Manipulating Encrypted Traffic using PyCript for Manual and Automation
https://ift.tt/6HPoIJQ
Submitted March 06, 2023 at 11:52PM by Ano_F
via reddit https://ift.tt/lLbyMQu
https://ift.tt/6HPoIJQ
Submitted March 06, 2023 at 11:52PM by Ano_F
via reddit https://ift.tt/lLbyMQu
Medium
Manipulating Encrypted Traffic using PyCript
Bypassing Client-Side Encryption with Burp Suite and PyCript
Harvesting Active Directory credentials via HTTP Request Smuggling
https://ift.tt/q0zWc6X
Submitted March 07, 2023 at 02:46PM by albinowax
via reddit https://ift.tt/79qkfKe
https://ift.tt/q0zWc6X
Submitted March 07, 2023 at 02:46PM by albinowax
via reddit https://ift.tt/79qkfKe
tij.me
Harvesting credentials via HTTP Request Smuggling
By abusing an HTTP Request Smuggling vulnerability on Outlook Web Access (OWA) for Exchange, it is possible to steal credentials of unsuspecting Active Directory users trying to authenticate to OWA.
Avoiding Single-Point-of-Failure and securing the Root Infrastructure: TCG TPM 2.0
https://ift.tt/DRJnAmO
Submitted March 07, 2023 at 04:40PM by hardenedvault
via reddit https://ift.tt/iVYqk7x
https://ift.tt/DRJnAmO
Submitted March 07, 2023 at 04:40PM by hardenedvault
via reddit https://ift.tt/iVYqk7x
hardenedvault.net
Avoiding Single-Point-of-Failure and securing the Root Infrastructure: TCG TPM 2.0
What is TCG TPM 2.0? Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2.
Persistence – Event Log Online Help
https://ift.tt/z76eYLG
Submitted March 07, 2023 at 09:45PM by netbiosX
via reddit https://ift.tt/k5fq8WU
https://ift.tt/z76eYLG
Submitted March 07, 2023 at 09:45PM by netbiosX
via reddit https://ift.tt/k5fq8WU
Penetration Testing Lab
Persistence – Event Log Online Help
Event viewer is a component of Microsoft Windows that displays information related to application, security, system and setup events. Even though that Event Viewer is used mainly for troubleshootin…
RCE in Implementations of SHA-3, SHAKE, EdDSA
https://ift.tt/iUSztM0
Submitted March 07, 2023 at 09:33PM by Definitely_not_gpt3
via reddit https://ift.tt/mJisGxz
https://ift.tt/iUSztM0
Submitted March 07, 2023 at 09:33PM by Definitely_not_gpt3
via reddit https://ift.tt/mJisGxz
Open-source Static Code Analysis tool with sensitive-data prioritization
https://ift.tt/tneogGy
Submitted March 07, 2023 at 10:42PM by rukhrunnin
via reddit https://ift.tt/L8WQjiE
https://ift.tt/tneogGy
Submitted March 07, 2023 at 10:42PM by rukhrunnin
via reddit https://ift.tt/L8WQjiE
GitHub
GitHub - Bearer/bearer: Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks. - GitHub - Bearer/bearer: Code security scanning tool (SAST) to discover, filter and prioritize sec...
Authentication Bypass Vulnerability in Mura CMS and Masa CMS
https://ift.tt/U2irJtZ
Submitted March 07, 2023 at 10:26PM by albinowax
via reddit https://ift.tt/APqKHbO
https://ift.tt/U2irJtZ
Submitted March 07, 2023 at 10:26PM by albinowax
via reddit https://ift.tt/APqKHbO
Blogspot
Authentication Bypass Vulnerability in Mura CMS and Masa CMS (CVE-2022-47003 and CVE-2022-47002)
Hoya Haxa: A Security Research Blog
I made a VS Code extension to view nmap results in a graph view. Helpful if you like to keep notes in MarkDown. Let me know what you think about it.
https://ift.tt/mHLC6XA
Submitted March 07, 2023 at 10:51PM by marduc812
via reddit https://ift.tt/NV8cDWT
https://ift.tt/mHLC6XA
Submitted March 07, 2023 at 10:51PM by marduc812
via reddit https://ift.tt/NV8cDWT
Visualstudio
Nmap Peek - Visual Studio Marketplace
Extension for Visual Studio Code - View your nmap output inside VS Code, in a nice clean GUI
Using Subnet Filtering for Enhanced SSRF Protection
https://ift.tt/ecvk4Ix
Submitted March 08, 2023 at 01:28AM by SvixKen
via reddit https://ift.tt/kFAplo0
https://ift.tt/ecvk4Ix
Submitted March 08, 2023 at 01:28AM by SvixKen
via reddit https://ift.tt/kFAplo0
TIL authorization/access control is the top source of developer tech debt in addition to being No. 1 on the OWASP top 10.
https://ift.tt/qaLfyhP
Submitted March 08, 2023 at 06:25AM by SoftlyCourteous66
via reddit https://ift.tt/jwHWiNS
https://ift.tt/qaLfyhP
Submitted March 08, 2023 at 06:25AM by SoftlyCourteous66
via reddit https://ift.tt/jwHWiNS
Dev Interrupted
Solving the Enduring Pain of Authorization w/ Aserto’s Co-founder & CEO, Omri Gazitt
Whether you're at a startup, enterprise, or something in between, authorization and access control are likely major pain points for your team. This week on Dev Interrupted we talk to Omri Gazitt, co-founder and CEO of Aserto. Omri joins us to chat about the…
Chat GPT gets its first bug bounty
https://ift.tt/Um86Ar0
Submitted March 08, 2023 at 10:25AM by MenuParking7693
via reddit https://ift.tt/nmquOL6
https://ift.tt/Um86Ar0
Submitted March 08, 2023 at 10:25AM by MenuParking7693
via reddit https://ift.tt/nmquOL6
Hack Watcher
ChatGPT claims $650 bug bounty
codeblue29, a member of Youtube channel Null:404 Cyber Security used ChatGPT to make malware to test various EDR solutions in an effort to find...
