How to install Nessus Tenable on Linux
https://ift.tt/HyPFskS
Submitted December 31, 2023 at 07:49AM by UpstairsWord4042
via reddit https://ift.tt/X8xB5iZ
https://ift.tt/HyPFskS
Submitted December 31, 2023 at 07:49AM by UpstairsWord4042
via reddit https://ift.tt/X8xB5iZ
🗂️Keep in Mind - Why so many hackers prefer C#
https://ift.tt/jTWfauq
Submitted December 31, 2023 at 04:48PM by UpstairsWord4042
via reddit https://ift.tt/rzYfj0X
https://ift.tt/jTWfauq
Submitted December 31, 2023 at 04:48PM by UpstairsWord4042
via reddit https://ift.tt/rzYfj0X
Leet.lat
🗂️Keep in Mind - Why so many hackers prefer C#
Hey there, fellow leet geeks!
I hope you're all having a fantastic day on this last day of the year and are ready to dive into the fascinating world of red teamers and one of their their secret...
I hope you're all having a fantastic day on this last day of the year and are ready to dive into the fascinating world of red teamers and one of their their secret...
🗂️Keep in Mind - How Open Source Software is Transforming Web Application Security & Top 10 Open Source Hacking Tools
https://ift.tt/R4ufqE5
Submitted December 31, 2023 at 09:51PM by UpstairsWord4042
via reddit https://ift.tt/8KdbIz3
https://ift.tt/R4ufqE5
Submitted December 31, 2023 at 09:51PM by UpstairsWord4042
via reddit https://ift.tt/8KdbIz3
Leet
🗂️Keep in Mind - How Open Source Software is Transforming Web...
Open source software, with its transparency and collaborative nature, has revolutionized the way we approach cybersecurity. It has become an invaluable tool in the arsenal of every ethical hacker...
Unmasking RedLine Stealer
https://ift.tt/5mH9nMQ
Submitted January 01, 2024 at 02:34PM by Malwarebeasts
via reddit https://ift.tt/o8jWCJa
https://ift.tt/5mH9nMQ
Submitted January 01, 2024 at 02:34PM by Malwarebeasts
via reddit https://ift.tt/o8jWCJa
InfoStealers
Unmasking RedLine Stealer
RedLine Stealer is a dangerous type of malware that can cause serious harm to both individuals and organizations.
Hide and Seek in Windows' Closet: Unmasking the WinSxS Hijacking Hideout
https://ift.tt/2ZElpzo
Submitted January 01, 2024 at 09:27PM by thewatcher_
via reddit https://ift.tt/9UqnihK
https://ift.tt/2ZElpzo
Submitted January 01, 2024 at 09:27PM by thewatcher_
via reddit https://ift.tt/9UqnihK
Security Joes
Hide and Seek in Windows' Closet: Unmasking the WinSxS Hijacking Hideout
Our investigation has revealed an innovative approach that leverages executables commonly found in the trusted WinSxS folder and exploits them via the classic DLL Search Order Hijacking technique. This method allows threat actors to circumvent high privilege…
Thoughts Scatr.it Zero Trust Network (maybe like a scaler?)
