Impact — CriticalContinue reading on Medium » (https://medium.com/@abinsecurityresearcher/bac-sensitive-information-disclosure-via-publicly-accessible-database-backup-files-users-sql-disc-ca2cd6d4370f?source=rss------bug_bounty-5)
The Hardest Year of My Career Journey
Hey Everyone, I am Dishant Modi. Today in this writeup I am not going to explain/decode any bug class and also not showing any bug…Continue reading on InfoSec Write-ups »
Read more...
Hey Everyone, I am Dishant Modi. Today in this writeup I am not going to explain/decode any bug class and also not showing any bug…Continue reading on InfoSec Write-ups »
Read more...
Medium
The Hardest Year of My Career Journey
Hey Everyone, I am Dishant Modi. Today in this writeup I am not going to explain/decode any bug class and also not showing any bug…
Build Your Own Security Operations Center (SOC) at Home
Most people think a Security Operations Center (SOC) only exists inside massive enterprises with expensive hardware, dedicated analysts…Continue reading on Medium »
Read more...
Most people think a Security Operations Center (SOC) only exists inside massive enterprises with expensive hardware, dedicated analysts…Continue reading on Medium »
Read more...
Medium
Build Your Own Security Operations Center (SOC) at Home 🔥
Most people think a Security Operations Center (SOC) only exists inside massive enterprises with expensive hardware, dedicated analysts…
Introducing Keyhog: The First GPU Accelerated secret scanner
https://www.reddit.com/r/redteamsec/comments/1tr8rd9/introducing_keyhog_the_first_gpu_accelerated/
<!-- SC_OFF -->EDIT: forgot to link github it is below KeyHog is a fast OSS secret scanner written in Rust with GPU acceleration. It scans source trees, git history, staged changes, Docker images, S3 buckets, GitHub orgs, stdin, and local filesystems for leaked credentials. It has 891 service-specific detectors. AWS, Azure, GCP, Cloudflare, Stripe, GitHub, GitLab, npm, Slack, Discord, Twilio, OpenAI, Anthropic, HuggingFace, Postgres URLs, MongoDB URLs, Redis URLs, private keys, JWT secrets, and generic high-entropy credentials. It uses Hyperscan on CPU and has a GPU backend for accelerated scanning. It scans decoded content. Base64 blobs, Kubernetes Secrets, Docker auth blobs, JWT payloads, Helm values, and encoded env files are decoded before matching. It handles split secrets. JS string concatenation, YAML multiline strings, Makefile continuations, and templated config are reassembled before scanning. It uses validation where plain pattern matching gets noisy. Some detectors check companion fields, checksums, entropy, nearby context, or known token structure before reporting. Each finding gets a confidence score. You can raise or lower the reporting threshold without ripping out detectors. Daemon mode keeps pre-commit and editor scans fast by avoiding repeated detector startup cost. Install: cargo install keyhog Common commands: keyhog scan .
keyhog scan --git-history .
keyhog scan --git-staged
keyhog scan --docker-image registry/app:v1
keyhog scan . --format sarif -o keyhog.sarif
keyhog hook install CI/baseline commands: keyhog scan . --baseline .keyhog-baseline.json
keyhog diff before.json after.json Lockdown mode is for scanning machines that may already contain live credentials. It avoids printing plaintext secrets, refuses cache writes, disables live verification, and applies process hardening where supported. <!-- SC_ON --> submitted by /u/MT_Carnage (https://www.reddit.com/user/MT_Carnage)
[link] (https://santh.dev/blog/keyhog/) [comments] (https://www.reddit.com/r/redteamsec/comments/1tr8rd9/introducing_keyhog_the_first_gpu_accelerated/)
https://www.reddit.com/r/redteamsec/comments/1tr8rd9/introducing_keyhog_the_first_gpu_accelerated/
<!-- SC_OFF -->EDIT: forgot to link github it is below KeyHog is a fast OSS secret scanner written in Rust with GPU acceleration. It scans source trees, git history, staged changes, Docker images, S3 buckets, GitHub orgs, stdin, and local filesystems for leaked credentials. It has 891 service-specific detectors. AWS, Azure, GCP, Cloudflare, Stripe, GitHub, GitLab, npm, Slack, Discord, Twilio, OpenAI, Anthropic, HuggingFace, Postgres URLs, MongoDB URLs, Redis URLs, private keys, JWT secrets, and generic high-entropy credentials. It uses Hyperscan on CPU and has a GPU backend for accelerated scanning. It scans decoded content. Base64 blobs, Kubernetes Secrets, Docker auth blobs, JWT payloads, Helm values, and encoded env files are decoded before matching. It handles split secrets. JS string concatenation, YAML multiline strings, Makefile continuations, and templated config are reassembled before scanning. It uses validation where plain pattern matching gets noisy. Some detectors check companion fields, checksums, entropy, nearby context, or known token structure before reporting. Each finding gets a confidence score. You can raise or lower the reporting threshold without ripping out detectors. Daemon mode keeps pre-commit and editor scans fast by avoiding repeated detector startup cost. Install: cargo install keyhog Common commands: keyhog scan .
keyhog scan --git-history .
