Login
FreshRSS
Login
/r/netsec - Information Security News & Discussion
PiRogue Tool Suite Mobile forensic & network analysis on a Raspberry Pie
By
/u/ResponsibleCat
โ October 13
th
2022 at 18:59
submitted by
/u/ResponsibleCat
[link]
[comments]
/r/netsec - Information Security News & Discussion
How to Investigate Insider Threats (Forensic Methodology)
By
/u/CyberMasterV
โ October 13
th
2022 at 14:43
submitted by
/u/CyberMasterV
[link]
[comments]
/r/netsec - Information Security News & Discussion
RPC Toolkit - security research oriented resources on MS-RPC (articles, PoCs, vulnerability write-ups, tools, etc.)
By
/u/ophirharpaz
โ October 13
th
2022 at 09:35
submitted by
/u/ophirharpaz
[link]
[comments]
/r/netsec - Information Security News & Discussion
SafeSetID - a Linux Security Modules (LSM) you should know about
By
/u/boutnaru
โ October 13
th
2022 at 07:07
submitted by
/u/boutnaru
[link]
[comments]
/r/netsec - Information Security News & Discussion
Private npm Packages Disclosed via Timing Attacks
By
/u/mkatch
โ October 13
th
2022 at 07:07
submitted by
/u/mkatch
[link]
[comments]
/r/netsec - Information Security News & Discussion
Bringing passkeys to Android & Chrome
By
/u/Khryse
โ October 13
th
2022 at 01:59
submitted by
/u/Khryse
[link]
[comments]
/r/netsec - Information Security News & Discussion
Subdomain Enumeration Tool Face-off 2022
By
/u/the-techromancer
โ October 12
th
2022 at 15:32
submitted by
/u/the-techromancer
[link]
[comments]
/r/netsec - Information Security News & Discussion
A deep dive into CVE-2021โ42847 - arbitrary file write and XXE in ManageEngine ADAudit Plus before 7006
By
/u/kalibabka
โ October 12
th
2022 at 14:11
submitted by
/u/kalibabka
[link]
[comments]
/r/netsec - Information Security News & Discussion
Cerberus Stress Testing Tool
By
/u/fficarola
โ October 12
th
2022 at 13:26
submitted by
/u/fficarola
[link]
[comments]
/r/netsec - Information Security News & Discussion
Kubernetes CRD validation with CEL and kubebuilder marker comments
By
/u/Rewanth_Tammana
โ October 12
th
2022 at 11:49
submitted by
/u/Rewanth_Tammana
[link]
[comments]
/r/netsec - Information Security News & Discussion
Userland Execution of Binaries Directly from Python
By
/u/anvilventures
โ October 12
th
2022 at 06:32
submitted by
/u/anvilventures
[link]
[comments]
/r/netsec - Information Security News & Discussion
postMessage Braindump - a brief postMessage testing methodology
By
/u/Gallus
โ October 12
th
2022 at 03:53
submitted by
/u/Gallus
[link]
[comments]
/r/netsec - Information Security News & Discussion
On Bypassing eBPF Security Monitoring
By
/u/nibblesec
โ October 11
th
2022 at 21:25
submitted by
/u/nibblesec
[link]
[comments]
/r/netsec - Information Security News & Discussion
The Fresh Phish Market: Behind the Scenes of the Caffeine Phishing-as-a-Service Platform
By
/u/CyberMasterV
โ October 11
th
2022 at 19:13
submitted by
/u/CyberMasterV
[link]
[comments]
/r/netsec - Information Security News & Discussion
Uncovering Siemens SIMATIC S7-1200/1500 Hardcoded Cryptographic Keys in PLCs
By
/u/derp6996
โ October 11
th
2022 at 13:50
submitted by
/u/derp6996
[link]
[comments]
/r/netsec - Information Security News & Discussion
Linux Security โ LSM (Linux Security Modules)
By
/u/boutnaru
โ October 7
th
2022 at 19:35
submitted by
/u/boutnaru
[link]
[comments]
/r/netsec - Information Security News & Discussion
Persistent PHP payloads in PNGs: How to inject PHP code in an image and keep it there!