http://www.scatr.it
Submitted January 02, 2024 at 06:38AM by InTheHoney
via reddit https://ift.tt/IrnY0zD
http://www.scatr.it
Submitted January 02, 2024 at 06:38AM by InTheHoney
via reddit https://ift.tt/IrnY0zD
Reddit
[deleted by user] : r/netsec
508K subscribers in the netsec community. /r/netsec is a community-curated aggregator of technical information security content. Our mission is to…
Initial Access – search-ms URI Handler
https://ift.tt/hIJmcB8
Submitted January 02, 2024 at 02:03PM by netbiosX
via reddit https://ift.tt/DwONHTZ
https://ift.tt/hIJmcB8
Submitted January 02, 2024 at 02:03PM by netbiosX
via reddit https://ift.tt/DwONHTZ
Penetration Testing Lab
Initial Access – search-ms URI Handler
Microsoft search protocol enables clients to initiate connections against an enterprise search service such as SharePoint or WebDav. During these search connections the protocol server will respond…
BPF Memory Forensics with Volatility 3
https://ift.tt/tmzPU54
Submitted January 02, 2024 at 04:18PM by martinclauss
via reddit https://ift.tt/E14sk0g
https://ift.tt/tmzPU54
Submitted January 02, 2024 at 04:18PM by martinclauss
via reddit https://ift.tt/E14sk0g
lolcads tech blog
BPF Memory Forensics with Volatility 3
BPF Memory Forensics with Volatility 3 Introduction and Motivation Have you ever wondered how an eBPF rootkit looks like? Well, here’s one, have a good look:
Upon receiving a command and control (C2) request, this specimen can execute arbitrary commands on…
Upon receiving a command and control (C2) request, this specimen can execute arbitrary commands on…
The blind spots of automated web app assessments
https://ift.tt/juWIZVU
Submitted January 03, 2024 at 01:23PM by security_aaudit
via reddit https://ift.tt/qKm0yvo
https://ift.tt/juWIZVU
Submitted January 03, 2024 at 01:23PM by security_aaudit
via reddit https://ift.tt/qKm0yvo
baldur.dk
Showcasing why automated scanners might miss some very obvious bugs and how to deal with that.
Scheduled Task Tampering
https://ift.tt/k1h3EL6
Submitted January 03, 2024 at 12:44PM by netbiosX
via reddit https://ift.tt/WIJ8HuU
https://ift.tt/k1h3EL6
Submitted January 03, 2024 at 12:44PM by netbiosX
via reddit https://ift.tt/WIJ8HuU
Purple Team
Scheduled Task Tampering
The HAFNIUM threat actor is using an unconventional method to tamper scheduled tasks in order to establish persistence via modification of registry keys in their malware called Tarrask. The benefit…
Bitwarden Heist - How to Break into Password Vaults Without Using Passwords
https://ift.tt/J0PAyCQ
Submitted January 03, 2024 at 05:15PM by RedTeamPentesting
via reddit https://ift.tt/vQoSiCr
https://ift.tt/J0PAyCQ
Submitted January 03, 2024 at 05:15PM by RedTeamPentesting
via reddit https://ift.tt/vQoSiCr
RedTeam Pentesting - Blog
Bitwarden Heist - How to Break Into Password Vaults Without Using Passwords
Sometimes, making particular security design decisions can have unexpected consequences. For security-critical software, such as password managers, this can easily lead to catastrophic failure: In this blog post, we show how Bitwarden’s Windows Hello …
Lessons from securing FreeRDP
https://ift.tt/TDPw7Oy
Submitted January 01, 2024 at 08:48PM by eyalitki
via reddit https://ift.tt/qBTYihJ
https://ift.tt/TDPw7Oy
Submitted January 01, 2024 at 08:48PM by eyalitki
via reddit https://ift.tt/qBTYihJ
Eyal Itkin
Lessons from Securing FreeRDP
Introduction The story behind this 2-part blog series started quite a while ago, on September 2018, when I started a vulnerability research on a (then) novel attack vector: “Reverse RDP”…
/r/netsec's Q1 2024 Information Security Hiring Thread
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
Submitted January 03, 2024 at 08:24PM by netsec_burn
via reddit https://ift.tt/rWM91DJ
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
Submitted January 03, 2024 at 08:24PM by netsec_burn
via reddit https://ift.tt/rWM91DJ
CloudPulse: A Tool for Tracking the Latest Cloud Security News
https://ift.tt/NSvZHAl
Submitted January 04, 2024 at 10:32PM by RoseSec_
via reddit https://ift.tt/I1SyA9J
https://ift.tt/NSvZHAl
Submitted January 04, 2024 at 10:32PM by RoseSec_
via reddit https://ift.tt/I1SyA9J
GitHub
GitHub - RoseSecurity/CloudPulse: A tool to curate compelling news on cloud technologies and cybersecurity. By aggregating information…
A tool to curate compelling news on cloud technologies and cybersecurity. By aggregating information from RSS feeds and Reddit, it identifies the most noteworthy and impactful updates in the tech i...
