Respawning PyPI Malware: Attackers leveraging automation to republish malware packages after takedown
https://ift.tt/eC5V9mH
Submitted May 17, 2023 at 12:12AM by louis11
via reddit https://ift.tt/JaUbI1n
https://ift.tt/eC5V9mH
Submitted May 17, 2023 at 12:12AM by louis11
via reddit https://ift.tt/JaUbI1n
Phylum
Respawning Malware Persists on PyPI
A bad actor on GitHub continually respawns his malware immediately after PyPI takes it down.
web2shell - Automate converting webshells into reverse shells
https://ift.tt/ai26NwR
Submitted May 17, 2023 at 03:39AM by def__init___self
via reddit https://ift.tt/1foq0bZ
https://ift.tt/ai26NwR
Submitted May 17, 2023 at 03:39AM by def__init___self
via reddit https://ift.tt/1foq0bZ
GitHub
GitHub - ejedev/web2shell: Automate converting webshells into reverse shells.
Automate converting webshells into reverse shells. - GitHub - ejedev/web2shell: Automate converting webshells into reverse shells.
“Malverposting” — With Over 500K Estimated Infections, Facebook Ads Fuel This Evolving Stealer Campaign
https://ift.tt/RLzJvfy
Submitted May 17, 2023 at 04:41PM by lowlet3443
via reddit https://ift.tt/jABvCkD
https://ift.tt/RLzJvfy
Submitted May 17, 2023 at 04:41PM by lowlet3443
via reddit https://ift.tt/jABvCkD
Medium
“Malverposting” — With Over 500K Estimated Infections, Facebook Ads Fuel This Evolving Stealer Campaign
By Nati Tal (Guardio Labs)
(Duplicate from /r/redteamsec) Active Directory Spotlight: Attacking The Microsoft Configuration Manager (SCCM/MECM)
https://ift.tt/vzf6Oyd
Submitted May 17, 2023 at 06:19PM by 0xcsandker
via reddit https://ift.tt/7r69bmH
https://ift.tt/vzf6Oyd
Submitted May 17, 2023 at 06:19PM by 0xcsandker
via reddit https://ift.tt/7r69bmH
www.securesystems.de
Active Directory Spotlight: Attacking The Microsoft Configuration Manager (SCCM/MECM)
This spotlight covers the Microsoft Configuration Manager (ConfigMgr), also known as SCCM or MECM.
Get an intro into the Configuration Manger, an overview and demonstration of known attacks against it, practical tool box knowledge and best practice defensive…
Get an intro into the Configuration Manger, an overview and demonstration of known attacks against it, practical tool box knowledge and best practice defensive…
After 8 years of consulting, I'm leaving. Because it doesn't align the Hacker spirit.
https://ift.tt/Q9fau3o
Submitted May 17, 2023 at 07:00PM by chaign_c
via reddit https://ift.tt/mSuNojf
https://ift.tt/Q9fau3o
Submitted May 17, 2023 at 07:00PM by chaign_c
via reddit https://ift.tt/mSuNojf
Bug bounties are broken - the story of "i915" bug, ChromeOS + Intel bounty programs, and beyond
https://ift.tt/pJDEYtX
Submitted May 17, 2023 at 08:48PM by Adam_pi3
via reddit https://ift.tt/g4l2OMH
https://ift.tt/pJDEYtX
Submitted May 17, 2023 at 08:48PM by Adam_pi3
via reddit https://ift.tt/g4l2OMH
Arbitrary email forgery in Webflow [PDF]
https://ift.tt/sOn6FNI
Submitted May 17, 2023 at 08:30PM by Gallus
via reddit https://ift.tt/rZ0QzeK
https://ift.tt/sOn6FNI
Submitted May 17, 2023 at 08:30PM by Gallus
via reddit https://ift.tt/rZ0QzeK
PASTIS - a Python framework for ensemble fuzzing
https://ift.tt/QX8BZ24
Submitted May 17, 2023 at 11:25PM by Gallus
via reddit https://ift.tt/BefTWcE
https://ift.tt/QX8BZ24
Submitted May 17, 2023 at 11:25PM by Gallus
via reddit https://ift.tt/BefTWcE
Quarkslab
PASTIS For The Win!
Security Advisory: Unauthenticated Remote Command Execution in Multiple WAGO Products
https://ift.tt/XYNrG93
Submitted May 17, 2023 at 11:02PM by g_e_r_h_a_r_d
via reddit https://ift.tt/Jy3sODC
https://ift.tt/XYNrG93
Submitted May 17, 2023 at 11:02PM by g_e_r_h_a_r_d
via reddit https://ift.tt/Jy3sODC
ONEKEY
Security Advisory: Unauthenticated Remote Command Execution in Multiple WAGO Products
Security Advisory: Critical unauthenticated command injection vulnerability in the "Legal Information" plugin of the WAGO Series PFC100 web interface.
