[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
I’m putting a WiFi router into a wall charger (Part 1)
RetroArch for Windows - Versions 1.9.0 - 1.9.4 (High-Risk Vuln)
Finding Privilege Escalation Vulnerabilities in Windows using Process Monitor
Adversary emulation with Prelude Operator and Elastic Security
Three investigation Workflows to reduce FALSE POSITIVE ALERTS - AWS; OKTA; CYREN
[crypto] Critical Bug Identified in 88mph Awarded with $42,069 Bounty | iosiro
Exploiting outdated Apache Airflow instances
CVE-2019-17240 - Bludit 3.2.9 Auth Bruteforce Bypass in Go lang
Open-source libraries and tools to perform fully homomorphic encryption (FHE)
Technical descriptions of 0days found - EC-CUBE, SoyCMS, BaserCMS
Malware Analysis & Reports
Offensive Approach to Online Sandboxes #1 - ANY.RUN
Using Spotify Playlists as Malware CDN
Deep Dive Malware Analysis Series Of Hermes Ransomware Pt 3 - Crypto Operations
Investigating Cerber Ransomware with Splunk | TryHackMe
26M Logins Stolen from PCs by Unnamed Malware
Modern Ransomware's Double Extortion Tactics
Inside the SystemBC Malware-As-A-Service
PE Malware Machine Learning Dataset
FiveAlpha.exe (Trojan) Analysis Paper
Malware Dataset with .bin files for Deep learning
Blackhat Library: Hacking techniques and research
A completely-free (as in free beer) hacking school
Author spoofing in Google Colaboratory
How do I track the source of an image from social media or other sites when google reverse image search dont work?
Cheap Italy Numbers for SMS verification
ASP.NET Cryptography for Pentesters
SSRF Cheat Sheet & Bypass Techniques
Is it safe to sell old magnetic hard drives if they've been overwritten with 0s and 1s?
The full story of the rsa hack
Modifying kernel page tables
micromatic: happy hunting, I tried to get in touch with the lead programmers, but they ignored it. https://www.micromatic.no/ I got 15 different IP with the same device connected in the range of x.x.x.1-254, where it shows when the owners are on vacation, at what time, what is their SSID, IP...
Discussion and Disclosure of Web Vulnerabilities
[FREE GIFT] SQL Injections Unlocked Course — Giving Away Honestly, Not really a Promotion ;)
Does CSRF attacks really work?
Researching how organizations help developers tackle application security
Fully automate your bug bounty with Nuclei and a sprinkle of bash
[CVE-2021-28379] Abusing file uploads to get an SSH backdoor
Around 200 attacks per minute while testing a HoneyPot
Does your WAF have False Positive?
Digest authentication with ha1 generated by SHA256Hex on https - is there any known issues with this?
Attacking npm by using Abandoned Resources [LIVE]
Attack-Aware Web Applications Research
Computer Forensics
PE decompilers
Visualization for Network Forensics - Research
Sms.db (ios 13.x/14.x) - how reliable is the RowID sequence for determining deleted messages?
Slack (messenger) export issues?
Question on evidence number assignment
Duplicates in axiom
Malware traffic analysis 2 writeup
Would the Volume Shadow Service copies be deleted if the user does a "wipe free space" command?
Can files/data that has been overwritten multiple times be recovered on a forensic level?
Passed my GNFA!!!
XSS - Cross Site Scripting
How do to see a xss reflect with owasp zap and burpsuite?
Applications for xxs
How does exploit xss through devtools console work?
XSS vulnerability found in popular WYSIWYG website editor | ZDNet
XSS Vulnerability In ReDi Restaurant Reservation WordPress Plugin
How to find any random string that leave to xss to be exploit in the website after injected it in the website search box?
Challenge
Insecure default in Aurelia framework allows XSS in data binds
Challenge guidance request
Xss workflow
pwned
Geico data breach exposed customers' driver's license numbers
Codecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"
Mobikwik (India) KYC data leaked
$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll
American Armed Forces Mutual Aid Association hack impacted more than 161,000
CD Projekt Red 'EPICALLY pwned': Cyberpunk 2077 dev publishes ransom note after company systems encrypted
Florida city of Oldsmar's municipal water supply was almost poisoned during cyberattack, Sheriff says. A plant operator witnessed mouse movement on-screen and reverted the change
ENEL, Italian multinational manufacturer and distributor of electricity and gas with international customers, affected by data disclosure - 300,000 customers personal data leaked
Brazilian electric utility company COPEL hit by cyberattack; >1TB private data exfiltrated
Major Brazilian electric utility company Eletrobras hit by ransomware
Cryptography news and discussions
Vignere cipher python program : Logic error
Windows BitLocker encrypted laptop & Android encrypted phones in Russia
Fully Homomorphic Encryption by Google
Recommendations
Noob question; RSA keys generated on different OS
How can I make my own encryption method "on paper"
Did Intel silently abandon SHA instructions?
Is it safe to resuse one time pad keys for personal use?
Help with A5/1 encryption
Pollard's p - 1 algorithm - B smooth or B powersmooth?
Hack Bloc
Sci-Hub Targeted, Needs Rescue
Hacktivism alone won’t bring down Myanmar's military, but here’s how it can help
[Limited Time] Active Directory Pentesting Full Course - Red Team Hacking | Free Udemy Course-
Interview with Supermarkt cofounder, Ela Kagel, on creating collaborative, digital economies.
Arch GNULinux Install Anarchism - We made a shirt influenced by the debian GNU+Linux one.
Last month's "world-wide" virtual reality meetup was a moderate success, so it's happening again in March.
World wide 2600 meetup with Hispagatos
Join our mozilla hubs virtual anarchist hacker "barrio"
Online Anarchist/Anti-Capitalist Mardi Gras Festival in February!
Hackers Live-Streaming Swatting Incidents by Hijacking Smart Home Devices, FBI Warns