/r/netsec - Information Security News & Discussion
How to secure your Open Source Project – A quick guide for developers
December 8^th 2022 at 15:48

How to secure your Open Source Project – A quick guide for developers

By: ／u／TupleType1

submitted by /u/TupleType1
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 8^th 2022 at 15:48

/r/netsec - Information Security News & Discussion
Using JSON in a New Generic Web Application Firewall Bypass
December 8^th 2022 at 15:34

Using JSON in a New Generic Web Application Firewall Bypass

By: ／u／derp6996

submitted by /u/derp6996
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 8^th 2022 at 15:34

/r/netsec - Information Security News & Discussion
cli google search client written by chatgpt ai - bypasses captcha and rate limiting
December 8^th 2022 at 14:29

cli google search client written by chatgpt ai - bypasses captcha and rate limiting

By: ／u／endless

submitted by /u/endless
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 8^th 2022 at 14:29

/r/netsec - Information Security News & Discussion
Shoggoth
December 8^th 2022 at 13:00

Shoggoth

By: ／u／DarkGrejuva

Shoggoth: Asmjit Based Polymorphic Encryptor

submitted by /u/DarkGrejuva
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 8^th 2022 at 13:00

/r/netsec - Information Security News & Discussion
GitHub - klezVirus/SilentMoonwalk: PoC Implementation of a TRUE call stack spoofer
December 8^th 2022 at 09:54

GitHub - klezVirus/SilentMoonwalk: PoC Implementation of a TRUE call stack spoofer

By: ／u／R3dCr0wn

submitted by /u/R3dCr0wn
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 8^th 2022 at 09:54

/r/netsec - Information Security News & Discussion
Firewalls under the hood - UFW
December 7^th 2022 at 22:32

Firewalls under the hood - UFW

By: ／u／doitsukara

submitted by /u/doitsukara
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 7^th 2022 at 22:32

PyPI-distributed malicious package campagin tying into GitHub accounts and embedded into repos to disguise its intention - FULL ANALYSIS

By: ／u／dalmoz

submitted by /u/dalmoz
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 7^th 2022 at 15:35

/r/netsec - Information Security News & Discussion
RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass
December 7^th 2022 at 02:31

RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 7^th 2022 at 02:31

/r/netsec - Information Security News & Discussion
An open source SMS gateway for pentest projects
December 6^th 2022 at 21:25

An open source SMS gateway for pentest projects

By: ／u／aunga

submitted by /u/aunga
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 6^th 2022 at 21:25

/r/netsec - Information Security News & Discussion
The Last Breath of Our Netgear RAX30 Bugs - A Tragic Tale before Pwn2Own Toronto 2022
December 6^th 2022 at 14:51

The Last Breath of Our Netgear RAX30 Bugs - A Tragic Tale before Pwn2Own Toronto 2022

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 6^th 2022 at 14:51

/r/netsec - Information Security News & Discussion
Moobot Uses a Fake Vulnerability
December 6^th 2022 at 14:22

Moobot Uses a Fake Vulnerability

By: ／u／chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 6^th 2022 at 14:22

/r/netsec - Information Security News & Discussion
[Help] I'm looking for a downloadable list of all CVEs including vulnerability
December 5^th 2022 at 22:30

[Help] I'm looking for a downloadable list of all CVEs including vulnerability

By: ／u／much_thanks

submitted by /u/much_thanks
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 22:30

/r/netsec - Information Security News & Discussion
Default NETGEAR Router Configuration Allows Attacks from WAN
December 5^th 2022 at 17:22

Default NETGEAR Router Configuration Allows Attacks from WAN

By: ／u／dinobyt3s

submitted by /u/dinobyt3s
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 17:22

/r/netsec - Information Security News & Discussion
Hijacking GitHub Repositories by Deleting and Restoring Them
December 5^th 2022 at 17:00

Hijacking GitHub Repositories by Deleting and Restoring Them

By: ／u／whisperingmime

submitted by /u/whisperingmime
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 17:00

/r/netsec - Information Security News & Discussion
A Detailed Analysis of The Last Version of REvil Ransomware [PDF]
December 5^th 2022 at 15:00

A Detailed Analysis of The Last Version of REvil Ransomware [PDF]

By: ／u／CyberMasterV

submitted by /u/CyberMasterV
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 15:00

