/r/netsec - Information Security News & Discussion

The Mac Malware of 2022

By /u/KolideKenny — January 6^th 2023 at 13:34

submitted by /u/KolideKenny
[link] [comments]

/r/netsec - Information Security News & Discussion

Variant analysis of CVE-2022-3515 affecting libksba, which resulted in CVE-2022-47629

By /u/Gallus — January 6^th 2023 at 07:09

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Announcing the Ronin 2.0.0 Open Beta. Ronin is a free and Open Source Ruby toolkit for security research and development.

By /u/postmodern — January 6^th 2023 at 06:57

submitted by /u/postmodern
[link] [comments]

/r/netsec - Information Security News & Discussion

PBS FRONTLINE investigates Pegasus, the powerful spyware sold to governments around the world by the Israeli company NSO Group.

By /u/identifytarget — January 4^th 2023 at 03:27

submitted by /u/identifytarget
[link] [comments]

/r/netsec - Information Security News & Discussion

Nuclear Pond: Scanning for Vulnerabilities at Scale for Less Than a Cup of Coffee

By /u/crustysecurity — January 3^rd 2023 at 18:38

submitted by /u/crustysecurity
[link] [comments]

/r/netsec - Information Security News & Discussion

of-CORS: a framework for hacking internal apps with open CORS via bug bounty

By /u/wifihack — January 3^rd 2023 at 17:58

submitted by /u/wifihack
[link] [comments]

/r/netsec - Information Security News & Discussion

SSRF vulnerabilities caused by SNI proxy misconfigurations

By /u/Gallus — January 3^rd 2023 at 13:37

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More

By /u/samwcurry — January 3^rd 2023 at 10:23

submitted by /u/samwcurry
[link] [comments]

/r/netsec - Information Security News & Discussion

Cloud Metadata - AWS IAM Credential Abuse

By /u/SNEAKYMONK3Y — January 2^nd 2023 at 20:21

submitted by /u/SNEAKYMONK3Y
[link] [comments]

/r/netsec - Information Security News & Discussion

GitHub - kitabisa/teler-waf: teler-waf is a Go HTTP middleware that provide teler IDS functionality with teler IDS to protect against web-based attacks and improve the security of Go-based web applications. It is highly configurable and easy to integrate

By /u/dwisiswant0 — January 2^nd 2023 at 05:25

submitted by /u/dwisiswant0
[link] [comments]

/r/netsec - Information Security News & Discussion

GitHub - jafarlihi/modreveal: Utility to find hidden Linux kernel modules

By /u/jafarlihi — January 1^st 2023 at 15:30

submitted by /u/jafarlihi
[link] [comments]

/r/netsec - Information Security News & Discussion

Compromised PyTorch-nightly dependency chain

By /u/z84 — January 1^st 2023 at 09:01

submitted by /u/z84
[link] [comments]

/r/netsec - Information Security News & Discussion

LuaJIT Sandbox Escape: The Saga Ends

By /u/Gallus — December 31^st 2022 at 12:20

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Architecture Notes - Capture the Flag.

By /u/myusuf3 — December 30^th 2022 at 17:50

submitted by /u/myusuf3
[link] [comments]

/r/netsec - Information Security News & Discussion

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

By /u/Gallus — December 30^th 2022 at 14:55

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

There is no secure software supply-chain.

By /u/dlorenc — December 30^th 2022 at 12:56

submitted by /u/dlorenc
[link] [comments]

/r/netsec - Information Security News & Discussion

Reverse Prompt Engineering - Pwning the source prompts of Notion AI & 7 techniques for Reverse Prompt Engineering

By /u/Gallus — December 30^th 2022 at 05:48

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Mosca SAST tool

By /u/CoolerVoid — December 30^th 2022 at 04:44

submitted by /u/CoolerVoid
[link] [comments]

/r/netsec - Information Security News & Discussion

𓅃 Announcing Matano + Crowdstrike: Open source project to analyze security logs on S3 using SQL & build realtime detections-as-code

By /u/shaeqahmed — December 29^th 2022 at 16:37

submitted by /u/shaeqahmed
[link] [comments]

/r/netsec - Information Security News & Discussion

Writing Windows Kernel Drivers for Advanced Persistence (Part 1)

By /u/v3ded — December 29^th 2022 at 14:47

submitted by /u/v3ded
[link] [comments]

/r/netsec - Information Security News & Discussion

New CatB Ransomware Employs 2-Year Old DLL Hijacking Technique To Evade Detection

By /u/woja111 — December 29^th 2022 at 13:51

submitted by /u/woja111
[link] [comments]

