Intro to chrome's v8 from an exploit development angle
https://ift.tt/3cgY3tm
Submitted March 01, 2020 at 05:47PM by digicat
via reddit https://ift.tt/2PDh7sa
https://ift.tt/3cgY3tm
Submitted March 01, 2020 at 05:47PM by digicat
via reddit https://ift.tt/2PDh7sa
Sensepost
SensePost | Intro to chrome’s v8 from an exploit development angle
Leaders in Information Security
Evasion techniques - Malware Evasion Encyclopedia, which contains over 50 techniques used by various malwares to detect virtualized and sandboxed environments.
https://ift.tt/2Vy6kDm
Submitted March 01, 2020 at 08:10PM by digicat
via reddit https://ift.tt/2Ill5lj
https://ift.tt/2Vy6kDm
Submitted March 01, 2020 at 08:10PM by digicat
via reddit https://ift.tt/2Ill5lj
reddit
Evasion techniques - Malware Evasion Encyclopedia, which contains...
Posted in r/netsec by u/digicat • 390 points and 3 comments
Attacking and defending the GCP metadata API
https://ift.tt/38ap6Dz
Submitted March 02, 2020 at 11:11AM by wifihack
via reddit https://ift.tt/2uGcrua
https://ift.tt/38ap6Dz
Submitted March 02, 2020 at 11:11AM by wifihack
via reddit https://ift.tt/2uGcrua
GitHub
dxa4481/AttackingAndDefendingTheGCPMetadataAPI
This repo gives an overview of some GCP metadata API attack and defend patterns - dxa4481/AttackingAndDefendingTheGCPMetadataAPI
Alert Correlation Algorithms: A Survey and Taxonomy
/user/sajjadium/comments/fb39mt/alert_correlation_algorithms_a_survey_and_taxonomy/
Submitted March 02, 2020 at 02:10PM by sajjadium
via reddit https://ift.tt/38dJ6VG
/user/sajjadium/comments/fb39mt/alert_correlation_algorithms_a_survey_and_taxonomy/
Submitted March 02, 2020 at 02:10PM by sajjadium
via reddit https://ift.tt/38dJ6VG
reddit
Alert Correlation Algorithms: A Survey and Taxonomy
Posted in r/netsec by u/sajjadium • 0 points and 0 comments
An Anomaly-based Botnet Detection Approach for Identifying Stealthy Botnets
/user/sajjadium/comments/faja07/an_anomalybased_botnet_detection_approach_for/
Submitted March 02, 2020 at 02:05PM by sajjadium
via reddit https://ift.tt/2Te9Jph
/user/sajjadium/comments/faja07/an_anomalybased_botnet_detection_approach_for/
Submitted March 02, 2020 at 02:05PM by sajjadium
via reddit https://ift.tt/2Te9Jph
reddit
An Anomaly-based Botnet Detection Approach for Identifying...
Posted in r/netsec by u/sajjadium • 0 points and 0 comments
Phishing Windows Credentials
https://ift.tt/2vzcit5
Submitted March 02, 2020 at 04:09PM by netbiosX
via reddit https://ift.tt/2TzjqNU
https://ift.tt/2vzcit5
Submitted March 02, 2020 at 04:09PM by netbiosX
via reddit https://ift.tt/2TzjqNU
Penetration Testing Lab
Phishing Windows Credentials
It is very common in Windows environments when programs are executed to require from the user to enter his domain credentials for authentication like Outlook, authorization of elevation of privileg…
A Security Review of SharePoint Site Pages
https://ift.tt/3cpp8uo
Submitted March 02, 2020 at 05:28PM by gid0rah
via reddit https://ift.tt/2TdgkjK
https://ift.tt/3cpp8uo
Submitted March 02, 2020 at 05:28PM by gid0rah
via reddit https://ift.tt/2TdgkjK
MDSec
A Security Review of SharePoint Site Pages - MDSec
Introduction If you have worked with SharePoint, you have seen two types of ASPX pages: Application pages Site pages Application pages are not customisable. They are stored on the file...
