Technical Information Security Content & Discussion

29 readers
1 users here now

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to...

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
476
1
Abusing gdb Features for Data Ingress & Egress (www.archcloudlabs.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/DLLCoolJ on 2023-10-23 01:55:15+00:00.

477
1
[Crypto] SSL/TLS, part 2: Toy TLS 1.2 client with TLS_DHE_RSA ciphersuites support. (yurichev.org)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/yurichev on 2023-10-22 17:38:41+00:00.

478
1
Blog Post: How to build your first hardware hacking lab (voidstarsec.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/wrongbaud on 2023-10-22 11:43:36+00:00.

479
1
closed source http1.1 tls1.2 web server (requires your security assessment) (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/rainbowvalue on 2023-10-22 06:34:09+00:00.

480
1
Microsoft Account's OAuth tokens leaking via open redirect in Harvest App (eval.blog)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/0xcrypto on 2023-10-21 17:39:46+00:00.

481
1
VMware Aria Operations for Logs CVE-2023-34051 Technical Deep Dive, IOCs, and Exploit (www.horizon3.ai)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/scopedsecurity on 2023-10-20 15:36:19+00:00.

482
1
Ghost In The Wire, Sonic In The Wall - Adventures With SonicWall - watchTowr Labs (labs.watchtowr.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/dx7r__ on 2023-10-20 11:20:07+00:00.

483
0
Exploiting Zenbleed from Chrome (vu.ls)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/poltess0 on 2023-10-20 09:24:37+00:00.

484
1
IoT-Security/Development-Lab-Setup (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/v33ruiot on 2023-10-20 08:59:54+00:00.

485
1
Protobuf Magic: Burp Extension for Deserializing Protobuf Without .proto Files (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/SuspiciousIsland2682 on 2023-10-19 20:25:52+00:00.

486
1
301party.com: The intentionally open redirect (301party.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/EightNinerNinerTwo on 2023-10-19 14:18:15+00:00.

487
1
GitHub - n0mi1k/subby: An uber fast and simple subdomain enumeration tool using DNS and web requests with support for detecting wildcard DNS records. (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/n0mi1k on 2023-10-18 17:05:32+00:00.

Check out this subdomain enumeration tool that utilises DNS and web requests to identify subdomains. It is super fast with goroutines and allows for additional settings to control the delay.

It automatically detects if the target domain uses wildcard DNS records, which messes with many traditional subdomain enumeration tools giving false results.

The goal is to make subdomain enumeration fast, simple and support any target domain.

488
1
Multiple North Korean threat actors exploiting the TeamCity CVE-2023-42793 vulnerability (www.microsoft.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/SCI_Rusher on 2023-10-18 16:56:31+00:00.

489
1
Blog post regarding GCP Domain Wide Delegation abuses (medium.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/lutzenfried on 2023-10-18 16:20:28+00:00.

490
1
I made a quick and dirty DLL spoofer in python for DLL hijacking POC's. Makes life a little easier. (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/thehunter699 on 2023-10-18 14:59:05+00:00.

491
1
The single-packet attack: making remote race-conditions 'local' (portswigger.net)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/albinowax on 2023-10-18 13:04:25+00:00.

492
1
Snapshot fuzzing Windows' direct composition with WTF (blog.talosintelligence.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/poltess0 on 2023-10-18 08:23:56+00:00.

493
1
Getting RCE in Chrome with incomplete object initialization in the Maglev compiler (github.blog)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/poltess0 on 2023-10-18 07:17:54+00:00.

494
1
Synology Replaces Weak PRNG in its NAS Devices, Shuts Down Account Takeover (claroty.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/derp6996 on 2023-10-17 19:11:53+00:00.

495
1
PsMapExec - Windows and Active Directory Lateral Movement Tool (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/AkimboViper on 2023-10-17 17:45:37+00:00.

496
1
Bluetooth paring notifications can be now send to iOS, Android and Windows at once using Flipper Zero or any Android (www.mobile-hacker.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/barakadua131 on 2023-10-17 16:36:34+00:00.

497
1
Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data (github.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/lutzenfried on 2023-10-17 16:13:54+00:00.

498
1
Finding a POP chain on a common Symfony bundle : part 2 (www.synacktiv.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/meowerguy on 2023-10-17 12:59:24+00:00.

499
1
Widespread Cisco IOS XE Implants in the Wild (vulncheck.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/chicksdigthelongrun on 2023-10-17 11:54:39+00:00.

500
1
BLE Spam allows now to send unwanted notifications to iOS, Android and Windows at once using Flipper Zero or Android (www.mobile-hacker.com)
submitted 2 years ago by [email protected] to c/[email protected]
0 comments fedilink
 
 
This is an automated archive.

The original was posted on /r/netsec by /u/barakadua131 on 2023-10-17 10:13:03+00:00.

view more: ‹ prev next ›