/r/netsec - Information Security News & Discussion
Exploiting Stack Based Buffer Overflow
March 1^st 2024 at 06:56

Exploiting Stack Based Buffer Overflow

By /u/Accomplished-Mud1210

submitted by /u/Accomplished-Mud1210
[link] [comments]

Related tags
- ❌
- r/netsec
March 1^st 2024 at 06:56

/r/netsec - Information Security News & Discussion
Celebrating Falco's Journey to CNCF Graduation
February 29^th 2024 at 22:08

Celebrating Falco's Journey to CNCF Graduation

By /u/Hallow_Rose

submitted by /u/Hallow_Rose
[link] [comments]

Related tags
- ❌
- r/netsec
February 29^th 2024 at 22:08

/r/netsec - Information Security News & Discussion
SubdoMailing Checker: Type in a domain to see if it’s been compromised by “SubdoMailers”
February 29^th 2024 at 18:48

SubdoMailing Checker: Type in a domain to see if it’s been compromised by “SubdoMailers”

By /u/pinpepnet

submitted by /u/pinpepnet
[link] [comments]

Related tags
- ❌
- r/netsec
February 29^th 2024 at 18:48

/r/netsec - Information Security News & Discussion
Glitching in 3D: Low Cost EMFI Attacks
February 29^th 2024 at 14:46

Glitching in 3D: Low Cost EMFI Attacks

By /u/wrongbaud

submitted by /u/wrongbaud
[link] [comments]

Related tags
- ❌
- r/netsec
February 29^th 2024 at 14:46

/r/netsec - Information Security News & Discussion
Exploiting CSP Wildcards for Google Domains
February 29^th 2024 at 11:37

Exploiting CSP Wildcards for Google Domains

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 29^th 2024 at 11:37

/r/netsec - Information Security News & Discussion
Unauthenticated Email Enumeration via API Fuzzing
February 29^th 2024 at 04:11

Unauthenticated Email Enumeration via API Fuzzing

By /u/Zestyclose-Welder-33

submitted by /u/Zestyclose-Welder-33
[link] [comments]

Related tags
- ❌
- r/netsec
February 29^th 2024 at 04:11

/r/netsec - Information Security News & Discussion
An EBPF based open source stateful linux firewall that integrates with OpenZiti Zero Trust Framework
February 28^th 2024 at 23:20

An EBPF based open source stateful linux firewall that integrates with OpenZiti Zero Trust Framework

By /u/e_secure5592

submitted by /u/e_secure5592
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 23:20

/r/netsec - Information Security News & Discussion
Comparison of Enterprise SAST/DAST Products
February 28^th 2024 at 20:56

Comparison of Enterprise SAST/DAST Products

By /u/bcdefense

submitted by /u/bcdefense
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 20:56

/r/netsec - Information Security News & Discussion
Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day
February 28^th 2024 at 13:28

Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day

By /u/stashing_the_smack

submitted by /u/stashing_the_smack
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 13:28

/r/netsec - Information Security News & Discussion
ThreatCheck alternative that can work with any antivirus, given a config file.
February 28^th 2024 at 11:30

ThreatCheck alternative that can work with any antivirus, given a config file.

By /u/Immediate-Fruit3833

submitted by /u/Immediate-Fruit3833
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 11:30

/r/netsec - Information Security News & Discussion
Revitalizing MouseJacking: Another Pen Test Story
February 28^th 2024 at 11:13

Revitalizing MouseJacking: Another Pen Test Story

By /u/needmorejava

submitted by /u/needmorejava
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 11:13

/r/netsec - Information Security News & Discussion
Hacking Terraform state to gain code execution and privilege escalation
February 28^th 2024 at 04:34

Hacking Terraform state to gain code execution and privilege escalation

By /u/dagrz-cloudsec

submitted by /u/dagrz-cloudsec
[link] [comments]

Related tags
- ❌
- r/netsec
February 28^th 2024 at 04:34

/r/netsec - Information Security News & Discussion
APT29 adopts new TTPs, according to a bunch of agencies
February 27^th 2024 at 22:40

APT29 adopts new TTPs, according to a bunch of agencies

By /u/Betterworldguys

submitted by /u/Betterworldguys
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 22:40

/r/netsec - Information Security News & Discussion
LOTP - Living Off the Pipeline
February 27^th 2024 at 22:12

LOTP - Living Off the Pipeline

By /u/fproulx

submitted by /u/fproulx
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 22:12

/r/netsec - Information Security News & Discussion
Data Scientists Targeted by Malicious Hugging Face ML Models with Silent Backdoor
February 27^th 2024 at 16:02

