The $12,000 Intersection between Clickjacking and XSS
https://ift.tt/2Nn9vax
Submitted July 05, 2018 at 06:37PM by albinowax
via reddit https://ift.tt/2KSbFx5
https://ift.tt/2Nn9vax
Submitted July 05, 2018 at 06:37PM by albinowax
via reddit https://ift.tt/2KSbFx5
reddit
r/netsec - The $12,000 Intersection between Clickjacking and XSS
1 votes and 0 so far on reddit
Frida Engage | Part Three | You Down With XPC?
https://ift.tt/2Gk76tg
Submitted July 06, 2018 at 12:16AM by marketingversprite
via reddit https://ift.tt/2u7AZIo
https://ift.tt/2Gk76tg
Submitted July 06, 2018 at 12:16AM by marketingversprite
via reddit https://ift.tt/2u7AZIo
VerSprite | Integrated Security Services and Consulting
Frida Engage Part Three: You Down With XPC? | VerSprite
In the final installment of the Frida Engage blog series, we will demonstrate how to use Frida for hooking and inspecting Apple's NSXPC API using the CleanMyMac 3 application as our guinea pig.
Using the Aorus Gaming Box 1080 eGPU for Password Cracking & Security
https://ift.tt/2KDVzLy
Submitted July 06, 2018 at 12:53PM by vysec
via reddit https://ift.tt/2lYIEoQ
https://ift.tt/2KDVzLy
Submitted July 06, 2018 at 12:53PM by vysec
via reddit https://ift.tt/2lYIEoQ
Vincent Yiu
Aorus Gaming Box for Password Cracking
Introduction The Aorus Gaming box is an external GPU (eGPU) that is light-weight and you can carry it around with you on different penetration tests. Let's take for example you might have a client who does not want you to take any data off-site (for obvious…
Hackability Inspector
https://ift.tt/2MUWS5n
Submitted July 06, 2018 at 07:33PM by albinowax
via reddit https://ift.tt/2MUhL0E
https://ift.tt/2MUWS5n
Submitted July 06, 2018 at 07:33PM by albinowax
via reddit https://ift.tt/2MUhL0E
Web Security Blog | PortSwigger
Hackability inspector
The Hackability inspector enables you to quick enumerate objects and discover interesting functions to exploit.
Apfell - A macOS red teaming framework
https://ift.tt/2lZtwHw
Submitted July 06, 2018 at 08:31PM by NeatIce
via reddit https://ift.tt/2u9OUxG
https://ift.tt/2lZtwHw
Submitted July 06, 2018 at 08:31PM by NeatIce
via reddit https://ift.tt/2u9OUxG
GitHub
GitHub - its-a-feature/Mythic: A collaborative, multi-platform, red teaming framework
A collaborative, multi-platform, red teaming framework - GitHub - its-a-feature/Mythic: A collaborative, multi-platform, red teaming framework
Airties AIR5444TT - Cross-Site Scripting Vulnerability
https://ift.tt/2NvzQDl
Submitted July 06, 2018 at 10:22PM by rdincel1
via reddit https://ift.tt/2u7VUer
https://ift.tt/2NvzQDl
Submitted July 06, 2018 at 10:22PM by rdincel1
via reddit https://ift.tt/2u7VUer
reddit
r/netsec - Airties AIR5444TT - Cross-Site Scripting Vulnerability
1 votes and 0 so far on reddit
Why Did I Open a Malware Research Channel
https://ift.tt/2u1OpX5
Submitted July 07, 2018 at 01:45AM by GelosSnake
via reddit https://ift.tt/2zdgM9P
https://ift.tt/2u1OpX5
Submitted July 07, 2018 at 01:45AM by GelosSnake
via reddit https://ift.tt/2zdgM9P
@GelosSnake
Why Did I Open a Malware Research Channel
One day I was sitting, looking at my screen trying to solve a problem. I was stuck and I knew I was not the only one who had this problem. As a malware researcher what were my options to seek help? Twitter? I felt like it was too public, and
Five Easy Steps To Bypass Analysis of Mails in Antivirus by Manipulating MIME
https://ift.tt/2J0Vv2y
Submitted July 07, 2018 at 01:32AM by maulwuff
via reddit https://ift.tt/2KP01q2
https://ift.tt/2J0Vv2y
Submitted July 07, 2018 at 01:32AM by maulwuff
via reddit https://ift.tt/2KP01q2
reddit
r/netsec - Five Easy Steps To Bypass Analysis of Mails in Antivirus by Manipulating MIME
3 votes and 0 so far on reddit
HTTPView - In-browser Web Application Security Testing Tool (client-side only)
https://ift.tt/2B9QyAz
Submitted July 07, 2018 at 03:01AM by _pdp_
via reddit https://ift.tt/2KUOgLw
https://ift.tt/2B9QyAz
Submitted July 07, 2018 at 03:01AM by _pdp_
via reddit https://ift.tt/2KUOgLw
enumerid - Enumerating valid ranges after initial compromise
https://ift.tt/2KYzvHp
Submitted July 07, 2018 at 12:35AM by krieger_0x00
via reddit https://ift.tt/2KRdDkr
https://ift.tt/2KYzvHp
Submitted July 07, 2018 at 12:35AM by krieger_0x00
via reddit https://ift.tt/2KRdDkr
Gitea RCE via fake JWT, race condition and git hooks chain
https://ift.tt/2KMLlHS
Submitted July 07, 2018 at 01:58PM by kszurek
via reddit https://ift.tt/2u2MZeX
https://ift.tt/2KMLlHS
