NetScout - An OSINT tool I've been working on that finds domains, subdomains, directories and files based on a given URL
https://ift.tt/6QeYELO
Submitted April 02, 2024 at 12:38AM by lost_my_tech_account
via reddit https://ift.tt/uVPp4q0
https://ift.tt/6QeYELO
Submitted April 02, 2024 at 12:38AM by lost_my_tech_account
via reddit https://ift.tt/uVPp4q0
GitHub
GitHub - caio-ishikawa/netscout: OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL.
OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL. - caio-ishikawa/netscout
IBIS hotel check-in terminal keypad-code leakage
https://ift.tt/i5CwTtl
Submitted April 02, 2024 at 02:57PM by aunga
via reddit https://ift.tt/1wXH8gx
https://ift.tt/i5CwTtl
Submitted April 02, 2024 at 02:57PM by aunga
via reddit https://ift.tt/1wXH8gx
Pentagrid AG
IBIS hotel check-in terminal keypad-code leakage
An IBIS hotel check-in terminal leaked room door key codes of almost half of the rooms.
XZ-actly What You Need (CVE 2024-3094): Detecting Exploitation with Oligo
https://ift.tt/jazlEHs
Submitted April 02, 2024 at 11:21PM by cov_id19
via reddit https://ift.tt/wUBOgRn
https://ift.tt/jazlEHs
Submitted April 02, 2024 at 11:21PM by cov_id19
via reddit https://ift.tt/wUBOgRn
www.oligo.security
XZ-actly What You Need (CVE 2024-3094): Detecting Exploitation with Oligo | Oligo Security
See how Oligo ADR Detects Exploitation of CVE-2024-3094 (XZ backdoor in liblzma).
/r/netsec's Q2 2024 Information Security Hiring Thread
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
Submitted April 03, 2024 at 12:23AM by netsec_burn
via reddit https://ift.tt/ykG2YMK
OverviewIf you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.Please reserve top level comments for those posting open positions.Rules & GuidelinesInclude the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.If you are a third party recruiter, you must disclose this in your posting.Please be thorough and upfront with the position details.Use of non-hr'd (realistic) requirements is encouraged.While it's fine to link to the position on your companies website, provide the important details in the comment.Mention if applicants should apply officially through HR, or directly through you.Please clearly list citizenship, visa, and security clearance requirements.You can see an example of acceptable posts by perusing past hiring threads.FeedbackFeedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
Submitted April 03, 2024 at 12:23AM by netsec_burn
via reddit https://ift.tt/ykG2YMK
Adventures in Stegoland - Adventures with a stego shellcode loader
https://ift.tt/Pknq0wg
Submitted April 03, 2024 at 06:56AM by clod81
via reddit https://ift.tt/NoyVLiB
https://ift.tt/Pknq0wg
Submitted April 03, 2024 at 06:56AM by clod81
via reddit https://ift.tt/NoyVLiB
Tier Zero Security
Information Security Services. Offensive Security, Penetration Testing, Mobile and Application, Purple Team, Red Team
Attacking Active Directory Certificate Service Part 3
https://ift.tt/gcxSZEK
Submitted April 03, 2024 at 11:45AM by Accomplished-Mud1210
via reddit https://ift.tt/RpLvV1w
https://ift.tt/gcxSZEK
Submitted April 03, 2024 at 11:45AM by Accomplished-Mud1210
via reddit https://ift.tt/RpLvV1w
RingBuffer's Blog
Attacking AD Certificate Services – Part 3 – RingBuffer's Blog
Attacking Active Directory Certificate Service (ADCS) Part 3 focusing on performing the privilege escalation using vulnerable AD CS service in Windows Domain.
