Whether you knew Process Mockingjay since ever or you just got to know it, this was "Monday Freedom to" code some C# that finds RWX sections laying around

submitted by /u/oldboy21
[link] [comments]

/r/netsec - Information Security News & Discussion

CISA Launches CyberSentry. A CISA-managed threat detection and monitoring capability. Anyone else think this is a terrible idea?

By /u/MMK033 — July 3^rd 2023 at 12:47

submitted by /u/MMK033
[link] [comments]

/r/netsec - Information Security News & Discussion

Desuperpacking Meta Superpacked APKs

By /u/onlinereadme — July 3^rd 2023 at 12:14

submitted by /u/onlinereadme
[link] [comments]

/r/netsec - Information Security News & Discussion

Technical Details of CVE-2023-30990 - Unauthenticated RCE in IBM i DDM Service

By /u/buherator — July 3^rd 2023 at 11:49

submitted by /u/buherator
[link] [comments]

/r/netsec - Information Security News & Discussion

Fully Undetected shellcode loader featuring EDR killer PoC

By /u/florilsk — July 2^nd 2023 at 11:09

submitted by /u/florilsk
[link] [comments]

/r/netsec - Information Security News & Discussion

Retreading The AMLogic A113X TrustZone Exploit Process

By /u/BoredPentester — July 1^st 2023 at 17:04

submitted by /u/BoredPentester
[link] [comments]

/r/netsec - Information Security News & Discussion

How I Hacked CASIO F-91W digital watch - Bringing NFC contactless payment capability to a true classic.

By /u/matteopisani — July 1^st 2023 at 13:52

submitted by /u/matteopisani
[link] [comments]

/r/netsec - Information Security News & Discussion

Reversing Citrix Gateway for XSS

By /u/albinowax — June 30^th 2023 at 14:39

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

Huobi's Leaky Bucket Risked Massive Crypto Breach

By /u/aaron_devops — June 30^th 2023 at 11:09

submitted by /u/aaron_devops
[link] [comments]

/r/netsec - Information Security News & Discussion

Attacking GraphQL APIs

By /u/albinowax — June 30^th 2023 at 07:29

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

NoMoreCookies: Protection against stealers/rats

By /u/AhmedMinegames — June 30^th 2023 at 01:26

submitted by /u/AhmedMinegames
[link] [comments]

/r/netsec - Information Security News & Discussion

Hacking Auto-GPT and escaping its docker container

By /u/albinowax — June 29^th 2023 at 14:44

submitted by /u/albinowax
[link] [comments]

/r/netsec - Information Security News & Discussion

Introducing route-detect: find authentication and authorization bugs in web application routes

By /u/Schwag — June 29^th 2023 at 14:35

submitted by /u/Schwag
[link] [comments]

/r/netsec - Information Security News & Discussion

Technical whitepaper: Everyone Knows SAP®, Everyone Uses SAP, Everyone Uses RFC, No One Knows RFC: From RFC to RCE 16 Years Later

By /u/0x9000 — June 29^th 2023 at 13:56

submitted by /u/0x9000
[link] [comments]

/r/netsec - Information Security News & Discussion

0-day vulnerability found in Netskope leading to a Local Privilege Escalation.

By /u/luci_morningstart — June 29^th 2023 at 12:10

submitted by /u/luci_morningstart
[link] [comments]

/r/netsec - Information Security News & Discussion

Frida 16.1.0 is out w/ a brand new backend that supports instrumenting barebone targets — ranging from microcontrollers all the way to the iOS kernel on Corellium, allowing you to instantly inject your own Rust code and insert inline hooks

By /u/oleavr — June 29^th 2023 at 10:34

submitted by /u/oleavr
[link] [comments]

/r/netsec - Information Security News & Discussion

Finding Gadgets for CPU Side-Channels with Static Analysis Tools

By /u/poltess0 — June 29^th 2023 at 10:18

submitted by /u/poltess0
[link] [comments]

/r/netsec - Information Security News & Discussion

CVE-2023-26258 – Authentication bypass in ArcServe UDP Backup

By /u/gid0rah — June 28^th 2023 at 17:53

submitted by /u/gid0rah
[link] [comments]

/r/netsec - Information Security News & Discussion

A deep dive on how Camaro Dragon utilized USB flash drives to infect a EU heath system

By /u/vampiricrogu3 — June 27^th 2023 at 18:52

submitted by /u/vampiricrogu3
[link] [comments]

/r/netsec - Information Security News & Discussion

ParaForge: A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

By /u/Ano_F — June 27^th 2023 at 17:19

submitted by /u/Ano_F
[link] [comments]

/r/netsec - Information Security News & Discussion

Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution

By /u/thewatcher_ — June 27^th 2023 at 13:34

submitted by /u/thewatcher_
[link] [comments]

/r/netsec - Information Security News & Discussion

For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation

By /u/poltess0 — June 27^th 2023 at 08:52

submitted by /u/poltess0
[link] [comments]

/r/netsec - Information Security News & Discussion

A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation

By /u/CyberMasterV — June 26^th 2023 at 14:03

submitted by /u/CyberMasterV
[link] [comments]

/r/netsec - Information Security News & Discussion

Bluetooth protocol abuse allows attackers to reveal confidential information, Tarlogic researchers say.

