Reverse SSH - A Fast, Stable Reverse Shell Handler
https://ift.tt/KIBNmsE
Submitted March 03, 2023 at 06:10AM by Acceptable-Doubt-878
via reddit https://ift.tt/9qP3CTJ
https://ift.tt/KIBNmsE
Submitted March 03, 2023 at 06:10AM by Acceptable-Doubt-878
via reddit https://ift.tt/9qP3CTJ
research.aurainfosec.io
Reverse SSH: A Fast, Stable Reverse Shell Handler
Want to use SSH for reverse shells? Now you can.
Hacking the Nintendo DSi Browser
https://ift.tt/fubXSMw
Submitted March 04, 2023 at 12:47PM by Gallus
via reddit https://ift.tt/EOUqnQB
https://ift.tt/fubXSMw
Submitted March 04, 2023 at 12:47PM by Gallus
via reddit https://ift.tt/EOUqnQB
farlow.dev
Hacking the Nintendo DSi Browser
I managed to exploit the Nintendo DSi browser 15 years after it was released in Japan. This post will go over the journey and the technical details.
“StreamJacking” - Hijacking Hundreds of YouTube Channels Per Day Propagating Elon Musk Branded Crypto Giveaway Scams
https://ift.tt/NTepfE4
Submitted March 05, 2023 at 03:00PM by lowlet3443
via reddit https://ift.tt/txAFh76
https://ift.tt/NTepfE4
Submitted March 05, 2023 at 03:00PM by lowlet3443
via reddit https://ift.tt/txAFh76
Medium
“StreamJacking” - Hijacking Hundreds of YouTube Channels Per Day Propagating Elon Musk Branded Crypto Giveaway Scams
By Nati Tal (Guardio Labs)
Passive Takeover - uncovering (and emulating) an expensive subdomain takeover campaign
https://ift.tt/1cdKnQe
Submitted March 05, 2023 at 05:50PM by -nbsp-
via reddit https://ift.tt/0fOMLWw
https://ift.tt/1cdKnQe
Submitted March 05, 2023 at 05:50PM by -nbsp-
via reddit https://ift.tt/0fOMLWw
kmsec.uk
kmsec | Passive Takeover - uncovering (and emulating) an expensive subdomain takeover campaign
This post explores an often overlooked type of subdomain takeover attack I am dubbing "passive takeover."
Obfuscating Rubeus using Codecepticon
https://ift.tt/sYOKgQe
Submitted March 05, 2023 at 05:40PM by h0wlett
via reddit https://ift.tt/uJCbRad
https://ift.tt/sYOKgQe
Submitted March 05, 2023 at 05:40PM by h0wlett
via reddit https://ift.tt/uJCbRad
Pavel Tsakalidis - Personal Blog
Obfuscating Rubeus using Codecepticon
How to use Codecepticon for obfuscating offensive security tooling, such as Rubeus
Lord Of The Ring0 - Part 4 is out!
https://ift.tt/ut3bOXR
Submitted March 05, 2023 at 05:35PM by Idov31
via reddit https://ift.tt/cnwEFdM
https://ift.tt/ut3bOXR
Submitted March 05, 2023 at 05:35PM by Idov31
via reddit https://ift.tt/cnwEFdM
idov31.github.io
Lord Of The Ring0 - Part 4 | The call back home - Ido Veltzman - Security Blog
PrologueIn the last blog post, we learned some debugging concepts, understood what is IOCTL how to handle it and started to learn how to validate the data th...