SSH-Snake: Automated Self-Propagating, Self-Replicating, Fileless SSH-Based Network Traversal
https://ift.tt/xs8T3Jy
Submitted January 05, 2024 at 02:55AM by MegaManSec2
via reddit https://ift.tt/p87Df3A
https://ift.tt/xs8T3Jy
Submitted January 05, 2024 at 02:55AM by MegaManSec2
via reddit https://ift.tt/p87Df3A
GitHub
GitHub - MegaManSec/SSH-Snake: SSH-Snake is a self-propagating, self-replicating, file-less noscript that automates the post-exploitation…
SSH-Snake is a self-propagating, self-replicating, file-less noscript that automates the post-exploitation task of SSH private key and host discovery. - MegaManSec/SSH-Snake
HackerGPT with embedded tools (subfinder, katana and naabu)
https://ift.tt/3RkVrFT
Submitted January 05, 2024 at 05:10AM by mycall
via reddit https://ift.tt/6Ju582j
https://ift.tt/3RkVrFT
Submitted January 05, 2024 at 05:10AM by mycall
via reddit https://ift.tt/6Ju582j
Galah: an LLM-powered web honeypot using the OpenAI API
https://ift.tt/WcgVhMP
Submitted January 05, 2024 at 06:11AM by netw0rm
via reddit https://ift.tt/C0jTBSn
https://ift.tt/WcgVhMP
Submitted January 05, 2024 at 06:11AM by netw0rm
via reddit https://ift.tt/C0jTBSn
GitHub
GitHub - 0x4D31/galah: Galah: An LLM-powered web honeypot.
Galah: An LLM-powered web honeypot. Contribute to 0x4D31/galah development by creating an account on GitHub.
The Artemis security scanner: how CERT PL scans Polish internet for vulnerabilities
https://ift.tt/YbCGIT5
Submitted January 05, 2024 at 04:49PM by kazetkazet
via reddit https://ift.tt/73qY9GR
https://ift.tt/YbCGIT5
Submitted January 05, 2024 at 04:49PM by kazetkazet
via reddit https://ift.tt/73qY9GR
cert.pl
The Artemis security scanner
Artemis is an open-source security vulnerability scanner developed by CERT PL. It is built to look for website misconfigurations and vulnerabilities on a large number of sites. It automatically prepares reports that can be sent to the affected institutions.…
Five WordPress Security Plugins Prevented Exploitation of Serious Vulnerability in Another Security Plugin
https://ift.tt/hLQG6Ae
Submitted January 05, 2024 at 10:53PM by PluginVulns
via reddit https://ift.tt/b8DLUrw
https://ift.tt/hLQG6Ae
Submitted January 05, 2024 at 10:53PM by PluginVulns
via reddit https://ift.tt/b8DLUrw
Plugin Vulnerabilities
Five WordPress Security Plugins Prevented Exploitation of Serious Vulnerability in Another Security Plugin
Intro into CI/CD research that has lead to critical vulnerabilities in Google, Meta, Microsoft, Blockchains, and more.
https://ift.tt/h5d8cFQ
Submitted January 06, 2024 at 03:37AM by IrohsLotusTile
via reddit https://ift.tt/UkgF9HO
https://ift.tt/h5d8cFQ
Submitted January 06, 2024 at 03:37AM by IrohsLotusTile
via reddit https://ift.tt/UkgF9HO
John Stawinski IV
Worse than SolarWinds: Three Steps to Hack Blockchains, GitHub, and ML through GitHub Actions
Six months ago, my friend and colleague Adnan Khan started researching a new class of CI/CD attacks. Adnan grasped the significance of these attacks after executing them against GitHub to gain tota…
2023 CVE Data Review
https://ift.tt/W5LRJ2r
Submitted January 06, 2024 at 03:18AM by JGamblin
via reddit https://ift.tt/1WJhMc7
https://ift.tt/W5LRJ2r
Submitted January 06, 2024 at 03:18AM by JGamblin
via reddit https://ift.tt/1WJhMc7