Persistence – Event Log Online Help
https://ift.tt/z76eYLG
Submitted March 08, 2023 at 02:08PM by netbiosX
via reddit https://ift.tt/MsZGcgP
https://ift.tt/z76eYLG
Submitted March 08, 2023 at 02:08PM by netbiosX
via reddit https://ift.tt/MsZGcgP
Penetration Testing Lab
Persistence – Event Log Online Help
Event viewer is a component of Microsoft Windows that displays information related to application, security, system and setup events. Even though that Event Viewer is used mainly for troubleshootin…
Beating an old PHP source code protector
https://ift.tt/PILbvc0
Submitted March 08, 2023 at 05:40PM by gid0rah
via reddit https://ift.tt/EDwrPox
https://ift.tt/PILbvc0
Submitted March 08, 2023 at 05:40PM by gid0rah
via reddit https://ift.tt/EDwrPox
Beating an old PHP source code protector |
Beating an old PHP source code protector | AdeptsOf0xCC
Article describing how to decode/decrypt source code protected with Nu-Coder
ESXi Ransomware – A case study of Royal Ransomware
https://ift.tt/a4A7vZG
Submitted March 08, 2023 at 06:32PM by CyberMasterV
via reddit https://ift.tt/TrvYjkD
https://ift.tt/a4A7vZG
Submitted March 08, 2023 at 06:32PM by CyberMasterV
via reddit https://ift.tt/TrvYjkD
Security Scorecard
Royal Ransomware exploiting ESXi whitepaper
Fog of War - How the Ukraine Conflict Transformed the Ｃyber Threat Landscape
https://ift.tt/adBXl9U
Submitted March 08, 2023 at 08:05PM by mycall
via reddit https://ift.tt/lxctUhf
https://ift.tt/adBXl9U
Submitted March 08, 2023 at 08:05PM by mycall
via reddit https://ift.tt/lxctUhf
CorePlague: Severe Vulnerabilities in Jenkins Server Lead to Remote Code Execution
https://ift.tt/1ZnrjCh
Submitted March 08, 2023 at 09:38PM by ilay789
via reddit https://ift.tt/EvD0Cmi
https://ift.tt/1ZnrjCh
Submitted March 08, 2023 at 09:38PM by ilay789
via reddit https://ift.tt/EvD0Cmi
Aqua
CorePlague: Critical Vulnerabilities in Jenkins Server Lead to RCE
Aqua Research revealed a chain of vulnerabilities CVE-2023-27898, CVE-2023-27905 in Jenkins Server & Update Center which could lead to a complete compromise
Jailbreaking LLM (ChatGPT) Sandboxes Using Linguistic Hacks
https://ift.tt/rqnbsME
Submitted March 09, 2023 at 01:15AM by alxjsn
via reddit https://ift.tt/Y9kVDdQ
https://ift.tt/rqnbsME
Submitted March 09, 2023 at 01:15AM by alxjsn
via reddit https://ift.tt/Y9kVDdQ
Forces Unseen
Jailbreaking LLM (ChatGPT) Sandboxes Using Linguistic Hacks
Practical LLM prompt hacking
The Threat on Your Desk: Building an Evil USB-C Dock
https://ift.tt/b9p7hyi
Submitted March 09, 2023 at 06:51AM by Acceptable-Doubt-878
via reddit https://ift.tt/UISQvZq
https://ift.tt/b9p7hyi
Submitted March 09, 2023 at 06:51AM by Acceptable-Doubt-878
via reddit https://ift.tt/UISQvZq
Aura Research Division
The Threat on Your Desk: Building an Evil USB-C Dock
BadUSB attacks have been a threat for years, but is the USB-C dock sitting on your desk the latest threat in disguise?
Phineas Fisher's Hacktivist Writeups and Guides
https://ift.tt/QKa5S1T
Submitted March 09, 2023 at 04:52PM by gabriel_schneider
via reddit https://ift.tt/F5SOQRp
https://ift.tt/QKa5S1T
Submitted March 09, 2023 at 04:52PM by gabriel_schneider
via reddit https://ift.tt/F5SOQRp
The Anarchist Library
Phineas Fisher
Pwning Akuvox E11 Smart Intercom
https://ift.tt/K54nHyI
Submitted March 10, 2023 at 12:30AM by sh0n1z
via reddit https://ift.tt/YxrJ1hK
https://ift.tt/K54nHyI
Submitted March 10, 2023 at 12:30AM by sh0n1z
via reddit https://ift.tt/YxrJ1hK
Claroty
The Silent Spy Among Us: Smart Intercom Attacks
EJS - Server Side Prototype Pollution gadgets to RCE
https://ift.tt/n2N5JX6
Submitted March 10, 2023 at 05:14AM by Gallus
via reddit https://ift.tt/XbNPiZy
https://ift.tt/n2N5JX6
Submitted March 10, 2023 at 05:14AM by Gallus
via reddit https://ift.tt/XbNPiZy
mizu.re
EJS - Server Side Prototype Pollution gadgets to RCE. Tags:Article - Article - Web - SSPP