Netsec – Telegram
Netsec
@RNetsec
7.41K subscribers
22.4K links
This channel posts the feed from r/netsec.
For any suggestions dm @streaak
Donate to keep the bot running https://www.paypal.me/akhilgv
Download Telegram
About
Blog
Apps
Platform
Join
Netsec
7.41K subscribers
Netsec
Delegate call bug in the ink! programming language
https://ift.tt/vioHd34

Submitted July 10, 2023 at 04:48PM by kruksym
via reddit https://ift.tt/GFigDQl
CoinFabrik
Delegate call bug in ink!
ink! is a programming language for smart contracts. It can be used in parachains built on Substrate. There was a bug in the CallBuilder::delegate() method and ink_env::invoke_contract_delegate() function which returns unexpected values.
603 views
Netsec
AWS CodeBuild + S3 == Privilege Escalation - Shielder
https://ift.tt/W3RkbvP

Submitted July 10, 2023 at 05:41PM by smaury
via reddit https://ift.tt/2MNQXaO
Shielder
Shielder - AWS CodeBuild + S3 == Privilege Escalation
How to escalate your privileges in AWS by abusing CodeBuild and S3 permissions.
630 views
Netsec
2048 Bit RSA and the Year 2030
https://ift.tt/38y9I1E

Submitted July 11, 2023 at 01:30AM by upofadown
via reddit https://ift.tt/oSXBThp
1.29K views
Netsec
Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)
https://ift.tt/lp1w0Wv

Submitted July 11, 2023 at 07:11AM by Mempodipper
via reddit https://ift.tt/a4tSODB
640 views
Netsec
Exploring the fundamentals of RISC-V: Assembly and Shellcode Series - Part 1
https://ift.tt/vXRLVB1

Submitted July 11, 2023 at 01:49PM by 0xd3xt3r
via reddit https://ift.tt/4q7NTBv
Tainted Bits
Exploring the fundamentals of RISC-V: Assembly and Shellcode Series - Part 1
In the ever-evolving landscape of computer architecture, RISC-V has emerged as a promising and disruptive force. With its open-source nature and elegant design philosophy, RISC-V has garnered signific
608 views
Netsec
Critical Foswiki Vulnerabilities: A Logic Error turned Remote Code Execution. Feel free to dive deeper into this topic and join us on the journey to more security.
https://ift.tt/C58G2jk

Submitted July 11, 2023 at 03:32PM by usdAG
via reddit https://ift.tt/DnCLpS7
564 views
Netsec
Scarleteel operation ups their cloud game with new targets and tools
https://ift.tt/PsfUNLo

Submitted July 11, 2023 at 06:34PM by weseven
via reddit https://ift.tt/EJRnQUl
Sysdig
SCARLETEEL 2.0: Fargate, Kubernetes, and Crypto | Sysdig
SCARLETEEL, an operation reported on by the Sysdig Threat Research Team last February, continues to thrive, improve tactics, and steal proprietary data.
557 views
Netsec
Exploiting XSS in hidden inputs and meta tags using popovertarget
https://ift.tt/ptAyvmC

Submitted July 11, 2023 at 07:45PM by albinowax
via reddit https://ift.tt/cDLU0jd
PortSwigger Research
Exploiting XSS in hidden inputs and meta tags
In this post we are going to show how you can (ab)use the new HTML popup functionality in Chrome to exploit XSS in meta tags and hidden inputs. It all started when I noticed the new popover behaviour
559 views
Netsec
Weaknesses and Vulnerabilities explained - Everything you need to know in simple words.
https://ift.tt/cxSb0p8

Submitted July 12, 2023 at 12:55AM by D4b0zz
via reddit https://ift.tt/aRFocSg
Medium
Weaknesses and Vulnerabilities explained - Everything you need to know in simple words.
Everything you need or want to know around weaknesses and vulnerabilities in simple words for anyone and everyone!
551 views
Netsec
/r/netsec's Q3 2023 Information Security Hiring Thread
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)

Submitted July 12, 2023 at 03:10AM by netsec_burn
via reddit https://ift.tt/K1aZsxD
540 views
Netsec
Bee-yond Capacity: Unauthenticated RCE in Extreme Networks/Aerohive Wireless APs - CVE-2023-35803
https://ift.tt/EmdHXZN

Submitted July 12, 2023 at 05:32AM by Acceptable-Doubt-878
via reddit https://ift.tt/uyTURjE
Aura Research Division
Bee-yond Capacity: Unauthenticated RCE in Extreme Networks/Aerohive Wireless APs - CVE-2023-35803
CVE-2023-35803 - An adventure in finding and exploiting a buffer overflow in Extreme Networks/Aerohive Wireless Access Points
553 views
Netsec
CVE-2023-36884 MS Office Zero-Day Vulnerability Exploited For Espionage - Detection and Mitigation
https://ift.tt/kDKaMBh

