IoTSecurity101 - From IoT Pentesting to IoT Security

Up to the April 2018 CPU (6u191, 7u181, 8u171) Java’s RMI endpoints allowed HTTP tunneling of requests.
Failing to implement further restrictions on these requests it was possible to perform them as
cross-origin requests from third-party websites. This…

Fast browser-based network discovery module. Contribute to serain/netmap.js development by creating an account on GitHub.

Merge multiple pcap files together, gracefully. Contribute to assafmo/joincap development by creating an account on GitHub.

WhaleTail - Program to reverse Docker images into Dockerfiles

XSStrike is an advanced XSS detection and exploitation suite.

Exploitation Framework for Embedded Devices. Contribute to threat9/routersploit development by creating an account on GitHub.

At the DefCon2018 conference held in China, hackers and data scientists raised vivid discussions on cyberattacks with the use and abuse of machine learning and possible solutions. The AI Village talk topics cover vulnerabilities of machine learning tools…

Blog about anti-virus software and its issues.

WebReaver is a desktop-based, web security scanner, designed to help you find security vulnerabilities easily. Try it today!

4 votes and 0 so far on reddit

Pwn2Own is an industry-level security competition organized annually by Trend Micro’s Zero Day Initiative. Pwn2Own invites top security researchers to showca...

Family genealogy and DNA testing site MyHeritage announced on Monday a security breach during which an attacker made off with account details for over 92 million MyHeritage users.

At Mozilla, we closely track threats to users' privacy and security. This is why we've added tracking protection to Firefox and created the Facebook container extension. In today's cartoon intro, ...

There’s a fine line between an unintended use and a bug; this was my conclusion after taking a look at Auth0, an identity-as-a-service offering with 2000 enterprise customers.

Zip Slip is a widespread arbitrary file overwrite critical vulnerability, which typically results in remote command execution. It was discovered and responsibly disclosed by the Snyk Security team, and affects thousands of projects.

Red Teams are always focused in the discovery of innovative ways to establish connections back to their command and control infrastructure. The main reasons that leads red teams to use standard pro…

2 votes and 0 so far on reddit

Zip Slip is a widespread arbitrary file overwrite critical vulnerability, which typically results in remote command execution. It was discovered and responsibly disclosed by the Snyk Security team, and affects thousands of projects.

VDOO security research teams have been conducting, for the last several months, a wide scope security research of leading IoT products in the field of safety and security. In most of the cases, the…