Polynonce A Novel Attack against ECDSA. Paper, Code, and associated Story
https://ift.tt/JuRxLfw
Submitted March 06, 2023 at 07:43PM by nhamiel
via reddit https://ift.tt/hCZnrQt
https://ift.tt/JuRxLfw
Submitted March 06, 2023 at 07:43PM by nhamiel
via reddit https://ift.tt/hCZnrQt
Kudelski Security Research
Polynonce: A Tale of a Novel ECDSA Attack and Bitcoin Tears
Introduction In this blog post, we tell a tale of how we discovered a novel attack against ECDSA and how we applied it to datasets we found in the wild, including the Bitcoin and Ethereum net…
Insecure Toyota CRM exposed Mexican customer information
https://ift.tt/4XMJghx
Submitted March 06, 2023 at 11:49PM by EatonZ
via reddit https://ift.tt/jeg7B3n
https://ift.tt/4XMJghx
Submitted March 06, 2023 at 11:49PM by EatonZ
via reddit https://ift.tt/jeg7B3n
Eaton-Works
Insecure Toyota CRM exposed Mexican customer information
Breaking into a Toyota CRM and exploiting it to view customer information.
Protecting Android clipboard content from unintended exposure
https://ift.tt/soEcAUp
Submitted March 06, 2023 at 11:27PM by SCI_Rusher
via reddit https://ift.tt/oQwqtv1
https://ift.tt/soEcAUp
Submitted March 06, 2023 at 11:27PM by SCI_Rusher
via reddit https://ift.tt/oQwqtv1
Microsoft Security Blog
Protecting Android clipboard content from unintended exposure | Microsoft Security Blog
Microsoft discovered that the SHEIN Android application periodically read the contents of the Android device clipboard and, if a particular pattern was present, sent the contents of the clipboard to a remote server.
Manipulating Encrypted Traffic using PyCript for Manual and Automation
https://ift.tt/6HPoIJQ
Submitted March 06, 2023 at 11:52PM by Ano_F
via reddit https://ift.tt/lLbyMQu
https://ift.tt/6HPoIJQ
Submitted March 06, 2023 at 11:52PM by Ano_F
via reddit https://ift.tt/lLbyMQu
Medium
Manipulating Encrypted Traffic using PyCript
Bypassing Client-Side Encryption with Burp Suite and PyCript
Harvesting Active Directory credentials via HTTP Request Smuggling
https://ift.tt/q0zWc6X
Submitted March 07, 2023 at 02:46PM by albinowax
via reddit https://ift.tt/79qkfKe
https://ift.tt/q0zWc6X
Submitted March 07, 2023 at 02:46PM by albinowax
via reddit https://ift.tt/79qkfKe
tij.me
Harvesting credentials via HTTP Request Smuggling
By abusing an HTTP Request Smuggling vulnerability on Outlook Web Access (OWA) for Exchange, it is possible to steal credentials of unsuspecting Active Directory users trying to authenticate to OWA.
Avoiding Single-Point-of-Failure and securing the Root Infrastructure: TCG TPM 2.0
https://ift.tt/DRJnAmO
Submitted March 07, 2023 at 04:40PM by hardenedvault
via reddit https://ift.tt/iVYqk7x
https://ift.tt/DRJnAmO
Submitted March 07, 2023 at 04:40PM by hardenedvault
via reddit https://ift.tt/iVYqk7x
hardenedvault.net
Avoiding Single-Point-of-Failure and securing the Root Infrastructure: TCG TPM 2.0
What is TCG TPM 2.0? Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.
Persistence – Event Log Online Help
https://ift.tt/z76eYLG
Submitted March 07, 2023 at 09:45PM by netbiosX
via reddit https://ift.tt/k5fq8WU
https://ift.tt/z76eYLG
Submitted March 07, 2023 at 09:45PM by netbiosX
via reddit https://ift.tt/k5fq8WU
Penetration Testing Lab
Persistence – Event Log Online Help
Event viewer is a component of Microsoft Windows that displays information related to application, security, system and setup events. Even though that Event Viewer is used mainly for troubleshootin…
RCE in Implementations of SHA-3, SHAKE, EdDSA
https://ift.tt/iUSztM0
Submitted March 07, 2023 at 09:33PM by Definitely_not_gpt3
via reddit https://ift.tt/mJisGxz
https://ift.tt/iUSztM0
Submitted March 07, 2023 at 09:33PM by Definitely_not_gpt3
via reddit https://ift.tt/mJisGxz
Open-source Static Code Analysis tool with sensitive-data prioritization
https://ift.tt/tneogGy
Submitted March 07, 2023 at 10:42PM by rukhrunnin
via reddit https://ift.tt/L8WQjiE
https://ift.tt/tneogGy
Submitted March 07, 2023 at 10:42PM by rukhrunnin
via reddit https://ift.tt/L8WQjiE
GitHub
GitHub - Bearer/bearer: Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks. - GitHub - Bearer/bearer: Code security scanning tool (SAST) to discover, filter and prioritize sec...