By
/u/Gallus
โ October 10
th
2022 at 16:47
submitted by
/u/Gallus
[link]
[comments]
/r/netsec - Information Security News & Discussion
The Google plasma globe affair of 2012
By
/u/nf--
โ October 10
th
2022 at 15:26
submitted by
/u/nf--
[link]
[comments]
/r/netsec - Information Security News & Discussion
GitLab: RCE via github import
By
/u/jeandrew
โ October 10
th
2022 at 11:45
submitted by
/u/jeandrew
[link]
[comments]
/r/netsec - Information Security News & Discussion
A simple shell script (almost) POSIX for mail security checks
By
/u/ljulolsen
โ October 10
th
2022 at 08:07
submitted by
/u/ljulolsen
[link]
[comments]
/r/netsec - Information Security News & Discussion
Getting served a malicious update - interesting techniques, my slip up, and lessons learned: a short blog post
By
/u/CuckooExe
โ October 9
th
2022 at 14:55
submitted by
/u/CuckooExe
[link]
[comments]
/r/netsec - Information Security News & Discussion
What can we learn from leaked Insyde's BIOS for Intel Alder Lake
By
/u/hardenedvault
โ October 8
th
2022 at 15:00
submitted by
/u/hardenedvault
[link]
[comments]
/r/netsec - Information Security News & Discussion
Disclosure time for Zoneminder findings
By
/u/trenchesofit
โ October 7
th
2022 at 15:01
submitted by
/u/trenchesofit
[link]
[comments]
/r/netsec - Information Security News & Discussion
Unpatched vulnerability on Zimbra (again!) - symlink abuse in cpio
By
/u/iagox86
โ October 6
th
2022 at 21:01
submitted by
/u/iagox86
[link]
[comments]
/r/netsec - Information Security News & Discussion
Uncovering a Fake Recruiter Scam with OSINT techniques
By
/u/smicallef
โ October 6
th
2022 at 19:43
submitted by
/u/smicallef
[link]
[comments]
/r/netsec - Information Security News & Discussion
Fully loaded: testing vulnerable PyYAML versions
By
/u/iterablewords
โ October 6
th
2022 at 18:11
submitted by
/u/iterablewords
[link]
[comments]
/r/netsec - Information Security News & Discussion
CVE-2022โ36635 โ A SQL Injection in ZKSecurityBio to RCE
By
/u/sp1d3rr
โ October 6
th
2022 at 13:46
submitted by
/u/sp1d3rr
[link]
[comments]
/r/netsec - Information Security News & Discussion
Release EMBA firmware analyzer v1.1.2 - Knight Rider Edt.
By
/u/_m-1-k-3_
โ October 6
th
2022 at 12:36
submitted by
/u/_m-1-k-3_
[link]
[comments]
/r/netsec - Information Security News & Discussion
Comparing Semgrep and CodeQL
By
/u/nibblesec
โ October 6
th
2022 at 09:18
submitted by
/u/nibblesec
[link]
[comments]
/r/netsec - Information Security News & Discussion
Hidden DNS resolvers and how to compromise your infrastructure Kaminsky style
By
/u/The_Login
โ October 6
th
2022 at 08:21
submitted by
/u/The_Login
[link]
[comments]
/r/netsec - Information Security News & Discussion
CVE-2022-41343 - RCE via Phar Deserialisation (Dompdf)
By
/u/Gallus
โ October 6
th
2022 at 06:42
submitted by
/u/Gallus
[link]
[comments]
/r/netsec - Information Security News & Discussion
Introducing Campaigns to MITRE ATT&CK
By
/u/CyberMasterV
โ October 6
th
2022 at 06:37
submitted by
/u/CyberMasterV
[link]
[comments]
/r/netsec - Information Security News & Discussion
Releasing GitFive - Track down GitHub users by doing advanced investigation (usernames history, names variations, links between multiple identities, and more).
By
/u/mxrchreborn
โ October 6
th
2022 at 00:50
submitted by
/u/mxrchreborn
[link]
[comments]
/r/netsec - Information Security News & Discussion
A Deep Dive of CVE-2022โ33987 (Got allows a redirect to a UNIX socket)
By
/u/csanders_
โ October 6
th
2022 at 00:40
submitted by
/u/csanders_
[link]
[comments]
/r/netsec - Information Security News & Discussion
Fuzzing Trackmania Nations Forever for RCE
By
/u/rdjgr
โ October 5
th
2022 at 13:53
submitted by
/u/rdjgr
[link]
[comments]
/r/netsec - Information Security News & Discussion
dirsearch - release v0.4.3 - crawling supported
By
/u/maurosoria
โ October 5
th
2022 at 13:04
submitted by
/u/maurosoria
[link]
[comments]
/r/netsec - Information Security News & Discussion
MSSQL, meet Maggie - a novel backdoor for MSSQL servers.
