2 votes and 0 comments so far on Reddit

AutoRepeater - Automated HTTP Request Repeating With Burp Suite

1 vote and 0 comments so far on Reddit

Attacks from the online groups Lazarus, Silent Chollima, Group 123, Hidden Cobra, DarkSeoul, Blockbuster, Operation Troy, and 10 Days of Rain are believed to have come from North Korea. But how can we know with certainty? And what connection does a DDoS and…

Social Mapper is a Social Media Enumeration & Correlation Tool

A 2 day instructor led workshop by the ElfMaster, that navigates the participants through the most fascinating and arcane facets of the ELF binary format. This includes but is not limited to ELF internals, relocations, dynamic linking, virus infection, anti…

Kaspersky VPN | DNS Address leak | Privacy

Abstract Web cache poisoning has long been an elusive vulnerability, a 'theoretical' threat used mostly to scare developers into obediently patching issues that nobody could actually exploit. In this

14 votes and 6 comments so far on Reddit

rosenbridge - Hardware backdoors in x86 CPUs

This is 🍊 speaking

1 I'LL SEE YOUR MISSLE AND RAISE YOU A MIRV: AN OVERVIEW OF THE GENESIS SCRIPTING ENGINE DEFCON 26 Alex Levinson (gen0cide) Dan Borges (ahhh)

A new security flaw has been detected by German researchers in relation to intel. This comes on the back of earlier concerns from January and March 2018. The flaw means that passwords can potentially be stolen.

Old VIA C3 chipsets have an undocumented RISC coprocessor that gives you root access from userland if you simply type in four bytes.

firstorder - A traffic analyzer to evade Empire's communication from Anomaly-Based IDS

ExchangeRelayX - An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

HTTP is ubiquitous now with pretty much everything being powered by an API, a web application or some kind of cloud-based HTTP driven infrastructure. With that HTTP Security becomes paramount and to secure HTTP you have to understand it. HTTP is the protocol…