FreshRSS

๐Ÿ”’
โ˜ โ˜† โœ‡ /r/netsec - Information Security News & Discussion

Defeating Visual Studio Code embedded reverse shell

By /u/ipfyx โ€” September 22nd 2023 at 19:43

Here is a blogpost that covers some techniques to block vscode tunnel. Any feedback will be greatly apreciated.

submitted by /u/ipfyx
[link] [comments]
โ˜ โ˜† โœ‡ /r/netsec - Information Security News & Discussion

The WebP 0day

By /u/MegaManSec2 โ€” September 21st 2023 at 19:33
submitted by /u/MegaManSec2
[link] [comments]
โ˜ โ˜† โœ‡ /r/netsec - Information Security News & Discussion

Bypass SSL Pinning on Windows Application

By /u/HermaeusMora0 โ€” September 14th 2023 at 20:59

I have tried using CharlesProxy MITM proxy to obtain SSL traffic from a Windows Application, but Charles simply can't capture any traffic, even though it captures from my browser and other applications.

With that being said, I suspect the application uses SSL pinning, I don't want to go reverse engineer it when there's a simpler way for me to obtain their requests.

I need suggestions on what to do, and if reverse engineering is my only way, what would be recommended.

submitted by /u/HermaeusMora0
[link] [comments]
โŒ