Technical Information Security Content & Discussion

8 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 1 year ago
MODERATORS
[email protected]
listing: all - local
526
1
CSTC: Bringing the CyberChef to the BurpSuite (github.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/usdAG on 2024-05-16 15:53:27.
527
1
How an Employee's Personal GitHub Repository Compromised Azure’s Internal Container Registry (www.aquasec.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Pale_Fly_2673 on 2024-05-16 15:06:09.
528
1
Patch Diffing CVE-2024-3400 from a Palo Alto NGFW Marketplace AMI (www.sprocketsecurity.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/meatball on 2024-05-16 03:59:17.
529
1
Threat actors misusing Quick Assist in social engineering attacks leading to ransomware (www.microsoft.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/SCI_Rusher on 2024-05-15 17:24:44.
530
1
Executing Cobalt Strike's BOFs on ARM-based Linux devices (blog.z-labs.eu)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/mzet- on 2024-05-15 11:58:46.
531
1
"Password cracking: past, present, future" OffensiveCon 2024 keynote talk slides (www.openwall.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/solardiz on 2024-05-14 13:50:47.
532
1
Credential leakage risks hiding in Frontend code (real statistics from Korean websites) (cremit.io)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Late-Capital-9686 on 2024-05-14 12:55:26.
533
1
Response Filter Denial of Service (RFDoS): shut down a website by triggering WAF rule (blog.sicuranext.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/theMiddleBlue on 2024-05-14 06:30:45.
534
1
Pwnie Award Nominated Songs (www.youtube.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/seyyid_ on 2024-05-13 19:55:33.
535
1
cybersectroll/SharpPersistSD (github.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/cybersectroll on 2024-05-13 19:08:03.

A Post-Compromise granular, fully reflective, simple and convenient .NET library to embed persistency to persistency by abusing Security Descriptors of remote machines. The techniques incorporated are not novel but I've yet to come across any documented approach of modifying SCM/Service's SDDL by directly modifying registry keys. Modification of SD for WMI and Remote registry was also added in as an after thought but this means there's a lot more to explore and add for the curious minds.

536
1
[KIS-2024-04] Cacti <= 1.2.26 Remote Code Execution Vulnerability (karmainsecurity.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/eg1x on 2024-05-13 09:03:45.
537
1
Fuzz just about anything (network, GUI, editors, compilers, etc.) with Program Environment Fuzzing (github.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/zoomT on 2024-05-13 03:41:41.
538
1
Kontra Application Security Training -- Collection of Free Exercises (Really cool attack examples) (application.security)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/sir-lols-a-lot on 2024-05-12 18:02:13.
539
1
16 years of CVE-2008-0166 - Debian OpenSSL Bug - breaking DKIM and BIMI in 2024 (16years.secvuln.info)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/hannob on 2024-05-12 11:29:59.
540
1
Lumma Stealer Malware Analysis (cyber-forensics.blog)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/AdvancedFinish6896 on 2024-05-11 20:33:58.
541
1
Parallel-Committees": A Novelle Secure and High-Performance Distributed Database Architecture (www.researchgate.net)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/SS41BR on 2024-05-10 20:35:47.
542
1
Unmasking Adversary Cloud Defense Evasion Strategies: Modify Cloud Compute Infrastructure Part 1 (permiso.io)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/permis0 on 2024-05-10 15:29:46.
543
1
Kinsing Demystified - A Comprehensive Technical Guide (1665891.fs1.hubspotusercontent-na1.net)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Pale_Fly_2673 on 2024-05-10 12:44:10.
544
1
SSL/TLS, part 3: Toy TLS 1.2 client in ~1600 SLOC of Python. (yurichev.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/yurichev on 2024-05-10 11:24:13.
545
1
Digging for SSRF in NextJS apps (www.assetnote.io)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Mempodipper on 2024-05-09 22:39:58.
546
1
apk.sh v1.0.9 is out! Making reverse engineering Android apps easier! (github.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/recovo_recovo on 2024-05-09 21:31:53.
547
1
Minecraft Source Pack Becomes Gateway for zEus Stealer Distribution (cyberinsider.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/goki7 on 2024-05-09 17:10:28.
548
1
AWS CloudQuarry: Digging for Secrets in Public AMIs (securitycafe.ro)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/TheTime on 2024-05-09 11:44:24.
549
1
E2E Security Testing via exploratory Testing (ram.beehiiv.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/samsbp97 on 2024-05-09 06:02:25.
550
1
mlcsec/SharpGraphView: Microsoft Graph API post-exploitation toolkit (github.com)
submitted 6 months ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
The original post: /r/netsec by /u/Frequent_Passenger82 on 2024-05-08 19:02:28.
view more: ‹ prev next ›