Some people asked me about publishing a comparison between x8 and other major tools for parameter discovery: Arjun and Param Miner, so here it is!

Introduction Finding DOM XSS can be tricky when it's buried in thousands of lines of code. We recently developed DOM Invader to help tackle this using a combined dynamic+manual approach to vulnerabili

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team. - nccfsas/Tools/spoolsystem at main · nccgroup/nccfsas

Data from 700 million LinkedIn users has been put up for sale online, making this one of the largest LinkedIn data leaks to date. After analyzing the data and making contact with the seller, we have updated this article with more information, including how…

First, let us look at and analyze a few examples of how events are counted and the rate of the stream is estimated in general. The next step is to see a generalization, namely some class of counters, which we call the u-model. Next, we explore what useful…

by Mitja Kolsek, the 0patch Team Update 8/11/2021: August 2021 Windows Updates brought a fix for PrintNightmare that has the same default ef...

The problem with enforcing TPMs on consumers

Resources for DFIR Professionals Responding to the REvil Ransomware Kaseya Supply Chain Attack - GitHub - cado-security/DFIR_Resources_REvil_Kaseya: Resources for DFIR Professionals Responding to t...

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 - GitHub - dwisiswant0/ppfuzz: A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

Posted in r/netsec by u/liotier • 1 point and 0 comments

An affiliate of the notorious REvil gang infected thousands of victims in at least 17 countries.

Internet-wide research on the security posture of databases exposed on the internet. This blog contains all the specifics and analysis of results.

Nature Biomedical Engineering - A ‘smart’ toilet that uses pressure and motion sensors, biometric identification, urinalysis strips, a computer-vision uroflowmeter and machine learning...

NCC Group’s Exploit Development Group document exploiting the sudo vulnerability on VMWare vCenter Server

Integrated web scraper and email account data breach comparison tool - hookshot/README.md at master · andrew-vii/hookshot