Authentication Bypass Vulnerability in Mura CMS and Masa CMS
https://ift.tt/U2irJtZ
Submitted March 07, 2023 at 10:26PM by albinowax
via reddit https://ift.tt/APqKHbO
https://ift.tt/U2irJtZ
Submitted March 07, 2023 at 10:26PM by albinowax
via reddit https://ift.tt/APqKHbO
Blogspot
Authentication Bypass Vulnerability in Mura CMS and Masa CMS (CVE-2022-47003 and CVE-2022-47002)
Hoya Haxa: A Security Research Blog
I made a VS Code extension to view nmap results in a graph view. Helpful if you like to keep notes in MarkDown. Let me know what you think about it.
https://ift.tt/mHLC6XA
Submitted March 07, 2023 at 10:51PM by marduc812
via reddit https://ift.tt/NV8cDWT
https://ift.tt/mHLC6XA
Submitted March 07, 2023 at 10:51PM by marduc812
via reddit https://ift.tt/NV8cDWT
Visualstudio
Nmap Peek - Visual Studio Marketplace
Extension for Visual Studio Code - View your nmap output inside VS Code, in a nice clean GUI
Using Subnet Filtering for Enhanced SSRF Protection
https://ift.tt/ecvk4Ix
Submitted March 08, 2023 at 01:28AM by SvixKen
via reddit https://ift.tt/kFAplo0
https://ift.tt/ecvk4Ix
Submitted March 08, 2023 at 01:28AM by SvixKen
via reddit https://ift.tt/kFAplo0
TIL authorization/access control is the top source of developer tech debt in addition to being No. 1 on the OWASP top 10.
https://ift.tt/qaLfyhP
Submitted March 08, 2023 at 06:25AM by SoftlyCourteous66
via reddit https://ift.tt/jwHWiNS
https://ift.tt/qaLfyhP
Submitted March 08, 2023 at 06:25AM by SoftlyCourteous66
via reddit https://ift.tt/jwHWiNS
Dev Interrupted
Solving the Enduring Pain of Authorization w/ Aserto’s Co-founder & CEO, Omri Gazitt
Whether you're at a startup, enterprise, or something in between, authorization and access control are likely major pain points for your team. This week on Dev Interrupted we talk to Omri Gazitt, co-founder and CEO of Aserto. Omri joins us to chat about the…
Chat GPT gets its first bug bounty
https://ift.tt/Um86Ar0
Submitted March 08, 2023 at 10:25AM by MenuParking7693
via reddit https://ift.tt/nmquOL6
https://ift.tt/Um86Ar0
Submitted March 08, 2023 at 10:25AM by MenuParking7693
via reddit https://ift.tt/nmquOL6
Hack Watcher
ChatGPT claims $650 bug bounty
codeblue29, a member of Youtube channel Null:404 Cyber Security used ChatGPT to make malware to test various EDR solutions in an effort to find...
Persistence – Event Log Online Help
https://ift.tt/z76eYLG
Submitted March 08, 2023 at 02:08PM by netbiosX
via reddit https://ift.tt/MsZGcgP
https://ift.tt/z76eYLG
Submitted March 08, 2023 at 02:08PM by netbiosX
via reddit https://ift.tt/MsZGcgP
Penetration Testing Lab
Persistence – Event Log Online Help
Event viewer is a component of Microsoft Windows that displays information related to application, security, system and setup events. Even though that Event Viewer is used mainly for troubleshootin…