PBS FRONTLINE investigates Pegasus, the powerful spyware sold to governments around the world by the Israeli company NSO Group.

By /u/identifytarget

submitted by /u/identifytarget
[link] [comments]

Related tags
- ❌
- r/netsec
January 4^th 2023 at 03:27

/r/netsec - Information Security News & Discussion
Nuclear Pond: Scanning for Vulnerabilities at Scale for Less Than a Cup of Coffee
January 3^rd 2023 at 18:38

Nuclear Pond: Scanning for Vulnerabilities at Scale for Less Than a Cup of Coffee

By /u/crustysecurity

submitted by /u/crustysecurity
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 18:38

/r/netsec - Information Security News & Discussion
of-CORS: a framework for hacking internal apps with open CORS via bug bounty
January 3^rd 2023 at 17:58

of-CORS: a framework for hacking internal apps with open CORS via bug bounty

By /u/wifihack

submitted by /u/wifihack
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 17:58

/r/netsec - Information Security News & Discussion
SSRF vulnerabilities caused by SNI proxy misconfigurations
January 3^rd 2023 at 13:37

SSRF vulnerabilities caused by SNI proxy misconfigurations

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 13:37

/r/netsec - Information Security News & Discussion
Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
January 3^rd 2023 at 10:23

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

By /u/samwcurry

submitted by /u/samwcurry
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 10:23

/r/netsec - Information Security News & Discussion
Cloud Metadata - AWS IAM Credential Abuse
January 2^nd 2023 at 20:21

Cloud Metadata - AWS IAM Credential Abuse

By /u/SNEAKYMONK3Y

submitted by /u/SNEAKYMONK3Y
[link] [comments]

Related tags
- ❌
- r/netsec
January 2^nd 2023 at 20:21

GitHub - kitabisa/teler-waf: teler-waf is a Go HTTP middleware that provide teler IDS functionality with teler IDS to protect against web-based attacks and improve the security of Go-based web applications. It is highly configurable and easy to integrate

By /u/dwisiswant0

submitted by /u/dwisiswant0
[link] [comments]

Related tags
- ❌
- r/netsec
January 2^nd 2023 at 05:25

/r/netsec - Information Security News & Discussion
GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules
January 1^st 2023 at 15:30

GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules

By /u/jafarlihi

submitted by /u/jafarlihi
[link] [comments]

Related tags
- ❌
- r/netsec
January 1^st 2023 at 15:30

/r/netsec - Information Security News & Discussion
Compromised PyTorch-nightly dependency chain
January 1^st 2023 at 09:01

Compromised PyTorch-nightly dependency chain

By /u/z84

submitted by /u/z84
[link] [comments]

Related tags
- ❌
- r/netsec
January 1^st 2023 at 09:01

/r/netsec - Information Security News & Discussion
LuaJIT Sandbox Escape: The Saga Ends
December 31^st 2022 at 12:20

LuaJIT Sandbox Escape: The Saga Ends

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 31^st 2022 at 12:20

/r/netsec - Information Security News & Discussion
Architecture Notes - Capture the Flag.
December 30^th 2022 at 17:50

Architecture Notes - Capture the Flag.

By /u/myusuf3

submitted by /u/myusuf3
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 17:50

/r/netsec - Information Security News & Discussion
Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463
December 30^th 2022 at 14:55

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 14:55

/r/netsec - Information Security News & Discussion
There is no secure software supply-chain.
December 30^th 2022 at 12:56

There is no secure software supply-chain.

By /u/dlorenc

submitted by /u/dlorenc
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 12:56

/r/netsec - Information Security News & Discussion
Reverse Prompt Engineering - Pwning the source prompts of Notion AI & 7 techniques for Reverse Prompt Engineering
December 30^th 2022 at 05:48

Reverse Prompt Engineering - Pwning the source prompts of Notion AI & 7 techniques for Reverse Prompt Engineering

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 05:48

/r/netsec - Information Security News & Discussion
Mosca SAST tool
December 30^th 2022 at 04:44

Mosca SAST tool

By /u/CoolerVoid

submitted by /u/CoolerVoid
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 04:44

𓅃 Announcing Matano + Crowdstrike: Open source project to analyze security logs on S3 using SQL & build realtime detections-as-code

By /u/shaeqahmed

submitted by /u/shaeqahmed
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 16:37

/r/netsec - Information Security News & Discussion
Writing Windows Kernel Drivers for Advanced Persistence (Part 1)
December 29^th 2022 at 14:47

Writing Windows Kernel Drivers for Advanced Persistence (Part 1)

