ROSECURIFY
Subscribe
~/ seclog/ #86

Seclog - #86

25 curated links

g3n3r4l14

  1. GhostWrite (ghostwriteattack.com)

    attack techniques with GhostWrite. -

  2. Welcome to Gallipoli Community! – Gallipoli – A hacker saved my life (gallipoli.xyz)

    Gallipoli community and learn how hacking can change lives. -

  3. privacy.sexy (privacy.sexy)

    Maximize Your Privacy and Security - Maximize your privacy and security with privacy.sexy. -

  4. Wizlympics: The First Cloud Security Olympic Games | Wiz Blog (wiz.io)

    first Cloud Security Olympic Games hosted by Wiz. -

  5. My keyboard was misbehaving so I had to exploit my NAS - appsec & stuff (appsec.space)

    A fascinating tale of keyboard issues leading to NAS exploitation. -

  6. Exploiting Novel GPT-4 APIs (arxiv.org)

    A deep dive into exploiting the latest GPT-4 APIs. -

  7. CVE-2022-2586 Writeup | jmpr4xp4x’s blog (jmpeax.dev)

    A detailed write-up on CVE-2022-2586. -

  8. Y'all are sleeping on HTTP/3 (kmcd.dev)

    Why HTTP/3 deserves more attention in the security community. -

  9. Introducing our new Canarytoken: the Fake App – Thinkst Thoughts (blog.thinkst.com)

    Learn about Thinkst's new Canarytoken, the Fake App. -

  10. Auditing Atlassian Plugins, 53 0-Days Later | cyllective's blog (cyllective.com)

    A comprehensive audit of Atlassian plugins leading to 53 0-days. -

  11. Code Execution in Chromium's V8 Heap Sandbox – Anvbis (anvbis.au)

    A deep dive into code execution vulnerabilities in Chromium's V8 Heap Sandbox. -

  12. Security Engineer Interview Prep (amazon.jobs)

    Preparing for a security engineer interview at Amazon. -

  13. Scaling Variant Analysis // Going Beyond Grep (goingbeyondgrep.com)

    Techniques for scaling variant analysis beyond simple grep. -

  14. SOP bypass in Google Scholar PDF Reader (Fixed) (ndevtk.github.io)

    A write-up on a SOP bypass in Google Scholar PDF Reader. -

g1thub11

  1. happycakefriends/certainly (github.com)

    Offensive security toolkit for capturing large amounts of traffic in bitflip and typosquat scenarios. - Explore on GitHub

  2. NodeSecure/js-x-ray (github.com)

    JavaScript & Node.js open-source SAST scanner for detecting malicious patterns. - Explore on GitHub

  3. chainguard-dev/incert (github.com)

    Add CA certificates into containers with ease. - Explore on GitHub

  4. seemoo-lab/openhaystack (github.com)

    Build your own 'AirTags' today and track personal Bluetooth devices via Apple's Find My network. - Explore on GitHub

  5. grimdoomer/TonyHawksProStrcpy (github.com)

    Code execution exploit for Tony Hawk's video game series. - Explore on GitHub

  6. OrangeJuiceHU/CVE-2024-41958-PoC (github.com)

    Proof of concept for CVE-2024-41958. - Explore on GitHub

  7. mbadanoiu/CVE-2024-22274 (github.com)

    Authenticated Remote Code Execution in VMware vCenter Server. - Explore on GitHub

  8. testanull/MS-SharePoint-July-Patch-RCE-PoC (github.com)

    Remote Code Execution proof of concept for SharePoint July Patch. - Explore on GitHub

  9. cmlccie/awsipranges (github.com)

    Quickly query the AWS IP Ranges with this tool. - Explore on GitHub

  10. crowdsecurity/crowdsec (github.com)

    CrowdSec: Open-source and participative security solution offering crowdsourced protection against malicious IPs. - Explore on GitHub

  11. NilsIrl/dockerc (github.com)

    A tool to compile a container image into a single executable. - Explore on GitHub

← All Seclogs