[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Technical Information Security Content & Discussion
Gigabyte Bios Update System Insecure and Vulnerable to Supply Chain Attack
Reversing Python Pickles
TyphoonCon Capture The Flag 2023 - specially crafted challenges alongside fantastic prizes
Printerlogic Multiple Vulnerabilities - Published at Full Disclosure
[CVE-2023-33243] STARFACE: Authentication with Password Hash Possible
CSP Bypass Unveiled: The Hidden Threat of Bookmarklets
[Fixed] [CVE-2021-33690] SSRF vulnerability in SAP NetWeaver DI
Welcome New Moderators!
chonked pt.1: MiniDLNA 1.3.2 HTTP Chunk Parsing Heap Overflow - Root Cause Analysis
Bypassing SELinux with init_module
Malware Analysis & Reports
Malware Detection Evasion with Debugging | TryHackMe Dynamic Malware Analysis
Intro to Malware Analysis Module - TryHackMe
Radare2 Power Ups | Delivering Faster macOS Malware Analysis With r2 Customization
Barracuda zero-day abused since 2022 to drop new malware, steal data
VirusTotal Says That Bkav Pro Thinks That FontForge Is Malicious.
Questions for any Malware Analysts
Malvertising via brand impersonation is back again
Dynamic Malware Analysis with Regshot | TryHackMe
Dynamic Malware Analysis with Process Explorer | TryHackMe
Easy malware samples
Blackhat Library: Hacking techniques and research
Want to Know about Two Powerful Operating System, Checkout this Blog post, in this blog, i will walk through the Comparison between BlackArch vs Kali Linux.
Want to Know about Browser Based Kali Linux and setup of Kali Linux on Azure, Checkout this Blog Post.
Threat actor behind sale of U.S congress members' health data is now wanted by various agencies in the U.S., AU, UK, CA, and NZ.
The Self Destructing USB Drive is Ready!
Need help bruteforcing old Word docs
Largest global cybercrime forum, Raidforums, database leaked with 480,000 users.
[RedTeam] How really useful is Metasploit APK trojanizer?
MaccaroniC2 — Empowering Command & Control using AsyncSSH
How to send an anonymous email?
How can I prove where an email/google number is coming from?
Discussion and Disclosure of Web Vulnerabilities
Columbus Project - A blazingly fast, API first subdomain discovery service.
you guys vs chatgpt
Awesome Hacker Search Engines
cariddi v1.3.1 is out🥳
2023's Least and Most Secure Authentication Methods
Web Security Cert comparison
Fortifying Vue.js Applications: Common Security Risks and Solutions
Deep Dive into open-appsec Machine Learning Technology
Bypassing Cloudflare WAF: XSS via SQL Injection
Tailscale bug allowed a person to share nodes from other tailnets without auth
Computer Forensics
Where is IOS Safari session data (opened tab) is located in iTunes backup?
Malware Scand
iPhone 14 - IOS 16.4.1 FFS Data Extraction!
UFED VS Xiaomi Note 4
Looking for more training Images is Digital Corpora good?
Training for proper imaging with write blocker
Just got an entry-level job in digital forensics. Any tips for a newbie?
How do i transition from SOC analyst to DFIR?
Yara scanning PDF files
Memory acquisition
XSS - Cross Site Scripting
Does XSS exists in framework like React, Vue and Angular?
Microsoft Patches 'Dangerous' RCE/XSS Flaw in Azure Cloud Service
How to get a flag using xss
Oh, self-XSS is harmle
New XSS Hunter host Truffle Security faces privacy backlash - PortSwigger (Updated)
(Lab Environment) Help - Pass a cookie from vuln website to malicious db.
can't even do level 2
i was scanning sites for XSS vulns while doing bug bounties I found these are these worth reporting
Is parseHTML() executes scripts in event handlers (CVE-2015-9251) a vulnerability or no?
Vulnerability Tutorial: How to bypass CSP
pwned
KFC, Pizza Hut owner discloses data breach after ransomware attack
Western Digital says criminals stole data in 'network security' breach; led to disruption of business operations and services including My Cloud online NAS
Fresh produce giant Dole discloses employee data breach after February ransomware attack that resulted in delays and shortages of Dole products on store shelves for over a week
Automaker Ferrari discloses data breach after receiving ransom demand
CISA: Multiple APTs exploited U.S. Government IIS Server, had access to a "federal civilian agency" from August to January 2023
Colorado city of Denver Public Schools hit by data breach; includes employee fingerprints, bank account numbers, driver's license numbers, passport numbers, student ID numbers, more
California City of Oakland's ransomware: employees' personal information released by cyberthieves - including data on senior officials
Spanish "Hospital Clinic de Barcelona" crippled by ransomware, forcing cancellation of 150 operations and ~3,000 patient checkups
TV-provider Dish Network's outage starting last week is due to ransomware, company finally admits
U.S. Marshals Service hit by ransomware attack; sensitive law enforcement data stolen incl. investigations data, employee data, and more
Cryptography news and discussions
Why don't password managers use Key Management Services (KMS)?
Consider a system in which DES is used to encrypt simple, short HTTP requests in which the first three Bytes always correspond to the GET character sequence. How many encrypted messages is it necessary intercept to be reasonably sure of identifying the key used for encryption?
Simulated annealing to find the key ?
The peculiarities of security maintainership with Filippo Valsorda
You have "b=L1 XOR f(a,K)" and "a=f(L1 XOR b,K)" where a and b are known, and L1 and K are not known. Function "f" is invertible. Find L1 or K. Is it possible to do it?
FHE.org Meetup: Efficient TFHE Bootstrapping in the Multiparty Setting, Thu, Jun 1, 2023, 4:00 PM
Weekly cryptography community and meta thread
Sequency, A Powerful C++ Library for Random Numbers Generation!
My professor said that if "f" function in a Deistel cipher (like DES) was invertible, it would be unsafe. She said the same thing also for the "MGF" function in OAEP method (used to fix chosen ciphertext attack in RSA). Why would it be unsafe? How an an attacker exploit the invertibility?
do 256-bit keys really matter with ECC?
Hack Bloc
Hactivists say they hacked Belarus rail system to stop Russian military buildup
Can anyone here be my free "hacker friend"?
How can I hack a whatsapp account?
Reccomendations
The Internet's Own Boy - The Story of Aaron Swartz
Hacktivism as a social movement is back
Why did no one show up to the MMM in Los Angeles?
where do I find a million mask march meetup?
Firewall dropping me off from an ssh connection
[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!