Hidden parameters discovery suite - x8 v2.0.0
https://ift.tt/3vIKYBI
Submitted June 20, 2021 at 04:50PM by sh1yo_
via reddit https://ift.tt/2SELp2B
https://ift.tt/3vIKYBI
Submitted June 20, 2021 at 04:50PM by sh1yo_
via reddit https://ift.tt/2SELp2B
GitHub
Sh1Yo/x8
Hidden parameters discovery suite. Contribute to Sh1Yo/x8 development by creating an account on GitHub.
The weekly Console email just went out! This week we had an interview with Liam Galvin, the developer of Traitor, the automatic privilege escalation tool (as well as many many others)! I thought /r/netsec might be interested in checking it out! :)
https://ift.tt/35BK53l
Submitted June 20, 2021 at 09:12PM by binaryfor
via reddit https://ift.tt/3iUhBcM
https://ift.tt/35BK53l
Submitted June 20, 2021 at 09:12PM by binaryfor
via reddit https://ift.tt/3iUhBcM
Substack
The Economist, Traitor, and Serenity
An Introduction to Automating Open Source Intelligence Using SpiderFoot
https://ift.tt/3vJ2upx
Submitted June 20, 2021 at 10:34PM by Churppy
via reddit https://ift.tt/2TQ8Upg
https://ift.tt/3vJ2upx
Submitted June 20, 2021 at 10:34PM by Churppy
via reddit https://ift.tt/2TQ8Upg
Rogue Security
An Introduction to Automating Open Source Intelligence Using SpiderFoot
What Is OSINT? Open Source Intelligence (OSINT) is a methodology for collecting, analyzing, and decision-making using publicly available sources of data. According the Wikipedia, OSINT sources can …
Firewalls Gold vs Ubiquiti Dream Machine Pro
http://firewalla.com
Submitted June 21, 2021 at 12:09AM by Jsharp5680
via reddit https://ift.tt/3zIg3bK
http://firewalla.com
Submitted June 21, 2021 at 12:09AM by Jsharp5680
via reddit https://ift.tt/3zIg3bK
Firewalla
Firewalla: Cybersecurity Firewall For Your Family and Business
Firewalla is an all-in-one intelligent Firewall that connects to your router and secures all of your digital things. It can protect your family and business from cyber threats, block ads, control kids' internet usage, and even protects you when you are out…
Why mimicking a device is becoming almost impossible - Multilogin
https://ift.tt/3qfhWbv
Submitted June 21, 2021 at 03:12AM by ziyahanalbeniz
via reddit https://ift.tt/2SMPWzT
https://ift.tt/3qfhWbv
Submitted June 21, 2021 at 03:12AM by ziyahanalbeniz
via reddit https://ift.tt/2SMPWzT
Certified Red Team Professional (CRTP) Reflections
https://ift.tt/3gIcOd9
Submitted June 21, 2021 at 08:55AM by debifrank
via reddit https://ift.tt/3zFUokC
https://ift.tt/3gIcOd9
Submitted June 21, 2021 at 08:55AM by debifrank
via reddit https://ift.tt/3zFUokC
Medium
CRTP Reflections
Pentester Academy’s Beginner AD Bootcamp and CRTP examination experience
"Sloth - Tool to Fuzz Android Native libraries with libFuzzer + QEMU" blogpost by @ant4g0nist
https://ift.tt/2SPWE87
Submitted June 21, 2021 at 12:00PM by ant4g0nist
via reddit https://ift.tt/3xHAsMx
https://ift.tt/2SPWE87
Submitted June 21, 2021 at 12:00PM by ant4g0nist
via reddit https://ift.tt/3xHAsMx
Fuzzing Science
Fuzzing Android Native libraries with libFuzzer + QEMU
Fuzzing Android Native libraries with libFuzzer + QEMU 🦥 TL;DR In this blog post, I will go through the process of why and how I built a new framework called Sloth 🦥, using which, I was able to fuzz …
Knock! Knock! The postman is here! (abusing Mailslots and PortKnocking for connectionless shells)
https://ift.tt/2ShKeG2
Submitted June 21, 2021 at 12:57PM by gid0rah
via reddit https://ift.tt/3iXsef6
https://ift.tt/2ShKeG2
Submitted June 21, 2021 at 12:57PM by gid0rah
via reddit https://ift.tt/3iXsef6
reddit
Knock! Knock! The postman is here! (abusing Mailslots and...
