/r/netsec - Information Security News & Discussion

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

By /u/FipoKa — December 13^th 2022 at 22:15

submitted by /u/FipoKa
[link] [comments]

/r/netsec - Information Security News & Discussion

Sandworm.JS - dynamically analyses over 2M javascript packages to offer zero day, real time protection against malicious scripts.

By /u/sculabobone — December 13^th 2022 at 19:02

submitted by /u/sculabobone
[link] [comments]

/r/netsec - Information Security News & Discussion

A Deep Dive into BianLian Ransomware [PDF]

By /u/CyberMasterV — December 13^th 2022 at 15:00

submitted by /u/CyberMasterV
[link] [comments]

/r/netsec - Information Security News & Discussion

AWS ECR Public Vulnerability

By /u/Gallus — December 13^th 2022 at 14:55

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

A Server Side Request Forgery protection library for Golang

By /u/nibblesec — December 13^th 2022 at 13:52

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Critical Citrix ADC Bug Exploited in the Wild

By /u/YogiBerra88888 — December 13^th 2022 at 13:37

submitted by /u/YogiBerra88888
[link] [comments]

/r/netsec - Information Security News & Discussion

An Open Source tool for Fixing the Accidental Public GitHub Repo

By /u/amirshk — December 13^th 2022 at 08:01

submitted by /u/amirshk
[link] [comments]

/r/netsec - Information Security News & Discussion

Precious Gemstones: The New Generation of Kerberos Attacks

By /u/0xdea — December 13^th 2022 at 06:17

submitted by /u/0xdea
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploiting CVE-2022-42703 - Bringing back the stack attack

By /u/boutnaru — December 13^th 2022 at 04:05

submitted by /u/boutnaru
[link] [comments]

/r/netsec - Information Security News & Discussion

Finding JIT Optimizer Bugs using SMT Solvers and Fuzzing

By /u/surrealisticpillow12 — December 12^th 2022 at 12:47

submitted by /u/surrealisticpillow12
[link] [comments]

/r/netsec - Information Security News & Discussion

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix related

By /u/boutnaru — December 12^th 2022 at 04:37

submitted by /u/boutnaru
[link] [comments]

/r/netsec - Information Security News & Discussion

Detecting heap memory pitfalls

By /u/CoolerVoid — December 11^th 2022 at 16:30

submitted by /u/CoolerVoid
[link] [comments]

/r/netsec - Information Security News & Discussion

Fuzzing ping(8)…and finding a 24 year old bug

By /u/Gallus — December 11^th 2022 at 04:27

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Nebuchadnezzar - Practically-exploitable Cryptographic Vulnerabilities in Matrix

By /u/Gallus — December 10^th 2022 at 08:56

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Polar: debugging on LLDB using OpenAI's davinci-003 language model - @ant4g0nist

By /u/ant4g0nist — December 10^th 2022 at 01:01

submitted by /u/ant4g0nist
[link] [comments]

/r/netsec - Information Security News & Discussion

Ongoing Typosquatting Campaign Publishing Malware to PyPI

By /u/louis11 — December 9^th 2022 at 17:20

submitted by /u/louis11
[link] [comments]

/r/netsec - Information Security News & Discussion

Cool vulns don't live long - Netgear and Pwn2Own

By /u/Gallus — December 9^th 2022 at 07:10

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Using ChatGPT to Generate Phishing Campaigns

By /u/rickyrockslide — December 9^th 2022 at 03:02

submitted by /u/rickyrockslide
[link] [comments]

/r/netsec - Information Security News & Discussion

Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass

By /u/Gallus — December 9^th 2022 at 01:58

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Nosey Parker: a new scanner to find misplaced secrets in textual data and Git history

By /u/exploding_nun — December 8^th 2022 at 22:37

submitted by /u/exploding_nun
[link] [comments]

/r/netsec - Information Security News & Discussion

Hacking the Furbo Dog Camera: Part III

By /u/somersetrecon — December 8^th 2022 at 20:59

submitted by /u/somersetrecon
[link] [comments]

/r/netsec - Information Security News & Discussion

Fuzzing Golang msgpack for fun and panic

By /u/Schwag — December 8^th 2022 at 19:14

submitted by /u/Schwag
[link] [comments]