keyhog scan --git-staged
keyhog scan --docker-image registry/app:v1
keyhog scan . --format sarif -o keyhog.sarif
keyhog hook install CI/baseline commands: keyhog scan . --baseline .keyhog-baseline.json
keyhog diff before.json after.json Lockdown mode is for scanning machines that may already contain live credentials. It avoids printing plaintext secrets, refuses cache writes, disables live verification, and applies process hardening where supported. <!-- SC_ON --> submitted by /u/MT_Carnage (https://www.reddit.com/user/MT_Carnage)
[link] (https://santh.dev/blog/keyhog/) [comments] (https://www.reddit.com/r/redteamsec/comments/1tr8rd9/introducing_keyhog_the_first_gpu_accelerated/)
Weekly Purple Team (Herding Katz Edition)
https://www.reddit.com/r/redteamsec/comments/1trfu74/weekly_purple_team_herding_katz_edition/
<!-- SC_OFF -->MorphKatz + KSLKatz — Bypassing Defender & Dumping Creds | Weekly Purple Team Dropped a new episode this week covering KSLKatz morphed with MorphKatz to evade Defender signatures before hitting LSASS. Paired it with the full detection breakdown on the blue team side so you can see exactly what telemetry fires and how to build coverage against it. Covers T1003.001 and T1562 with the full red vs. blue format. 🎥 Watch here (https://youtu.be/m2KTm7UYMuc) Happy to answer questions in the comments on either the offensive tradecraft or the detection side. <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://youtu.be/m2KTm7UYMuc) [comments] (https://www.reddit.com/r/redteamsec/comments/1trfu74/weekly_purple_team_herding_katz_edition/)
https://www.reddit.com/r/redteamsec/comments/1trfu74/weekly_purple_team_herding_katz_edition/
<!-- SC_OFF -->MorphKatz + KSLKatz — Bypassing Defender & Dumping Creds | Weekly Purple Team Dropped a new episode this week covering KSLKatz morphed with MorphKatz to evade Defender signatures before hitting LSASS. Paired it with the full detection breakdown on the blue team side so you can see exactly what telemetry fires and how to build coverage against it. Covers T1003.001 and T1562 with the full red vs. blue format. 🎥 Watch here (https://youtu.be/m2KTm7UYMuc) Happy to answer questions in the comments on either the offensive tradecraft or the detection side. <!-- SC_ON --> submitted by /u/Infosecsamurai (https://www.reddit.com/user/Infosecsamurai)
[link] (https://youtu.be/m2KTm7UYMuc) [comments] (https://www.reddit.com/r/redteamsec/comments/1trfu74/weekly_purple_team_herding_katz_edition/)
When Identity Breaks! How a Single Parameter Corrupted an Authentication System
A lot has been happening lately.Continue reading on Medium »
Read more...
A lot has been happening lately.Continue reading on Medium »
Read more...
Medium
When Identity Breaks! How a Single Parameter Corrupted an Authentication System
A lot has been happening lately.
File Upload Attacks: Understanding the Basics
What happens when a web application lets you upload anything — and why that’s a bigger problem than most developers realize. Part 1 of the…Continue reading on Medium »
Read more...
What happens when a web application lets you upload anything — and why that’s a bigger problem than most developers realize. Part 1 of the…Continue reading on Medium »
Read more...
Medium
File Upload Attacks: Understanding the Basics
What happens when a web application lets you upload anything — and why that’s a bigger problem than most developers realize. Part 1 of the…
CSS Injection in Real Bug Bounty Engagements: A Reproducible Pattern in Custom Profile Features
SummaryContinue reading on Medium »
Read more...
SummaryContinue reading on Medium »
Read more...
Medium
CSS Injection in Real Bug Bounty Engagements: A Reproducible Pattern in Custom Profile Features
Summary
The Hardest Year of My Career Journey
https://infosecwriteups.com/the-hardest-year-of-my-career-journey-65fd8edd19a3?source=rss------bug_bounty-5
https://infosecwriteups.com/the-hardest-year-of-my-career-journey-65fd8edd19a3?source=rss------bug_bounty-5
Hey Everyone, I am Dishant Modi. Today in this writeup I am not going to explain/decode any bug class and also not showing any bug…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/the-hardest-year-of-my-career-journey-65fd8edd19a3?source=rss------bug_bounty-5)
Build Your Own Security Operations Center (SOC) at Home
https://medium.com/@pentesterclubpvtltd/build-your-own-security-operations-center-soc-at-home-a29208eebc42?source=rss------bug_bounty-5
https://medium.com/@pentesterclubpvtltd/build-your-own-security-operations-center-soc-at-home-a29208eebc42?source=rss------bug_bounty-5
Most people think a Security Operations Center (SOC) only exists inside massive enterprises with expensive hardware, dedicated analysts…Continue reading on Medium » (https://medium.com/@pentesterclubpvtltd/build-your-own-security-operations-center-soc-at-home-a29208eebc42?source=rss------bug_bounty-5)
When Identity Breaks! How a Single Parameter Corrupted an Authentication System
https://medium.com/@sudosu01/when-identity-breaks-how-a-single-parameter-corrupted-an-authentication-system-8d41549e1365?source=rss------bug_bounty-5
https://medium.com/@sudosu01/when-identity-breaks-how-a-single-parameter-corrupted-an-authentication-system-8d41549e1365?source=rss------bug_bounty-5
A lot has been happening lately.Continue reading on Medium » (https://medium.com/@sudosu01/when-identity-breaks-how-a-single-parameter-corrupted-an-authentication-system-8d41549e1365?source=rss------bug_bounty-5)
File Upload Attacks: Understanding the Basics
https://medium.com/@monceffennan1240/file-upload-attacks-understanding-the-basics-cb6d3ee3c29b?source=rss------bug_bounty-5
https://medium.com/@monceffennan1240/file-upload-attacks-understanding-the-basics-cb6d3ee3c29b?source=rss------bug_bounty-5
What happens when a web application lets you upload anything — and why that’s a bigger problem than most developers realize. Part 1 of the…Continue reading on Medium » (https://medium.com/@monceffennan1240/file-upload-attacks-understanding-the-basics-cb6d3ee3c29b?source=rss------bug_bounty-5)