Accurately fingerprint and detect vulnerable (and patched!) versions of Netscaler / Citrix ADC to CVE-2023-3519 - GitHub - securekomodo/citrixInspector: Accurately fingerprint and detect vulnerable...

In June 2023, Phylum was the first to unearth a series of suspicious npm publications belonging to what appeared to be a highly targeted attack. The identified packages, published in pairs, required installation in a specific sequence, subsequently retrieving…

ERC-20 token standard contains a major logical flaw — lack of communication model (lack of transaction handling model).

This research details a new technique that can be used by threat actors for supply chain attacks on open-source repositories using GCP, Azure and AWS.

Technical

Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers - fin3ss3g0d/cypherhound

This article was not generated by GPT

Unexpected application states are often overlooked and can introduce severe security vulnerabilities. Read more about this real-world example.

Ido Veltzman speaking at BSidesTLV 2023: (Lady|)Lord Of The Ring

Persistence via Shell Extensions. Contribute to aahmad097/Test004 development by creating an account on GitHub.

Gaining a temporary root on the Amazon echo dot 2nd generation.

POC of CVE-2023-35086 only DoS. Contribute to tin-z/CVE-2023-35086-POC development by creating an account on GitHub.

Q: Can we use AI for firmware analysis?
A: Sure, let's do it! EMBA now supports AI-assisted firmware analysis.



Again, we rise the bar in the field of Open-Source firmware security analysis. ...

VulnCheck develops an exploit that gets a root shell on MikroTik RouterOS.

Messaging applications are increasingly making use of end-to-end security mechanisms to ensure that messages are only accessible to the communicating endpoints, and not to any servers involved in delivering messages. Establishing keys to provide such protections…

This research aimed to investigate the files that companies might have accidentally uploaded to GitHub and identify any sensitive information that could be