Whether you knew Process Mockingjay since ever or you just got to know it, this was "Monday Freedom to" code some C# that finds RWX sections laying around

submitted by /u/oldboy21
[link] [comments]

Related tags
- ❌
- r/netsec
July 3^rd 2023 at 17:24

CISA Launches CyberSentry. A CISA-managed threat detection and monitoring capability. Anyone else think this is a terrible idea?

By /u/MMK033

submitted by /u/MMK033
[link] [comments]

Related tags
- ❌
- r/netsec
July 3^rd 2023 at 12:47

/r/netsec - Information Security News & Discussion
Desuperpacking Meta Superpacked APKs
July 3^rd 2023 at 12:14

Desuperpacking Meta Superpacked APKs

By /u/onlinereadme

submitted by /u/onlinereadme
[link] [comments]

Related tags
- ❌
- r/netsec
July 3^rd 2023 at 12:14

/r/netsec - Information Security News & Discussion
Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service
July 3^rd 2023 at 11:49

Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service

By /u/buherator

submitted by /u/buherator
[link] [comments]

Related tags
- ❌
- r/netsec
July 3^rd 2023 at 11:49

/r/netsec - Information Security News & Discussion
Fully Undetected shellcode loader featuring EDR killer PoC
July 2^nd 2023 at 11:09

Fully Undetected shellcode loader featuring EDR killer PoC

By /u/florilsk

submitted by /u/florilsk
[link] [comments]

Related tags
- ❌
- r/netsec
July 2^nd 2023 at 11:09

/r/netsec - Information Security News & Discussion
Retreading The AMLogic A113X TrustZone Exploit Process
July 1^st 2023 at 17:04

Retreading The AMLogic A113X TrustZone Exploit Process

By /u/BoredPentester

submitted by /u/BoredPentester
[link] [comments]

Related tags
- ❌
- r/netsec
July 1^st 2023 at 17:04

/r/netsec - Information Security News & Discussion
How I Hacked CASIO F-91W digital watch - Bringing NFC contactless payment capability to a true classic.
July 1^st 2023 at 13:52

How I Hacked CASIO F-91W digital watch - Bringing NFC contactless payment capability to a true classic.

By /u/matteopisani

submitted by /u/matteopisani
[link] [comments]

Related tags
- ❌
- r/netsec
July 1^st 2023 at 13:52

/r/netsec - Information Security News & Discussion
Reversing Citrix Gateway for XSS
June 30^th 2023 at 14:39

Reversing Citrix Gateway for XSS

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
June 30^th 2023 at 14:39

/r/netsec - Information Security News & Discussion
Huobi's Leaky Bucket Risked Massive Crypto Breach
June 30^th 2023 at 11:09

Huobi's Leaky Bucket Risked Massive Crypto Breach

By /u/aaron_devops

submitted by /u/aaron_devops
[link] [comments]

Related tags
- ❌
- r/netsec
June 30^th 2023 at 11:09

/r/netsec - Information Security News & Discussion
Attacking GraphQL APIs
June 30^th 2023 at 07:29

Attacking GraphQL APIs

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
June 30^th 2023 at 07:29

/r/netsec - Information Security News & Discussion
NoMoreCookies: Protection against stealers/rats
June 30^th 2023 at 01:26

NoMoreCookies: Protection against stealers/rats

By /u/AhmedMinegames

submitted by /u/AhmedMinegames
[link] [comments]

Related tags
- ❌
- r/netsec
June 30^th 2023 at 01:26

/r/netsec - Information Security News & Discussion
Hacking Auto-GPT and escaping its docker container
June 29^th 2023 at 14:44

Hacking Auto-GPT and escaping its docker container

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
June 29^th 2023 at 14:44

/r/netsec - Information Security News & Discussion
Introducing route-detect: find authentication and authorization bugs in web application routes
June 29^th 2023 at 14:35

Introducing route-detect: find authentication and authorization bugs in web application routes

By /u/Schwag

submitted by /u/Schwag
[link] [comments]

Related tags
- ❌
- r/netsec
June 29^th 2023 at 14:35

Technical whitepaper: Everyone Knows SAP®, Everyone Uses SAP, Everyone Uses RFC, No One Knows RFC: From RFC to RCE 16 Years Later

By /u/0x9000

submitted by /u/0x9000
[link] [comments]

Related tags
- ❌
- r/netsec
June 29^th 2023 at 13:56

/r/netsec - Information Security News & Discussion
0-day vulnerability found in Netskope leading to a Local Privilege Escalation.
June 29^th 2023 at 12:10

0-day vulnerability found in Netskope leading to a Local Privilege Escalation.