By
/u/OwnPreparation3424
โ October 4
th
2022 at 12:35
submitted by
/u/OwnPreparation3424
[link]
[comments]
/r/netsec - Information Security News & Discussion
Pixel 6 bootloader: Emulation, ROP
By
/u/jeandrew
โ October 5
th
2022 at 05:35
submitted by
/u/jeandrew
[link]
[comments]
/r/netsec - Information Security News & Discussion
A New Supply Chain Attack on PHP
By
/u/Gallus
โ October 5
th
2022 at 05:20
submitted by
/u/Gallus
[link]
[comments]
/r/netsec - Information Security News & Discussion
Wireshark 4.0.0 has been released
By
/u/Fugitif
โ October 5
th
2022 at 04:36
submitted by
/u/Fugitif
[link]
[comments]
/r/netsec - Information Security News & Discussion
Dissect: An incident response game-changer
By
/u/CyberMasterV
โ October 4
th
2022 at 20:27
submitted by
/u/CyberMasterV
[link]
[comments]
/r/netsec - Information Security News & Discussion
pirebok - an adversarial fuzzer
By
/u/c0daman
โ October 4
th
2022 at 14:41
submitted by
/u/c0daman
[link]
[comments]
/r/netsec - Information Security News & Discussion
Matano - Open source cloud native security lake built with Arrow2 + Rust
By
/u/shaeqahmed
โ October 4
th
2022 at 11:24
submitted by
/u/shaeqahmed
[link]
[comments]
/r/netsec - Information Security News & Discussion
Secure your machine learning with Semgrep
By
/u/Khryse
โ October 4
th
2022 at 00:27
submitted by
/u/Khryse
[link]
[comments]
/r/netsec - Information Security News & Discussion
When Athletic Abilities Just Aren't Enough - Scoreboard Hacking Part 3
By
/u/mdulin2
โ October 3
rd
2022 at 14:43
submitted by
/u/mdulin2
[link]
[comments]
/r/netsec - Information Security News & Discussion
PS5-4.03-Kernel-Exploit: An experimental webkit-based kernel exploit (Arbitrary R/W) for the PS5 on 4.03FW
By
/u/sanitybit
โ October 2
nd
2022 at 23:50
submitted by
/u/sanitybit
[link]
[comments]
/r/netsec - Information Security News & Discussion
BSides San Francisco 2022 Conference Recordings
By
/u/sanitybit
โ October 2
nd
2022 at 21:45
submitted by
/u/sanitybit
[link]
[comments]
/r/netsec - Information Security News & Discussion
spk aka spritzgebaeck: A small OSINT/Recon tool to find CIDRs that belong to a specific organization.
By
/u/BananaBounty
โ October 2
nd
2022 at 21:25
submitted by
/u/BananaBounty
[link]
[comments]
/r/netsec - Information Security News & Discussion
Passkeys feat. Adam Langley [audio]
By
/u/self
โ October 2
nd
2022 at 19:46
submitted by
/u/self
[link]
[comments]
/r/netsec - Information Security News & Discussion
Dank: The greatest encoder you've never heard of
By
/u/Quick-Ingenuity-7024
โ October 2
nd
2022 at 17:40
submitted by
/u/Quick-Ingenuity-7024
[link]
[comments]
/r/netsec - Information Security News & Discussion
Censys CTF - WriteUp
By
/u/TechbrunchFR
โ October 2
nd
2022 at 11:34
submitted by
/u/TechbrunchFR
[link]
[comments]
/r/netsec - Information Security News & Discussion
An updated list of PoC's CVE's
By
/u/DevOpsMuffin39
โ October 2
nd
2022 at 11:07
submitted by
/u/DevOpsMuffin39
[link]
[comments]
/r/netsec - Information Security News & Discussion
Phishing With Chromium's Application Mode
By
/u/CyberMasterV
โ October 2
nd
2022 at 08:57
submitted by
/u/CyberMasterV
[link]
[comments]
/r/netsec - Information Security News & Discussion
What I learnt from reading 126 Information Disclosure bug reports/writeups.
By
/u/_nynan
โ October 2
nd
2022 at 08:12
submitted by
/u/_nynan
[link]
[comments]
/r/netsec - Information Security News & Discussion
Report on Secure Compilation
By
/u/0x414141
โ October 1
st
2022 at 22:47
submitted by
/u/0x414141
[link]
[comments]
/r/netsec - Information Security News & Discussion
Tillitis - Open Source USB security key inspired by measured boot and DICE
By
/u/0x414141
โ October 1
st
2022 at 22:46
submitted by
/u/0x414141
[link]
[comments]
/r/netsec - Information Security News & Discussion
HTTPT: A Probe-Resistant Proxy
By
/u/0x414141
โ October 1
st
2022 at 22:44
submitted by
/u/0x414141
[link]
[comments]
/r/netsec - Information Security News & Discussion
Analyzing BSD Kernels for Uninitialized Memory Disclosures using Binary Ninja
By
/u/0x414141
โ October 1
st
2022 at 22:44
submitted by
/u/0x414141
[link]
[comments]
/r/netsec - Information Security News & Discussion
pizauth, an OAuth2 token requester daemon
By
/u/0x414141
โ October 1
st
2022 at 22:43
submitted by
/u/0x414141
[link]
[comments]
/r/netsec - Information Security News & Discussion
Wiresocks for easy proxied routing
By
/u/sanitybit
โ October 1
st
2022 at 01:46
submitted by
/u/sanitybit
[link]
[comments]
Load more articles