/r/netsec - Information Security News & Discussion

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges

By: ／u／nibblesec — October 2^nd 2024 at 17:54

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Applying security engineering to make phishing harder

By: ／u／nibblesec — September 19^th 2024 at 13:38

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Windows Installer Custom Actions Privilege Escalation Vulnerability

By: ／u／nibblesec — July 18^th 2024 at 07:50

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

A Race to the Bottom - Database Transactions Undermining Your AppSec

By: ／u／nibblesec — July 11^th 2024 at 17:05

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery (CSPT2CSRF)

By: ／u／nibblesec — July 2^nd 2024 at 20:45

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Threat modeling an IdP compromise, and hardening (Teleport specific). Full tech paper.

By: ／u／nibblesec — June 21^st 2024 at 08:28

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

A Look at Software Composition Analysis. It’s time to ignore most of dependency alerts.

By: ／u／nibblesec — March 15^th 2024 at 14:33

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

New Visual Studio Code plugin for IaC security (plus collaboration, semgrep integration)

By: ／u／nibblesec — January 30^th 2024 at 16:40

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Kubernetes Scheduling And Secure Design

By: ／u／nibblesec — January 24^th 2024 at 08:52

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Session Hijacking Visual Exploitation, New release with Office Documents Poisoning

By: ／u／nibblesec — November 7^th 2023 at 10:47

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

A Prime on Client-side JavaScript Instrumentation

By: ／u／nibblesec — September 25^th 2023 at 08:28

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Session Hijacking Visual Exploitation (SHVE). New tool for XSS Exploitation

By: ／u／nibblesec — September 1^st 2023 at 23:31

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Huawei Theme Manager Arbitrary Code Execution Vulnerability

By: ／u／nibblesec — July 26^th 2023 at 10:33

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Streamlining Websocket Pentesting with wsrepl

By: ／u／nibblesec — July 18^th 2023 at 12:35

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Messing Around With AWS Batch For Privilege Escalations

By: ／u／nibblesec — June 14^th 2023 at 08:47

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Reversing Python Pickles

By: ／u／nibblesec — June 1^st 2023 at 15:54

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

The Case For Improving Crypto Wallet Security

By: ／u／nibblesec — March 28^th 2023 at 15:16

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

NPM request Library SSRF Cross Protocol Redirect Bypass

By: ／u／nibblesec — March 16^th 2023 at 13:15

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Dirty Arbitrary File Write to RCE in Python uWSGI

By: ／u／nibblesec — February 28^th 2023 at 13:47

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Introducing Proxy Enriched Sequence Diagrams (PESD). New Burp Plugin.

By: ／u／nibblesec — February 17^th 2023 at 11:33

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Tampering User Attributes In AWS Cognito User Pools

By: ／u／nibblesec — January 24^th 2023 at 09:48

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

ImageMagick Security Policy Evaluator

By: ／u／nibblesec — January 10^th 2023 at 11:22

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

A Server Side Request Forgery protection library for Golang

By: ／u／nibblesec — December 13^th 2022 at 13:52

submitted by /u/nibblesec
[link] [comments]

/r/netsec - Information Security News & Discussion

Intro to AJP, AJPFuzzer and re-discovering Ghostcat

By: ／u／nibblesec — November 15^th 2022 at 10:48

submitted by /u/nibblesec
[link] [comments]