/r/netsec - Information Security News & Discussion
One-click setup SCCM Lab (as snaplabs.io template) for offensive tool testing (or for anything else)
August 7^th 2023 at 08:24

One-click setup SCCM Lab (as snaplabs.io template) for offensive tool testing (or for anything else)

By /u/an0n_r0

submitted by /u/an0n_r0
[link] [comments]

Related tags
- ❌
- r/netsec
August 7^th 2023 at 08:24

/r/netsec - Information Security News & Discussion
Vulnerable WordPress: Release 2023 July - Plugins:142 Vulns:179
August 7^th 2023 at 07:07

Vulnerable WordPress: Release 2023 July - Plugins:142 Vulns:179

By /u/seyyid_

submitted by /u/seyyid_
[link] [comments]

Related tags
- ❌
- r/netsec
August 7^th 2023 at 07:07

/r/netsec - Information Security News & Discussion
Living Off the Land: Reverse Engineering Methodology + Tips & Tricks (Cmdl32 Case Study)
August 6^th 2023 at 21:31

Living Off the Land: Reverse Engineering Methodology + Tips & Tricks (Cmdl32 Case Study)

By /u/elliotkillick

submitted by /u/elliotkillick
[link] [comments]

Related tags
- ❌
- r/netsec
August 6^th 2023 at 21:31

/r/netsec - Information Security News & Discussion
New acoustic attack steals data from keystrokes with 95% accuracy
August 5^th 2023 at 19:57

New acoustic attack steals data from keystrokes with 95% accuracy

By /u/WashingtonPass

submitted by /u/WashingtonPass
[link] [comments]

Related tags
- ❌
- r/netsec
August 5^th 2023 at 19:57

/r/netsec - Information Security News & Discussion
Attacking JS engines: Fundamentals for understanding memory corruption crashes
August 5^th 2023 at 15:24

Attacking JS engines: Fundamentals for understanding memory corruption crashes

By /u/adityatelange

submitted by /u/adityatelange
[link] [comments]

Related tags
- ❌
- r/netsec
August 5^th 2023 at 15:24

/r/netsec - Information Security News & Discussion
Burp HTTP history browser (BHHB)
August 5^th 2023 at 15:22

Burp HTTP history browser (BHHB)

By /u/adityatelange

submitted by /u/adityatelange
[link] [comments]

Related tags
- ❌
- r/netsec
August 5^th 2023 at 15:22

/r/netsec - Information Security News & Discussion
Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform
August 4^th 2023 at 12:23

Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform

By /u/qwerty0x41

submitted by /u/qwerty0x41
[link] [comments]

Related tags
- ❌
- r/netsec
August 4^th 2023 at 12:23

/r/netsec - Information Security News & Discussion
Password Managers as Ethical Hacking Tools
August 4^th 2023 at 11:59

Password Managers as Ethical Hacking Tools

By /u/arrowflakes

submitted by /u/arrowflakes
[link] [comments]

Related tags
- ❌
- r/netsec
August 4^th 2023 at 11:59

/r/netsec - Information Security News & Discussion
Don’t you (forget NLP): Prompt injection with control characters in ChatGPT
August 4^th 2023 at 05:47

Don’t you (forget NLP): Prompt injection with control characters in ChatGPT

By /u/Mempodipper

submitted by /u/Mempodipper
[link] [comments]

Related tags
- ❌
- r/netsec
August 4^th 2023 at 05:47

/r/netsec - Information Security News & Discussion
Xbox One Directory Traversal (2019)
August 3^rd 2023 at 20:24

Xbox One Directory Traversal (2019)

By /u/ynscdrc

submitted by /u/ynscdrc
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 20:24

/r/netsec - Information Security News & Discussion
Fast security review of a smart contract stablecoin
August 3^rd 2023 at 19:58

Fast security review of a smart contract stablecoin

By /u/kruksym

submitted by /u/kruksym
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 19:58

/r/netsec - Information Security News & Discussion
Targeted npm Malware Attempts to Steal Company Source Code
August 3^rd 2023 at 19:14

Targeted npm Malware Attempts to Steal Company Source Code

By /u/louis11

submitted by /u/louis11
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 19:14

