Technical Information Security Content & Discussion

8 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 1 year ago
MODERATORS
[email protected]
listing: all - local
26
1
Open-Source PowerHuntShares.v2 - Find Shares, Extract Passwords, and Fingerprint with LLM (www.netspi.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Nullbind on 2024-11-15 14:16:20.
27
1
TCL substitution of global parameter values in Gaia Portal (notes.zeronvll.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Mission_Detail_8153 on 2024-11-15 13:07:43.
28
1
Reproducing CVE-2024-10979: A Step-by-Step Guide (redrays.io)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/vah_13 on 2024-11-15 11:44:00.
29
1
PAN-SA-2024-0015 Critical Security Bulletin: Ensure Access to Management Interface is Secured (security.paloaltonetworks.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/SigmaSixShooter on 2024-11-14 23:51:07.

https://security.paloaltonetworks.com/PAN-SA-2024-0015

30
1
Hop-Skip-FortiJump-FortiJump-Higher - Fortinet FortiManager CVE-2024-47575 - watchTowr Labs (labs.watchtowr.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/dx7r__ on 2024-11-14 16:34:38.
31
1
The Definitive Guide to Linux Process Injection (www.akamai.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/oridavid1231 on 2024-11-14 15:38:09.
32
1
Attestations: A new generation of signatures on PyPI (blog.trailofbits.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/yossarian_flew_away on 2024-11-14 14:36:57.
33
1
The cost of a NAND chip off attack is 170.83€ (www.errno.fr)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/gquere on 2024-11-13 15:50:46.
34
1
Fault Injection - Down the Rabbit Hole (security.humanativaspa.it)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/0xdea on 2024-11-13 09:28:27.
35
1
The Problem with IoT Cloud-Connectivity and How it Exposed All OvrC Devices to Hijacking (claroty.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/sh0n1z on 2024-11-13 09:23:31.
36
1
Announcing a New Probely Chapter, As We Join Snyk's Family (probely.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/petermal67 on 2024-11-13 01:21:00.
37
1
Citrix Virtual Apps and Desktops (XEN) Unauthenticated Remote Code execution (labs.watchtowr.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/TheL0singEdge on 2024-11-12 17:08:20.
38
1
System Prompt Exposure: How AI Image Generators May Leak Sensitive Instructions (www.invicti.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Ok_Information1453 on 2024-11-12 16:02:18.
39
1
Everyday Ghidra: Ghidra Data Types— When to Create Custom GDTs — Part 1 (medium.com)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/onlinereadme on 2024-11-12 14:43:47.
40
1
Bypass GuardDuty Pentest Findings for the AWS CLI (hackingthe.cloud)
submitted 1 week ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/RedTermSession on 2024-11-11 15:51:17.
41
1
Beyond RCE: Autonomous Code Execution in Agentic AI (www.securityrunners.io)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/crustysecurity on 2024-11-08 22:00:27.
42
1
Microsoft Bookings – Facilitating Impersonation (www.cyberis.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/nopslider on 2024-11-08 17:03:29.
43
1
Why Falco’s new response engine is a game changer for open source cloud native security (www.cncf.io)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Hallow_Rose on 2024-11-08 16:15:19.
44
1
A New Era of macOS Sandbox Escapes: Overlooked Attack Surface, 10+ New Vulns (jhftss.github.io)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/netsec_burn on 2024-11-08 13:27:40.
45
1
Presentations from HEXACON 2024 (www.youtube.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/albinowax on 2024-11-08 11:16:59.
46
1
Secure malware analysis (www.what.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/petrolsan on 2024-11-07 13:33:50.

Hey all I have a proxmox instance running in a laptop on a separate VLan with 2 boxes (flare VM and remnux), Within my edge router I have a firewall rule setup to deny any packets from the malware Vlan to my other vlans, but allows connecting into the malware vlan from my other vlan so that I can rdp in to the machines.

Does this sound secure?, would you recommend any other changes?

Last thing I need to do is create another Vlan within proxmos so that I can get Inetsim working.

47
1
Breaking Down Multipart Parsers: File upload validation bypass (blog.sicuranext.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/theMiddleBlue on 2024-11-06 16:42:09.
48
1
Hacking 700 Million Electronic Arts Accounts (battleda.sh)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/AlmondOffSec on 2024-11-06 12:38:55.
49
1
Upcoming hardening in PHP (dustri.org)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/MegaManSec2 on 2024-11-06 10:36:23.
50
1
Radare's binary reversing online conference, including Doyensec's Dennis Goodlett on bypassing malicious pickle detection. (rada.re)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/ds_at on 2024-11-05 17:03:02.
view more: ‹ prev next ›