[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Software Supply Chain Security - Implementing Google's SLSA Framework and CNCF's Best Practices
Beginners Guide to 0day/CVE AppSec Research
Apache Dubbo: All roads lead to RCE
CVSS 9.8 vulnerabilities in vmware vCenter Server
CVE-2021-38112: AWS WorkSpaces Remote Code Execution
Mama Always Told Me Not to Trust Strangers without Certificates (Moar Netgear Pwnage)
The First and Last Time AIM Was Hacked
SSD Advisory – macOS Finder RCE: A vulnerability in macOS Finder system allows remote attackers to trick users into running arbitrary commands.
OM I GOOD? We developed a flexible scanner you can use to inspect your Azure infrastructure and understand if you are exposed to OMIGOD, the OMI security vulnerabilities. Feedback and suggestions are welcome. Enjoy!
Tutorial: Return-to-libc
Malware Analysis & Reports
The Biden Administration Attacks Crypto Pipelines to Stop Ransomware
US Sanctions First Crypto Exchange For Alleged Ransomware Ties
How To Install REMnux on Windows 10 Hyper-V | Tutorial
Microsoft smart screen
Android malware analysis: preparation
FireEye Capa Now Supporting ELF Files
Lockbit 2.0 questions
Massive scanning from Russian IP address for vulnerable Linux machines on Azure
Roland Cloud vst's trojan
Kaspersky constantly spamming "Access Denied" reports on svchost.exe process.
Blackhat Library: Hacking techniques and research
Docker for CTFs (Application Virtualization)
Terminal inquiry
What are the ways that your activity can be traced back to you through TOR ?
Life Problems | Risk VS Reward
Macbook Backdoor Access
John-The-Ripper Password Cracking: Rule Creation
How I Hacked A Hotel Just Using My Phone
What's Your Processor (CPU) Actually Doing?
Anonymous has hacked Epik
Bypass Server Upload Restrictions
Discussion and Disclosure of Web Vulnerabilities
Docker for CTFs (Application Virtualization)
Very simple example of an SSRF (Server Side Request Forgery) vulnerability
URL Filter Subversion
I made a video trying to explain XSS. Please feel free to leave any constructive criticism.
Beginner trying to understand WSDL, SOAP, and SOAP messages for a "Secure Web Development" course
Burp Suite Certification
Union based sql injection
PoC for a SQL Injection in Rapid7 Nexpose
PoC for Cisco ASA unauth XSS
Choosing authentication mechanism for SPA + GraphQL. Advice needed.
Computer Forensics
Is File System Analysis by Brian Carrier still relevant?
Vmdk Flat? No OS?
Anyone want a For500 practice test?
Amazon AWS EC2 Forensic Memory Acquisition - LiME
Which files have been accessed and leaked
Question about pursuing computer forensics.
FTK Imager administrator rights
Message Crawler - why are the "Text" column cells blank unless i click on them?
EC2 Memory Forensics Tips
Windows, local or online account?
XSS - Cross Site Scripting
How to deploy a strict Content Security Policy (CSP) with Next.js • Guy Dumais
XSS Challenge: Namespace Confusion & Deobfuscation
Prototype pollution in Google Analytics - Intigriti XSS Challenge writeup
What is a website that have list of functions of patterns that leave to reflected xss and reflected dom xss?
August XSS Challenge - Intigriti
Why noscript block this xss payload?
Does create a xss payload that bypass the website content security policy, effective bypass its x-xss protection and web application firewall?
What are the holes in my Content Security Policy?
Xss methodology 2021
How should I bypass this filter?
pwned
Geico data breach exposed customers' driver's license numbers
Codecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"
Mobikwik (India) KYC data leaked
$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll
American Armed Forces Mutual Aid Association hack impacted more than 161,000
CD Projekt Red 'EPICALLY pwned': Cyberpunk 2077 dev publishes ransom note after company systems encrypted
Florida city of Oldsmar's municipal water supply was almost poisoned during cyberattack, Sheriff says. A plant operator witnessed mouse movement on-screen and reverted the change
ENEL, Italian multinational manufacturer and distributor of electricity and gas with international customers, affected by data disclosure - 300,000 customers personal data leaked
Brazilian electric utility company COPEL hit by cyberattack; >1TB private data exfiltrated
Major Brazilian electric utility company Eletrobras hit by ransomware
Cryptography news and discussions
Bandersnatch: a fast elliptic curve built over the BLS12-381 scalar field
Why does RNGCryptoServiceProvider fail the NIST test for randomness
I'm writing a communication protocol standard for LoRa and want to include cryptography at the transport layer.. I have questions
A little help with Montgomery ladder implementation
What Math Courses Should I Take If I Want To Get Into Studying Zero-Knowledge Proofs?
Promoting Misuse-Resistance in PASETO Libraries
Best approach for requiring two keys to compute a symmetric key?
Automatic cipher suite ordering in crypto/tls
If you copied any of these popular StackOverflow encryption code snippets, then you coded it wrong
How does /dev/urandom work?
Hack Bloc
Docker for CTFs (Application Virtualization)
Setup a Computer, Inside Your Computer (Virtualization)
Anonymous leaks gigabytes of data from alt-right web host Epik
what is die this sub?
Belarusian hackers are trying to overthrow the Lukashenko regime | Engadget
BTC Wallet Cracker TG
How Americans Can Defend Democracy Through Mass Action
Sci-Hub Targeted, Needs Rescue
Hacktivism alone won’t bring down Myanmar's military, but here’s how it can help
[Limited Time] Active Directory Pentesting Full Course - Red Team Hacking | Free Udemy Course-