Posted in r/netsec by u/gid0rah • 21 points and 0 comments
Phant0m | Windows Event Log Killer
https://ift.tt/2SNovpC
Submitted June 21, 2021 at 12:49PM by hlldz
via reddit https://ift.tt/3xGElBl
https://ift.tt/2SNovpC
Submitted June 21, 2021 at 12:49PM by hlldz
via reddit https://ift.tt/3xGElBl
GitHub
GitHub - hlldz/Phant0m: Windows Event Log Killer
Windows Event Log Killer. Contribute to hlldz/Phant0m development by creating an account on GitHub.
CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring.
https://ift.tt/35DJduU
Submitted June 21, 2021 at 08:31PM by toyojuni
via reddit https://ift.tt/35Dk1ot
https://ift.tt/35DJduU
Submitted June 21, 2021 at 08:31PM by toyojuni
via reddit https://ift.tt/35Dk1ot
Medium
CVE-2021–20226 a reference counting bug which leads to local privilege escalation in io_uring.
Hello, I’m Shiga( @Ga_ryo_ ), a security engineer at Flatt Security Inc.
The Fault in Our Stars - Security Implications of AWS API Gateway Lambda Authorizers and IAM Wildcard Expansion
https://ift.tt/3qfSin6
Submitted June 22, 2021 at 08:39AM by Felipe-Pr0teus
via reddit https://ift.tt/3xLmklr
https://ift.tt/3qfSin6
Submitted June 22, 2021 at 08:39AM by Felipe-Pr0teus
via reddit https://ift.tt/3xLmklr
Linux marketplaces vulnerable to RCE and supply chain attacks
https://ift.tt/3xBox2y
Submitted June 22, 2021 at 07:27PM by breakingsystems
via reddit https://ift.tt/3wPE2nJ
https://ift.tt/3xBox2y
Submitted June 22, 2021 at 07:27PM by breakingsystems
via reddit https://ift.tt/3wPE2nJ
positive.security
Linux marketplaces vulnerable to RCE and supply chain attacks | Positive Security
We're disclosing patched vulnerabilities in KDE Discover and the Gnome Shell Extensions website, as well as unpatched vulnerabilities in the PlingStore app and Pling-based Linux marketplace websites (e.g. appimagehub.com, store.kde.org, gnome-look.org).
LEXSS: Bypassing Lexical Parsing Security Controls
https://ift.tt/3xItw1v
Submitted June 22, 2021 at 09:13PM by breach_house
via reddit https://ift.tt/3xCWekc
https://ift.tt/3xItw1v
Submitted June 22, 2021 at 09:13PM by breach_house
via reddit https://ift.tt/3xCWekc
Bishop Fox
LEXSS: Bypassing Lexical Parsing Security Controls
Technical details of achieving cross-site noscripting (XSS) attacks by using HTML parsing logic where lexical parsers are used to nullify dangerous content.
Attack Surface Analyzer helps you analyze your OS's security configuration, open-sourced by Microsoft
https://ift.tt/39XAh3c
Submitted June 22, 2021 at 09:11PM by beleeee_dat
via reddit https://ift.tt/3zL50i1
https://ift.tt/39XAh3c
Submitted June 22, 2021 at 09:11PM by beleeee_dat
via reddit https://ift.tt/3zL50i1
GitHub
GitHub - microsoft/AttackSurfaceAnalyzer: Attack Surface Analyzer can help you analyze your operating system's security configuration…
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation. - GitHub - microsoft/AttackSurfaceAnalyzer: Attack Surf...