By /u/v3ded

submitted by /u/v3ded
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 14:47

/r/netsec - Information Security News & Discussion
New CatB Ransomware Employs 2-Year Old DLL Hijacking Technique To Evade Detection
December 29^th 2022 at 13:51

New CatB Ransomware Employs 2-Year Old DLL Hijacking Technique To Evade Detection

By /u/woja111

submitted by /u/woja111
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 13:51

/r/netsec - Information Security News & Discussion
BufferPwn: RCE vulnerability in the common network code of several first party Nintendo games since the Nintendo 3DS
December 28^th 2022 at 21:13

BufferPwn: RCE vulnerability in the common network code of several first party Nintendo games since the Nintendo 3DS

[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 21:13

/r/netsec - Information Security News & Discussion
dnstwist: send potential spear phishing domains to Slack
December 29^th 2022 at 12:35

dnstwist: send potential spear phishing domains to Slack

By /u/nindustries

submitted by /u/nindustries
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 12:35

/r/netsec - Information Security News & Discussion
Turning Google smart speakers into wiretaps for $100k
December 29^th 2022 at 01:47

Turning Google smart speakers into wiretaps for $100k

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 01:47

/r/netsec - Information Security News & Discussion
G-3PO: A Protocol Droid for Ghidra (a Ghidra script that glosses decompiled functions with GPT-3 generated comments)
December 28^th 2022 at 19:42

G-3PO: A Protocol Droid for Ghidra (a Ghidra script that glosses decompiled functions with GPT-3 generated comments)

By /u/0xdeba5e12

submitted by /u/0xdeba5e12
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 19:42

/r/netsec - Information Security News & Discussion
Attack Surface Reduction BOF
December 28^th 2022 at 17:21

Attack Surface Reduction BOF

By /u/IamaCerealKilla

submitted by /u/IamaCerealKilla
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 17:21

/r/netsec - Information Security News & Discussion
Video game save file Trojan personified
December 28^th 2022 at 03:06

Video game save file Trojan personified

By /u/bemodtwz

submitted by /u/bemodtwz
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 03:06

/r/netsec - Information Security News & Discussion
Certificate Ripper v2 released - tool to extract server certificates
December 28^th 2022 at 00:54

Certificate Ripper v2 released - tool to extract server certificates

By /u/Hakky54

submitted by /u/Hakky54
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 00:54

/r/netsec - Information Security News & Discussion
New AMSI Bypass Using CLR Hooking
December 27^th 2022 at 23:14

New AMSI Bypass Using CLR Hooking

By /u/pracsec

submitted by /u/pracsec
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 23:14

/r/netsec - Information Security News & Discussion
Spice up your persistence: loading PHP extensions from memory
December 27^th 2022 at 21:55

Spice up your persistence: loading PHP extensions from memory

By /u/gid0rah

submitted by /u/gid0rah
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 21:55

/r/netsec - Information Security News & Discussion
Scaling Continuous Security Testing on the Cheap
December 27^th 2022 at 16:43

Scaling Continuous Security Testing on the Cheap

By /u/DH_Prelude

submitted by /u/DH_Prelude
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 16:43

/r/netsec - Information Security News & Discussion
Netcomm NF20MESH Cloud Mesh router - Unauthenticated Remote Code Execution
December 27^th 2022 at 06:17

Netcomm NF20MESH Cloud Mesh router - Unauthenticated Remote Code Execution

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 06:17

/r/netsec - Information Security News & Discussion
Pass-the-Challenge: Defeating Windows Defender Credential Guard
December 26^th 2022 at 20:46

Pass-the-Challenge: Defeating Windows Defender Credential Guard

By /u/ly4k_

submitted by /u/ly4k_
[link] [comments]

Related tags
- ❌
- r/netsec
December 26^th 2022 at 20:46

/r/netsec - Information Security News & Discussion
Overview of Glibc Heap Exploitation Techniques (currently up to v2.34)
December 25^th 2022 at 04:47

Overview of Glibc Heap Exploitation Techniques (currently up to v2.34)

By /u/himeko98

submitted by /u/himeko98
[link] [comments]

Related tags
- ❌
- r/netsec
December 25^th 2022 at 04:47

/r/netsec - Information Security News & Discussion
Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.
December 24^th 2022 at 06:16

Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.

