's most popular flashcard app (skii.dev)

    Exploring the discovery and exploitation of zero-day vulnerabilities in Anki. -

  5. How a double-free bug in WhatsApp turns to RCE - Home (awakened1712.github.io)

    Analysis of a critical double-free vulnerability in WhatsApp leading to remote code execution. -

  6. Looking for vulnerabilities in Strapi (CVE-2024-34065) - Quarkslab's blog (blog.quarkslab.com)

    An in-depth look at identifying vulnerabilities in Strapi. -

  7. Give Me the Green Light Part 1: Hacking Traffic Control Systems — Red Threat (redthreatsec.com)

    A detailed exploration of hacking traffic control systems. -

  8. New 0day found in Telegram : Just One click and you are Hacked - Hacking Blogs (hackingblogs.com)

    Investigation of a new zero-day vulnerability in Telegram. -

  9. WhatsApp trick: Android malware can impersonate PDF file (mobile-hacker.com)

    Examination of an Android malware that impersonates a PDF file on WhatsApp. -

  10. WebAssembly and Security: a review (arxiv.org)

    A comprehensive review of WebAssembly security issues. -

  11. Roger's Blog – Hacking a 2014 tablet... in 2024! (blog.r0rt1z2.com)

    The challenges and findings of hacking a 2014 tablet in the current year. -

  12. Unfashionably secure: why we use isolated VMs – Thinkst Thoughts (blog.thinkst.com)

    Discussion on the security benefits of using isolated virtual machines. -

  13. Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services – Krebs on Security (krebsonsecurity.com)

    How cybercriminals bypassed Google's email verification. -

  14. CVE-2024-6922: Automation 360 Server-Side Request Forgery | Rapid7 Blog (rapid7.com)

    Details on a server-side request forgery vulnerability in Automation 360. -

y0utube2

  1. Finding criticals in mobile apps - Joel Margolis (0xteknogeek) (youtube.com)

    Insights on identifying critical vulnerabilities in mobile applications. - Watch Here

  2. CVEs are dead, long live the CVE! (youtube.com)

    Discussion on the relevance and future of CVEs. - Watch Here

g1thub5

  1. AnastasiaStill/CVE-2024-23897 (github.com)

    Repository containing details and proof-of-concept for CVE-2024-23897. - Explore on GitHub

  2. vulncheck-oss/go-exploit: A Go-based Exploit Framework (github.com)

    A framework for developing and executing exploits using Go. - Explore on GitHub

  3. chaifeng/ufw-docker: To fix the Docker and UFW security flaw without disabling iptables (github.com)

    Solution for fixing the security issue between Docker and UFW. - Explore on GitHub

  4. yandex-cloud-examples/yc-webinar-pt-application-firewall-ha-operations: Материалы к вебинару «Отказоустойчивая эксплуатация PT Application Firewall на базе Yandex Cloud» (github.com)

    Materials from a webinar on operating PT Application Firewall on Yandex Cloud. - Explore on GitHub

  5. factionsecurity/faction: Pen Test Report Generation and Assessment Collaboration (github.com)

    A tool for generating penetration test reports and facilitating assessment collaboration. - Explore on GitHub

← All Seclogs