This blog post will discuss our findings that we presented in our Blackhat Europe talk noscriptd "Exploiting CSP in Webkit to break Authentication/Authorization", a vulnerability that enabled us to takeover user accounts on most of the web applications out thereby…

This blog post will discuss our findings that we presented in our Blackhat Europe talk noscriptd "Exploiting CSP in Webkit to break Authentication/Authorization", a vulnerability that enabled us to takeover user accounts on most of the web applications out thereby…

Posted in r/netsec by u/CyberMasterV • 26 points and 6 comments

Posted in r/netsec by u/digicat • 153 points and 14 comments

Multiple vulnerabilities in concrete cms. File upload, double race condition, RCE, turbo intruder.

And a few reason why you should consider it.

In late September 2021, we observed an intrusion in which initial access was gained by the threat actor exploiting multiple vulnerabilities in Microsoft Exchange. The threat actors in this case wer…

Domain persistence techniques enable red teams that have compromised the domain to operate with the highest level of privileges in a large period. One of the most common domain persistence techniqu…

Posted in r/netsec by u/braincrowd • 1 point and 0 comments

Modernizing the CIA's operational infrastructure. Multi/Hybrid Cloud Docker Swarm clusters and mesh VPN networks 🐿

Introduction A Vulnerability Researcher’s Favorite Stress Relief Continuing in our series of research findings involving Netgear 1 produc...

JFrog Security research team identifies vulnerability in TensorFlow allowing an attacker to insert a malicious input that runs arbitrary Python code. Learn more >

The unusual technique invokes the Windows App Installer to deliver malware

How to detect the Muhstik Botnet attacking a Kubernetes Pod to control the Pod and mine cryptocurrency and DDoS.

Frequently colleagues and clients get to my (virtual) desk and pose the following question to me: “I know which patches (KBs) are installed on a Windows syst...

JARM is an active Transport Layer Security server fingerprinting tool that provides the ability to identify and group malicious servers.