/r/netsec - Information Security News & Discussion
Release of EMBA firmware analyzer in version 1.2.0 - aka London Calling
December 5^th 2022 at 13:27

Release of EMBA firmware analyzer in version 1.2.0 - aka London Calling

By: ／u／_m-1-k-3_

submitted by /u/_m-1-k-3_
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 13:27

/r/netsec - Information Security News & Discussion
Slides: Demystifying Practical DoS Attacks
December 5^th 2022 at 06:48

Slides: Demystifying Practical DoS Attacks

By: ／u／mazen160

submitted by /u/mazen160
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 06:48

“In startups, your junior dev is more of a threat to security than North Korea.” Appreciate a security expert who knows startups shouldn't waste resources overdoing security when they still don't have product-market fit.

By: ／u／maddening_conversati

submitted by /u/maddening_conversati
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 5^th 2022 at 00:54

/r/netsec - Information Security News & Discussion
OWASP Top 10 CI/CD Security Risks project released
December 4^th 2022 at 20:26

OWASP Top 10 CI/CD Security Risks project released

By: ／u／Hefty_Knowledge_7449

submitted by /u/Hefty_Knowledge_7449
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 4^th 2022 at 20:26

/r/netsec - Information Security News & Discussion
GitHub Actions - Artifact Poisoning Vulnerability
December 4^th 2022 at 16:09

GitHub Actions - Artifact Poisoning Vulnerability

By: ／u／dotanoam

submitted by /u/dotanoam
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 4^th 2022 at 16:09

/r/netsec - Information Security News & Discussion
[KIS-2022-06] Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability
December 3^rd 2022 at 14:42

[KIS-2022-06] Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability

By: ／u／eg1x

submitted by /u/eg1x
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 3^rd 2022 at 14:42

/r/netsec - Information Security News & Discussion
Pre-Auth RCE with CodeQL in Under 20 Minutes
December 3^rd 2022 at 12:49

Pre-Auth RCE with CodeQL in Under 20 Minutes

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 3^rd 2022 at 12:49

/r/netsec - Information Security News & Discussion
kitabisa/teler release v2.0.0-dev
December 3^rd 2022 at 08:13

kitabisa/teler release v2.0.0-dev

By: ／u／dwisiswant0

submitted by /u/dwisiswant0
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 3^rd 2022 at 08:13

/r/netsec - Information Security News & Discussion
NVIDIA Fixes 25 GPU Display Driver Vulnerabilities
December 2^nd 2022 at 13:22

NVIDIA Fixes 25 GPU Display Driver Vulnerabilities

By: ／u／EsbenD_Lansweeper

submitted by /u/EsbenD_Lansweeper
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 2^nd 2022 at 13:22

/r/netsec - Information Security News & Discussion
Redigo — New Redis Backdoor Malware
December 2^nd 2022 at 11:25

Redigo — New Redis Backdoor Malware

By: ／u／gfdgfbal

submitted by /u/gfdgfbal
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 2^nd 2022 at 11:25

/r/netsec - Information Security News & Discussion
Certpotato : using adcs to privesc from service accounts to local system
December 2^nd 2022 at 11:17

Certpotato : using adcs to privesc from service accounts to local system

By: ／u／qwerty0x41

submitted by /u/qwerty0x41
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 2^nd 2022 at 11:17

/r/netsec - Information Security News & Discussion
VLC : Integer overflow in vnc module - CVE-2022-41325
December 2^nd 2022 at 09:29

VLC : Integer overflow in vnc module - CVE-2022-41325

By: ／u／jeandrew

submitted by /u/jeandrew
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 2^nd 2022 at 09:29

/r/netsec - Information Security News & Discussion
XSS on account.leagueoflegends.com via easyXDM [2016]
December 2^nd 2022 at 05:45

XSS on account.leagueoflegends.com via easyXDM [2016]

By: ／u／bored-engineer

submitted by /u/bored-engineer
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 2^nd 2022 at 05:45

/r/netsec - Information Security News & Discussion
Visual Studio Code: Remote Code Execution
December 2^nd 2022 at 00:12

Visual Studio Code: Remote Code Execution

By: ／u／Zemnmez

submitted by /u/Zemnmez
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 2^nd 2022 at 00:12

/r/netsec - Information Security News & Discussion
Platform certificates used to sign Android malware
December 1^st 2022 at 23:44

Platform certificates used to sign Android malware

By: ／u／ScottContini

submitted by /u/ScottContini
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 23:44