By /u/jaimeff — June 26^th 2023 at 10:44

submitted by /u/jaimeff
[link] [comments]

/r/netsec - Information Security News & Discussion

Introducing DNS Analyzer: A Burp Suite extension for finding DNS vulnerabilities in web applications

By /u/The_Login — June 26^th 2023 at 10:16

submitted by /u/The_Login
[link] [comments]

/r/netsec - Information Security News & Discussion

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

By /u/Idov31 — June 25^th 2023 at 06:35

submitted by /u/Idov31
[link] [comments]

/r/netsec - Information Security News & Discussion

Fileless command execution for Lateral Movement in Nim

By /u/DarkGrejuva — June 23^rd 2023 at 19:33

submitted by /u/DarkGrejuva
[link] [comments]

/r/netsec - Information Security News & Discussion

A brief summary about a SSTI to RCE in Bagisto

By /u/sp1d3rr — June 23^rd 2023 at 11:11

submitted by /u/sp1d3rr
[link] [comments]

/r/netsec - Information Security News & Discussion

Another AWS WAF bypass allowing SQLi caused by an unorthodox MSSQL design choice

By /u/obilodeau — June 22^nd 2023 at 14:30

submitted by /u/obilodeau
[link] [comments]

/r/netsec - Information Security News & Discussion

Secfault Security - LibreOffice Arbitrary File Write (CVE-2023-1883)

By /u/Xadartt — June 22^nd 2023 at 07:38

submitted by /u/Xadartt
[link] [comments]

/r/netsec - Information Security News & Discussion

Callisto - Automated Binary Vulnerability Discovery Tool

By /u/jibblz — June 22^nd 2023 at 06:41

New tool to automate binary vulnerability research with GPT integration.

submitted by /u/jibblz
[link] [comments]

/r/netsec - Information Security News & Discussion

GitHub Dataset Reveals Millions Potentially Vulnerable to RepoJacking

By /u/ilay789 — June 21^st 2023 at 15:22

submitted by /u/ilay789
[link] [comments]

/r/netsec - Information Security News & Discussion

Android Malware on the Rise – A case study of AhMyth RAT

By /u/CyberMasterV — June 21^st 2023 at 13:59

submitted by /u/CyberMasterV
[link] [comments]

/r/netsec - Information Security News & Discussion

Targeting Core OPC UA Components

By /u/derp6996 — June 21^st 2023 at 13:04

submitted by /u/derp6996
[link] [comments]

/r/netsec - Information Security News & Discussion

nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover

By /u/meirwah — June 20^th 2023 at 16:53

submitted by /u/meirwah
[link] [comments]

/r/netsec - Information Security News & Discussion

Leaking secrets through caching with Bunny CDN

By /u/pimterry — June 20^th 2023 at 14:55

submitted by /u/pimterry
[link] [comments]

/r/netsec - Information Security News & Discussion

Step-by-step blog about to setup grammar-aware in-memory persistent fuzzing campaigns using AFL++-QEMU on 1 practical example

By /u/31angt — June 20^th 2023 at 10:14

submitted by /u/31angt
[link] [comments]

/r/netsec - Information Security News & Discussion

chonked pt.2: exploiting cve-2023-33476 for remote code execution

By /u/poltess0 — June 20^th 2023 at 08:29

submitted by /u/poltess0
[link] [comments]

/r/netsec - Information Security News & Discussion

FortiNAC - Just a few more RCEs

By /u/scopedsecurity — June 19^th 2023 at 19:49

submitted by /u/scopedsecurity
[link] [comments]

/r/netsec - Information Security News & Discussion

How we tried to book a train ticket and ended up with a databreach with 245,000 records

By /u/_vavkamil_ — June 19^th 2023 at 16:33

submitted by /u/_vavkamil_
[link] [comments]

/r/netsec - Information Security News & Discussion

Netbackup analysis and network tooling:

By /u/31angt — June 19^th 2023 at 16:31

submitted by /u/31angt
[link] [comments]

/r/netsec - Information Security News & Discussion

The Phantom Menace: Exposing hidden risks through ACLs in Active Directory (Part 1)

By /u/ZephrX112 — June 19^th 2023 at 07:23

submitted by /u/ZephrX112
[link] [comments]