/r/netsec - Information Security News & Discussion
CVE-2023-33383 - Authentication Bypass via out-of-bounds read condition in Shelly 4PM Pro relay switch
August 3^rd 2023 at 12:21

CVE-2023-33383 - Authentication Bypass via out-of-bounds read condition in Shelly 4PM Pro relay switch

By /u/9lyph

Vendor: Shelly Blog and POC: https://www.exploitsecurity.io/post/cve-2023-33383-authentication-bypass-via-an-out-of-bounds-read-vulnerability

submitted by /u/9lyph
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 12:21

/r/netsec - Information Security News & Discussion
Summary: MTE As Implemented - Google Project Zero
August 3^rd 2023 at 08:25

Summary: MTE As Implemented - Google Project Zero

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 08:25

/r/netsec - Information Security News & Discussion
MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis
August 3^rd 2023 at 07:09

MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis

By /u/buherator

submitted by /u/buherator
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 07:09

/r/netsec - Information Security News & Discussion
Hook, Line, and Phishlet: Conquering AD FS with Evilginx
August 3^rd 2023 at 02:17

Hook, Line, and Phishlet: Conquering AD FS with Evilginx

By /u/Acceptable-Doubt-878

submitted by /u/Acceptable-Doubt-878
[link] [comments]

Related tags
- ❌
- r/netsec
August 3^rd 2023 at 02:17

GitHub - Legit-Labs/legitify: Detect and remediate misconfigurations and security risks across all your GitHub GitLab assets. Version 1.0 is out, check out the new enterprise-level policies.

By /u/roy_6472

submitted by /u/roy_6472
[link] [comments]

Related tags
- ❌
- r/netsec
August 2^nd 2023 at 19:49

/r/netsec - Information Security News & Discussion
CVE-2023-28130 - Command Injection in Check Point Gaia Portal
August 2^nd 2023 at 19:07

CVE-2023-28130 - Command Injection in Check Point Gaia Portal

By /u/rikvduijn

submitted by /u/rikvduijn
[link] [comments]

Related tags
- ❌
- r/netsec
August 2^nd 2023 at 19:07

/r/netsec - Information Security News & Discussion
2023 Global Cloud Threat Report: Cloud Attacks are Lightning Fast – Sysdig
August 2^nd 2023 at 15:02

2023 Global Cloud Threat Report: Cloud Attacks are Lightning Fast – Sysdig

By /u/Hallow_Rose

submitted by /u/Hallow_Rose
[link] [comments]

Related tags
- ❌
- r/netsec
August 2^nd 2023 at 15:02

/r/netsec - Information Security News & Discussion
Vulnerability Uncovered in Salesforce’s Email Services Exploited for Phishing Facebook Accounts In-The-Wil
August 2^nd 2023 at 13:17

Vulnerability Uncovered in Salesforce’s Email Services Exploited for Phishing Facebook Accounts In-The-Wil

By /u/pinpepnet

submitted by /u/pinpepnet
[link] [comments]

Related tags
- ❌
- r/netsec
August 2^nd 2023 at 13:17

/r/netsec - Information Security News & Discussion
Manager of third-party sources of Semgrep rules
August 2^nd 2023 at 11:44

Manager of third-party sources of Semgrep rules

By /u/iosifache

submitted by /u/iosifache
[link] [comments]

Related tags
- ❌
- r/netsec
August 2^nd 2023 at 11:44

/r/netsec - Information Security News & Discussion
Escaping the Google kCTF Container with a Data-Only Exploit
August 2^nd 2023 at 10:10

Escaping the Google kCTF Container with a Data-Only Exploit

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
August 2^nd 2023 at 10:10

/r/netsec - Information Security News & Discussion
Installing P4wnP1 on an LTE modem
August 1^st 2023 at 19:02

Installing P4wnP1 on an LTE modem

By /u/RoganDawes

submitted by /u/RoganDawes
[link] [comments]

Related tags
- ❌
- r/netsec
August 1^st 2023 at 19:02

/r/netsec - Information Security News & Discussion
CSRFing VS Code's Debug Adapter Protocol
August 1^st 2023 at 14:40

CSRFing VS Code's Debug Adapter Protocol

By /u/80x25

submitted by /u/80x25
[link] [comments]

