[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Process Memory Integrity on Linux
Wireshark Tutorial: Examining Emotet Infection Traffic
OWASP Top-10 2021. Statistics-based proposal
Silencing Microsoft Defender for Endpoint using firewall rules
KindleDrip — From Your Kindle’s Email Address to Using Your Credit Card
Please Stop Encrypting with RSA Directly
Writing A Reverse Shell and Process Dumper Entirely in VBA
KEMTLS: Post-quantum TLS without signatures
Using Zero Trust principles to protect against sophisticated attacks like Solorigate - Microsoft Security
[Microsoft] Deep dive into the Solorigate second-stage activation: From SUNBURST to TEARDROP and Raindrop
Malware Analysis & Reports
Analysis of BitRat dropper
SolarLeaks site claims to sell data stolen in SolarWinds attacks
Dynamic Analysis Tools
[PDF] Identifying Authorship Style in Malicious Binaries: Techniques, Challenges & Datasets
Identify sinkhole nameservers
Malwarebytes says some of its emails were breached by SolarWinds hackers
Malware downloaders and loaders.
Linux.Midrashim: Assembly x64 ELF virus
Expanding Range and Improving Speed: A RansomExx Approach
Vetting process for hybrid analysis website
Blackhat Library: Hacking techniques and research
Compare licensed and unlicensed execution flow
Use C# to hook into Windows APIs & avoid shell detection/logging
what do you think about this idea ? Dns spoofing + Rouge AP to achieve a perfect timed splash/captive portal mimc page that pops up instantly whenever a user tries to open an app , then it phishes them for the creds + 2FA if required getting them convinced that the pop is/from the real app.
I told you so, 2021 edition (Cinnamon-screensaver bug and big picture view)
Escaping VirtualBox 6.1: Part 1
Any way to crack Galaxy s8?
an open-source collection of TTPs and post-compromise exploits, organized by ATT&CK tactic
Hacks used to involve lots of shell cmds... Now modular malware, which looks benign and is injected with malicious behaviors, is the new normal. Great piece from a cyber engineer here.
Where to from here ?
Any good payload generators for windows?
Discussion and Disclosure of Web Vulnerabilities
Bug bounty 100 uniques security issues learning in JUST 20 hours. Search in YouTube for "bug bounty tutorial uday datrak"
Stored, Reflected and DOM-Based XSS, Review the XXSer, XSStrike and Nemesida WAF
Nemesida WAF: The WAF That DevOps Love
Suspicious Rocket.Chat release?
Web Application Security: From Vulnerabilities to Monitoring
Does anyone know how to protect robots.txt?
Anyone know an alternative to VPN that still lets you control who can reach your site/service, but with a more convenient client-side setup?
Attacking Roku sticks for fun and profit
Mail allegedly from Voodoo Bear claiming they will DDOS us unless we pay them BTC - anyone else? If so did they follow through?
{FREE GIFT} SQL Injection Unlocked Course - Giving Back to Community which gave me everything :)
Computer Forensics
Unusual result within binwalk
US-EU Remote Collections
Forensic Certification?
What Is SAST? Overview + SAST Tools
Has anyone here completed the MS Digital Forensic Science program at Champlain College?
Is Computer Forensics InfoSec Pro Guide still relevant and the first book someone new to the field should read?
ASK ALL NON-FORENSIC DATA RECOVERY QUESTIONS HERE
Digital Forensics Case Management software - Suggestions?
Help reading Chrome History file from 2010
Has anyone done any research into UFED license dongles holding any sort of record/remnants/artefacts etc from rips?
XSS - Cross Site Scripting
Can a WAF prevent XSS attacks?
Jeopardy: Gain access to users posting history using xss
How to inject xss when the site not allows <> in the search field?
Is urlencodeuri from https://localdomain.pw/xss/?urlencodeuri=foo is vulerable to HTML Entities xss attack?
How to stop any and all browsers from encoding the xss payload?
Is there alternate testphp vulnweb website that have low level cloudflare web application firewall that protect it from cross site script attack?
How to bypass XSS in hidden HTML input fields (No Filters) ?
WebGoat.NET XSS Solutions
How a xss injector bypass a cloudflare xss filter that done nothing but encode its xss payload, prevent it from attacked?
Input sanitizing for each XSS context, when is it properly sanitized
pwned
Einstein Healthcare Network (Pennsylvania) notifies Patients of August email breach, 5 months later
Scotland environmental regulator hit by ‘ongoing’ ransomware attack since Christmas Eve - internal systems and external data products are still offline
Washingtonstate -based Jefferson Healthcare falls victim to phishing attack, 2,500+ patients' data exposed
European Medicines Agency compromised by cybercriminals who 'manipulated' stolen COVID-19 vaccine data before leaking it online, in an attempt to "undermine trust" in COVID-19 vaccines
eHealth cyberattack affected millions of files, was one of Sask.'s worst breaches ever: privacy commissioner | CBC News
Ubiquiti / Third Party Vendor Data Breach
70TB of Parler users' data leaked by "security researchers"
New Zealand Reserve Bank suffers data breach via compromised 3rd-party storage partner
United Nations data breach exposed over 100k UNEP staff records
Japan's Kawasaki Heavy Industries discloses security breach, potential data leak
Cryptography news and discussions
Where to start?
Hybrid encryption and the KEM/DEM paradigm
Question about OneAndZeroes and TrailingBitComplement Paddings
Key generation for curve25519
Curious about the reasoning behind JWT choices
KEMTLS: Post-quantum TLS without signatures
Unusual infosec attack in the latest episode of sci-fi show The Expanse
[A bit off topic] Craig Wright is making fraudulent lawsuits claiming copyright on the Bitcoin whitepaper
Introduction to Securing Custom Protocols with Noise
Is there any scenario where a "collision attack" isn't defeated by putting a salt in front of the plaintext?
Hack Bloc
Join our mozilla hubs virtual anarchist hacker "barrio"
Online Anarchist/Anti-Capitalist Mardi Gras Festival in February!
Pretty sure somebody's using the application called something shell tethering my phone to a computer how it going to go about disabling the tether.. he's Arduino board attached to a raspberry pi to transmit 2.4 and kind of doing screen grabs with in source software the idea is how to put a stop to i
Hackers Live-Streaming Swatting Incidents by Hijacking Smart Home Devices, FBI Warns
Anonymous claims hacking of multiple Russian websites to deliver a 'Christmas Gift'
Join my freestyle? Crypt 0 day v 1 [freestyle for fun]
Be careful, a banking Trojan imitates the TousAntiCovid app
Liquid is Crypto's Latest Hacking Victim
Mr Robot - Season 1 Episode 5 to 10 - All Hacks Explained
Militant neo-nazi group surfaces in Colorado