Submitted July 07, 2018 at 01:58PM by kszurek
via reddit https://ift.tt/2u2MZeX
Msfenum: automation of MSF auxiliary modules
https://ift.tt/2ud26lc
Submitted July 07, 2018 at 02:46PM by rikvduijn
via reddit https://ift.tt/2zhoWOj
https://ift.tt/2ud26lc
Submitted July 07, 2018 at 02:46PM by rikvduijn
via reddit https://ift.tt/2zhoWOj
reddit
r/netsec - Msfenum: automation of MSF auxiliary modules
14 votes and 0 comments so far on Reddit
Tool for exploiting unauthenticated RCE over T3 protocol on Weblogic servers (i.e. version 12.2.1.1, 12.1.3.0), CVE-2017-3248
https://ift.tt/2u4FmEI
Submitted July 07, 2018 at 06:54PM by HeadProfessional
via reddit https://ift.tt/2u9u2Xe
https://ift.tt/2u4FmEI
Submitted July 07, 2018 at 06:54PM by HeadProfessional
via reddit https://ift.tt/2u9u2Xe
GitHub
quentinhardy/noscriptsAndExploits
noscriptsAndExploits - Some noscripts and exploits
How to search for Open Amazon s3 Buckets and their contents - New free online tool
https://ift.tt/2MSIVVw
Submitted July 08, 2018 at 12:05AM by grayhatwarfare
via reddit https://ift.tt/2J3cmlk
https://ift.tt/2MSIVVw
Submitted July 08, 2018 at 12:05AM by grayhatwarfare
via reddit https://ift.tt/2J3cmlk
Medium
How to search for Open Amazon s3 Buckets and their contents — https://buckets.grayhatwarfare.com
Intro
Hacking With AWS Lambda
https://ift.tt/2ucL8U5
Submitted July 08, 2018 at 01:54AM by lmaohtp
via reddit https://ift.tt/2lZX1ZS
https://ift.tt/2ucL8U5
Submitted July 08, 2018 at 01:54AM by lmaohtp
via reddit https://ift.tt/2lZX1ZS
Hacking a game to learn FRIDA basics
https://ift.tt/2udNp19
Submitted July 08, 2018 at 02:21AM by gid0rah
via reddit https://ift.tt/2ziLZrZ
https://ift.tt/2udNp19
Submitted July 08, 2018 at 02:21AM by gid0rah
via reddit https://ift.tt/2ziLZrZ
x-c3ll.github.io
Hacking a game to learn FRIDA basics (Pwn Adventure 3) ::
DoomsDay Vault
DoomsDay Vault
Learn the basic usage of Frida with this tutorial. Build your own cheat with Frida.
Getting started with Firmware emulation
https://ift.tt/2rGdqrW
Submitted July 08, 2018 at 03:42PM by adi0x90
via reddit https://ift.tt/2m34FCY
https://ift.tt/2rGdqrW
Submitted July 08, 2018 at 03:42PM by adi0x90
via reddit https://ift.tt/2m34FCY
Attify Blog - IoT Security, Pentesting and Exploitation
Getting started with Firmware Emulation for IoT Devices
Learn how to emulate firmware meant for different architectures to be able to exploit them better.
Here’s how we found the names and addresses of soldiers and secret agents using a simple fitness app
https://ift.tt/2m11GL6
Submitted July 08, 2018 at 07:11PM by QWieke
via reddit https://ift.tt/2MXmvm1
https://ift.tt/2m11GL6
Submitted July 08, 2018 at 07:11PM by QWieke
via reddit https://ift.tt/2MXmvm1
De Correspondent
Here’s how we found the names and addresses of soldiers and secret agents using a simple fitness app
How can a simple running app let you identify military personnel, intelligence operatives, and other users – and even pinpoint their home address? In this piece, we explain step by step how we were able to do it.
How Dutch investigative journalists found the names and addresses of soldiers and secret agents using a simple fitness app
https://ift.tt/2m5jWmp
Submitted July 09, 2018 at 02:31AM by alexanderpas
via reddit https://ift.tt/2KSUb73
https://ift.tt/2m5jWmp
Submitted July 09, 2018 at 02:31AM by alexanderpas
via reddit https://ift.tt/2KSUb73
De Correspondent
Here’s how we found the names and addresses of soldiers and secret agents using a simple fitness app
How can a simple running app let you identify military personnel, intelligence operatives, and other users – and even pinpoint their home address? In this piece, we explain step by step how we were able to do it.
Timehop Security Incident
https://ift.tt/2uiJOyY
Submitted July 09, 2018 at 01:08PM by ShermheadRyder
via reddit https://ift.tt/2KWUNoZ
https://ift.tt/2uiJOyY
Submitted July 09, 2018 at 01:08PM by ShermheadRyder
via reddit https://ift.tt/2KWUNoZ
Timehop
Security - Technical
Timehop helps you celebrate the best moments of the past with your friends.
It's like #tbt every day! Download for free today for iOS and Android.
It's like #tbt every day! Download for free today for iOS and Android.
CVE-2017-10271: Oracle WebLogic Server RCE – Sleep detection payload
https://ift.tt/2m3DIyM
Submitted July 09, 2018 at 07:46PM by 0xdea
via reddit https://ift.tt/2KYypvo
https://ift.tt/2m3DIyM
Submitted July 09, 2018 at 07:46PM by 0xdea
via reddit https://ift.tt/2KYypvo