Related tags
- ❌
- r/netsec
August 1^st 2023 at 14:40

/r/netsec - Information Security News & Discussion
AWS IAM Persistence Methods - Hacking The Cloud
August 1^st 2023 at 13:40

AWS IAM Persistence Methods - Hacking The Cloud

By /u/RedTermSession

submitted by /u/RedTermSession
[link] [comments]

Related tags
- ❌
- r/netsec
August 1^st 2023 at 13:40

/r/netsec - Information Security News & Discussion
Multi-threaded secretsdump.py
July 31^st 2023 at 20:15

Multi-threaded secretsdump.py

By /u/edreatingmonkey

submitted by /u/edreatingmonkey
[link] [comments]

Related tags
- ❌
- r/netsec
July 31^st 2023 at 20:15

/r/netsec - Information Security News & Discussion
SpyNote continues to attack financial institutions | Cleafy Labs
July 31^st 2023 at 10:00

SpyNote continues to attack financial institutions | Cleafy Labs

By /u/f3d_0x0

submitted by /u/f3d_0x0
[link] [comments]

Related tags
- ❌
- r/netsec
July 31^st 2023 at 10:00

/r/netsec - Information Security News & Discussion
Bug Bounty: How I gained over 1000 REPUTATION on HackerOne in 3 Months
July 31^st 2023 at 07:25

Bug Bounty: How I gained over 1000 REPUTATION on HackerOne in 3 Months

By /u/kongwenbin

submitted by /u/kongwenbin
[link] [comments]

Related tags
- ❌
- r/netsec
July 31^st 2023 at 07:25

/r/netsec - Information Security News & Discussion
CVE-2023-27997: Critical Fortinet Fortigate RCE Vulnerability
July 30^th 2023 at 15:48

CVE-2023-27997: Critical Fortinet Fortigate RCE Vulnerability

By /u/jpanixix

submitted by /u/jpanixix
[link] [comments]

Related tags
- ❌
- r/netsec
July 30^th 2023 at 15:48

/r/netsec - Information Security News & Discussion
AMD 'Zenbleed' Bug Leaks Data From Zen 2 Ryzen, EPYC CPUs: Most Patches Coming Q4
July 30^th 2023 at 07:07

AMD 'Zenbleed' Bug Leaks Data From Zen 2 Ryzen, EPYC CPUs: Most Patches Coming Q4

By /u/PsyOmega

submitted by /u/PsyOmega
[link] [comments]

Related tags
- ❌
- r/netsec
July 30^th 2023 at 07:07

/r/netsec - Information Security News & Discussion
Xep-WhoIs - A TypeScript WHOIS library which supports almost all the text-based WHOIS servers (minimal code)
July 29^th 2023 at 13:42

Xep-WhoIs - A TypeScript WHOIS library which supports almost all the text-based WHOIS servers (minimal code)

By /u/Oshan96

submitted by /u/Oshan96
[link] [comments]

Related tags
- ❌
- r/netsec
July 29^th 2023 at 13:42

Introducing Chronometry by @yokai_network. A free tamper-proof tool designed for hackers to record and preserve Proof-of-Hacks (PoH)

By /u/ant4g0nist

submitted by /u/ant4g0nist
[link] [comments]

Related tags
- ❌
- r/netsec
July 28^th 2023 at 08:36

/r/netsec - Information Security News & Discussion
Trail of Bits Testing Handbook with the first chapter on Semgrep
July 28^th 2023 at 05:52

Trail of Bits Testing Handbook with the first chapter on Semgrep

By /u/Zealousideal-Half863

submitted by /u/Zealousideal-Half863
[link] [comments]

Related tags
- ❌
- r/netsec
July 28^th 2023 at 05:52

/r/netsec - Information Security News & Discussion
Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)
July 28^th 2023 at 01:32

Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)

By /u/Mempodipper

submitted by /u/Mempodipper
[link] [comments]

Related tags
- ❌
- r/netsec
July 28^th 2023 at 01:32

/r/netsec - Information Security News & Discussion
GitHub-to-AWS OIDC implementation flaws (and compromising an IAM role of the UK government)
July 27^th 2023 at 22:03

GitHub-to-AWS OIDC implementation flaws (and compromising an IAM role of the UK government)

By /u/thorn42

submitted by /u/thorn42
[link] [comments]

