/r/netsec - Information Security News & Discussion

Multiple Vulnerabilities found in Docker Desktop - privesc, code execution, file overwrite/delete and more.

By /u/jat0369 — April 20^th 2023 at 14:53

submitted by /u/jat0369
[link] [comments]

/r/netsec - Information Security News & Discussion

The Fuzzing Guide to the Galaxy: An Attempt with Android System Services

By /u/poltess0 — April 20^th 2023 at 13:39

submitted by /u/poltess0
[link] [comments]

/r/netsec - Information Security News & Discussion

Generating Deserialization Payloads for MessagePack C#’s Typeless Mode

By /u/NetwrixSecurity — April 20^th 2023 at 12:57

submitted by /u/NetwrixSecurity
[link] [comments]

/r/netsec - Information Security News & Discussion

CVE-2023-29084 Command injection in ManageEngine ADManager Plus

By /u/nirohf — April 20^th 2023 at 12:08

submitted by /u/nirohf
[link] [comments]

/r/netsec - Information Security News & Discussion

‘AuKill’ EDR killer malware abuses Process Explorer driver

By /u/montouesto — April 19^th 2023 at 23:41

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

Threat Actors Rapidly Adopt Web3 IPFS Technology

By /u/montouesto — April 19^th 2023 at 23:38

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

c2detect: Search for c2 servers by listener outside

By /u/SuspiciousIsland2682 — April 19^th 2023 at 18:49

submitted by /u/SuspiciousIsland2682
[link] [comments]

/r/netsec - Information Security News & Discussion

Legion - Latest Threat In Mass Spam Attacks

By /u/permis0 — April 19^th 2023 at 18:05

submitted by /u/permis0
[link] [comments]

/r/netsec - Information Security News & Discussion

NSO Group’s Pegasus Spyware Returns in 2022 with a Trio of iOS 15 and iOS 16 Zero-Click Exploit Chains

By /u/Ganacsi — April 19^th 2023 at 13:55

submitted by /u/Ganacsi
[link] [comments]

/r/netsec - Information Security News & Discussion

Presenting my stealthyish DLL shellcode stager

By /u/thehunter699 — April 19^th 2023 at 11:34

submitted by /u/thehunter699
[link] [comments]

/r/netsec - Information Security News & Discussion

APT28 Attacks on Cisco Routers: What We Know So Far

By /u/MiserableWriting2919 — April 19^th 2023 at 09:22

submitted by /u/MiserableWriting2919
[link] [comments]

/r/netsec - Information Security News & Discussion

RoboDroid | Humanizing Android Mobile Devices

By /u/deleee — April 19^th 2023 at 07:14

Manage Android machines with pre-defined behaviors for Cyber Range environments.

submitted by /u/deleee
[link] [comments]

/r/netsec - Information Security News & Discussion

A Guide to Reversing Shared Objects with Ghidra Debugger

By /u/cy1337 — April 16^th 2023 at 16:03

submitted by /u/cy1337
[link] [comments]

/r/netsec - Information Security News & Discussion

Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

By /u/SCI_Rusher — April 18^th 2023 at 17:57

submitted by /u/SCI_Rusher
[link] [comments]

/r/netsec - Information Security News & Discussion

AWS Account ID: An Attacker's Perspective

By /u/VariousAd5147 — April 18^th 2023 at 15:19

submitted by /u/VariousAd5147
[link] [comments]

/r/netsec - Information Security News & Discussion

[Responsible Disclosure] How we could have deleted any Linkedin Post [$10K bounty]

By /u/apprakash — April 18^th 2023 at 15:12

submitted by /u/apprakash
[link] [comments]

/r/netsec - Information Security News & Discussion

Memory corruption in JCRE: An unpatchable HSM may swallow your private key

By /u/hardenedvault — April 18^th 2023 at 13:42

submitted by /u/hardenedvault
[link] [comments]

/r/netsec - Information Security News & Discussion

I hack, U-Boot

By /u/Gallus — April 18^th 2023 at 10:08

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Kerio Mailbox Takeover - SSD Secure Disclosure vulnerability publication

By /u/SSDisclosure — April 18^th 2023 at 09:01

submitted by /u/SSDisclosure
[link] [comments]

/r/netsec - Information Security News & Discussion

Multiple Critical Vulnerabilities in Strapi Versions <=4.7.1

By /u/albinowax — April 18^th 2023 at 07:59

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

Ransomware in the Cloud - A step by step breakdown

By /u/VariousAd5147 — April 18^th 2023 at 05:54

submitted by /u/VariousAd5147
[link] [comments]