Data Scientists Targeted by Malicious Hugging Face ML Models with Silent Backdoor

By /u/SRMish3

submitted by /u/SRMish3
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 16:02

/r/netsec - Information Security News & Discussion
New Server Side Prototype Pollution Gadgets Scanner from Doyensec
February 27^th 2024 at 15:53

New Server Side Prototype Pollution Gadgets Scanner from Doyensec

By /u/ds_at

submitted by /u/ds_at
[link] [comments]

Related tags
- ❌
- r/netsec
February 27^th 2024 at 15:53

/r/netsec - Information Security News & Discussion
CVE-2023-52161: inet-wireless daemon (iwd) APs allowed clients to connect with a NULL key, bypassing the WiFi password
February 26^th 2024 at 22:10

CVE-2023-52161: inet-wireless daemon (iwd) APs allowed clients to connect with a NULL key, bypassing the WiFi password

By /u/supernetworks

submitted by /u/supernetworks
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 22:10

/r/netsec - Information Security News & Discussion
Windows Sysinternals - Sysmon - A practical guide to implementation and essential tips
February 26^th 2024 at 20:44

Windows Sysinternals - Sysmon - A practical guide to implementation and essential tips

By /u/clod81

submitted by /u/clod81
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 20:44

/r/netsec - Information Security News & Discussion
It's now possible to find the AWS Account ID for any S3 Bucket (private or public)
February 26^th 2024 at 15:22

It's now possible to find the AWS Account ID for any S3 Bucket (private or public)

By /u/tracebit

submitted by /u/tracebit
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 15:22

/r/netsec - Information Security News & Discussion
Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples
February 26^th 2024 at 14:30

Advanced CyberChef Techniques for Configuration Extraction - Detailed Walkthrough and Examples

By /u/Embeere

submitted by /u/Embeere
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 14:30

/r/netsec - Information Security News & Discussion
QR Code Phishing with EvilGophish
February 26^th 2024 at 14:58

QR Code Phishing with EvilGophish

By /u/fin3ss3g0d

submitted by /u/fin3ss3g0d
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 14:58

/r/netsec - Information Security News & Discussion
“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails
February 26^th 2024 at 14:32

“SubdoMailing” — Thousands of Hijacked Major-Brand Subdomains Found Bombarding Users With Millions of Malicious Emails

By /u/pinpepnet

submitted by /u/pinpepnet
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 14:32

/r/netsec - Information Security News & Discussion
Security Incident & Vulnerability Response Playbooks
February 26^th 2024 at 12:56

Security Incident & Vulnerability Response Playbooks

By /u/zootea100

submitted by /u/zootea100
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 12:56

/r/netsec - Information Security News & Discussion
Exploiting inconsistent UTF-8 handling in mbstring to bypass an XSS filter in Joomla
February 26^th 2024 at 08:45

Exploiting inconsistent UTF-8 handling in mbstring to bypass an XSS filter in Joomla

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 08:45

/r/netsec - Information Security News & Discussion
Join us in Seoul this May. Last chance to submit you talk for TyphoonCon 2024!
February 26^th 2024 at 08:26

Join us in Seoul this May. Last chance to submit you talk for TyphoonCon 2024!

By /u/LongjumpingLime4139

submitted by /u/LongjumpingLime4139
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 08:26

/r/netsec - Information Security News & Discussion
Actively exploited open redirect in Google Web Light
February 26^th 2024 at 07:09

Actively exploited open redirect in Google Web Light

By /u/jk0pr

submitted by /u/jk0pr
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 07:09

/r/netsec - Information Security News & Discussion
SEO Poisoning to Domain Control: The Gootloader Saga Continues
February 26^th 2024 at 01:16

SEO Poisoning to Domain Control: The Gootloader Saga Continues

By /u/TheDFIRReport

submitted by /u/TheDFIRReport
[link] [comments]

Related tags
- ❌
- r/netsec
February 26^th 2024 at 01:16

/r/netsec - Information Security News & Discussion
Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild
February 24^th 2024 at 17:05

Go Go XSS Gadgets: Chaining a DOM Clobbering Exploit in the Wild

By /u/poltess0

submitted by /u/poltess0
[link] [comments]

Related tags
- ❌
- r/netsec
February 24^th 2024 at 17:05

/r/netsec - Information Security News & Discussion
Continuously fuzzing Python C extensions
February 23^rd 2024 at 15:37

Continuously fuzzing Python C extensions

By /u/Schwag

submitted by /u/Schwag
[link] [comments]

