[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Offensive Terraform Modules - Automated multi step offensive attack modules with Infra as Code
GitHub code scanning is now available
The /r/netsec Monthly Discussion Thread - October 2020
Forcing Firefox to Execute XSS Payloads during 302 Redirects
CertAlert - A tool to monitor SSL/TLS certs
Public Bucket Allowed Access to Images on Upcoming Google Cloud Blog Posts
Hardware Hacking Experiments - Several ways to extract firmware on embedded devices
Efficient NAT traversal using tailscale (OSS project built around Wireguard)
Identifying Airtel middleboxes that censor HTTPS traffic
Race Condition vulnerability in handling of PID by apport CVE-2020-15702
Malware Analysis & Reports
I think I got some malware called pmls64.dll, and I want to remove it.
This Chrome extension for Instagram also needs permission to read data in aliexpress, banggood and gearbest.
REvil ransomware deposits $1 million in hacker recruitment drive
[Chrome Malware] Google search first searches in one language and then in another, I tried debugging but there is something severely wrong with Chrome (not mine)
Even a coffee machine isn't spared
KryptoCibule: The Cryptostealing Malware
Avast folder suddenly empty,
Mount Locker Stealing Files, Encrypting & Demanding Ransom
kuku
How the Trickbot C2 uses rDNS to disguise as a legitimate Australian government service
Blackhat Library: Hacking techniques and research
How can I hack an atm to spew out cash....
[100% OFF] Cybersecurity Essentials - United Academy
Getting Root on oculus quest
how are big hacking groups mostly formed/gathered ? (from what you read/saw) or in other words if you were a cyber criminal how would you find an qualified mate/s without leaving any remarkable traces about you making/looking for that cooperation ?!
How is dlWordPress Spam Still Allowed to Operate? WordPress should shut it down!
Inside Amazon’s Ring Alarm System
what is the best way to mass scan the country without the ISP noticing ;) ? ( not shodan , i want 98 %live hosts)
Zerologon (CVE-2020-1472) PoC by modifying the original test tool from Secura
Technical details of CVE-2020-1472 Zerologon
How I Hacked Facebook Again! Unauthenticated RCE on MobileIron MDM
Discussion and Disclosure of Web Vulnerabilities
Data Loss Prevention Tool
Mobile Application Security
Web Cache Deception at HacktivityCon2020, HackerOne
Wapiti – free web-application vulnerability scanner
Building my website to break it...
Expensify
DVWA File Upload Medium Level: Is there any available list for "Content-Type:"?
ModSecurity Score-Based Rule Set (SBRS): Higher success rate without false-positive
SQL Injection: How to use tick/quote when it's not possible?
Web Cache Deception in WhiteHat Security’s Top 10 Application Vulnerabilities of 2019
Computer Forensics
SHA-1 in Physical Analyzer
Are there any resources that document process names and their purpose, as well as 'normal' parent/child process relationships?
[PDF] Tracking Mixed Bitcoins - Our finding shows that it is possible to track the mixed Bitcoins from the deposited Bitcoins using address taint analysis and the number of potential transaction outputs can be significantly reduced with the filtering criteria
Collect evidence on whether or not microphone was capturing sound at specific time
Extracting Timestamps from ZIP/7Z/RAR/CAB Files
Cloud Collection with Axiom
Released a legendary dragon/serpent! Orochi: The Volatility Collaborative GUI
Can a widow request LEO to use cellebrite on a deceased husband's iPhone7 in order to retrieve pictures?
KissKiss app
Decrypting a TPM+Pin image file with dislocker?
XSS - Cross Site Scripting
Hi! I think this can be useful 😁
Defend Your Web Apps from Cross-Site Scripting (XSS)
Redefining Impossible: XSS without arbitrary JavaScript - PortSwigger Research
How powerful can a XSS vulnerbility be?
Help with REGEX filter question
CSP Bypass - XSS Challenge
Any help with Imperva WAF?
XSS->Fix->Bypass: 10000$ bounty in Google Maps
Apps built using Go could be vulnerable to XSS exploits - The Daily Swig
If you need to click something to trigger the XSS, do you still consider it significant?
pwned
Fitness club company Town Sports International (parent company of numerous brands) exposed ~ 1TB of internal company data, including years of financial records and personal customer records, on a server with no authentication
US-based global insurance giant Arthur J. Gallagher hit by ransomware
Ashtabula County Ohio, USA medical center offline resulting in postponed elective procedures for patients
Blackbaud admits hackers stole banking details, passwords
Two charged for hacking NBA, NFL players' social media accounts
Azeri Navy data leaked on Russian forums
Hacker Releases Information on Las Vegas-Area Students After Officials Don’t Pay Ransom
"4 people died tonight due to waiting on [lab] results" - 400 US hospitals hit by reported nation-wide Ryuk ransomware attack on UHS Universal Health Services systems
Tyler Technologies, software vendor whose products are used to display state and local election results, has been hit by ransomware
Corpus Christi, TX school closed due to cyberattack; contacts FBI for support
Cryptography news and discussions
entropy proof
Help to understand AES / Rijndael cryptanalysis
Use weaker hash from strong hash to reduce size ?
What exactly are the components of a TLS 1.3 cipher suite?
The current consensus in the cryptography community on the decryption of the symmetric and asymmetric ciphers using quantum computers
Bulletproof TLS Newsletter Issue #69
Ciofeca Forensics - Revisiting Apple Notes (5): Encrypted Notes
Has anyone on here given a shot to the Ricky McCormick ciphers? I have been fascinated ever since i first heard about it. Quick summary in comments.
What happened to the other AES finalists?
Any ideas?
Hack Bloc
Militant neo-nazi group surfaces in Colorado
Mr Robot Season1 Episode4 - All Hacks Explained
Self Confessed Pedophile Running For Congress In Virginia
regarding rapey.co
Why the Left Should Care about Value Accounting feat. Dr. Sarah Grace Manski
Setup a Forever Free AdBlocking WireGuard Server with PiHole in the Cloud
Hacking explained in Mr Robot Season 1 Episode 1
Does anyone here know about this site? i think it should be investigated. any suggestions?
“Having said all this, a monetary commons (that may very well rely on something like the blockchain underpinning Bitcoin) will, I have no doubt, be an essential aspect of a democratised economy; of socialism.” - Yanis Varoufakis
El despertar de la revuelta: Piedra contra la bala (Sub ENG) [The Chile revolt ] with ENG subs a(A)a