From GitHub to Account Takeover: Misconfigured Actions Place GCP & AWS Accounts at Risk - Rezonate
https://ift.tt/T58Nhq6
Submitted May 18, 2023 at 05:32PM by Or1rez
via reddit https://ift.tt/os3t4am
https://ift.tt/T58Nhq6
Submitted May 18, 2023 at 05:32PM by Or1rez
via reddit https://ift.tt/os3t4am
Rezonate
From GitHub to Account Takeover: Misconfigured Actions Place GCP & AWS Accounts at Risk - Rezonate
Contents Key Points Background GitHub OpenID Provider Integration GitHub OIDC Integration with GCP & AWS Potential Misconfiguration Identifying Vulnerable Organizations Remediation Guidelines In April 2023, Rezonate research team explored prevalent misconfigurations…
Walking the Tightrope: Maximizing Information Gathering while Avoiding Detection for Red Teams
https://ift.tt/bAMswPr
Submitted May 18, 2023 at 10:06PM by HackingLZ
via reddit https://ift.tt/YA5O4e6
https://ift.tt/bAMswPr
Submitted May 18, 2023 at 10:06PM by HackingLZ
via reddit https://ift.tt/YA5O4e6
TrustedSec
Walking the Tightrope: Maximizing Information Gathering while Avoiding Detection for Red Teams - TrustedSec
TrustedSec's blog is an expert source of information on information security trends and best practices for strategic risk management.
Off-Boarding Cloud Builders and Security Practioners Poses Challenges for Companies With Cloud Environments
https://ift.tt/gwXMZLt
Submitted May 18, 2023 at 11:15PM by randallvancity
via reddit https://ift.tt/kaMzTq0
https://ift.tt/gwXMZLt
Submitted May 18, 2023 at 11:15PM by randallvancity
via reddit https://ift.tt/kaMzTq0
SC Media
In the wake of layoffs, how to solve the security issues off-boarding creates
Here’s some insight into the security challenges security teams face as companies lay off workers by the hundreds and thousands.
OSINT Industries - 180+ modules to do OSINT from an email address, free beta
https://ift.tt/Hs50zZC
Submitted May 19, 2023 at 03:18AM by mxrchreborn
via reddit https://ift.tt/DZpFcOj
https://ift.tt/Hs50zZC
Submitted May 19, 2023 at 03:18AM by mxrchreborn
via reddit https://ift.tt/DZpFcOj
osint.industries
OSINT Industries
Discover how OSINT Industries specializes in leveraging OSINT to investigate emails and phone numbers. Unlock valuable insights and conduct comprehensive investigations using our advanced tools and resources.
15 Most Loved ASP .Net Development Tools
https://ift.tt/8L3E6Rd
Submitted May 19, 2023 at 12:49PM by CaptainonHoliday
via reddit https://ift.tt/dSDoQHm
https://ift.tt/8L3E6Rd
Submitted May 19, 2023 at 12:49PM by CaptainonHoliday
via reddit https://ift.tt/dSDoQHm
Competenza Innovare
15 Most Loved ASP .Net Development Tools
ASP.Net - A rich web & mobile app development suite. Use different tools & enhance your development performance drastically. Get the most out of these tools.
Automate the process of discovering and exploiting ESC1 & ESC8 ADCS vulnerabilities 🔥
https://ift.tt/xYcWXeM
Submitted May 19, 2023 at 02:51PM by S3cur3Th1sSh1t
via reddit https://ift.tt/FWoxi3r
https://ift.tt/xYcWXeM
Submitted May 19, 2023 at 02:51PM by S3cur3Th1sSh1t
via reddit https://ift.tt/FWoxi3r
GitHub
GitHub - grimlockx/ADCSKiller: An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer
An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer - GitHub - grimlockx/ADCSKiller: An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer
Release 0.2 · PyCript BurpSuite Extension
https://ift.tt/Xk4WbVN
Submitted May 19, 2023 at 11:00PM by Ano_F
via reddit https://ift.tt/QUgm9yD
https://ift.tt/Xk4WbVN
Submitted May 19, 2023 at 11:00PM by Ano_F
via reddit https://ift.tt/QUgm9yD
GitHub
Release 0.2 · Anof-cyber/PyCript
Release Notes:
Added support for response encryption and decryption.
Added support for GET parameters.
Implemented separate encryption and decryption for request and response.
Enhanced support...
Added support for response encryption and decryption.
Added support for GET parameters.