Introducing Semgrep for GitLab
https://ift.tt/3gSvMwt
Submitted June 22, 2021 at 10:41PM by pabloest
via reddit https://ift.tt/3xWerK3
https://ift.tt/3gSvMwt
Submitted June 22, 2021 at 10:41PM by pabloest
via reddit https://ift.tt/3xWerK3
r2c.dev
r2c blog — Introducing Semgrep for GitLab
Semgrep now has 1st-class integration into GitLab
D3FEND Matrix | MITRE D3FEND™
https://ift.tt/2UuqxeQ
Submitted June 22, 2021 at 11:26PM by malware_bender
via reddit https://ift.tt/3zLxvMB
https://ift.tt/2UuqxeQ
Submitted June 22, 2021 at 11:26PM by malware_bender
via reddit https://ift.tt/3zLxvMB
d3fend.mitre.org
MITRE D3FEND Knowledge Graph
D3FEND is a knowledge base of cybersecurity countermeasure techniques. In the simplest sense, it is a catalog of defensive cybersecurity techniques and their relationships to offensive/adversary techniques. The primary goal of the initial D3FEND release is…
Threat Detections for Container Lateral Movements and Container Escapes — This is How
https://ift.tt/3j76Rbg
Submitted June 22, 2021 at 11:22PM by rexguo1
via reddit https://ift.tt/2T02vbd
https://ift.tt/3j76Rbg
Submitted June 22, 2021 at 11:22PM by rexguo1
via reddit https://ift.tt/2T02vbd
Medium
Threat Detections for Container Lateral Movements and Container Escapes — This is How
Introduction
Basic hack 101, Poor password management
https://ift.tt/3gPUdKI
Submitted June 23, 2021 at 02:44PM by Embarrassed-Yam-3471
via reddit https://ift.tt/3jiQW9Z
https://ift.tt/3gPUdKI
Submitted June 23, 2021 at 02:44PM by Embarrassed-Yam-3471
via reddit https://ift.tt/3jiQW9Z
ETTelecom.com
Telecom News | Latest Telecom Industry News, Information and Update: ET Telecom
Find the latest telecom Industry news, online Industry information, views & updates. Get online news from the Indian Telecom Industry on ET Telecom.
I made 56874 calls to explore the telephone network. Here’s what I found.
https://ift.tt/3gMPOcU
Submitted June 23, 2021 at 02:38PM by ValtteriLe
via reddit https://ift.tt/3wT0MDb
https://ift.tt/3gMPOcU
Submitted June 23, 2021 at 02:38PM by ValtteriLe
via reddit https://ift.tt/3wT0MDb
Shufflingbytes
I made 56874 calls to explore the telephone network. Here's what I found
Post describing my research wardialing Finnish freephones.
Key differences Between TLS 1.2 and TLS 1.3
https://ift.tt/35l61Q1
Submitted June 23, 2021 at 04:02PM by Best_Cauliflowers
via reddit https://ift.tt/3vPvL1Q
https://ift.tt/35l61Q1
Submitted June 23, 2021 at 04:02PM by Best_Cauliflowers
via reddit https://ift.tt/3vPvL1Q
A10 Networks
Key differences Between TLS 1.2 and TLS 1.3 | Glossary | A10 Networks
The differences between TLS 1.2 and TLS 1.3 are extensive and significant, offering improvements in both performance and security.
Deal: PE Firm Silver Lake Invests $1B In Splunk
https://ift.tt/35KSf9p
Submitted June 23, 2021 at 05:20PM by The-Techie
via reddit https://ift.tt/3xMiZCA
https://ift.tt/35KSf9p
Submitted June 23, 2021 at 05:20PM by The-Techie
via reddit https://ift.tt/3xMiZCA
Thetechee
Deal: PE Firm Silver Lake Invests $1B In Splunk