Seclog - #99

g3n3r4l9

1. Movies for Hackers (hackermovie.club)

   A curated list of movies that hackers would enjoy -

2. Hacking 700 Million Electronic Arts Accounts (battleda.sh)

   An analysis of how EA accounts were compromised -

3. Building a Keylogger Browser Extension (blog.thoughtfault.com)

   Tutorial on creating a browser extension keylogger -

4. Understanding Round Robin DNS (blog.hyperknot.com)

   Comprehensive guide to Round Robin DNS systems -

5. Engineering WCF Hacks (blog.silentsignal.eu)

   Deep dive into WCF .NET.TCP penetration testing -

6. Offensively Groovy (trustedsec.com)

   TrustedSec's analysis of offensive security using Groovy -

7. Upcoming Hardening in PHP (dustri.org)

   Overview of new security features in PHP -

8. Beyond RCE: Autonomous Code Execution in Agentic AI (securityrunners.io)

   Research on AI security implications -

9. Amazon CloudFront WAF Billing Update (aws.amazon.com)

   Changes to AWS WAF billing structure -

X5

1. Stack Smashing Anniversary (@todayininfosec)

   Historical reflection on the famous "Smashing The Stack For Fun And Profit" article -

2. LLMs and Vulnerability Research (@daveaitel)

   Analysis of AI's role in security research -

3. FastJSON Exploit Discovery (@1ue1166323)

   New exploit found for CVE-2022-25845 in Spring -

4. WAF Bypass Technique (@d4d89704243)

   Novel approach to bypassing path-based WAF restrictions -

5. XSS Research (@S1r1u5_)

   Interesting findings in XSS vulnerability research -

g1thub4

1. RFHunter (github.com)

   Tool for detecting hidden cameras in AirBNBs - GitHub

2. SASTSweep (github.com)

   Automated vulnerability detection and repository analysis tool - GitHub

3. Reaper (github.com)

   Ghost Security's new security tool - GitHub

4. PFZF (github.com)

   Context-aware code selection tool for LLM workflows - GitHub