/r/netsec - Information Security News & Discussion

BufferPwn: RCE vulnerability in the common network code of several first party Nintendo games since the Nintendo 3DS

December 28^th 2022 at 21:13

[link] [comments]

/r/netsec - Information Security News & Discussion

dnstwist: send potential spear phishing domains to Slack

By /u/nindustries — December 29^th 2022 at 12:35

submitted by /u/nindustries
[link] [comments]

/r/netsec - Information Security News & Discussion

Turning Google smart speakers into wiretaps for $100k

By /u/Gallus — December 29^th 2022 at 01:47

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

G-3PO: A Protocol Droid for Ghidra (a Ghidra script that glosses decompiled functions with GPT-3 generated comments)

By /u/0xdeba5e12 — December 28^th 2022 at 19:42

submitted by /u/0xdeba5e12
[link] [comments]

/r/netsec - Information Security News & Discussion

Attack Surface Reduction BOF

By /u/IamaCerealKilla — December 28^th 2022 at 17:21

submitted by /u/IamaCerealKilla
[link] [comments]

/r/netsec - Information Security News & Discussion

Video game save file Trojan personified

By /u/bemodtwz — December 28^th 2022 at 03:06

submitted by /u/bemodtwz
[link] [comments]

/r/netsec - Information Security News & Discussion

Certificate Ripper v2 released - tool to extract server certificates

By /u/Hakky54 — December 28^th 2022 at 00:54

submitted by /u/Hakky54
[link] [comments]

/r/netsec - Information Security News & Discussion

New AMSI Bypass Using CLR Hooking

By /u/pracsec — December 27^th 2022 at 23:14

submitted by /u/pracsec
[link] [comments]

/r/netsec - Information Security News & Discussion

Spice up your persistence: loading PHP extensions from memory

By /u/gid0rah — December 27^th 2022 at 21:55

submitted by /u/gid0rah
[link] [comments]

/r/netsec - Information Security News & Discussion

Scaling Continuous Security Testing on the Cheap

By /u/DH_Prelude — December 27^th 2022 at 16:43

submitted by /u/DH_Prelude
[link] [comments]

/r/netsec - Information Security News & Discussion

Netcomm NF20MESH Cloud Mesh router - Unauthenticated Remote Code Execution

By /u/Gallus — December 27^th 2022 at 06:17

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Pass-the-Challenge: Defeating Windows Defender Credential Guard

By /u/ly4k_ — December 26^th 2022 at 20:46

submitted by /u/ly4k_
[link] [comments]

/r/netsec - Information Security News & Discussion

Overview of Glibc Heap Exploitation Techniques (currently up to v2.34)

By /u/himeko98 — December 25^th 2022 at 04:47

submitted by /u/himeko98
[link] [comments]

/r/netsec - Information Security News & Discussion

Linux kernel module generator for Hidden firewall that follows the rules in the external YAML file.

By /u/CoolerVoid — December 24^th 2022 at 06:16

submitted by /u/CoolerVoid
[link] [comments]

/r/netsec - Information Security News & Discussion

PyRDP 1.2.0 released – Can perform Net-NTLM hash capture before the certificate error on RDP

By /u/obilodeau — December 23^rd 2022 at 18:06

submitted by /u/obilodeau
[link] [comments]

/r/netsec - Information Security News & Discussion

FIN7 Unveiled - A deep dive into notorious cybercrime gang

By /u/wtfse — December 23^rd 2022 at 09:35

submitted by /u/wtfse
[link] [comments]

/r/netsec - Information Security News & Discussion

Introducing the Columbus Project

By /u/g0rbe — December 23^rd 2022 at 07:38

submitted by /u/g0rbe
[link] [comments]

/r/netsec - Information Security News & Discussion

Lastpass Security Incident - December 22 update

By /u/tkokilroy — December 22^nd 2022 at 20:34

submitted by /u/tkokilroy
[link] [comments]

/r/netsec - Information Security News & Discussion

Attack of the clones - Stealthy Kubernetes persistence with eathar, tòcan and teisteanas

By /u/raesene2 — December 22^nd 2022 at 19:42

submitted by /u/raesene2
[link] [comments]

/r/netsec - Information Security News & Discussion

[x-post from blueteamsec] I started a newsletter that aggregates Detection Engineering news and techniques. Here’s the latest Issue. Let me know what you think!

