/r/netsec - Information Security News & Discussion
Strategies for effective CSRF mitigation
January 8^th 2023 at 15:26

Strategies for effective CSRF mitigation

By /u/DeliveryTypical

submitted by /u/DeliveryTypical
[link] [comments]

Related tags
- ❌
- r/netsec
January 8^th 2023 at 15:26

/r/netsec - Information Security News & Discussion
GUARDARA 0.9.9 Available with Web Service Testing
January 7^th 2023 at 21:46

GUARDARA 0.9.9 Available with Web Service Testing

By /u/JohnKeymanUK

submitted by /u/JohnKeymanUK
[link] [comments]

Related tags
- ❌
- r/netsec
January 7^th 2023 at 21:46

/r/netsec - Information Security News & Discussion
VSCode Supply Chain Attacks: Protect Your IDE from Malicious Extensions
January 7^th 2023 at 19:32

VSCode Supply Chain Attacks: Protect Your IDE from Malicious Extensions

By /u/gfdgfbal

submitted by /u/gfdgfbal
[link] [comments]

Related tags
- ❌
- r/netsec
January 7^th 2023 at 19:32

connmap now works with all DE/WM! Desktop widget that shows location of your current TCP peers on a world map in real-time.

By /u/jafarlihi

submitted by /u/jafarlihi
[link] [comments]

Related tags
- ❌
- r/netsec
January 7^th 2023 at 14:22

/r/netsec - Information Security News & Discussion
Reflections on Trusting VEX (or when humans can improve SBOMs)
January 7^th 2023 at 12:19

Reflections on Trusting VEX (or when humans can improve SBOMs)

By /u/dlorenc

submitted by /u/dlorenc
[link] [comments]

Related tags
- ❌
- r/netsec
January 7^th 2023 at 12:19

/r/netsec - Information Security News & Discussion
Manipulating AES Traffic using a Chain of Proxies and Hardcoded Keys
January 7^th 2023 at 04:33

Manipulating AES Traffic using a Chain of Proxies and Hardcoded Keys

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
January 7^th 2023 at 04:33

/r/netsec - Information Security News & Discussion
I made an Open Source Browser extension to aid in Threat Investigations!
January 6^th 2023 at 22:29

I made an Open Source Browser extension to aid in Threat Investigations!

By /u/zack7601

submitted by /u/zack7601
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 22:29

/r/netsec - Information Security News & Discussion
TruffleHog Now Scans CircleCI log outputs for passwords/credentials
January 6^th 2023 at 19:02

TruffleHog Now Scans CircleCI log outputs for passwords/credentials

By /u/wifihack

submitted by /u/wifihack
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 19:02

/r/netsec - Information Security News & Discussion
udon: A simple tool that helps to find assets/domains based on the Google Analytics ID.
January 6^th 2023 at 18:56

udon: A simple tool that helps to find assets/domains based on the Google Analytics ID.

By /u/BananaBounty

submitted by /u/BananaBounty
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 18:56

/r/netsec - Information Security News & Discussion
I scanned every package on PyPi and found 57 live AWS keys
January 6^th 2023 at 18:52

I scanned every package on PyPi and found 57 live AWS keys

By /u/Most-Loss5834

submitted by /u/Most-Loss5834
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 18:52

/r/netsec - Information Security News & Discussion
LastPass Breach - What went wrong?
January 6^th 2023 at 18:17

LastPass Breach - What went wrong?

By /u/GelosSnake

submitted by /u/GelosSnake
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 18:17

/r/netsec - Information Security News & Discussion
How the Lastpass Breach affects Lastpass SSO
January 6^th 2023 at 16:16

How the Lastpass Breach affects Lastpass SSO

By /u/csanders_

submitted by /u/csanders_
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 16:16

/r/netsec - Information Security News & Discussion
The Mac Malware of 2022
January 6^th 2023 at 13:34

The Mac Malware of 2022

By /u/KolideKenny

submitted by /u/KolideKenny
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 13:34

/r/netsec - Information Security News & Discussion
Variant analysis of CVE-2022-3515 affecting libksba, which resulted in CVE-2022-47629
January 6^th 2023 at 07:09

Variant analysis of CVE-2022-3515 affecting libksba, which resulted in CVE-2022-47629

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 07:09

Announcing the Ronin 2.0.0 Open Beta. Ronin is a free and Open Source Ruby toolkit for security research and development.

By /u/postmodern

submitted by /u/postmodern
[link] [comments]

Related tags
- ❌
- r/netsec
January 6^th 2023 at 06:57

PBS FRONTLINE investigates Pegasus, the powerful spyware sold to governments around the world by the Israeli company NSO Group.