By /u/luci_morningstart

submitted by /u/luci_morningstart
[link] [comments]

Related tags
- ❌
- r/netsec
June 29^th 2023 at 12:10

Frida 16.1.0 is out w/ a brand new backend that supports instrumenting barebone targets — ranging from microcontrollers all the way to the iOS kernel on Corellium, allowing you to instantly inject your own Rust code and insert inline hooks

By /u/oleavr

submitted by /u/oleavr
[link] [comments]

Related tags
- ❌
- r/netsec
June 29^th 2023 at 10:34

/r/netsec - Information Security News & Discussion
Finding Gadgets for CPU Side-Channels with Static Analysis Tools
June 29^th 2023 at 10:18

Finding Gadgets for CPU Side-Channels with Static Analysis Tools

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
June 29^th 2023 at 10:18

/r/netsec - Information Security News & Discussion
CVE-2023-26258 – Authentication bypass in ArcServe UDP Backup
June 28^th 2023 at 17:53

CVE-2023-26258 – Authentication bypass in ArcServe UDP Backup

By /u/gid0rah

submitted by /u/gid0rah
[link] [comments]

Related tags
- ❌
- r/netsec
June 28^th 2023 at 17:53

/r/netsec - Information Security News & Discussion
A deep dive on how Camaro Dragon utilized USB flash drives to infect a EU heath system
June 27^th 2023 at 18:52

A deep dive on how Camaro Dragon utilized USB flash drives to infect a EU heath system

By /u/vampiricrogu3

submitted by /u/vampiricrogu3
[link] [comments]

Related tags
- ❌
- r/netsec
June 27^th 2023 at 18:52

ParaForge: A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

By /u/Ano_F

submitted by /u/Ano_F
[link] [comments]

Related tags
- ❌
- r/netsec
June 27^th 2023 at 17:19

/r/netsec - Information Security News & Discussion
Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution
June 27^th 2023 at 13:34

Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution

By /u/thewatcher_

submitted by /u/thewatcher_
[link] [comments]

Related tags
- ❌
- r/netsec
June 27^th 2023 at 13:34

/r/netsec - Information Security News & Discussion
For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation
June 27^th 2023 at 08:52

For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
June 27^th 2023 at 08:52

A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation

By /u/CyberMasterV

submitted by /u/CyberMasterV
[link] [comments]

Related tags
- ❌
- r/netsec
June 26^th 2023 at 14:03

/r/netsec - Information Security News & Discussion
Bluetooth protocol abuse allows attackers to reveal confidential information, Tarlogic researchers say.
June 26^th 2023 at 10:44

Bluetooth protocol abuse allows attackers to reveal confidential information, Tarlogic researchers say.

By /u/jaimeff

submitted by /u/jaimeff
[link] [comments]

Related tags
- ❌
- r/netsec
June 26^th 2023 at 10:44

/r/netsec - Information Security News & Discussion
Introducing DNS Analyzer: A Burp Suite extension for finding DNS vulnerabilities in web applications
June 26^th 2023 at 10:16

Introducing DNS Analyzer: A Burp Suite extension for finding DNS vulnerabilities in web applications

By /u/The_Login

submitted by /u/The_Login
[link] [comments]

Related tags
- ❌
- r/netsec
June 26^th 2023 at 10:16

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

By /u/Idov31

submitted by /u/Idov31
[link] [comments]

Related tags
- ❌
- r/netsec
June 25^th 2023 at 06:35

/r/netsec - Information Security News & Discussion
Fileless command execution for Lateral Movement in Nim
June 23^rd 2023 at 19:33

Fileless command execution for Lateral Movement in Nim

By /u/DarkGrejuva

submitted by /u/DarkGrejuva
[link] [comments]

Related tags
- ❌
- r/netsec
June 23^rd 2023 at 19:33

/r/netsec - Information Security News & Discussion
A brief summary about a SSTI to RCE in Bagisto
June 23^rd 2023 at 11:11

A brief summary about a SSTI to RCE in Bagisto

By /u/sp1d3rr

submitted by /u/sp1d3rr
[link] [comments]

Related tags
- ❌
- r/netsec
June 23^rd 2023 at 11:11

/r/netsec - Information Security News & Discussion
Another AWS WAF bypass allowing SQLi caused by an unorthodox MSSQL design choice
June 22^nd 2023 at 14:30

Another AWS WAF bypass allowing SQLi caused by an unorthodox MSSQL design choice

By /u/obilodeau

submitted by /u/obilodeau
[link] [comments]

