ROSECURIFY
Subscribe
~/ seclog/ #95

Seclog - #95

15 curated links

g3n3r4l10

  1. Project Zero: Effective Fuzzing: A Dav1d Case Study (googleprojectzero.blogspot.com)

    Exploring effective fuzzing techniques using Dav1d as a case study.

  2. Google Online Security Blog: Using Chrome's accessibility APIs to find security bugs (security.googleblog.com)

    How Chrome's accessibility APIs can be leveraged to uncover security vulnerabilities.

  3. Internet Archive Hacked (probably) (words.theresnotime.co.uk)

    \- Analysis of a potential hack on the Internet Archive.

  4. Security Awareness Month: 5 Attack Trends in 2024! (lockboxx.blogspot.com)

    \- Overview of key attack trends in 2024 for Security Awareness Month.

  5. Palo Alto Expedition: From N-Day to Full Compromise (horizon3.ai)

    \- Detailed analysis of a compromise involving Palo Alto networks.

  6. ~200GB Free Cloud for Your files (blog.tomaszdunia.pl)

    \- Guide on obtaining 200GB of free cloud storage.

  7. Bypassing noexec and executing arbitrary binaries (iq.thc.org)

    Technical guide on bypassing noexec restrictions.

  8. 3 ways to get Remote Code Execution in Kafka UI (github.blog)

    \- Exploring RCE vulnerabilities in Kafka UI.

  9. OffSec Exam HTB Lists | 0xdf hacks stuff (0xdf.gitlab.io)

    Useful cheat sheets for OffSec exams and Hack The Box.

  10. Why Code Security Matters - Even in Hardened Environments (sonarsource.com)

    \- The importance of code security in all environments.

X1

  1. Haifei Li on X: "When the fuzzer crashed itself.." (@HaifeiLi)

    Interesting observation about a fuzzer crashing itself. Watch Here

y0utube2

  1. REAL Ransomware Chat Logs (youtube.com)

    Analysis of actual ransomware chat logs. Watch Here

  2. Project Zero: Ten Years of 'Make 0-Day Hard' (youtube.com)

    Reflection on a decade of Project Zero's efforts to make zero-day exploits harder. Watch Here

g1thub2

  1. 1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies (gist.github.com)

    Revealing a significant security flaw in Zendesk affecting major companies.

  2. ring0-c0d3-br34k3r/Stuxnet-Rootkit: Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis (github.com)

    Repository containing extracted Stuxnet binaries and analysis of the Stuxnet rootkit. Explore on GitHub

← All Seclogs