Related tags
- ❌
- r/netsec
February 23^rd 2024 at 15:37

/r/netsec - Information Security News & Discussion
Code injection or backdoor: A new look at Ivanti's CVE-2021-44529
February 23^rd 2024 at 11:53

Code injection or backdoor: A new look at Ivanti's CVE-2021-44529

By /u/albinowax

submitted by /u/albinowax
[link] [comments]

Related tags
- ❌
- r/netsec
February 23^rd 2024 at 11:53

/r/netsec - Information Security News & Discussion
Python Risk Identification Tool for generative AI (PyRIT)
February 23^rd 2024 at 02:40

Python Risk Identification Tool for generative AI (PyRIT)

By /u/___printf_chk

submitted by /u/___printf_chk
[link] [comments]

Related tags
- ❌
- r/netsec
February 23^rd 2024 at 02:40

/r/netsec - Information Security News & Discussion
New TP-Link authentication Bypass!
February 22^nd 2024 at 14:50

New TP-Link authentication Bypass!

By /u/Status_Resolve2971

submitted by /u/Status_Resolve2971
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 14:50

/r/netsec - Information Security News & Discussion
SHA-256 Under the Hood
February 22^nd 2024 at 09:23

SHA-256 Under the Hood

By /u/pickeydotai

submitted by /u/pickeydotai
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 09:23

/r/netsec - Information Security News & Discussion
A stealthy threat uncovered: TeaBot on Google Play Store | Cleafy Labs
February 22^nd 2024 at 09:09

A stealthy threat uncovered: TeaBot on Google Play Store | Cleafy Labs

By /u/f3d_0x0

submitted by /u/f3d_0x0
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 09:09

/r/netsec - Information Security News & Discussion
“To live is to fight, to fight is to live! - IBM ODM Remote Code Execution (watchTowr Labs)
February 22^nd 2024 at 09:02

“To live is to fight, to fight is to live! - IBM ODM Remote Code Execution (watchTowr Labs)

By /u/dx7r__

submitted by /u/dx7r__
[link] [comments]

Related tags
- ❌
- r/netsec
February 22^nd 2024 at 09:02

/r/netsec - Information Security News & Discussion
Statically detecting AWS Canary Tokens without setting them off
February 21^st 2024 at 18:10

Statically detecting AWS Canary Tokens without setting them off

By /u/wifihack

submitted by /u/wifihack
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 18:10

/r/netsec - Information Security News & Discussion
re: Zyxel VPN Series Pre-auth Remote Command Execution
February 21^st 2024 at 16:23

re: Zyxel VPN Series Pre-auth Remote Command Execution

By /u/chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 16:23

/r/netsec - Information Security News & Discussion
Ongoing Malware Laced Developer Job Interviews
February 21^st 2024 at 15:43

Ongoing Malware Laced Developer Job Interviews

By /u/louis11

submitted by /u/louis11
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 15:43

/r/netsec - Information Security News & Discussion
A deep dive into the RansomHouse encryptor
February 21^st 2024 at 14:34

A deep dive into the RansomHouse encryptor

By /u/ShadowStackRE

submitted by /u/ShadowStackRE
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 14:34

/r/netsec - Information Security News & Discussion
Detection Rules Development Framework
February 21^st 2024 at 09:36

Detection Rules Development Framework

By /u/netbiosX

submitted by /u/netbiosX
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 09:36

/r/netsec - Information Security News & Discussion
PEAP Phase-2 authentication in Linux's wpa_suppcliant could be bypassed
February 21^st 2024 at 01:47

PEAP Phase-2 authentication in Linux's wpa_suppcliant could be bypassed

By /u/omegga

submitted by /u/omegga
[link] [comments]

Related tags
- ❌
- r/netsec
February 21^st 2024 at 01:47

/r/netsec - Information Security News & Discussion
Lockbit Ransomeware global taketown
February 20^th 2024 at 21:56

Lockbit Ransomeware global taketown

By /u/foundapairofknickers

submitted by /u/foundapairofknickers
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 21:56

/r/netsec - Information Security News & Discussion
Exploiting Cacheable Responses
February 20^th 2024 at 15:29

Exploiting Cacheable Responses

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 15:29

/r/netsec - Information Security News & Discussion
GitHub - mlcsec/FormThief: Spoofing desktop login applications with WinForms and WPF
February 20^th 2024 at 15:25

GitHub - mlcsec/FormThief: Spoofing desktop login applications with WinForms and WPF

By /u/Frequent_Passenger82

submitted by /u/Frequent_Passenger82
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 15:25

