Posted in r/netsec by u/itprofessional23 • 1 point and 0 comments

Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit w...

fail2ban filter rule for the log4j CVE-2021-44228 exploit - log4j-jndi.conf

EMBA - The firmware security analyzer. Contribute to e-m-b-a/emba development by creating an account on GitHub.

A clear explanation for why asset management is so critical to a company's security posture, and why it should always be step zero.

A community for technical news and discussion of information security and closely related topics.

Posted in r/netsec by u/ScottContini • 1 point and 0 comments

HUB Security announced its Docker Digital Twin product to protect, authenticate, and verify traffic created by Docker.

If you're reading this you're underslept and over-caffeinated due to log4j. Thank you for your service. I have some good news. I know a super-smart guy

Introducing a minimalistic Meterpreter stager written in Go (letme.go), useful in red teaming engagements.

Twitter: @s4tan Download: https://github.com/enkomio/AlanFramework Documentation: https://github.com/enkomio/AlanFramework/tree/mai...

Everyone heard of log4j by now

Wireless and hardware security, firmware, mobile, pentest, trainings, development, hacking

The Visual Studio Code server in Windows Subsystem for Linux uses a local
WebSocket WebSocket connection to communicate with the Remote WSL extension.
JavaScript in websites can connect to this server and execute arbitrary commands
on the target system. Assigned…

Leaders in Information Security