By /u/identifytarget

submitted by /u/identifytarget
[link] [comments]

Related tags
- ❌
- r/netsec
January 4^th 2023 at 03:27

/r/netsec - Information Security News & Discussion
Nuclear Pond: Scanning for Vulnerabilities at Scale for Less Than a Cup of Coffee
January 3^rd 2023 at 18:38

Nuclear Pond: Scanning for Vulnerabilities at Scale for Less Than a Cup of Coffee

By /u/crustysecurity

submitted by /u/crustysecurity
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 18:38

/r/netsec - Information Security News & Discussion
of-CORS: a framework for hacking internal apps with open CORS via bug bounty
January 3^rd 2023 at 17:58

of-CORS: a framework for hacking internal apps with open CORS via bug bounty

By /u/wifihack

submitted by /u/wifihack
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 17:58

/r/netsec - Information Security News & Discussion
SSRF vulnerabilities caused by SNI proxy misconfigurations
January 3^rd 2023 at 13:37

SSRF vulnerabilities caused by SNI proxy misconfigurations

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 13:37

/r/netsec - Information Security News & Discussion
Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More
January 3^rd 2023 at 10:23

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

By /u/samwcurry

submitted by /u/samwcurry
[link] [comments]

Related tags
- ❌
- r/netsec
January 3^rd 2023 at 10:23

/r/netsec - Information Security News & Discussion
Cloud Metadata - AWS IAM Credential Abuse
January 2^nd 2023 at 20:21

Cloud Metadata - AWS IAM Credential Abuse

By /u/SNEAKYMONK3Y

submitted by /u/SNEAKYMONK3Y
[link] [comments]

Related tags
- ❌
- r/netsec
January 2^nd 2023 at 20:21

GitHub - kitabisa/teler-waf: teler-waf is a Go HTTP middleware that provide teler IDS functionality with teler IDS to protect against web-based attacks and improve the security of Go-based web applications. It is highly configurable and easy to integrate

By /u/dwisiswant0

submitted by /u/dwisiswant0
[link] [comments]

Related tags
- ❌
- r/netsec
January 2^nd 2023 at 05:25

/r/netsec - Information Security News & Discussion
GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules
January 1^st 2023 at 15:30

GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules

By /u/jafarlihi

submitted by /u/jafarlihi
[link] [comments]

Related tags
- ❌
- r/netsec
January 1^st 2023 at 15:30

/r/netsec - Information Security News & Discussion
Compromised PyTorch-nightly dependency chain
January 1^st 2023 at 09:01

Compromised PyTorch-nightly dependency chain

By /u/z84

submitted by /u/z84
[link] [comments]

Related tags
- ❌
- r/netsec
January 1^st 2023 at 09:01

/r/netsec - Information Security News & Discussion
LuaJIT Sandbox Escape: The Saga Ends
December 31^st 2022 at 12:20

LuaJIT Sandbox Escape: The Saga Ends

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 31^st 2022 at 12:20

/r/netsec - Information Security News & Discussion
Architecture Notes - Capture the Flag.
December 30^th 2022 at 17:50

Architecture Notes - Capture the Flag.

By /u/myusuf3

submitted by /u/myusuf3
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 17:50

/r/netsec - Information Security News & Discussion
Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463
December 30^th 2022 at 14:55

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 14:55

/r/netsec - Information Security News & Discussion
There is no secure software supply-chain.
December 30^th 2022 at 12:56

There is no secure software supply-chain.

By /u/dlorenc

submitted by /u/dlorenc
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 12:56

/r/netsec - Information Security News & Discussion
Reverse Prompt Engineering - Pwning the source prompts of Notion AI & 7 techniques for Reverse Prompt Engineering
December 30^th 2022 at 05:48

Reverse Prompt Engineering - Pwning the source prompts of Notion AI & 7 techniques for Reverse Prompt Engineering

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 05:48

/r/netsec - Information Security News & Discussion
Mosca SAST tool
December 30^th 2022 at 04:44

Mosca SAST tool

By /u/CoolerVoid

submitted by /u/CoolerVoid
[link] [comments]

Related tags
- ❌
- r/netsec
December 30^th 2022 at 04:44

𓅃 Announcing Matano + Crowdstrike: Open source project to analyze security logs on S3 using SQL & build realtime detections-as-code

By /u/shaeqahmed

submitted by /u/shaeqahmed
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 16:37