/r/netsec - Information Security News & Discussion
UART Essential for Pentester
December 1^st 2022 at 22:11

UART Essential for Pentester

By: ／u／Void_Sec

submitted by /u/Void_Sec
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 22:11

/r/netsec - Information Security News & Discussion
Windows Exploitation Challenge - Blue Frost Security 2022 - VoidSec
December 1^st 2022 at 17:01

Windows Exploitation Challenge - Blue Frost Security 2022 - VoidSec

By: ／u／Void_Sec

submitted by /u/Void_Sec
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 17:01

/r/netsec - Information Security News & Discussion
Huawei Security Hypervisor Vulnerability
December 1^st 2022 at 16:21

Huawei Security Hypervisor Vulnerability

By: ／u／jeandrew

submitted by /u/jeandrew
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 16:21

/r/netsec - Information Security News & Discussion
How we found a supply-chain vulnerability in IBM Cloud Databases for PostgreSQL
December 1^st 2022 at 15:16

How we found a supply-chain vulnerability in IBM Cloud Databases for PostgreSQL

By: ／u／sagitz_

submitted by /u/sagitz_
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 15:16

/r/netsec - Information Security News & Discussion
The CI/CD Goat just got wilder! - A new challenge to the deliberately vulnerable CI/CD environment
December 1^st 2022 at 14:41

The CI/CD Goat just got wilder! - A new challenge to the deliberately vulnerable CI/CD environment

By: ／u／TupleType

submitted by /u/TupleType
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 14:41

/r/netsec - Information Security News & Discussion
Unauthenticated Command Injection in Asus M25 NAS
December 1^st 2022 at 14:38

Unauthenticated Command Injection in Asus M25 NAS

By: ／u／g_e_r_h_a_r_d

submitted by /u/g_e_r_h_a_r_d
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 14:38

/r/netsec - Information Security News & Discussion
Bypassing Web Application Firewalls
December 1^st 2022 at 11:21

Bypassing Web Application Firewalls

By: ／u／ma-ni

submitted by /u/ma-ni
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 11:21

/r/netsec - Information Security News & Discussion
Remote code execution bug in FreeBSD's ping (CVE-2022-23093)
December 1^st 2022 at 04:10

Remote code execution bug in FreeBSD's ping (CVE-2022-23093)

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 04:10

/r/netsec - Information Security News & Discussion
Notice of Recent Security Incident - The LastPass Blog
December 1^st 2022 at 02:25

Notice of Recent Security Incident - The LastPass Blog

By: ／u／svmseric

submitted by /u/svmseric
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 02:25

Race condition in snap-confine's must_mkdir_and_open_with_perms() (CVE-2022-3328) - SUID-root program installed by default on Ubuntu

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 01:53

/r/netsec - Information Security News & Discussion
Black Hat USA 2022 Conference Recordings
December 1^st 2022 at 00:16

Black Hat USA 2022 Conference Recordings

By: ／u／sanitybit

submitted by /u/sanitybit
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 00:16

/r/netsec - Information Security News & Discussion
RFC 8628 lets you phish people even if they're using WebAuthn
December 1^st 2022 at 00:14

RFC 8628 lets you phish people even if they're using WebAuthn

By: ／u／sanitybit

submitted by /u/sanitybit
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
December 1^st 2022 at 00:14

Multiversity by @wefuzz_io, a collection of amazing resources for Hackers and Developers to learn, develop, showcase and contribute to the future of Web3 Security

By: ／u／ant4g0nist

submitted by /u/ant4g0nist
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 30^th 2022 at 18:19

/r/netsec - Information Security News & Discussion
New details on commercial spyware vendor Variston
November 30^th 2022 at 18:06

New details on commercial spyware vendor Variston

By: ／u／YogiBerra88888

submitted by /u/YogiBerra88888
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 30^th 2022 at 18:06

/r/netsec - Information Security News & Discussion
Building Policy Gate for DevSecOps using Open Policy Agent
November 30^th 2022 at 10:24

Building Policy Gate for DevSecOps using Open Policy Agent

By: ／u／nicksthehacker_

submitted by /u/nicksthehacker_
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 30^th 2022 at 10:24

/r/netsec - Information Security News & Discussion
SGX.Fail - Overview of SGX Attacks
November 30^th 2022 at 02:29