Related tags
- ❌
- r/netsec
July 27^th 2023 at 22:03

/r/netsec - Information Security News & Discussion
How come Unicode characters leads to the bypass of the security measures? 🔐
July 27^th 2023 at 18:26

How come Unicode characters leads to the bypass of the security measures? 🔐

By /u/Sim4n6

submitted by /u/Sim4n6
[link] [comments]

Related tags
- ❌
- r/netsec
July 27^th 2023 at 18:26

/r/netsec - Information Security News & Discussion
Tales Of Security Issues In Cryptocurrency Software Wallets
July 27^th 2023 at 15:36

Tales Of Security Issues In Cryptocurrency Software Wallets

By /u/juliocesarfort

submitted by /u/juliocesarfort
[link] [comments]

Related tags
- ❌
- r/netsec
July 27^th 2023 at 15:36

/r/netsec - Information Security News & Discussion
Total BYOVD Kernel-level protection for Windows using Windows Defender Application Control
July 27^th 2023 at 09:01

Total BYOVD Kernel-level protection for Windows using Windows Defender Application Control

By /u/HotCakeXXXXXXXXXXXXX

submitted by /u/HotCakeXXXXXXXXXXXXX
[link] [comments]

Related tags
- ❌
- r/netsec
July 27^th 2023 at 09:01

/r/netsec - Information Security News & Discussion
SVG Security Risks - not just a scalable graphic
July 27^th 2023 at 07:30

SVG Security Risks - not just a scalable graphic

By /u/co1nc1dence

submitted by /u/co1nc1dence
[link] [comments]

Related tags
- ❌
- r/netsec
July 27^th 2023 at 07:30

/r/netsec - Information Security News & Discussion
TETRA:BURST
July 26^th 2023 at 16:33

TETRA:BURST

By /u/WhooisWhoo

submitted by /u/WhooisWhoo
[link] [comments]

Related tags
- ❌
- r/netsec
July 26^th 2023 at 16:33

/r/netsec - Information Security News & Discussion
AWS WAF Bypass: invalid JSON object and Unicode escape sequences
July 26^th 2023 at 13:52

AWS WAF Bypass: invalid JSON object and Unicode escape sequences

By /u/theMiddleBlue

submitted by /u/theMiddleBlue
[link] [comments]

Related tags
- ❌
- r/netsec
July 26^th 2023 at 13:52

/r/netsec - Information Security News & Discussion
Linux kernel rootkit Reptile supports Linux 5.8 for Vault Range
July 26^th 2023 at 11:38

Linux kernel rootkit Reptile supports Linux 5.8 for Vault Range

By /u/hardenedvault

submitted by /u/hardenedvault
[link] [comments]

Related tags
- ❌
- r/netsec
July 26^th 2023 at 11:38

/r/netsec - Information Security News & Discussion
Huawei Theme Manager Arbitrary Code Execution Vulnerability
July 26^th 2023 at 10:33

Huawei Theme Manager Arbitrary Code Execution Vulnerability

By /u/nibblesec

submitted by /u/nibblesec
[link] [comments]

Related tags
- ❌
- r/netsec
July 26^th 2023 at 10:33

/r/netsec - Information Security News & Discussion
RFC 9420: The Messaging Layer Security (MLS) Protocol
July 25^th 2023 at 18:49

RFC 9420: The Messaging Layer Security (MLS) Protocol

By /u/moofali

submitted by /u/moofali
[link] [comments]

Related tags
- ❌
- r/netsec
July 25^th 2023 at 18:49

Critical Vulnerabilities Discovered in Global TETRA Communication Standard Used by Law Enforcement and Critical Infrastructure

By /u/Errol_dont_care

submitted by /u/Errol_dont_care
[link] [comments]

Related tags
- ❌
- r/netsec
July 25^th 2023 at 18:14

/r/netsec - Information Security News & Discussion
Exploiting MikroTik RouterOS Hardware
July 25^th 2023 at 11:11

Exploiting MikroTik RouterOS Hardware

By /u/chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

Related tags
- ❌
- r/netsec
July 25^th 2023 at 11:11

New release of EMBA version 1.3.0 is now available. AI-Assisted firmware analysis is now integrated into the fully automated Open-Source firmware security analyzer EMBA.

