/r/netsec - Information Security News & Discussion

Redefining Roles in Application Security

By /u/NXT1_Cloud — May 8^th 2024 at 13:23

submitted by /u/NXT1_Cloud
[link] [comments]

/r/netsec - Information Security News & Discussion

Everyday Ghidra: Symbols — Prescription Lenses for Reverse Engineers — Part 1

By /u/onlinereadme — May 8^th 2024 at 13:06

submitted by /u/onlinereadme
[link] [comments]

/r/netsec - Information Security News & Discussion

Interesting take on current state of phishing sim & sat

By /u/markqlogan — May 8^th 2024 at 12:27

submitted by /u/markqlogan
[link] [comments]

/r/netsec - Information Security News & Discussion

Over the past couple of months, I've built more than a dozen Python and D3 tools that might interest you. Such as this GitHub repo; an application that catalogs and visualizes all internal facing links from a given number of pages on a specific domain. Ot

By /u/-bretbernhoft__ — May 8^th 2024 at 09:31

submitted by /u/-bretbernhoft__
[link] [comments]

/r/netsec - Information Security News & Discussion

3D-Printed USB Dead Man Switch (Prototype Demo)

By /u/maltfield — May 7^th 2024 at 17:22

submitted by /u/maltfield
[link] [comments]

/r/netsec - Information Security News & Discussion

Neat idea - A 'scarecrow' for your computer.

By /u/Hoban_Riverpath — May 7^th 2024 at 12:57

submitted by /u/Hoban_Riverpath
[link] [comments]

/r/netsec - Information Security News & Discussion

Introducing SecureDrop Protocol

By /u/smaury — May 7^th 2024 at 10:34

submitted by /u/smaury
[link] [comments]

/r/netsec - Information Security News & Discussion

File-write on Gitlab via YAML parser differential

By /u/albinowax — May 7^th 2024 at 08:53

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

Multiple vulnerabilities in RIOT OS

By /u/0xdea — May 7^th 2024 at 08:48

submitted by /u/0xdea
[link] [comments]

/r/netsec - Information Security News & Discussion

CVE-2024-3661: TunnelVision - DHCP option 121 allows attacker controlled DHCP to subvert VPN routing rules

By /u/Secret-Inspection180 — May 7^th 2024 at 08:39

submitted by /u/Secret-Inspection180
[link] [comments]

/r/netsec - Information Security News & Discussion

poutine: a scanner that detects misconfigurations and vulnerabilities in build pipelines (i.e. GitHub Actions, etc.)

By /u/fproulx — May 6^th 2024 at 20:35

submitted by /u/fproulx
[link] [comments]

/r/netsec - Information Security News & Discussion

Burpscript - Python3/JavaScript scripting support for Burp

By /u/fbcd84f4335e5681f6f9 — May 6^th 2024 at 17:30

submitted by /u/fbcd84f4335e5681f6f9
[link] [comments]

/r/netsec - Information Security News & Discussion

LLM pentest: Leveraging agent integration for RCE

By /u/dr_delete — May 6^th 2024 at 13:08

submitted by /u/dr_delete
[link] [comments]

/r/netsec - Information Security News & Discussion

Malware Analysis Blog(Formbook info stealer analysis)

By /u/AdvancedFinish6896 — May 6^th 2024 at 02:13

submitted by /u/AdvancedFinish6896
[link] [comments]

/r/netsec - Information Security News & Discussion

pcap-did-what: Analyze pcaps with Zeek and a Grafana Dashboard

By /u/thewanderer1999 — May 4^th 2024 at 23:11

submitted by /u/thewanderer1999
[link] [comments]

/r/netsec - Information Security News & Discussion

Flutter Windows Thick Client SSL Pinning Bypass

By /u/Ano_F — May 3^rd 2024 at 17:24

submitted by /u/Ano_F
[link] [comments]

/r/netsec - Information Security News & Discussion

Demystifying RCE Vulnerabilities in LLM-Integrated Apps

By /u/louis11 — May 3^rd 2024 at 15:33

submitted by /u/louis11
[link] [comments]

/r/netsec - Information Security News & Discussion

Ever wondered where your inserted data went? Our Burp Suite Extension FlowMate helps you find out.