SGX.Fail - Overview of SGX Attacks

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 30^th 2022 at 02:29

/r/netsec - Information Security News & Discussion
Need for speed: static analysis version
November 29^th 2022 at 22:12

Need for speed: static analysis version

By: ／u／pabloest

submitted by /u/pabloest
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 29^th 2022 at 22:12

/r/netsec - Information Security News & Discussion
Looting Microsoft Configuration Manager
November 29^th 2022 at 21:34

Looting Microsoft Configuration Manager

By: ／u／1njected

submitted by /u/1njected
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 29^th 2022 at 21:34

/r/netsec - Information Security News & Discussion
Xiongmai IoT Exploitation
November 29^th 2022 at 20:20

Xiongmai IoT Exploitation

By: ／u／chicksdigthelongrun

submitted by /u/chicksdigthelongrun
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 29^th 2022 at 20:20

/r/netsec - Information Security News & Discussion
Subdomain Enumeration with DNSSEC
November 29^th 2022 at 12:52

Subdomain Enumeration with DNSSEC

By: ／u／doitsukara

submitted by /u/doitsukara
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 29^th 2022 at 12:52

/r/netsec - Information Security News & Discussion
The Art of Bypassing Kerberoast Detections with Orpheus
November 29^th 2022 at 01:44

The Art of Bypassing Kerberoast Detections with Orpheus

By: ／u／sanitybit

submitted by /u/sanitybit
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 29^th 2022 at 01:44

/r/netsec - Information Security News & Discussion
Beating Plagiarism Checkers with a Custom Font
November 28^th 2022 at 23:54

Beating Plagiarism Checkers with a Custom Font

By: ／u／Exact-Practice-8658

submitted by /u/Exact-Practice-8658
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 28^th 2022 at 23:54

/r/netsec - Information Security News & Discussion
subzuf – a smart DNS response-guided subdomain fuzzer
November 28^th 2022 at 19:03

subzuf – a smart DNS response-guided subdomain fuzzer

By: ／u／feecle

submitted by /u/feecle
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 28^th 2022 at 19:03

/r/netsec - Information Security News & Discussion
Exception(al) Failure - Breaking the STM32F1 Read-Out Protection
November 28^th 2022 at 15:13

Exception(al) Failure - Breaking the STM32F1 Read-Out Protection

By: ／u／Gallus

submitted by /u/Gallus
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 28^th 2022 at 15:13

/r/netsec - Information Security News & Discussion
ransomwhere: a ransomware sample to test out your ransomware response strategy.
November 28^th 2022 at 09:41

ransomwhere: a ransomware sample to test out your ransomware response strategy.

By: ／u／nindustries

submitted by /u/nindustries
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 28^th 2022 at 09:41

/r/netsec - Information Security News & Discussion
Heap_detective is an open-source static analysis tool that finds pitfalls in heap memory usage in C and C++.
November 28^th 2022 at 02:32

Heap_detective is an open-source static analysis tool that finds pitfalls in heap memory usage in C and C++.

By: ／u／CoolerVoid

submitted by /u/CoolerVoid
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 28^th 2022 at 02:32

/r/netsec - Information Security News & Discussion
Hacking Smartwatches for Spear Phishing – Red Team Ops – Cybervelia
November 27^th 2022 at 18:51

Hacking Smartwatches for Spear Phishing – Red Team Ops – Cybervelia

By: ／u／Necessary-Reality-80

submitted by /u/Necessary-Reality-80
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 27^th 2022 at 18:51

/r/netsec - Information Security News & Discussion
Exploiting an N-day vBulletin PHP Object Injection Vulnerability
November 26^th 2022 at 17:21

Exploiting an N-day vBulletin PHP Object Injection Vulnerability

By: ／u／eg1x

submitted by /u/eg1x
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 26^th 2022 at 17:21

/r/netsec - Information Security News & Discussion
So, you want to get into bug bounties?
November 26^th 2022 at 09:31

So, you want to get into bug bounties?

By: ／u／Mempodipper

submitted by /u/Mempodipper
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 26^th 2022 at 09:31

/r/netsec - Information Security News & Discussion
Exploiting CORS Misconfigurations
November 26^th 2022 at 08:39

Exploiting CORS Misconfigurations

By: ／u／6W99ocQnb8Zy17

submitted by /u/6W99ocQnb8Zy17
[link] [comments]

🏷️ My labels
- ❌
Article tags
- ❌
- r/netsec
November 26^th 2022 at 08:39