By /u/_m-1-k-3_

submitted by /u/_m-1-k-3_
[link] [comments]

Related tags
- ❌
- r/netsec
July 25^th 2023 at 11:06

/r/netsec - Information Security News & Discussion
Introduction to Cross-Site Leaks (XS-Leaks) – Attacks and Mitigations
July 25^th 2023 at 08:43

Introduction to Cross-Site Leaks (XS-Leaks) – Attacks and Mitigations

By /u/CptWin_NZ

submitted by /u/CptWin_NZ
[link] [comments]

Related tags
- ❌
- r/netsec
July 25^th 2023 at 08:43

/r/netsec - Information Security News & Discussion
CVE-2023-35086 POC - ASUS routers format string vulnerability
July 25^th 2023 at 01:43

CVE-2023-35086 POC - ASUS routers format string vulnerability

By /u/NoPaleontologist7419

submitted by /u/NoPaleontologist7419
[link] [comments]

Related tags
- ❌
- r/netsec
July 25^th 2023 at 01:43

/r/netsec - Information Security News & Discussion
EchoCLI: A tethered root solution for the Amazon Echo Dot 2nd generation
July 24^th 2023 at 20:29

EchoCLI: A tethered root solution for the Amazon Echo Dot 2nd generation

By /u/Titokhan

submitted by /u/Titokhan
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 20:29

/r/netsec - Information Security News & Discussion
Persistence via Shell Extensions
July 24^th 2023 at 18:32

Persistence via Shell Extensions

By /u/NecessaryDark3283

submitted by /u/NecessaryDark3283
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 18:32

/r/netsec - Information Security News & Discussion
My talk regarding windows kernel development
July 24^th 2023 at 15:28

My talk regarding windows kernel development

By /u/Idov31

submitted by /u/Idov31
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 15:28

/r/netsec - Information Security News & Discussion
Zenbleed: A use-after-free in AMD Zen2 processors (CVE-2023-20593)
July 24^th 2023 at 14:47

Zenbleed: A use-after-free in AMD Zen2 processors (CVE-2023-20593)

By /u/Worldly_Topic

submitted by /u/Worldly_Topic
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 14:47

/r/netsec - Information Security News & Discussion
Unauthenticated RCE chain on Apache OpenMeetings
July 24^th 2023 at 12:22

Unauthenticated RCE chain on Apache OpenMeetings

By /u/monoimpact

submitted by /u/monoimpact
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 12:22

/r/netsec - Information Security News & Discussion
Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)
July 24^th 2023 at 11:32

Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)

By /u/Mempodipper

submitted by /u/Mempodipper
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 11:32

/r/netsec - Information Security News & Discussion
Securing PyTorch Models with eBPF
July 24^th 2023 at 08:28

Securing PyTorch Models with eBPF

By /u/cov_id19

submitted by /u/cov_id19
[link] [comments]

Related tags
- ❌
- r/netsec
July 24^th 2023 at 08:28

/r/netsec - Information Security News & Discussion
254 Custom BloodHound Cyphers
July 23^rd 2023 at 17:36

254 Custom BloodHound Cyphers

By /u/edreatingmonkey

submitted by /u/edreatingmonkey
[link] [comments]

Related tags
- ❌
- r/netsec
July 23^rd 2023 at 17:36

/r/netsec - Information Security News & Discussion
Okta Logs Decoded: Okta Logs Threat Hunting Guide
July 23^rd 2023 at 14:20

Okta Logs Decoded: Okta Logs Threat Hunting Guide

By /u/Or1rez

submitted by /u/Or1rez
[link] [comments]

Related tags
- ❌
- r/netsec
July 23^rd 2023 at 14:20

/r/netsec - Information Security News & Discussion
Cloud supply chain
July 23^rd 2023 at 10:31

Cloud supply chain

By /u/CarelessOne7933

submitted by /u/CarelessOne7933
[link] [comments]

Related tags
- ❌
- r/netsec
July 23^rd 2023 at 10:31

/r/netsec - Information Security News & Discussion
Security concerns regarding the Ethereum token standard ERC-20
July 23^rd 2023 at 00:19

Security concerns regarding the Ethereum token standard ERC-20

By /u/Dexaran

submitted by /u/Dexaran
[link] [comments]

Related tags
- ❌
- r/netsec
July 23^rd 2023 at 00:19