/r/netsec - Information Security News & Discussion

How to secure your Open Source Project – A quick guide for developers

By /u/TupleType1 — December 8^th 2022 at 15:48

submitted by /u/TupleType1
[link] [comments]

/r/netsec - Information Security News & Discussion

Using JSON in a New Generic Web Application Firewall Bypass

By /u/derp6996 — December 8^th 2022 at 15:34

submitted by /u/derp6996
[link] [comments]

/r/netsec - Information Security News & Discussion

cli google search client written by chatgpt ai - bypasses captcha and rate limiting

By /u/endless — December 8^th 2022 at 14:29

submitted by /u/endless
[link] [comments]

/r/netsec - Information Security News & Discussion

Shoggoth

By /u/DarkGrejuva — December 8^th 2022 at 13:00

Shoggoth: Asmjit Based Polymorphic Encryptor

submitted by /u/DarkGrejuva
[link] [comments]

/r/netsec - Information Security News & Discussion

GitHub - klezVirus/SilentMoonwalk: PoC Implementation of a TRUE call stack spoofer

By /u/R3dCr0wn — December 8^th 2022 at 09:54

submitted by /u/R3dCr0wn
[link] [comments]

/r/netsec - Information Security News & Discussion

Firewalls under the hood - UFW

By /u/doitsukara — December 7^th 2022 at 22:32

submitted by /u/doitsukara
[link] [comments]

/r/netsec - Information Security News & Discussion

PyPI-distributed malicious package campagin tying into GitHub accounts and embedded into repos to disguise its intention - FULL ANALYSIS

By /u/dalmoz — December 7^th 2022 at 15:35

submitted by /u/dalmoz
[link] [comments]

/r/netsec - Information Security News & Discussion

RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

By /u/Gallus — December 7^th 2022 at 02:31

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

An open source SMS gateway for pentest projects

By /u/aunga — December 6^th 2022 at 21:25

submitted by /u/aunga
[link] [comments]

/r/netsec - Information Security News & Discussion

The Last Breath of Our Netgear RAX30 Bugs - A Tragic Tale before Pwn2Own Toronto 2022

By /u/Gallus — December 6^th 2022 at 14:51

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Moobot Uses a Fake Vulnerability

By /u/chicksdigthelongrun — December 6^th 2022 at 14:22

submitted by /u/chicksdigthelongrun
[link] [comments]

/r/netsec - Information Security News & Discussion

Default NETGEAR Router Configuration Allows Attacks from WAN

By /u/dinobyt3s — December 5^th 2022 at 17:22

submitted by /u/dinobyt3s
[link] [comments]

/r/netsec - Information Security News & Discussion

Hijacking GitHub Repositories by Deleting and Restoring Them

By /u/whisperingmime — December 5^th 2022 at 17:00

submitted by /u/whisperingmime
[link] [comments]

/r/netsec - Information Security News & Discussion

Release of EMBA firmware analyzer in version 1.2.0 - aka London Calling

By /u/_m-1-k-3_ — December 5^th 2022 at 13:27

submitted by /u/_m-1-k-3_
[link] [comments]

/r/netsec - Information Security News & Discussion

Slides: Demystifying Practical DoS Attacks

By /u/mazen160 — December 5^th 2022 at 06:48

submitted by /u/mazen160
[link] [comments]

/r/netsec - Information Security News & Discussion

OWASP Top 10 CI/CD Security Risks project released

By /u/Hefty_Knowledge_7449 — December 4^th 2022 at 20:26

submitted by /u/Hefty_Knowledge_7449
[link] [comments]

/r/netsec - Information Security News & Discussion

GitHub Actions - Artifact Poisoning Vulnerability

By /u/dotanoam — December 4^th 2022 at 16:09

submitted by /u/dotanoam
[link] [comments]

/r/netsec - Information Security News & Discussion

[KIS-2022-06] Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability

By /u/eg1x — December 3^rd 2022 at 14:42

submitted by /u/eg1x
[link] [comments]