Attacking Active Directory Certificate Service Part 2
https://ift.tt/Hl6M9dO
Submitted April 03, 2024 at 11:45AM by Accomplished-Mud1210
via reddit https://ift.tt/Hz6xMgP
https://ift.tt/Hl6M9dO
Submitted April 03, 2024 at 11:45AM by Accomplished-Mud1210
via reddit https://ift.tt/Hz6xMgP
RingBuffer's Blog
Attacking AD Certificate Services – Part 2 – RingBuffer's Blog
Attacking Active Directory Certificate Service (ADCS) Part 2 - Focusing on uncovering some critical assets using certify and leveraging Windows Data Protection API
Attacking Active Directory Certificate Service Part 1
https://ift.tt/tSbHXjN
Submitted April 03, 2024 at 11:44AM by Accomplished-Mud1210
via reddit https://ift.tt/LKzg4mw
https://ift.tt/tSbHXjN
Submitted April 03, 2024 at 11:44AM by Accomplished-Mud1210
via reddit https://ift.tt/LKzg4mw
RingBuffer's Blog
Attacking AD Certificate Services – Part 1 – RingBuffer's Blog
This blog covers Enumerating the AD services and attacking AD CS in windows environment.
Persistence - DLL Proxy Loading
https://ift.tt/TcqohQz
Submitted April 03, 2024 at 01:23PM by netbiosX
via reddit https://ift.tt/5y8Fl9t
https://ift.tt/TcqohQz
Submitted April 03, 2024 at 01:23PM by netbiosX
via reddit https://ift.tt/5y8Fl9t
Penetration Testing Lab
Persistence – DLL Proxy Loading
DLL Proxy Loading is a technique which an arbitrary DLL exports the same functions as the legitimate DLL and forwards the calls to the legitimate DLL in an attempt to not disrupt the execution flow…
Kobold letters – Why HTML emails are a risk to your organization
https://ift.tt/SreE8O9
Submitted April 03, 2024 at 09:06PM by lutrasecurity
via reddit https://ift.tt/cP9BuMY
https://ift.tt/SreE8O9
Submitted April 03, 2024 at 09:06PM by lutrasecurity
via reddit https://ift.tt/cP9BuMY
Lutrasecurity
Kobold letters – Lutra Security
Anyone who has had to deal with HTML emails on a technical level has probably reached the point where they wanted to quit their job or just set fire to all the mail clients due to their inconsistent implementations. But HTML emails are not just a source of…
Showcasing Incinerator a Powerful Android Malware Reversing Tool
https://ift.tt/Nzu5tQK
Submitted April 03, 2024 at 09:44PM by WiseTuna
via reddit https://ift.tt/KkbGBeE
https://ift.tt/Nzu5tQK
Submitted April 03, 2024 at 09:44PM by WiseTuna
via reddit https://ift.tt/KkbGBeE
Boschko Security Blog
Incinerator: The Ultimate Android Malware Reversing Tool
Master Android malware reversal with ease using Incinerator, your trusted ally in the fight against threat actors for experts and novices alike.
Gram - Self-hosted Threat Modeling Webapp
https://ift.tt/ZUmxRXq
Submitted April 04, 2024 at 01:22AM by Tethik
via reddit https://ift.tt/U4dKHuX
https://ift.tt/ZUmxRXq
Submitted April 04, 2024 at 01:22AM by Tethik
via reddit https://ift.tt/U4dKHuX
GitHub
GitHub - klarna-incubator/gram: Gram is Klarna's own threat model diagramming tool
Gram is Klarna's own threat model diagramming tool - klarna-incubator/gram
unch 😗: Hides message with invisible Unicode characters
https://ift.tt/tFfMJYD
Submitted April 04, 2024 at 03:55AM by dwisiswant0
via reddit https://ift.tt/Z1SoICJ
https://ift.tt/tFfMJYD
Submitted April 04, 2024 at 03:55AM by dwisiswant0
via reddit https://ift.tt/Z1SoICJ
GitHub
GitHub - dwisiswant0/unch: Hides message with invisible Unicode characters
Hides message with invisible Unicode characters. Contribute to dwisiswant0/unch development by creating an account on GitHub.
Diving Deeper into AI Package Hallucinations
https://ift.tt/Nt2iJpW
Submitted April 05, 2024 at 01:40PM by mowaptpop
via reddit https://ift.tt/vFmDutw
https://ift.tt/Nt2iJpW
Submitted April 05, 2024 at 01:40PM by mowaptpop
via reddit https://ift.tt/vFmDutw
www.lasso.security
Diving Deeper into AI Package Hallucinations
Lass Security's recent research on AI Package Hallucinations extends the attack technique to GPT-3.5-Turbo, GPT-4, Gemini Pro (Bard), and Coral (Cohere).