By /u/dudeimawizard — December 22^nd 2022 at 17:14

submitted by /u/dudeimawizard
[link] [comments]

/r/netsec - Information Security News & Discussion

Cross-tenant network bypass in Azure Cognitive Search

By /u/FrankTr3nd — December 22^nd 2022 at 14:50

submitted by /u/FrankTr3nd
[link] [comments]

/r/netsec - Information Security News & Discussion

GLPI Exploitation Timeline

By /u/chicksdigthelongrun — December 22^nd 2022 at 13:45

submitted by /u/chicksdigthelongrun
[link] [comments]

/r/netsec - Information Security News & Discussion

Puckungfu: A NETGEAR WAN Command Injection

By /u/ArbitraryWrite — December 22^nd 2022 at 11:32

Yet another Pwn2Own vulnerability patched days before the competition (https://twitter.com/_mccaulay/status/1605886785015480320)

submitted by /u/ArbitraryWrite
[link] [comments]

/r/netsec - Information Security News & Discussion

A journey into IoT - Unknown Chinese alarm - Part 4 - Internal communications

By /u/0xdea — December 21^st 2022 at 15:02

submitted by /u/0xdea
[link] [comments]

/r/netsec - Information Security News & Discussion

Deconstructing and Exploiting CVE-2020-6418

By /u/surrealisticpillow12 — December 21^st 2022 at 14:26

submitted by /u/surrealisticpillow12
[link] [comments]

/r/netsec - Information Security News & Discussion

DirtyCred Remastered: UAF to LPE (CVE-2022-2602)

By /u/Void_Sec — December 21^st 2022 at 14:15

submitted by /u/Void_Sec
[link] [comments]

/r/netsec - Information Security News & Discussion

Cisco BroadWorks CommPilot Application Software Unauthenticated Server-Side Request Forgery (CVE-2022-20951)

By /u/smaury — December 21^st 2022 at 11:10

submitted by /u/smaury
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploring the depths of Istio: A researcher's guide to analyzing a caching vulnerability

By /u/jat0369 — December 21^st 2022 at 05:58

submitted by /u/jat0369
[link] [comments]

/r/netsec - Information Security News & Discussion

New Chaes campaign uses Windows Management Instrumentation Command-Line Utility

By /u/PENGUINPLOW — December 20^th 2022 at 23:37

submitted by /u/PENGUINPLOW
[link] [comments]

/r/netsec - Information Security News & Discussion

Validating Okta Access Tokens in Python with PyJWT

By /u/csanders_ — December 20^th 2022 at 20:33

submitted by /u/csanders_
[link] [comments]

/r/netsec - Information Security News & Discussion

Bypass iOS backup's TCC protection

By /u/surrealisticpillow12 — December 20^th 2022 at 17:58

submitted by /u/surrealisticpillow12
[link] [comments]

/r/netsec - Information Security News & Discussion

Using Leaking Sentinel Value to Bypass the Latest Chrome v8 HardenProtect

By /u/surrealisticpillow12 — December 20^th 2022 at 17:54

submitted by /u/surrealisticpillow12
[link] [comments]

/r/netsec - Information Security News & Discussion

OSV-Scanner: A vulnerability scanner written in Go which uses the data provided by OSV.dev

By /u/Titokhan — December 20^th 2022 at 08:51

submitted by /u/Titokhan
[link] [comments]

/r/netsec - Information Security News & Discussion

Writeup about an authentication bypass and privilege escalation in the Passwordstate password manager

By /u/parzel — December 20^th 2022 at 07:47

submitted by /u/parzel
[link] [comments]

/r/netsec - Information Security News & Discussion

Intro to Embedded RE: UART Discovery and Firmware Extraction via UBoot

By /u/wrongbaud — December 20^th 2022 at 02:58

submitted by /u/wrongbaud
[link] [comments]

/r/netsec - Information Security News & Discussion

Linux Kernel: Exploiting a Netfilter Use-after-Free in kmalloc-cg

By /u/Void_Sec — December 19^th 2022 at 22:41

submitted by /u/Void_Sec
[link] [comments]

/r/netsec - Information Security News & Discussion

Beware of this CI/CD vulnerability: GitHub Environment Injection (Google & Apache found vulnerable)

By /u/roy_6472 — December 19^th 2022 at 22:22

submitted by /u/roy_6472
[link] [comments]

/r/netsec - Information Security News & Discussion

EDR evasion with hardware breakpoints

By /u/Fun_Preference1113 — December 19^th 2022 at 21:09

New research of mine talking about EDR evasion using hardware breakpoints.

submitted by /u/Fun_Preference1113
[link] [comments]

/r/netsec - Information Security News & Discussion

clif - is a command-line application fuzzer in Rust

By /u/andy-codes — December 19^th 2022 at 17:11

submitted by /u/andy-codes
[link] [comments]