/r/netsec - Information Security News & Discussion

A Practical, AI-Generated Phishing PoC with ChatGPT

By /u/IndySecMan — April 17^th 2023 at 18:34

submitted by /u/IndySecMan
[link] [comments]

/r/netsec - Information Security News & Discussion

TruffleHog is now 2x faster, thanks to Aho Corasick

By /u/wifihack — April 17^th 2023 at 18:21

submitted by /u/wifihack
[link] [comments]

/r/netsec - Information Security News & Discussion

Hey, I wrote a GCP pentesting guide, check it out if you are interested in cloud security and please lmk your thoughts. Appreciate it.

By /u/Sloky — April 17^th 2023 at 18:11

submitted by /u/Sloky
[link] [comments]

/r/netsec - Information Security News & Discussion

Weaponizing Discord DLL Hijacking via Excel Macros (POC)

By /u/thehunter699 — April 17^th 2023 at 15:41

submitted by /u/thehunter699
[link] [comments]

/r/netsec - Information Security News & Discussion

GitHub - quarkslab/pastis: PASTIS: Collaborative Fuzzing Framework

By /u/jeandrew — April 17^th 2023 at 09:17

submitted by /u/jeandrew
[link] [comments]

/r/netsec - Information Security News & Discussion

Trigona Ransomware Attacking MS-SQL Servers

By /u/montouesto — April 17^th 2023 at 07:58

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

Vulnerability scanner for AWS customer-managed policies using ChatGPT w/ built-in account redaction.

By /u/ustayready — April 16^th 2023 at 03:03

submitted by /u/ustayready
[link] [comments]

/r/netsec - Information Security News & Discussion

10 Methods to Bypass Windows Defender for Unrestricted Code Execution

By /u/florilsk — April 15^th 2023 at 15:47

submitted by /u/florilsk
[link] [comments]

/r/netsec - Information Security News & Discussion

Remote Code Execution Vulnerability in Google They Are Not Willing To Fix

By /u/Hydroksiid — April 15^th 2023 at 06:59

submitted by /u/Hydroksiid
[link] [comments]

/r/netsec - Information Security News & Discussion

Lost in ChatGPT's memories: escaping ChatGPT-3.5 memory issues to write CVE PoCs

By /u/NoPaleontologist7419 — April 14^th 2023 at 21:44

submitted by /u/NoPaleontologist7419
[link] [comments]

/r/netsec - Information Security News & Discussion

uni-due-syssec/efcf-framework: Extremely Fast smart Contract Fuzzing

By /u/Gallus — April 14^th 2023 at 18:45

submitted by /u/Gallus
[link] [comments]

/r/netsec - Information Security News & Discussion

Manage (and soon deploy) Android machines with pre-defined behaviors for CyberRange environments.

By /u/deleee — April 14^th 2023 at 14:23

submitted by /u/deleee
[link] [comments]

/r/netsec - Information Security News & Discussion

Fraud Friday: Investigation into a fake university scam

By /u/Seaerkin2 — April 14^th 2023 at 12:49

submitted by /u/Seaerkin2
[link] [comments]

/r/netsec - Information Security News & Discussion

Escalating file write into RCE in Python

By /u/albinowax — April 14^th 2023 at 08:25

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

Finding Something New About CVE-2022-1388 (F5 BIG-IP)

By /u/chicksdigthelongrun — April 13^th 2023 at 15:05

submitted by /u/chicksdigthelongrun
[link] [comments]

/r/netsec - Information Security News & Discussion

Vare - New specific info stealer for Discord & Infiltrating the fledgling crime group that created it.

By /u/jat0369 — April 13^th 2023 at 14:51

submitted by /u/jat0369
[link] [comments]

/r/netsec - Information Security News & Discussion

ShmooCon 2023 Conference Videos

By /u/mubix — April 13^th 2023 at 14:33

submitted by /u/mubix
[link] [comments]

/r/netsec - Information Security News & Discussion

WhatsApp adds key transparency for all users to strengthen the security of end-to-end encrypted messaging

By /u/snowboardfreak63 — April 13^th 2023 at 13:05

submitted by /u/snowboardfreak63
[link] [comments]

/r/netsec - Information Security News & Discussion

Malware Disguised as Document from Ukraine's Energoatom Delivers Havoc Demon Backdoor

By /u/montouesto — April 13^th 2023 at 11:55

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

Leaking Remote Memory Contents on SecurePoint’s UTM Firewall (CVE-2023-22897)