Implemented separate encryption and decryption for request and response.
Enhanced support...
Moderator Applications Open
Hello /r/netsec,I am excited to announce that we are opening up applications for new moderators to join the existing moderation team. As our community continues to expand, we want to ensure that we maintain the quality and integrity of the content shared here.If you are passionate about information security and have a strong desire to help maintain and foster community, we encourage you to apply!Preferred qualifications:A history of posting links and/or comments to /r/netsec, demonstrating your active participation in the community.At least 3 years of academic or professional experience in information security.Not involved with the marketing team of any major vendor, to ensure unbiased moderation.Have read and agree with the /r/netsec posting guidelines.Application Process:To apply, please submit the following information via ModMail:Briefly describe your experience in information security, including any relevant certifications or qualifications.Explain your history of posting and participating in the /r/netsec community.Confirm that you are not involved with the marketing team of any major vendor.Describe why you want to become a moderator for /r/netsec and how you can contribute to maintaining and enhancing the quality of our community.Applying shouldn't feel like a chore; ~1 paragraph per question is more than enough. We'll review your application and /r/netsec posting history before deciding.New moderator selections will be announced on May 31st.
Submitted May 20, 2023 at 02:41AM by sanitybit
via reddit https://ift.tt/hb5QYod
Hello /r/netsec,I am excited to announce that we are opening up applications for new moderators to join the existing moderation team. As our community continues to expand, we want to ensure that we maintain the quality and integrity of the content shared here.If you are passionate about information security and have a strong desire to help maintain and foster community, we encourage you to apply!Preferred qualifications:A history of posting links and/or comments to /r/netsec, demonstrating your active participation in the community.At least 3 years of academic or professional experience in information security.Not involved with the marketing team of any major vendor, to ensure unbiased moderation.Have read and agree with the /r/netsec posting guidelines.Application Process:To apply, please submit the following information via ModMail:Briefly describe your experience in information security, including any relevant certifications or qualifications.Explain your history of posting and participating in the /r/netsec community.Confirm that you are not involved with the marketing team of any major vendor.Describe why you want to become a moderator for /r/netsec and how you can contribute to maintaining and enhancing the quality of our community.Applying shouldn't feel like a chore; ~1 paragraph per question is more than enough. We'll review your application and /r/netsec posting history before deciding.New moderator selections will be announced on May 31st.
Submitted May 20, 2023 at 02:41AM by sanitybit
via reddit https://ift.tt/hb5QYod
Reddit
Technical Information Security Content & Discussion
/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to provide value to security practitioners, students, researchers, and hackers everywhere.
PoC for Decrypting SAP Cloud Connector SSFS: Utilizing 'getRecord' Function to Decrypt SSFS Properties without Information of Encryption Algorithm
https://ift.tt/4fVU6Do
Submitted May 20, 2023 at 08:22PM by vah_13
via reddit https://ift.tt/kjGe1xT
https://ift.tt/4fVU6Do
Submitted May 20, 2023 at 08:22PM by vah_13
via reddit https://ift.tt/kjGe1xT
GitHub
GitHub - redrays-io/SAP_Cloud_Connector_SSFS_Decryption: A PoC of decryption the SAP Cloud Connector SSFS
A PoC of decryption the SAP Cloud Connector SSFS. Contribute to redrays-io/SAP_Cloud_Connector_SSFS_Decryption development by creating an account on GitHub.
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
https://ift.tt/tyaAKco
Submitted May 21, 2023 at 12:32AM by mstfknn
via reddit https://ift.tt/8p5fn06
https://ift.tt/tyaAKco
Submitted May 21, 2023 at 12:32AM by mstfknn
via reddit https://ift.tt/8p5fn06
Cisco
Cisco Security Advisory: Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…
PGP signatures on PyPI: worse than useless
https://ift.tt/Uw7kjRs
Submitted May 21, 2023 at 09:19PM by yossarian_flew_away
via reddit https://ift.tt/M7Agyk1
https://ift.tt/Uw7kjRs
Submitted May 21, 2023 at 09:19PM by yossarian_flew_away
via reddit https://ift.tt/M7Agyk1
blog.yossarian.net
PGP signatures on PyPI: worse than useless
CVE-2023-26818 - Bypass TCC with Telegram in macOS
https://ift.tt/N4K3l7a
Submitted May 22, 2023 at 01:22PM by ffyns
via reddit https://ift.tt/ONIaYoV
https://ift.tt/N4K3l7a
Submitted May 22, 2023 at 01:22PM by ffyns
via reddit https://ift.tt/ONIaYoV
Dan Revah’s Blog
CVE-2023-26818 - Bypass TCC with Telegram in macOS
Preface