By /u/usdAG — May 3^rd 2024 at 13:30

submitted by /u/usdAG
[link] [comments]

/r/netsec - Information Security News & Discussion

Microsoft Developer Blogs Search Tool

By /u/elliotkillick — May 3^rd 2024 at 03:39

submitted by /u/elliotkillick
[link] [comments]

/r/netsec - Information Security News & Discussion

It’s Morphin’ Time: Self-Modifying Code Sections with WriteProcessMemory for EDR Evasion

By /u/thewatcher_ — May 2^nd 2024 at 05:55

submitted by /u/thewatcher_
[link] [comments]

/r/netsec - Information Security News & Discussion

5 Methods I Use To Discover APIs

By /u/Specific_Energy_3895 — May 1^st 2024 at 16:10

submitted by /u/Specific_Energy_3895
[link] [comments]

/r/netsec - Information Security News & Discussion

Front Porch Digital Forensics - Trap beats, open loops and Dirty Daves spell trouble for our forensicators.

By /u/jms_dot_py — May 1^st 2024 at 14:09

submitted by /u/jms_dot_py
[link] [comments]

/r/netsec - Information Security News & Discussion

A Basic Guide to AFL QEMU

By /u/cy1337 — April 30^th 2024 at 23:39

This tutorial gives an example showing how to fuzz a function out of a compiled binary using AFL's QEMU mode.

submitted by /u/cy1337
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploit Education :: Andrew Griffiths' Exploit Education

By /u/louis11 — April 30^th 2024 at 15:48

submitted by /u/louis11
[link] [comments]

/r/netsec - Information Security News & Discussion

Nearly 20% of Docker Hub Repositories were used to spread malware & phishing scams

By /u/SRMish3 — April 30^th 2024 at 14:18

submitted by /u/SRMish3
[link] [comments]

/r/netsec - Information Security News & Discussion

Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP with Syzkaller

By /u/alon_za — April 30^th 2024 at 09:33

submitted by /u/alon_za
[link] [comments]

/r/netsec - Information Security News & Discussion

How Not To Protect Your Android Applications

By /u/Lightricks_Tech — April 30^th 2024 at 08:16

submitted by /u/Lightricks_Tech
[link] [comments]

/r/netsec - Information Security News & Discussion

How an empty S3 bucket can make your AWS bill explode

By /u/xiongchiamiov — April 30^th 2024 at 04:58

submitted by /u/xiongchiamiov
[link] [comments]

/r/netsec - Information Security News & Discussion

From IcedID to Dagon Locker Ransomware in 29 Days

By /u/TheDFIRReport — April 29^th 2024 at 12:07

submitted by /u/TheDFIRReport
[link] [comments]

/r/netsec - Information Security News & Discussion

How A Blackbox Target Turned To Whitebox With Recon

By /u/Specific_Energy_3895 — April 29^th 2024 at 10:31

submitted by /u/Specific_Energy_3895
[link] [comments]

/r/netsec - Information Security News & Discussion

Judge0 Sandbox Escape - CVE-2024-29021, CVE-2024-28185 and CVE-2024-28189

By /u/_pimps — April 29^th 2024 at 06:50

submitted by /u/_pimps
[link] [comments]

/r/netsec - Information Security News & Discussion

LSASS rings KsecDD ext. 0 - Overview of the recent KexecDD exploit

By /u/clod81 — April 29^th 2024 at 05:53

submitted by /u/clod81
[link] [comments]

/r/netsec - Information Security News & Discussion

Just-in-Time admin and production access using Azure PIM

By /u/nindustries — April 28^th 2024 at 13:14

submitted by /u/nindustries
[link] [comments]

/r/netsec - Information Security News & Discussion

Automating API Vulnerabilities Using Postman Workflows

By /u/HayMiz — April 27^th 2024 at 18:09

submitted by /u/HayMiz
[link] [comments]

/r/netsec - Information Security News & Discussion

GuptiMiner: Hijacking Antivirus Updates for Distributing Backdoors and Casual Mining - Avast Threat Labs

By /u/MegaManSec2 — April 26^th 2024 at 20:03

submitted by /u/MegaManSec2
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploiting the NT Kernel in 24H2: New Bugs in Old Code & Side Channels Against KASLR

By /u/gabe_k — April 26^th 2024 at 16:58

submitted by /u/gabe_k
[link] [comments]

/r/netsec - Information Security News & Discussion

Dependency Confusion Vulnerability Found in an Archived Apache Project

By /u/roy_6472 — April 25^th 2024 at 21:39

submitted by /u/roy_6472
[link] [comments]

/r/netsec - Information Security News & Discussion

Postman users are exposing Thousands of live Passwords/API keys

By /u/wifihack — April 25^th 2024 at 21:06

submitted by /u/wifihack
[link] [comments]

/r/netsec - Information Security News & Discussion

Coverage Guided Fuzzing - Extending Instrumentation to Hunt Down Bugs Faster! - Include Security Research Blog

By /u/907jessejones — April 25^th 2024 at 19:12

submitted by /u/907jessejones
[link] [comments]

/r/netsec - Information Security News & Discussion

How MFA Is Falling Short

By /u/KolideKenny — April 25^th 2024 at 15:59

submitted by /u/KolideKenny
[link] [comments]

/r/netsec - Information Security News & Discussion

Moriarty v1.2 has been released!