/r/netsec - Information Security News & Discussion
Writing Windows Kernel Drivers for Advanced Persistence (Part 1)
December 29^th 2022 at 14:47

Writing Windows Kernel Drivers for Advanced Persistence (Part 1)

By /u/v3ded

submitted by /u/v3ded
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 14:47

/r/netsec - Information Security News & Discussion
New CatB Ransomware Employs 2-Year Old DLL Hijacking Technique To Evade Detection
December 29^th 2022 at 13:51

New CatB Ransomware Employs 2-Year Old DLL Hijacking Technique To Evade Detection

By /u/woja111

submitted by /u/woja111
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 13:51

/r/netsec - Information Security News & Discussion
BufferPwn: RCE vulnerability in the common network code of several first party Nintendo games since the Nintendo 3DS
December 28^th 2022 at 21:13

BufferPwn: RCE vulnerability in the common network code of several first party Nintendo games since the Nintendo 3DS

[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 21:13

/r/netsec - Information Security News & Discussion
dnstwist: send potential spear phishing domains to Slack
December 29^th 2022 at 12:35

dnstwist: send potential spear phishing domains to Slack

By /u/nindustries

submitted by /u/nindustries
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 12:35

/r/netsec - Information Security News & Discussion
Turning Google smart speakers into wiretaps for $100k
December 29^th 2022 at 01:47

Turning Google smart speakers into wiretaps for $100k

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 29^th 2022 at 01:47

/r/netsec - Information Security News & Discussion
G-3PO: A Protocol Droid for Ghidra (a Ghidra script that glosses decompiled functions with GPT-3 generated comments)
December 28^th 2022 at 19:42

G-3PO: A Protocol Droid for Ghidra (a Ghidra script that glosses decompiled functions with GPT-3 generated comments)

By /u/0xdeba5e12

submitted by /u/0xdeba5e12
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 19:42

/r/netsec - Information Security News & Discussion
Attack Surface Reduction BOF
December 28^th 2022 at 17:21

Attack Surface Reduction BOF

By /u/IamaCerealKilla

submitted by /u/IamaCerealKilla
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 17:21

/r/netsec - Information Security News & Discussion
Video game save file Trojan personified
December 28^th 2022 at 03:06

Video game save file Trojan personified

By /u/bemodtwz

submitted by /u/bemodtwz
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 03:06

/r/netsec - Information Security News & Discussion
Certificate Ripper v2 released - tool to extract server certificates
December 28^th 2022 at 00:54

Certificate Ripper v2 released - tool to extract server certificates

By /u/Hakky54

submitted by /u/Hakky54
[link] [comments]

Related tags
- ❌
- r/netsec
December 28^th 2022 at 00:54

/r/netsec - Information Security News & Discussion
New AMSI Bypass Using CLR Hooking
December 27^th 2022 at 23:14

New AMSI Bypass Using CLR Hooking

By /u/pracsec

submitted by /u/pracsec
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 23:14

/r/netsec - Information Security News & Discussion
Spice up your persistence: loading PHP extensions from memory
December 27^th 2022 at 21:55

Spice up your persistence: loading PHP extensions from memory

By /u/gid0rah

submitted by /u/gid0rah
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 21:55

/r/netsec - Information Security News & Discussion
Scaling Continuous Security Testing on the Cheap
December 27^th 2022 at 16:43

Scaling Continuous Security Testing on the Cheap

By /u/DH_Prelude

submitted by /u/DH_Prelude
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 16:43

/r/netsec - Information Security News & Discussion
Netcomm NF20MESH Cloud Mesh router - Unauthenticated Remote Code Execution
December 27^th 2022 at 06:17

Netcomm NF20MESH Cloud Mesh router - Unauthenticated Remote Code Execution

By /u/Gallus

submitted by /u/Gallus
[link] [comments]

Related tags
- ❌
- r/netsec
December 27^th 2022 at 06:17

/r/netsec - Information Security News & Discussion
Pass-the-Challenge: Defeating Windows Defender Credential Guard
December 26^th 2022 at 20:46

Pass-the-Challenge: Defeating Windows Defender Credential Guard

By /u/ly4k_

submitted by /u/ly4k_
[link] [comments]

Related tags
- ❌
- r/netsec
December 26^th 2022 at 20:46

/r/netsec - Information Security News & Discussion
Overview of Glibc Heap Exploitation Techniques (currently up to v2.34)
December 25^th 2022 at 04:47

Overview of Glibc Heap Exploitation Techniques (currently up to v2.34)

By /u/himeko98

submitted by /u/himeko98
[link] [comments]

Related tags
- ❌
- r/netsec
December 25^th 2022 at 04:47

/r/netsec - Information Security News & Discussion
Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.
December 24^th 2022 at 06:16

Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.

