Technical Information Security Content & Discussion

8 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 1 year ago
MODERATORS
[email protected]
listing: all - local
476
1
Hands-On Kernel & User-Mode Hooking: From Theory to Working Code (github.com)
submitted 5 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Gumbo72 on 2024-06-01 17:44:21.
477
1
State of WiFi Security in 2024 (medium.com)
submitted 5 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Material-Tonight8924 on 2024-06-01 15:53:04.

Hi,

I've written an article about exploiting various vulnerabilities in the WiFi protocol, you may find it on Medium.

Feedback is always welcome.

478
1
Hunting bugs in Nginx JavaScript engine (njs) with with fuzzing and CodeQL (0xbigshaq.github.io)
submitted 5 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/pwntheplanet on 2024-05-31 16:52:20.
479
1
Things you wish you didn't need to know about S3 (blog.plerion.com)
submitted 5 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/dagrz-cloudsec on 2024-05-31 03:25:09.
480
1
How to achieve passive persistence - part 2: outliving the krbtgt reset (www.huntandhackett.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/One-Assistance-8552 on 2024-05-30 08:19:54.

Did you know that LM hashes are still a thing?

481
1
Check Point - Wrong Check Point (CVE-2024-24919) - watchTowr Labs (labs.watchtowr.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/dx7r__ on 2024-05-30 02:06:31.
482
1
CVE-2024-22058 Ivanti Landesk LPE - Mantodea Security (mantodeasecurity.de)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/flxflndy on 2024-05-29 13:39:04.
483
1
Post-Exploiting an F5 Big-IP: root, and now what? (offsec.almond.consulting)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/AlmondOffSec on 2024-05-29 11:00:04.
484
1
HardwareBreakPoint + Ekko ROP modified to hold stack arguments + Kernel Objects Enumeration for some honest hiding in memory. (oldboy21.github.io)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/oldboy21 on 2024-05-29 05:37:42.
485
1
Non-Production Endpoints as an Attack Surface in AWS | Datadog Security Labs (securitylabs.datadoghq.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/RedTermSession on 2024-05-28 15:10:58.
486
1
Everyday Ghidra: Symbols — Automatic Symbol Acquisition with Ghidra — Part 2 (medium.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/onlinereadme on 2024-05-28 13:00:08.
487
1
CVE-2024-23108: Back Again! Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive, IOCs, and Exploit (www.horizon3.ai)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/scopedsecurity on 2024-05-28 12:35:56.
488
1
Multiple vulnerabilities in Eclipse ThreadX (security.humanativaspa.it)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/0xdea on 2024-05-28 09:56:50.
489
1
ManageEngine ADAudit - Reverse engineering Windows RPC to find CVEs - part 1 / RPC (www.shelltrail.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/ivxrehc on 2024-05-28 06:38:20.
490
1
Exploiting V8 at openECSC: A beginner-friendly journey from a memory corruption to a browser pwn (lyra.horse)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/rebane2001 on 2024-05-27 17:36:33.
491
1
Part 2: Threat Detection Engineering and Incident Response with AuditD and Sentinel — Combine Events by ID with Laurel before sending to Sentinel as JSON. (medium.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/thattechkitten on 2024-05-27 17:08:34.
492
1
VS Code Extension: Convert Diagrams to Text Format | Better Code Documentation (marketplace.visualstudio.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/mknined on 2024-05-27 13:23:04.
493
1
Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1) (www.ambionics.io)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/cfambionics on 2024-05-27 08:51:40.
494
1
LangChain JS Arbitrary File Read Vulnerability (evren.ninja)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Standard_Arm_4476 on 2024-05-25 23:33:24.
495
1
Entra ID service principals in business email compromise schemes (redcanary.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/tvjust on 2024-05-24 19:16:22.
496
1
Malicious PyPI packages targeting highly specific MacOS machines (securitylabs.datadoghq.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/thorn42 on 2024-05-24 08:26:44.
497
1
How to achieve eternal persistence in an Active Directory environment - Part 1 (www.huntandhackett.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/darronofsky on 2024-05-23 21:08:02.
498
1
Nuking Weak Shellcode Hacker Hashes For Fun And Profit! (karma-x.io)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/operat1ve on 2024-05-23 14:47:58.
499
1
Emotions as human detection & defence (diablohorn.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/DiabloHorn on 2024-05-23 04:32:43.

With this blog post my goal is not to raise awareness, but to provide people with a tool that they can use to defend themselves from attacks when technological measures fail or are not properly configured as well as analog scams or other fraudulent attempts. I’ve also come to the conclusion that maybe it’s not so much about what you know about attacks, but how you FEEL when being attacked, that can make the difference between becoming a victim or not.

500
1
Memory Pollution in LLMs: Understanding New AI Security Concerns (evren.ninja)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Standard_Arm_4476 on 2024-05-22 15:49:00.
view more: ‹ prev next ›