Hacking Unicode Like a Boss
https://ift.tt/2wocdIU
Submitted March 02, 2020 at 05:22PM by DebugDucky
via reddit https://ift.tt/38hdChk
https://ift.tt/2wocdIU
Submitted March 02, 2020 at 05:22PM by DebugDucky
via reddit https://ift.tt/38hdChk
Bugcrowd
Hacking Unicode Like a Boss | @Bugcrowd
This guest post was authored by Charlie Eriksen, Bugcrowd researcher and CTO of Adversary. Adversary delivers a platform that provides technical security traini
Empire 3.1 has been released with new features. These include multi-user API support, function name aliasing for Mimikatz and Invoke-Empire, and several others
https://ift.tt/2wVrm4q
Submitted March 02, 2020 at 06:25PM by Hubble_BC_Security
via reddit https://ift.tt/32F0dib
https://ift.tt/2wVrm4q
Submitted March 02, 2020 at 06:25PM by Hubble_BC_Security
via reddit https://ift.tt/32F0dib
GitHub
Release v3.1.0 · BC-SECURITY/Empire
Empire 3.1.0
- Added Multi-user Collaboration to API - #105 (@Cx01N & @vinnybod)
- Updated to Mimikatz 2.2.0 20200208 - #104 (@Cx01N)
- Fixed incorrect header on python response packet (@Cx01N)...
- Added Multi-user Collaboration to API - #105 (@Cx01N & @vinnybod)
- Updated to Mimikatz 2.2.0 20200208 - #104 (@Cx01N)
- Fixed incorrect header on python response packet (@Cx01N)...
SPN (Service Principal Names) demystified!
https://ift.tt/38jJFgB
Submitted March 02, 2020 at 07:21PM by hackndo
via reddit https://ift.tt/39rpSO1
https://ift.tt/38jJFgB
Submitted March 02, 2020 at 07:21PM by hackndo
via reddit https://ift.tt/39rpSO1
A-Z guide on setting up Graylog Part 4: File and Print Servers
/r/sysadmin/comments/fcdxvt/az_guide_on_setting_up_graylog_part_4_file_and/
Submitted March 02, 2020 at 09:24PM by HanSolo71
via reddit https://ift.tt/32GKq2p
/r/sysadmin/comments/fcdxvt/az_guide_on_setting_up_graylog_part_4_file_and/
Submitted March 02, 2020 at 09:24PM by HanSolo71
via reddit https://ift.tt/32GKq2p
reddit
A-Z guide on setting up Graylog Part 4: File and Print Servers
Posted in r/netsec by u/HanSolo71 • 2 points and 0 comments
OWASP Threat Dragon 1.0 has officially been released
https://ift.tt/2rp4hCq
Submitted March 02, 2020 at 10:51PM by kerberosmansour
via reddit https://ift.tt/2whQIcx
https://ift.tt/2rp4hCq
Submitted March 02, 2020 at 10:51PM by kerberosmansour
via reddit https://ift.tt/2whQIcx
GitHub
GitHub - mike-goodwin/owasp-threat-dragon-desktop: An installable desktop variant of OWASP Threat Dragon
An installable desktop variant of OWASP Threat Dragon - GitHub - mike-goodwin/owasp-threat-dragon-desktop: An installable desktop variant of OWASP Threat Dragon
FuzzBench: Fuzzer Benchmarking as a Service
https://ift.tt/38a5a3C
Submitted March 03, 2020 at 01:16AM by ammar2
via reddit https://ift.tt/2PI99xM
https://ift.tt/38a5a3C
Submitted March 03, 2020 at 01:16AM by ammar2
via reddit https://ift.tt/2PI99xM
Google Online Security Blog
FuzzBench: Fuzzer Benchmarking as a Service
Posted by Jonathan Metzman, Abhishek Arya, Google OSS-Fuzz Team and László Szekeres, Google Software Analysis Team We are excited to laun...
Gravity (kubernetes distribution), Teleport (ssh-based gateway) 2019 security audit results
https://ift.tt/38gS6JN
Submitted March 03, 2020 at 02:31AM by nibblesec
via reddit https://ift.tt/2TfPZS3
https://ift.tt/38gS6JN
Submitted March 03, 2020 at 02:31AM by nibblesec
via reddit https://ift.tt/2TfPZS3
Doyensec
2019 Gravitational Security Audit Results · Doyensec's Blog
Doyensec's Blog :: Doyensec is an independent security research and development company focused on vulnerability discovery and remediation.
