ROSECURIFY
Subscribe
~/ seclog/ #87

Seclog - #87

19 curated links

g3n3r4l11

  1. Read More (sploitify.haxx.it)

    Sploitify - A tool for security researchers and penetration testers.

  2. Read More (media.defcon.org)

    The DEF CON® Media Server - Archives of the DEF CON 32 conference presentations.

  3. Read More (gamehacking.academy)

    Game Hacking Academy - A resource for learning game hacking techniques.

  4. Read More (cryptobook.nakov.com)

    Practical Cryptography for Developers - A comprehensive guide to cryptography for developers.

  5. Beyond.com (beyond.com)

    Hacking — Enumerating Private TLDs - An exploration of enumerating private top-level domains.

  6. Read More (portswigger.net)

    Listen to the whispers: web timing attacks that actually work - A deep dive into effective web timing attacks.

  7. Read More (blog.calif.io)

    Wormable Substack XSS - An analysis of a cross-site scripting vulnerability on Substack.

  8. Read More (pentestpartners.com)

    Insights and highlights from DEF CON 32 - Key takeaways from the DEF CON 32 conference.

  9. Read More (freenet.org)

    Introducing Ghost Keys - A new feature in Freenet for enhanced privacy.

  10. Read More (portswigger.net)

    Gotta cache 'em all: bending the rules of web cache exploitation - Techniques for exploiting web caches.

  11. Read More (senayakut.com)

    Multi-Tenant Architectures with AWS Cognito - A guide to implementing multi-tenant architectures using AWS Cognito.

y0utube1

  1. Watch Here (youtube.com)

    Jeff Man: From NSA to Pentesting - An interview with Jeff Man about his journey from the NSA to penetration testing.

g1thub7

  1. Explore on GitHub (github.com)

    EgeBalci/proton-poc - A proof of concept Proton CAPTCHA solver.

  2. Explore on GitHub (github.com)

    dshieble/playwright\xss\scanner - A tool for scanning XSS vulnerabilities using Playwright.

  3. Explore on GitHub (github.com)

    aws/karpenter-provider-aws - Karpenter, a Kubernetes Node Autoscaler for AWS.

  4. Explore on GitHub (github.com)

    gmatuz/inthewilddb - An hourly updated database of exploit and exploitation reports.

  5. Explore on GitHub (github.com)

    doyensec/CSPTBurpExtension - A Burp Suite extension for finding and exploiting Client-Side Path Traversal.

  6. Explore on GitHub (github.com)

    mbrg/power-pwn - An offensive security toolset for Microsoft 365 focusing on Copilot and Power Platform.

  7. Explore on GitHub (github.com)

    BushidoUK/Ransomware-Tool-Matrix - A resource listing tools used by various ransomware gangs.

← All Seclogs