Random PowerShell noscripts worth sharing. Contribute to jokezone/PowerShell-Scripts development by creating an account on GitHub.

Posted by 0xdea - 33 votes and 4 comments

Security Scorecards - Security health metrics for Open Source - GitHub - ossf/scorecard: Security Scorecards - Security health metrics for Open Source

Posted in r/netsec by u/MilonMaze • 0 points and 0 comments

Kontra is an Application Security Training platform built for modern development teams.

Attack also targets oil & gas suppliers likely as a stepping-stone to infect companies that work with the suppliers.

Conti's rapid encryption speed is matched only by its rapid evolution. SentinelLabs' deep dive explores its development in unprecedented detail.

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA, RBI CSF, and AWS Foundational Security Best Practices controls across all your AWS accounts using Steampipe.

I recently observed some malware (uploaded to my honeypot) that targets Hive OS's wallet configuration -- to redirect mined coins to the attacker.

Detection Script to help identify why your PC isn't Windows 11 Release Ready - rcmaehl/WhyNotWin11

Detection Script to help identify why your PC isn't Windows 11 Release Ready - rcmaehl/WhyNotWin11

tldr: do not expose Rendertron! If you run headless browsers for things other than testing, design the infra expecting they will get owned.

With many million users across all age groups and income levels, video games have become the world’s leading entertainment industry. Behind the fun experience t

Setting up an O.MG cable for keystroke injection attacks, and then forensically dumping the firmware for analysis.

Query nessus reports via SQL! Contribute to The-Login/nessSQL development by creating an account on GitHub.

A bug in AWS ACM allows you to import valid TLS certificates for domains you don't own. Combined with a new Cloudfront feature this lets you extract AWS Account IDs for websites hosted on CloudFront.

A tool that automatically creates fuzzing harnesses based on a library - GitHub - parikhakshat/autoharness: A tool that automatically creates fuzzing harnesses based on a library

While auditing the Binance program through their public bug bounty program, we noticed that some of the site’s shortlinks were being routed through a third-party app analytics platform called AppsFlyer. The shortlinks were available after authenticating to…

Contribute to LuemmelSec/Pentest-Tools-Collection development by creating an account on GitHub.