By /u/CoolerVoid

submitted by /u/CoolerVoid
[link] [comments]

Related tags
- ❌
- r/netsec
December 24^th 2022 at 06:16

/r/netsec - Information Security News & Discussion
PyRDP 1.2.0 released – Can perform Net-NTLM hash capture before the certificate error on RDP
December 23^rd 2022 at 18:06

PyRDP 1.2.0 released – Can perform Net-NTLM hash capture before the certificate error on RDP

By /u/obilodeau

submitted by /u/obilodeau
[link] [comments]

Related tags
- ❌
- r/netsec
December 23^rd 2022 at 18:06

/r/netsec - Information Security News & Discussion
FIN7 Unveiled - A deep dive into notorious cybercrime gang
December 23^rd 2022 at 09:35

FIN7 Unveiled - A deep dive into notorious cybercrime gang

By /u/wtfse

submitted by /u/wtfse
[link] [comments]

Related tags
- ❌
- r/netsec
December 23^rd 2022 at 09:35

/r/netsec - Information Security News & Discussion
Introducing the Columbus Project
December 23^rd 2022 at 07:38

Introducing the Columbus Project

By /u/g0rbe

submitted by /u/g0rbe
[link] [comments]

Related tags
- ❌
- r/netsec
December 23^rd 2022 at 07:38

/r/netsec - Information Security News & Discussion
Lastpass Security Incident - December 22 update
December 22^nd 2022 at 20:34

Lastpass Security Incident - December 22 update

By /u/tkokilroy

submitted by /u/tkokilroy
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 20:34

/r/netsec - Information Security News & Discussion
Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas
December 22^nd 2022 at 19:42

Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas

By /u/raesene2

submitted by /u/raesene2
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 19:42

[x-post from blueteamsec] I started a newsletter that aggregates Detection Engineering news and techniques. Here’s the latest Issue. Let me know what you think!

By /u/dudeimawizard

submitted by /u/dudeimawizard
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 17:14

/r/netsec - Information Security News & Discussion
Cross-tenant network bypass in Azure Cognitive Search
December 22^nd 2022 at 14:50

Cross-tenant network bypass in Azure Cognitive Search

By /u/FrankTr3nd

submitted by /u/FrankTr3nd
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 14:50

/r/netsec - Information Security News & Discussion
GLPI Exploitation Timeline
December 22^nd 2022 at 13:45

GLPI Exploitation Timeline

By /u/chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 13:45

/r/netsec - Information Security News & Discussion
Puckungfu: A NETGEAR WAN Command Injection
December 22^nd 2022 at 11:32

Puckungfu: A NETGEAR WAN Command Injection

By /u/ArbitraryWrite

Yet another Pwn2Own vulnerability patched days before the competition (https://twitter.com/_mccaulay/status/1605886785015480320)

submitted by /u/ArbitraryWrite
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 11:32

/r/netsec - Information Security News & Discussion
A journey into IoT - Unknown Chinese alarm - Part 4 - Internal communications
December 21^st 2022 at 15:02

A journey into IoT - Unknown Chinese alarm - Part 4 - Internal communications

By /u/0xdea

submitted by /u/0xdea
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 15:02

/r/netsec - Information Security News & Discussion
Deconstructing and Exploiting CVE-2020-6418
December 21^st 2022 at 14:26

Deconstructing and Exploiting CVE-2020-6418

By /u/surrealisticpillow12

submitted by /u/surrealisticpillow12
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 14:26

/r/netsec - Information Security News & Discussion
DirtyCred Remastered: UAF to LPE (CVE-2022-2602)
December 21^st 2022 at 14:15

DirtyCred Remastered: UAF to LPE (CVE-2022-2602)

By /u/Void_Sec

submitted by /u/Void_Sec
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 14:15

/r/netsec - Information Security News & Discussion
Cisco BroadWorks CommPilot Application Software Unauthenticated Server-Side Request Forgery (CVE-2022-20951)
December 21^st 2022 at 11:10

Cisco BroadWorks CommPilot Application Software Unauthenticated Server-Side Request Forgery (CVE-2022-20951)

By /u/smaury

submitted by /u/smaury
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 11:10

/r/netsec - Information Security News & Discussion
Exploring the depths of Istio: A researcher's guide to analyzing a caching vulnerability
December 21^st 2022 at 05:58

Exploring the depths of Istio: A researcher's guide to analyzing a caching vulnerability

By /u/jat0369

submitted by /u/jat0369
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 05:58

/r/netsec - Information Security News & Discussion
New Chaes campaign uses Windows Management Instrumentation Command-Line Utility
December 20^th 2022 at 23:37

New Chaes campaign uses Windows Management Instrumentation Command-Line Utility

By /u/PENGUINPLOW

submitted by /u/PENGUINPLOW
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 23:37