/r/netsec - Information Security News & Discussion

Pre-Auth RCE with CodeQL in Under 20 Minutes

By /u/Gallus — December 3^rd 2022 at 12:49

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

kitabisa/teler release v2.0.0-dev

By /u/dwisiswant0 — December 3^rd 2022 at 08:13

submitted by /u/dwisiswant0
[link] [comments]

/r/netsec - Information Security News & Discussion

Redigo — New Redis Backdoor Malware

By /u/gfdgfbal — December 2^nd 2022 at 11:25

submitted by /u/gfdgfbal
[link] [comments]

/r/netsec - Information Security News & Discussion

Certpotato : using adcs to privesc from service accounts to local system

By /u/qwerty0x41 — December 2^nd 2022 at 11:17

submitted by /u/qwerty0x41
[link] [comments]

/r/netsec - Information Security News & Discussion

VLC : Integer overflow in vnc module - CVE-2022-41325

By /u/jeandrew — December 2^nd 2022 at 09:29

submitted by /u/jeandrew
[link] [comments]

/r/netsec - Information Security News & Discussion

XSS on account.leagueoflegends.com via easyXDM [2016]

By /u/bored-engineer — December 2^nd 2022 at 05:45

submitted by /u/bored-engineer
[link] [comments]

/r/netsec - Information Security News & Discussion

Visual Studio Code: Remote Code Execution

By /u/Zemnmez — December 2^nd 2022 at 00:12

submitted by /u/Zemnmez
[link] [comments]

/r/netsec - Information Security News & Discussion

Platform certificates used to sign Android malware

By /u/ScottContini — December 1^st 2022 at 23:44

submitted by /u/ScottContini
[link] [comments]

/r/netsec - Information Security News & Discussion

UART Essential for Pentester

By /u/Void_Sec — December 1^st 2022 at 22:11

submitted by /u/Void_Sec
[link] [comments]

/r/netsec - Information Security News & Discussion

Windows Exploitation Challenge - Blue Frost Security 2022 - VoidSec

By /u/Void_Sec — December 1^st 2022 at 17:01

submitted by /u/Void_Sec
[link] [comments]

/r/netsec - Information Security News & Discussion

Huawei Security Hypervisor Vulnerability

By /u/jeandrew — December 1^st 2022 at 16:21

submitted by /u/jeandrew
[link] [comments]

/r/netsec - Information Security News & Discussion

How we found a supply-chain vulnerability in IBM Cloud Databases for PostgreSQL

By /u/sagitz_ — December 1^st 2022 at 15:16

submitted by /u/sagitz_
[link] [comments]

/r/netsec - Information Security News & Discussion

The CI/CD Goat just got wilder! - A new challenge to the deliberately vulnerable CI/CD environment

By /u/TupleType — December 1^st 2022 at 14:41

submitted by /u/TupleType
[link] [comments]

/r/netsec - Information Security News & Discussion

Unauthenticated Command Injection in Asus M25 NAS

By /u/g_e_r_h_a_r_d — December 1^st 2022 at 14:38

submitted by /u/g_e_r_h_a_r_d
[link] [comments]

/r/netsec - Information Security News & Discussion

Bypassing Web Application Firewalls

By /u/ma-ni — December 1^st 2022 at 11:21

submitted by /u/ma-ni
[link] [comments]

/r/netsec - Information Security News & Discussion

Remote code execution bug in FreeBSD's ping (CVE-2022-23093)

By /u/Gallus — December 1^st 2022 at 04:10

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Notice of Recent Security Incident - The LastPass Blog

By /u/svmseric — December 1^st 2022 at 02:25

submitted by /u/svmseric
[link] [comments]

/r/netsec - Information Security News & Discussion

Race condition in snap-confine's must_mkdir_and_open_with_perms() (CVE-2022-3328) - SUID-root program installed by default on Ubuntu

By /u/Gallus — December 1^st 2022 at 01:53

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Black Hat USA 2022 Conference Recordings

By /u/sanitybit — December 1^st 2022 at 00:16

submitted by /u/sanitybit
[link] [comments]

/r/netsec - Information Security News & Discussion

RFC 8628 lets you phish people even if they're using WebAuthn

By /u/sanitybit — December 1^st 2022 at 00:14

submitted by /u/sanitybit
[link] [comments]