[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Abusing Public Infrastructure to Build Your Own VirusTotal for Email: An Open-Source Secure Email Gateway Evaluation Toolkit
EFF's Short Wordlist #2, but it's reformatted to be easier to print and use!
Microsoft no longer signs Windows drivers for Process Hacker
ua-parser-js package compromised in supply chain attack
Hi guys, we found a critical vulnerability (use after free in GPU) in Google Chrome. Google rewarded us $6K for it. We shared the story on how we found it from the blog post. Also, you can find the github repository if you want to check that out. Let me know your thoughts under here please!
A step-by-step analysis of a new version of Darkside Ransomware (Colonial Pipeline attack)
Discourse SNS webhook RCE
Server overload by enforcing DHE key exchange using minimal bandwidth
Franken-phish: TodayZoo built from other phishing kits - Microsoft Security Blog
Binary Analysis Framework B2R2 v0.5.0 released.
Malware Analysis & Reports
Microsoft no Longer Signs Windows Drivers for Process Hacker
Minecraft declared the most malware-infected game
Overview on OWASP, and how to enforce best cybersecurity practices
Solutions to running x86 OS VMs on the new M1X Macbook Pro?
Tool List Sanity Check
win64 malware gen
Demonstration how Android malware steals recovery phrase from Trust Crypto Wallet without user interaction and restricts access to victims smartphone
A useful resource for beginner malware analyts
So I am sharing again...
Glary Utilities seems bad now...
Blackhat Library: Hacking techniques and research
WinRAR’s vulnerable trialware: when free software isn’t free
No "free course" spam, paywalls, or anything else against the rules. This subreddit is for novel hacking techniques, projects, questions, and blackhat culture.
State sponsored hackers breach telcos with custom malware
Bluetooth WarDriving with the nRF52
Vulnerability in OpenOffice/LibreOffice causes all unknown signature algorithms to result in valid document signatures
It's almost that time of year.
Where to purchase multiple phone numbers for SMS verification?
Studied a bit, learned something semi useful.
Cisco Hyperflex: How We Got Remote Code Execution Through Login Form and Other Findings
Hey r/blackhat! Upcoming AMA Alert: Ask Akamai's SVP and GM of Application Security anything on Tuesday, 5 October at 12:30 PM ET in r/IAmA. Get your questions in early here and we'll credit OPs when answering. See you there!
Discussion and Disclosure of Web Vulnerabilities
LinkedIn profile visit restrictions
[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!
Pentest network python tool
Solving WeCTF Include (GET/POST Requests)
Cisco Hyperflex: How We Got Remote Code Execution Through Login Form and Other Findings
Bug reporting and blog writing workshop! Plus it's Pokémon themed :)
Very simple example of an SSRF (Server Side Request Forgery) vulnerability
URL Filter Subversion
I made a video trying to explain XSS. Please feel free to leave any constructive criticism.
Beginner trying to understand WSDL, SOAP, and SOAP messages for a "Secure Web Development" course
Computer Forensics
If you knew then what you know now…
How to prove you weren't somewhere?
Changing fat32 to ntfs?
How to acquire Linux Memory with minimum effort?
DVR forensics
Best way to show Date/Time Stamp in a video recorded on an iPhone
Has anyone ever worked for TransPerfect? If so, what was your experience and pay if you don’t mind sharing? I would be a Junior forensics role
Need a tool to search through Hex/Text
Urgent: iOS iMessage meta data
New forensic file format Zff
XSS - Cross Site Scripting
Is there a alternate xss game appspot website that is vulnerable to http parameter pollution xss?
https://xss.challenge.training.hacq.me/challenges/easy01.php
Apple AirTags are vulnerable to stored XSS injection attacks
Information on how to build a XSS filter?
How to deploy a strict Content Security Policy (CSP) with Next.js • Guy Dumais
XSS Challenge: Namespace Confusion & Deobfuscation
Prototype pollution in Google Analytics - Intigriti XSS Challenge writeup
What is a website that have list of functions of patterns that leave to reflected xss and reflected dom xss?
August XSS Challenge - Intigriti
Why noscript block this xss payload?
pwned
Twitch hit by massive hack that reveals its entire source code and more
Geico data breach exposed customers' driver's license numbers
Codecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"
Mobikwik (India) KYC data leaked
$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll
American Armed Forces Mutual Aid Association hack impacted more than 161,000
CD Projekt Red 'EPICALLY pwned': Cyberpunk 2077 dev publishes ransom note after company systems encrypted
Florida city of Oldsmar's municipal water supply was almost poisoned during cyberattack, Sheriff says. A plant operator witnessed mouse movement on-screen and reverted the change
ENEL, Italian multinational manufacturer and distributor of electricity and gas with international customers, affected by data disclosure - 300,000 customers personal data leaked
Brazilian electric utility company COPEL hit by cyberattack; >1TB private data exfiltrated
Cryptography news and discussions
The Design and Evolution of OCB
LUKS encryption - SHA/WHIRLPOOL/RIPEMD-160
vanity public key grinding as unoutsourcable proof-of-work
Is It Better To Digitally Sign A Hexadecimal Hash Or Byte-Representation Of The Hash?
Rocca: An Efficient AES-based Encryption Scheme for Beyond 5G
Encrytping a USB drive to use with Andorid and Windows
Remember Crown Sterling with their "TIME AI' cryptography nonsense at Blackhat? They now have a white paper (PDF).
Cracking Random Number Generators using Machine Learning – Part 1: xorshift128
Weekly cryptography community and meta thread
Monthly cryptography wishlist thread
Hack Bloc
Firewall dropping me off from an ssh connection
[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!
Anonymous leaks gigabytes of data from alt-right web host Epik
what is die this sub?
Belarusian hackers are trying to overthrow the Lukashenko regime | Engadget
BTC Wallet Cracker TG
How Americans Can Defend Democracy Through Mass Action
Sci-Hub Targeted, Needs Rescue
Hacktivism alone won’t bring down Myanmar's military, but here’s how it can help
[Limited Time] Active Directory Pentesting Full Course - Red Team Hacking | Free Udemy Course-