Submitted July 12, 2023 at 09:07AM by achilles4828
via reddit https://ift.tt/MSEtrmw
FourCore
CVE-2023-36884 MS Office Zero-Day Vulnerability Exploited For Espionage - Detection and Mitigation
Microsoft has warned of six unpatched zero-day vulnerabilities including CVE-2023-36884 being exploited by attackers for financial and espionage motives. No patches are available for CVE-2023-36884, find the mitigations and detections to prevent CVE-2023…
590 views
Netsec
Mailgun: Public Security Disclosure
https://ift.tt/Way7tLK

Submitted July 12, 2023 at 02:51PM by Aggressive-Art5250
via reddit https://ift.tt/JxhlnPW
Reddit
From the sysadmin community on Reddit
Explore this post and more from the sysadmin community
512 views
Netsec
Bringing our HTTP Fuzzer Monsoon to the Next Level
https://ift.tt/OHt0gIS

Submitted July 12, 2023 at 07:50PM by RedTeamPentesting
via reddit https://ift.tt/vgszwSX
RedTeam Pentesting - Blog
Bringing Monsoon to the Next Level
We’ve just a released a major update for our HTTP fuzzer monsoon with many new features and improvements. In this blog post we will cover these changes in detail. If you haven’t heard about monsoon, you should start with our announcement blog post …
522 views
Netsec
BusKill (Dead Man Switch) v0.7.0 released 💾
https://ift.tt/DVkWfqE

Submitted July 12, 2023 at 08:57PM by maltfield
via reddit https://ift.tt/2Uy1aks
BusKill
BusKill v0.7.0 released - BusKill
We're happy to announce the release of BusKill App v0.7.0. This release includes bug fixes and introduces a new GUI "soft-shutdown" trigger.
503 views
Netsec
hvext - Windbg extension implementing commands helpful to study Hyper-V on Intel processors
https://ift.tt/Nbl8kFo

Submitted July 13, 2023 at 12:23AM by Titokhan
via reddit https://ift.tt/bIy4cjJ
GitHub
GitHub - tandasat/hvext: The Windbg extension that implements commands helpful to study Hyper-V on Intel processors.
The Windbg extension that implements commands helpful to study Hyper-V on Intel processors. - GitHub - tandasat/hvext: The Windbg extension that implements commands helpful to study Hyper-V on Inte...
533 views
Netsec
Using MiTMProxy as a noscriptable pre-proxy for BurpSuite
https://ift.tt/ezsiOEJ

Submitted July 13, 2023 at 02:02AM by rikvduijn
via reddit https://ift.tt/aARLxwi
Zolder B.V.
Using MiTMProxy as a noscriptable pre-proxy for BurpSuite
TLDR: you can use mitmproxy to modify stuff before it sent to Burp Proxy. Instruction below. Recently we were asked to asses a oldschool Java client server application. After configuring BurpSuite …
568 views
Netsec
Microsoft mitigates China-based threat actor Storm-0558 targeting of customer email | MSRC Blog
https://ift.tt/pQ4xwFH

Submitted July 13, 2023 at 03:44AM by hontouso
via reddit https://ift.tt/BuVMqKk
Microsoft
Microsoft mitigates China-based threat actor Storm-0558 targeting of customer email | MSRC Blog
| Microsoft Security Response…
542 views
Netsec
github.com/ldpreload/BlackLotus: BlackLotus UEFI Windows Bootkit
https://ift.tt/DYGlH3x

Submitted July 13, 2023 at 09:44AM by pheexio
via reddit https://ift.tt/CzUpN7m
GitHub
GitHub - ldpreload/BlackLotus: BlackLotus UEFI Windows Bootkit
BlackLotus UEFI Windows Bootkit. Contribute to ldpreload/BlackLotus development by creating an account on GitHub.
547 views
Netsec
Why are Prometheus queries hard? - Blog
https://ift.tt/P2hDyx7

Submitted July 13, 2023 at 12:10PM by Xadartt
via reddit https://ift.tt/ucZJafn
Fiberplane
Why are Prometheus queries hard?
Explaining some of the confusing inner-workings of PromQL
528 views
Netsec
Neutralising AMSI System-Wide as an Admin
https://ift.tt/Kk3Gcqw

Submitted July 13, 2023 at 02:49PM by h0wlett
via reddit https://ift.tt/JSLz4lp
Pavel Tsakalidis - Personal Blog
Neutralising AMSI System-Wide as an Admin
Use Spartacus to neutralise AMSI system-wide, without having to patch memory
511 views