By /u/CoolerVoid

submitted by /u/CoolerVoid
[link] [comments]

Related tags
- ❌
- r/netsec
December 24^th 2022 at 06:16

/r/netsec - Information Security News & Discussion
PyRDP 1.2.0 released – Can perform Net-NTLM hash capture before the certificate error on RDP
December 23^rd 2022 at 18:06

PyRDP 1.2.0 released – Can perform Net-NTLM hash capture before the certificate error on RDP

By /u/obilodeau

submitted by /u/obilodeau
[link] [comments]

Related tags
- ❌
- r/netsec
December 23^rd 2022 at 18:06

/r/netsec - Information Security News & Discussion
FIN7 Unveiled - A deep dive into notorious cybercrime gang
December 23^rd 2022 at 09:35

FIN7 Unveiled - A deep dive into notorious cybercrime gang

By /u/wtfse

submitted by /u/wtfse
[link] [comments]

Related tags
- ❌
- r/netsec
December 23^rd 2022 at 09:35

/r/netsec - Information Security News & Discussion
Introducing the Columbus Project
December 23^rd 2022 at 07:38

Introducing the Columbus Project

By /u/g0rbe

submitted by /u/g0rbe
[link] [comments]

Related tags
- ❌
- r/netsec
December 23^rd 2022 at 07:38

/r/netsec - Information Security News & Discussion
Lastpass Security Incident - December 22 update
December 22^nd 2022 at 20:34

Lastpass Security Incident - December 22 update

By /u/tkokilroy

submitted by /u/tkokilroy
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 20:34

/r/netsec - Information Security News & Discussion
Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas
December 22^nd 2022 at 19:42

Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas

By /u/raesene2

submitted by /u/raesene2
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 19:42

[x-post from blueteamsec] I started a newsletter that aggregates Detection Engineering news and techniques. Here’s the latest Issue. Let me know what you think!

By /u/dudeimawizard

submitted by /u/dudeimawizard
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 17:14

/r/netsec - Information Security News & Discussion
Cross-tenant network bypass in Azure Cognitive Search
December 22^nd 2022 at 14:50

Cross-tenant network bypass in Azure Cognitive Search

By /u/FrankTr3nd

submitted by /u/FrankTr3nd
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 14:50

/r/netsec - Information Security News & Discussion
GLPI Exploitation Timeline
December 22^nd 2022 at 13:45

GLPI Exploitation Timeline

By /u/chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 13:45

/r/netsec - Information Security News & Discussion
Puckungfu: A NETGEAR WAN Command Injection
December 22^nd 2022 at 11:32

Puckungfu: A NETGEAR WAN Command Injection

By /u/ArbitraryWrite

Yet another Pwn2Own vulnerability patched days before the competition (https://twitter.com/_mccaulay/status/1605886785015480320)

submitted by /u/ArbitraryWrite
[link] [comments]

Related tags
- ❌
- r/netsec
December 22^nd 2022 at 11:32

/r/netsec - Information Security News & Discussion
A journey into IoT - Unknown Chinese alarm - Part 4 - Internal communications
December 21^st 2022 at 15:02

A journey into IoT - Unknown Chinese alarm - Part 4 - Internal communications

By /u/0xdea

submitted by /u/0xdea
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 15:02

/r/netsec - Information Security News & Discussion
Deconstructing and Exploiting CVE-2020-6418
December 21^st 2022 at 14:26

Deconstructing and Exploiting CVE-2020-6418

By /u/surrealisticpillow12

submitted by /u/surrealisticpillow12
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 14:26

/r/netsec - Information Security News & Discussion
DirtyCred Remastered: UAF to LPE (CVE-2022-2602)
December 21^st 2022 at 14:15

DirtyCred Remastered: UAF to LPE (CVE-2022-2602)

By /u/Void_Sec

submitted by /u/Void_Sec
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 14:15

/r/netsec - Information Security News & Discussion
Cisco BroadWorks CommPilot Application Software Unauthenticated Server-Side Request Forgery (CVE-2022-20951)
December 21^st 2022 at 11:10

Cisco BroadWorks CommPilot Application Software Unauthenticated Server-Side Request Forgery (CVE-2022-20951)

By /u/smaury

submitted by /u/smaury
[link] [comments]

Related tags
- ❌
- r/netsec
December 21^st 2022 at 11:10