Related tags
- ❌
- r/netsec
June 22^nd 2023 at 14:30

/r/netsec - Information Security News & Discussion
Secfault Security - LibreOffice Arbitrary File Write (CVE-2023-1883)
June 22^nd 2023 at 07:38

Secfault Security - LibreOffice Arbitrary File Write (CVE-2023-1883)

By /u/Xadartt

submitted by /u/Xadartt
[link] [comments]

Related tags
- ❌
- r/netsec
June 22^nd 2023 at 07:38

/r/netsec - Information Security News & Discussion
Callisto - Automated Binary Vulnerability Discovery Tool
June 22^nd 2023 at 06:41

Callisto - Automated Binary Vulnerability Discovery Tool

By /u/jibblz

New tool to automate binary vulnerability research with GPT integration.

submitted by /u/jibblz
[link] [comments]

Related tags
- ❌
- r/netsec
June 22^nd 2023 at 06:41

/r/netsec - Information Security News & Discussion
GitHub Dataset Reveals Millions Potentially Vulnerable to RepoJacking
June 21^st 2023 at 15:22

GitHub Dataset Reveals Millions Potentially Vulnerable to RepoJacking

By /u/ilay789

submitted by /u/ilay789
[link] [comments]

Related tags
- ❌
- r/netsec
June 21^st 2023 at 15:22

/r/netsec - Information Security News & Discussion
Android Malware on the Rise – A case study of AhMyth RAT
June 21^st 2023 at 13:59

Android Malware on the Rise – A case study of AhMyth RAT

By /u/CyberMasterV

submitted by /u/CyberMasterV
[link] [comments]

Related tags
- ❌
- r/netsec
June 21^st 2023 at 13:59

/r/netsec - Information Security News & Discussion
Targeting Core OPC UA Components
June 21^st 2023 at 13:04

Targeting Core OPC UA Components

By /u/derp6996

submitted by /u/derp6996
[link] [comments]

Related tags
- ❌
- r/netsec
June 21^st 2023 at 13:04

/r/netsec - Information Security News & Discussion
nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover
June 20^th 2023 at 16:53

nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover

By /u/meirwah

submitted by /u/meirwah
[link] [comments]

Related tags
- ❌
- r/netsec
June 20^th 2023 at 16:53

/r/netsec - Information Security News & Discussion
Leaking secrets through caching with Bunny CDN
June 20^th 2023 at 14:55

Leaking secrets through caching with Bunny CDN

By /u/pimterry

submitted by /u/pimterry
[link] [comments]

Related tags
- ❌
- r/netsec
June 20^th 2023 at 14:55

Step-by-step blog about to setup grammar-aware in-memory persistent fuzzing campaigns using AFL++-QEMU on 1 practical example

By /u/31angt

submitted by /u/31angt
[link] [comments]

Related tags
- ❌
- r/netsec
June 20^th 2023 at 10:14

/r/netsec - Information Security News & Discussion
chonked pt.2: exploiting cve-2023-33476 for remote code execution
June 20^th 2023 at 08:29

chonked pt.2: exploiting cve-2023-33476 for remote code execution

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
June 20^th 2023 at 08:29

/r/netsec - Information Security News & Discussion
FortiNAC - Just a few more RCEs
June 19^th 2023 at 19:49

FortiNAC - Just a few more RCEs

By /u/scopedsecurity

submitted by /u/scopedsecurity
[link] [comments]

Related tags
- ❌
- r/netsec
June 19^th 2023 at 19:49

/r/netsec - Information Security News & Discussion
How we tried to book a train ticket and ended up with a databreach with 245,000 records
June 19^th 2023 at 16:33

How we tried to book a train ticket and ended up with a databreach with 245,000 records

By /u/_vavkamil_

submitted by /u/_vavkamil_
[link] [comments]

Related tags
- ❌
- r/netsec
June 19^th 2023 at 16:33

/r/netsec - Information Security News & Discussion
Netbackup analysis and network tooling:
June 19^th 2023 at 16:31

Netbackup analysis and network tooling:

By /u/31angt

submitted by /u/31angt
[link] [comments]

Related tags
- ❌
- r/netsec
June 19^th 2023 at 16:31

/r/netsec - Information Security News & Discussion
The Phantom Menace: Exposing hidden risks through ACLs in Active Directory (Part 1)
June 19^th 2023 at 07:23

The Phantom Menace: Exposing hidden risks through ACLs in Active Directory (Part 1)

By /u/ZephrX112

submitted by /u/ZephrX112
[link] [comments]

Related tags
- ❌
- r/netsec
June 19^th 2023 at 07:23