/r/netsec - Information Security News & Discussion
Validating Okta Access Tokens in Python with PyJWT
December 20^th 2022 at 20:33

Validating Okta Access Tokens in Python with PyJWT

By /u/csanders_

submitted by /u/csanders_
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 20:33

/r/netsec - Information Security News & Discussion
Bypass iOS backup's TCC protection
December 20^th 2022 at 17:58

Bypass iOS backup's TCC protection

By /u/surrealisticpillow12

submitted by /u/surrealisticpillow12
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 17:58

/r/netsec - Information Security News & Discussion
Using Leaking Sentinel Value to Bypass the Latest Chrome v8 HardenProtect
December 20^th 2022 at 17:54

Using Leaking Sentinel Value to Bypass the Latest Chrome v8 HardenProtect

By /u/surrealisticpillow12

submitted by /u/surrealisticpillow12
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 17:54

/r/netsec - Information Security News & Discussion
OSV-Scanner: A vulnerability scanner written in Go which uses the data provided by OSV.dev
December 20^th 2022 at 08:51

OSV-Scanner: A vulnerability scanner written in Go which uses the data provided by OSV.dev

By /u/Titokhan

submitted by /u/Titokhan
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 08:51

/r/netsec - Information Security News & Discussion
Writeup about an authentication bypass and privilege escalation in the Passwordstate password manager
December 20^th 2022 at 07:47

Writeup about an authentication bypass and privilege escalation in the Passwordstate password manager

By /u/parzel

submitted by /u/parzel
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 07:47

/r/netsec - Information Security News & Discussion
Intro to Embedded RE: UART Discovery and Firmware Extraction via UBoot
December 20^th 2022 at 02:58

Intro to Embedded RE: UART Discovery and Firmware Extraction via UBoot

By /u/wrongbaud

submitted by /u/wrongbaud
[link] [comments]

Related tags
- ❌
- r/netsec
December 20^th 2022 at 02:58

/r/netsec - Information Security News & Discussion
Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg
December 19^th 2022 at 22:41

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg

By /u/Void_Sec

submitted by /u/Void_Sec
[link] [comments]

Related tags
- ❌
- r/netsec
December 19^th 2022 at 22:41

/r/netsec - Information Security News & Discussion
Beware of this CI/CD vulnerability: GitHub Environment Injection (Google & Apache found vulnerable)
December 19^th 2022 at 22:22

Beware of this CI/CD vulnerability: GitHub Environment Injection (Google & Apache found vulnerable)

By /u/roy_6472

submitted by /u/roy_6472
[link] [comments]

Related tags
- ❌
- r/netsec
December 19^th 2022 at 22:22

/r/netsec - Information Security News & Discussion
EDR evasion with hardware breakpoints
December 19^th 2022 at 21:09

EDR evasion with hardware breakpoints

By /u/Fun_Preference1113

New research of mine talking about EDR evasion using hardware breakpoints.

submitted by /u/Fun_Preference1113
[link] [comments]

Related tags
- ❌
- r/netsec
December 19^th 2022 at 21:09

/r/netsec - Information Security News & Discussion
clif - is a command-line application fuzzer in Rust
December 19^th 2022 at 17:11

clif - is a command-line application fuzzer in Rust

By /u/andy-codes

submitted by /u/andy-codes
[link] [comments]

Related tags
- ❌
- r/netsec
December 19^th 2022 at 17:11

/r/netsec - Information Security News & Discussion
MeshyJSON: A TP-Link tdpServer JSON Stack Overflow
December 19^th 2022 at 12:52

MeshyJSON: A TP-Link tdpServer JSON Stack Overflow

By /u/ArbitraryWrite

A TP-Link router stack overflow vulnerability patched days before Pwn2Own 2022 (https://twitter.com/_mccaulay/status/1604813519572160513)

submitted by /u/ArbitraryWrite
[link] [comments]

Related tags
- ❌
- r/netsec
December 19^th 2022 at 12:52

/r/netsec - Information Security News & Discussion
Port knocking from the scratch
December 19^th 2022 at 00:07

Port knocking from the scratch

By /u/CoolerVoid

submitted by /u/CoolerVoid
[link] [comments]

Related tags
- ❌
- r/netsec
December 19^th 2022 at 00:07

/r/netsec - Information Security News & Discussion
Day 3 — Next Level Font Obfuscation
December 18^th 2022 at 22:22

Day 3 — Next Level Font Obfuscation

By /u/Exact-Practice-8658

submitted by /u/Exact-Practice-8658
[link] [comments]

Related tags
- ❌
- r/netsec
December 18^th 2022 at 22:22