Schedule, talks and talk submissions for CarolinaCon 2023

Read CircleCI’s security alerts from January 2023. Last updated 1/13/2023.

By Nati Tal (Guardio Labs)

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory - GitHub - naksyn/PythonMemoryModule: pure-python implementation of MemoryModule technique to...

Learn how Legit Security discovered a vulnerable GitHub actions workflow. Get details on the vulnerability and and what you can do to mitigate it.

⚡ATTENTION⚡ Devs that rely on hyper-rust: your own code should include limitations for HTTP Body size - Hyper library does not restrict by default. Find out more…

Contribute to numanturle/CVE-2022-44877 development by creating an account on GitHub.

Contribute to elttam/publications development by creating an account on GitHub.

Posted in r/netsec by u/postmodern • 0 points and 1 comment

SoftICE-like kernel debugger for Windows 11. Contribute to vitoplantamura/BugChecker development by creating an account on GitHub.

A comprehensive analysis of the year's new malware

Every week, almost without fail, I come across one thing that confuses, entertains, or most commonly infuriates me. I’ve decided to keep a…

API calls and requests for resources can sometimes be diverted toward a different endpoint on the same host, potentially resulting in DOM XSS’s that would otherwise be impossible to trigger, or other types of client-side vulnerabilities.

TruffleHog Open Source now scans CircleCI log outputs for passwords, API keys, and other forms of credentials

A simple tool that helps to find assets/domains based on the Google Analytics ID. - GitHub - dhn/udon: A simple tool that helps to find assets/domains based on the Google Analytics ID.

After inadvertently finding that InfoSys leaked an AWS key on PyPi I wanted to know how many other live AWS keys may be present on Python package index. After scanning every release published to PyPi I found 57 valid access keys from organisations like:
Amazon…

A powerful and user-friendly browser extension that streamlines investigations for security professionals. - GitHub - zdhenard42/SOC-Multitool: A powerful and user-friendly browser extension that s...