By /u/albinowax — April 13^th 2023 at 07:00

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

An emperical and practical guide to LLM hacking

By /u/alxjsn — April 12^th 2023 at 16:39

submitted by /u/alxjsn
[link] [comments]

/r/netsec - Information Security News & Discussion

Following the Lazarus group by tracking DeathNote campaign

By /u/EspoJ — April 12^th 2023 at 14:27

submitted by /u/EspoJ
[link] [comments]

/r/netsec - Information Security News & Discussion

Rooting a Common-Criteria Certified Printer to Improve OPSEC

By /u/RedTeamPentesting — April 12^th 2023 at 12:25

submitted by /u/RedTeamPentesting
[link] [comments]

/r/netsec - Information Security News & Discussion

Shell in the Ghost: Ghostscript CVE-2023-28879 writeup

By /u/AlmondOffSec — April 11^th 2023 at 13:38

submitted by /u/AlmondOffSec
[link] [comments]

/r/netsec - Information Security News & Discussion

Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack

By /u/montouesto — April 10^th 2023 at 13:50

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

[CVE-2023-21554] MSMQ (tcp/1801) Remote Code Execution (CVSS 9.8)

By /u/qwerty0x41 — April 12^th 2023 at 08:09

submitted by /u/qwerty0x41
[link] [comments]

/r/netsec - Information Security News & Discussion

Running An Adversary Emulation Exercise

By /u/Diesl — April 12^th 2023 at 00:39

submitted by /u/Diesl
[link] [comments]

/r/netsec - Information Security News & Discussion

DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

By /u/SCI_Rusher — April 11^th 2023 at 17:17

submitted by /u/SCI_Rusher
[link] [comments]

/r/netsec - Information Security News & Discussion

Firewalls and Internet Security: Repelling the Wily Hacker -- now released under a Creative Commons license

By /u/self — April 11^th 2023 at 00:54

submitted by /u/self
[link] [comments]

/r/netsec - Information Security News & Discussion

Check out my new tool: SourceGPT a source code analyzer and prompt manager built on top of ChatGPT as the oracle. Then a set of prompt for security purposes can be found at the link provided below

By /u/NoPaleontologist7419 — April 10^th 2023 at 19:12

submitted by /u/NoPaleontologist7419
[link] [comments]

/r/netsec - Information Security News & Discussion

Hacking play-to-earn blockchain games: The case of Manarium

By /u/juliocesarfort — April 10^th 2023 at 16:28

submitted by /u/juliocesarfort
[link] [comments]

/r/netsec - Information Security News & Discussion

Hijacking Arch Linux Packages by Repo Jacking GitHub Repositories

By /u/whisperingmime — April 10^th 2023 at 15:41

submitted by /u/whisperingmime
[link] [comments]

/r/netsec - Information Security News & Discussion

Rilide: A New Malicious Browser Extension for Stealing Cryptocurrencies

By /u/montouesto — April 10^th 2023 at 13:48

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

GoBruteforcer: Golang-Based Botnet Actively Harvests Web Servers

By /u/montouesto — April 10^th 2023 at 13:44

submitted by /u/montouesto
[link] [comments]

/r/netsec - Information Security News & Discussion

Stowaway -- Multi-hop Proxy Tool for pentesters

By /u/CryptographerWeak578 — April 10^th 2023 at 12:24

submitted by /u/CryptographerWeak578
[link] [comments]

/r/netsec - Information Security News & Discussion

Catching Threat Actors using honeypots

By /u/TachiPy — April 10^th 2023 at 01:19

submitted by /u/TachiPy
[link] [comments]

/r/netsec - Information Security News & Discussion

Tool to Decrypt Chrome, Firefox and Edge login information

By /u/Affectionate-Bed4878 — April 10^th 2023 at 01:16

submitted by /u/Affectionate-Bed4878
[link] [comments]

/r/netsec - Information Security News & Discussion

Securing Kubernetes Clusters using Kyverno Policy Engine - New Kubernetes Goat Scenario 🚀

By /u/madhuakula — April 9^th 2023 at 16:58

submitted by /u/madhuakula
[link] [comments]

/r/netsec - Information Security News & Discussion

🚀 Cilium Tetragon - eBPF-based Security Observability and Runtime Enforcement in Kubernetes Goat 🐐

By /u/madhuakula — April 8^th 2023 at 18:39

submitted by /u/madhuakula
[link] [comments]