By /u/Hubble_BC_Security — April 25^th 2024 at 15:12

submitted by /u/Hubble_BC_Security
[link] [comments]

/r/netsec - Information Security News & Discussion

Multiple Vulnerabilities in Open Devin (Autonomous AI Software Engineer)

By /u/Standard_Arm_4476 — April 25^th 2024 at 14:24

submitted by /u/Standard_Arm_4476
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploring Vulnerabilities in Embedded Devices: A Case Study of an IP Phone

By /u/security_aaudit — April 25^th 2024 at 10:40

submitted by /u/security_aaudit
[link] [comments]

/r/netsec - Information Security News & Discussion

Literal Security Measures

By /u/samsbp97 — April 25^th 2024 at 07:01

submitted by /u/samsbp97
[link] [comments]

/r/netsec - Information Security News & Discussion

Cisco ASA exploit in the wild.

By /u/MrSanford — April 24^th 2024 at 18:43

submitted by /u/MrSanford
[link] [comments]

/r/netsec - Information Security News & Discussion

18 vulnerabilities in Brocade SANnav

By /u/PierreKimSec — April 24^th 2024 at 14:37

submitted by /u/PierreKimSec
[link] [comments]

/r/netsec - Information Security News & Discussion

ASPJinjaObfuscator: Heavily obfuscated ASP web shell generation tool.

By /u/fin3ss3g0d — April 24^th 2024 at 12:34

submitted by /u/fin3ss3g0d
[link] [comments]

/r/netsec - Information Security News & Discussion

Grafana backend sql injection affected all version

By /u/smokiesmk — April 24^th 2024 at 06:53

submitted by /u/smokiesmk
[link] [comments]

/r/netsec - Information Security News & Discussion

SAP Threat Modeling Tool - Open Source Software

By /u/vah_13 — April 24^th 2024 at 05:47

submitted by /u/vah_13
[link] [comments]

/r/netsec - Information Security News & Discussion

Nation-State Threat Actors Renew Publications to npm

By /u/louis11 — April 24^th 2024 at 01:51

submitted by /u/louis11
[link] [comments]

/r/netsec - Information Security News & Discussion

CVE-2024-2389: Command Injection Vulnerability In Progress Flowmon

By /u/hackers_and_builders — April 23^rd 2024 at 15:45

submitted by /u/hackers_and_builders
[link] [comments]

/r/netsec - Information Security News & Discussion

Dauthi - MDM Authentication Framework

By /u/emptynebuli — April 23^rd 2024 at 13:07

submitted by /u/emptynebuli
[link] [comments]

/r/netsec - Information Security News & Discussion

BlackBerry MDM Has Some Authentication Flaws

By /u/emptynebuli — April 23^rd 2024 at 13:06

submitted by /u/emptynebuli
[link] [comments]

/r/netsec - Information Security News & Discussion

An Analysis of the DHEat DoS Against SSH in Cloud Environments

By /u/therealjoetesta — April 23^rd 2024 at 10:23

submitted by /u/therealjoetesta
[link] [comments]

/r/netsec - Information Security News & Discussion

AppView 1.0.0 is released! Instrument, Observe, Secure your deployments with no code modification.

By /u/algo9 — April 21^st 2024 at 17:27

submitted by /u/algo9
[link] [comments]

/r/netsec - Information Security News & Discussion

Introducing MalStatWare: Revolutionizing Malware Analysis with Automation! 💻🔒

By /u/OSTEsayed — April 21^st 2024 at 01:21

submitted by /u/OSTEsayed
[link] [comments]

/r/netsec - Information Security News & Discussion

Chronicles of a F/OSS tool (Arachni)

By /u/tasos_laskos — April 20^th 2024 at 09:03

submitted by /u/tasos_laskos
[link] [comments]

/r/netsec - Information Security News & Discussion

Backdooring Dotnet Applications

By /u/lightgrains — April 19^th 2024 at 18:27

submitted by /u/lightgrains
[link] [comments]

/r/netsec - Information Security News & Discussion

EvilLsassTwin - PPL Bypass, Fast 12MB In-Memory Dumps

By /u/EphReborn — April 19^th 2024 at 15:25

submitted by /u/EphReborn
[link] [comments]

/r/netsec - Information Security News & Discussion

On Windows Registry by researcher who got 50+ CVEs there

By /u/gynvael — April 18^th 2024 at 17:07

submitted by /u/gynvael
[link] [comments]