GitHub - naksyn/Embedder: Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

By /u/naksyn_

submitted by /u/naksyn_
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 12:41

Auto DNS poisoning: while charging Android smartphone via computer it is possible to perform automated and even remotely controlled DNS poisoning without any user interaction

By /u/barakadua131

submitted by /u/barakadua131
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 10:29

/r/netsec - Information Security News & Discussion
AS-REP Roasting
February 20^th 2024 at 08:14

AS-REP Roasting

By /u/netbiosX

submitted by /u/netbiosX
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 08:14

/r/netsec - Information Security News & Discussion
Ivanti Connect Secure Under Attack: Uncovering Five Exploitable CVEs - XXE
February 20^th 2024 at 02:26

Ivanti Connect Secure Under Attack: Uncovering Five Exploitable CVEs - XXE

By /u/appsec1337

submitted by /u/appsec1337
[link] [comments]

Related tags
- ❌
- r/netsec
February 20^th 2024 at 02:26

/r/netsec - Information Security News & Discussion
Code Review Like a Pro
February 19^th 2024 at 20:49

Code Review Like a Pro

By /u/HayMiz

submitted by /u/HayMiz
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 20:49

/r/netsec - Information Security News & Discussion
Top 10 web hacking techniques of 2023
February 19^th 2024 at 17:08

Top 10 web hacking techniques of 2023

By /u/loselasso

submitted by /u/loselasso
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 17:08

/r/netsec - Information Security News & Discussion
A technical analysis of the BackMyData ransomware used to attack hospitals in Romania
February 19^th 2024 at 12:50

A technical analysis of the BackMyData ransomware used to attack hospitals in Romania

By /u/CyberMasterV

submitted by /u/CyberMasterV
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 12:50

/r/netsec - Information Security News & Discussion
TPMs Hate Him! (Some Weird Tricks To Break FDE and Bypass Attestation)
February 16^th 2024 at 18:27

TPMs Hate Him! (Some Weird Tricks To Break FDE and Bypass Attestation)

By /u/Elastic-Platypus

submitted by /u/Elastic-Platypus
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 18:27

/r/netsec - Information Security News & Discussion
Hello Lucee! Let us hack Apple again?
February 15^th 2024 at 19:56

Hello Lucee! Let us hack Apple again?

By /u/thewhippersnapper4

submitted by /u/thewhippersnapper4
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 19:56

SiCat - an advanced exploit search tool designed to identify and gather information about exploits from both open sources and local repositories effectively

By /u/DrinkMoreCodeMore

submitted by /u/DrinkMoreCodeMore
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 18:37

/r/netsec - Information Security News & Discussion
CVE-2024-23724: Ghost CMS Stored XSS Leading to Owner Takeover
February 13^th 2024 at 16:29

CVE-2024-23724: Ghost CMS Stored XSS Leading to Owner Takeover

By /u/hackers_and_builders

submitted by /u/hackers_and_builders
[link] [comments]

Related tags
- ❌
- r/netsec
February 13^th 2024 at 16:29

/r/netsec - Information Security News & Discussion
Analysis of Mirai variant leveraging CVE-2023-1389
February 19^th 2024 at 06:21

Analysis of Mirai variant leveraging CVE-2023-1389

By /u/Permafr0stsec

submitted by /u/Permafr0stsec
[link] [comments]

Related tags
- ❌
- r/netsec
February 19^th 2024 at 06:21

/r/netsec - Information Security News & Discussion
Exploiting TRACE
February 16^th 2024 at 16:41

Exploiting TRACE

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 16:41

/r/netsec - Information Security News & Discussion
Exploiting Unsynchronised Clocks
February 16^th 2024 at 16:39

Exploiting Unsynchronised Clocks

By /u/6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 16:39

/r/netsec - Information Security News & Discussion
A Double Free vulnerability on the libdicom library and an in-depth analysis of the DICOM file format.
February 16^th 2024 at 16:22

A Double Free vulnerability on the libdicom library and an in-depth analysis of the DICOM file format.

By /u/voidz0r

submitted by /u/voidz0r
[link] [comments]

Related tags
- ❌
- r/netsec
February 16^th 2024 at 16:22

GitHub - deeexcee-io/duppy: python flask app which utilises ngrok and gunicorn to securely download and upload files to local machine over the internet. all handled by the bash script.

By /u/Leading-Employer-828

submitted by /u/Leading-Employer-828
[link] [comments]

Related tags
- ❌
- r/netsec
February 15^th 2024 at 21:34