Security Advisory: Systems with a SONIX Technology Webcam vulnerable to DLL hijacking attack allowing attackers to execute malicious DLL and escalate privileges
https://ift.tt/Rmy9TiU
Submitted April 05, 2024 at 02:03PM by usdAG
via reddit https://ift.tt/lpbGkj5
https://ift.tt/Rmy9TiU
Submitted April 05, 2024 at 02:03PM by usdAG
via reddit https://ift.tt/lpbGkj5
usd HeroLab
usd-2023-0029 - usd HeroLab
Advisory ID: usd-2023-0029 | Product: SONIX Technology Webcam | Vulnerability Type: CWE 732 - Incorrect Permission Assignment for Critical Resource
Wifi credential dumping
https://ift.tt/vH6kI3h
Submitted April 05, 2024 at 02:43PM by S3cur3Th1sSh1t
via reddit https://ift.tt/HkvBb2V
https://ift.tt/vH6kI3h
Submitted April 05, 2024 at 02:43PM by S3cur3Th1sSh1t
via reddit https://ift.tt/HkvBb2V
www.r-tec.net
WIFI Credential Dumping: Techniques to retrieve the PSK from a workstation post-compromise
This blog won't dive into any of the mentioned WIFI attacks, but will highlight techniques to retrieve the PSK from a workstation post-compromise instead.
Galactical Bug Hunting: How we discovered new issues in CD Projekt Red’s Gaming Platform
https://ift.tt/nuxOGNM
Submitted April 05, 2024 at 08:59PM by proccessunknown
via reddit https://ift.tt/T1ADsJi
https://ift.tt/nuxOGNM
Submitted April 05, 2024 at 08:59PM by proccessunknown
via reddit https://ift.tt/T1ADsJi
Anvil Secure
Galactical Bug Hunting: How we discovered new issues in CD Projekt Red's Gaming Platform - Anvil Secure
As a researcher I often run into situations in which I need to make a compiled binary do things that it wouldn’t normally do or change the way it works in some way. Of course, if one…
Don't trust the cache :Exposing Web cache vulnerabilities
https://ift.tt/CXN16Bi
Submitted April 05, 2024 at 10:43PM by anasbetis94
via reddit https://ift.tt/e1zZO9K
https://ift.tt/CXN16Bi
Submitted April 05, 2024 at 10:43PM by anasbetis94
via reddit https://ift.tt/e1zZO9K
Medium
Don’t Trust the Cache: Exposing Web Cache Poisoning and Deception vulnerabilities
Good Day!
League of legends stalkerware
https://ift.tt/cMY8Dd2
Submitted April 06, 2024 at 08:40PM by Cyfiefie
via reddit https://ift.tt/on98Wb7
https://ift.tt/cMY8Dd2
Submitted April 06, 2024 at 08:40PM by Cyfiefie
via reddit https://ift.tt/on98Wb7
Leagueoflegends
League of Legends
League of Legends is a team-based game with over 140 champions to make epic plays with. Play now for free.
Streamline Threat Hunting: Shortemall Automates Short URL Analysis with a Click
https://ift.tt/XDKsVJN
Submitted April 08, 2024 at 11:43PM by osint_matter
via reddit https://ift.tt/Pkiu0ZF
https://ift.tt/XDKsVJN
Submitted April 08, 2024 at 11:43PM by osint_matter
via reddit https://ift.tt/Pkiu0ZF
GitHub
GitHub - osintmatter/shortemall: Shortemall is a Python-based tool that automates the process of scanning hidden content of Short…
Shortemall is a Python-based tool that automates the process of scanning hidden content of Short URLs. - GitHub - osintmatter/shortemall: Shortemall is a Python-based tool that automates the proce...
Telegram Users Warned of Potential Security Risk
https://ift.tt/lS5sLEk
Submitted April 09, 2024 at 07:01PM by Educational_Swim8665
via reddit https://ift.tt/KnDJzia
https://ift.tt/lS5sLEk
Submitted April 09, 2024 at 07:01PM by Educational_Swim8665
via reddit https://ift.tt/KnDJzia
BitDegree
Telegram Users Warned of Potential Security Risk
CertiK has reported a high-risk vulnerability in the Telegram Desktop application that could allow for remote code execution attacks.