Mind Games | The Evolving Psychology of Ransom Notes | SentinelOne
https://ift.tt/32Ge87C
Submitted March 03, 2020 at 02:29PM by Cyberthere
via reddit https://ift.tt/2PJdwZx
https://ift.tt/32Ge87C
Submitted March 03, 2020 at 02:29PM by Cyberthere
via reddit https://ift.tt/2PJdwZx
SentinelOne
Mind Games: The Psychology of Ransom Notes
What is a ransom note? Ransomware makes clever use of psychology to maximize the chances of payout. Learn more here.
Check out the blog I wrote about an automated attack abusing Docker API to penetrate into your cloud environment
https://ift.tt/2PHkheh
Submitted March 03, 2020 at 01:56PM by mkatch
via reddit https://ift.tt/3cqJJi5
https://ift.tt/2PHkheh
Submitted March 03, 2020 at 01:56PM by mkatch
via reddit https://ift.tt/3cqJJi5
Aquasec
Threat Alert: Attack Vector Uses Containers to Methodically Target Cloud Resources
The Aqua Research team has identified a new attack vector that points to an evolution in attack techniques and capabilities running in the cloud.
Troy Hunt: Project Svalbard, Have I Been Pwned and its Ongoing Independence
https://ift.tt/3amStnz
Submitted March 03, 2020 at 04:25PM by nextgens
via reddit https://ift.tt/3ctaUsH
https://ift.tt/3amStnz
Submitted March 03, 2020 at 04:25PM by nextgens
via reddit https://ift.tt/3ctaUsH
Troy Hunt
Project Svalbard, Have I Been Pwned and its Ongoing Independence
This is going to be a lengthy blog post so let me use this opening paragraph as a summary of where Project Svalbard is at: Have I Been Pwned is no longer being sold and I will continue running it independently. After 11 months of a very intensive process…
RPKI and the RTR protocol
https://ift.tt/2x9BEON
Submitted March 03, 2020 at 07:34PM by pimterry
via reddit https://ift.tt/2IgLj8g
https://ift.tt/2x9BEON
Submitted March 03, 2020 at 07:34PM by pimterry
via reddit https://ift.tt/2IgLj8g
The Cloudflare Blog
RPKI and the RTR protocol
Today’s Internet requires stronger protection within its core routing system and as we have already said: it's high time to stop BGP route leaks and hijacks by deploying operationally-excellent RPKI!
DNS Rebinding: Stealing WiFi credentials through your solar panel inverter
https://ift.tt/2Ty9K6u
Submitted March 03, 2020 at 10:14PM by sanktjodel
via reddit https://ift.tt/3akv9Xm
https://ift.tt/2Ty9K6u
Submitted March 03, 2020 at 10:14PM by sanktjodel
via reddit https://ift.tt/3akv9Xm
reddit
DNS Rebinding: Stealing WiFi credentials through your solar panel...
Posted in r/netsec by u/sanktjodel • 206 points and 13 comments
Announcing FuzzBench: Fuzzer Benchmarking as a Service.
https://security.googleblog.com/2020/03/fuzzbench-fuzzer-benchmarking-as-service.html
Submitted March 03, 2020 at 12:28AM by metzmanj
via reddit https://ift.tt/2uTVLQa
https://security.googleblog.com/2020/03/fuzzbench-fuzzer-benchmarking-as-service.html
Submitted March 03, 2020 at 12:28AM by metzmanj
via reddit https://ift.tt/2uTVLQa
Google Online Security Blog
FuzzBench: Fuzzer Benchmarking as a Service
Posted by Jonathan Metzman, Abhishek Arya, Google OSS-Fuzz Team and László Szekeres, Google Software Analysis Team We are excited to laun...
CRLite: Finally a fix for broken revocation?
https://ift.tt/2IhEeUR
Submitted March 02, 2020 at 09:28PM by pimterry
via reddit https://ift.tt/2IhiDfm
https://ift.tt/2IhEeUR
Submitted March 02, 2020 at 09:28PM by pimterry
via reddit https://ift.tt/2IhiDfm
Scott Helme
CRLite: Finally a fix for broken revocation?
I've talked a lot about revocation in recent years and the issues with the current methods for checking the revocation status of a certificate are well understood and widely documented. We may now have something that changes that, let's take a look at CRLite!…