[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Facebook SSRF
Playing with PuTTY
Possible security issue involving the Firebase JWT library for PHP (Algorithm Confusion with Key IDs)
Arbitrary file write in node tar - CVE-2021-32804
Ubuntu's Snapcraft Packages Come With Extra Baggage: CVE-2020-27348
Hotcobalt - New Cobalt Strike DoS Vulnerability That Lets You Halt Operations - SentinelLabs
BazarCall to Conti Ransomware via Trickbot and Cobalt Strike
SAML is insecure by design
Trash Panda as a Service: Raccoon Stealer steals cookies, cryptocoins, and more
Developing an exploit for the Jira Data Center Ehcache RCE (CVE-2020-36239)
Malware Analysis & Reports
UEFI and firmware malware via physical access - level of effort
Kill Switches
Deadwood Analysis Paper - Wiper Malware
Couple questions about Malware in virtualboxes.
Software to draw malware analysis diagrams
Blox Crusher
Learn How To Quickly Unpack Qbot Loader Malware
Technical analysis of Vultur: an Android banking trojan that leverages Brunhilda dropper framework -- uses screen recording and keylogging to capture login credentials
Multi Antivirus Tools
Ransomware hackers are getting greedier — here's how much they're asking for to return your data after infecting your system with malware
Blackhat Library: Hacking techniques and research
Blackhat is worthless this year
[FREE GIFT] SQL Injection Unlocked Course Giveaway Without Any Catch!
Need Help Finding An IP (Read Text)
Could anyone do me a favor and check the wattpad leak for smthn
My First Instagram Bug Bounty Report
[11 Minutes] UNIX Permissions - Special, Stat, Octal
I have huawei router(HG8145V5), and get a blind shell on this. now i am wondering how to convert this blind shell in reverse shell. can any one help.{this is my router and i use it for learning purpose}
What is the refund / cancellation policy for the conference?
AI led backend recon
RFID Arduino
Discussion and Disclosure of Web Vulnerabilities
[FREE GIFT] SQL Injection Course Giveaway Without Any Catch!
Burp Suite Certification
Union based sql injection
PoC for a SQL Injection in Rapid7 Nexpose
[FREE GIFT] Offensive Hacking Unfolded Course Giveaway Without Any Catch
PoC for Cisco ASA unauth XSS
Choosing authentication mechanism for SPA + GraphQL. Advice needed.
ADT vulnerability reporting procedure
[FREE GIFT] SQL Injections Unlocked Course — Giving Away Honestly, Not really a Promotion ;)
Does CSRF attacks really work?
Computer Forensics
Price for AXIOM Mobile or Cellebrite Logical
Want to join the field, looking for advice!
Imaging MacOS Big Sur with no admin account
Forensics on a Microsoft Surface
Autopsy writeup for beginners
SSD Writeblocker
Can whatsapp chat be edited by decrypting the database and editing it? Someone known to android forensic could elaborate.
A Collection of DFIR Resources
Zoom's Database are all encrypted
O365 forensics - other logs except audit logs to look at?
XSS - Cross Site Scripting
Does create a xss payload that bypass the website content security policy, effective bypass its x-xss protection and web application firewall?
Is there more information about bypassing csp and more csp bypass challange?
What are the holes in my Content Security Policy?
Xss methodology 2021
How should I bypass this filter?
Google checks rise of DOM XSS with Trusted Types - The Daily Swig
Introducing DOM Invader: DOM XSS just got a whole lot easier to find - PortSwigger
alert() is dead, long live print() - PortSwigger Research
Finding DOM Polyglot XSS in PayPal the Easy Way - PortSwigger Research
BeEF XSS in Arch
pwned
Geico data breach exposed customers' driver's license numbers
Codecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"
Mobikwik (India) KYC data leaked
$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll
American Armed Forces Mutual Aid Association hack impacted more than 161,000
CD Projekt Red 'EPICALLY pwned': Cyberpunk 2077 dev publishes ransom note after company systems encrypted
Florida city of Oldsmar's municipal water supply was almost poisoned during cyberattack, Sheriff says. A plant operator witnessed mouse movement on-screen and reverted the change
ENEL, Italian multinational manufacturer and distributor of electricity and gas with international customers, affected by data disclosure - 300,000 customers personal data leaked
Brazilian electric utility company COPEL hit by cyberattack; >1TB private data exfiltrated
Major Brazilian electric utility company Eletrobras hit by ransomware
Cryptography news and discussions
Keepass refuses to let me input manual input for additional entropy
Invertible Discrete Functions
Newbie's cryptanalysis?
Memory-bound trapdoor proof of work
Demystifying recursive zero-knowledge proofs
PASETO Reference Implementation Release Notes (new protocol versions)
Signing HTTP Messages (Internet Draft)
You Really Shouldn't Roll Your Own Crypto: An Empirical Study of Vulnerabilities in Cryptographic Libraries
The last refuge of the criminal: Encrypted smartphones
[CFP] Call for Papers for Hardwear.io Security Conference Netherlands 2021 is OPEN
Hack Bloc
How Americans Can Defend Democracy Through Mass Action
Sci-Hub Targeted, Needs Rescue
Hacktivism alone won’t bring down Myanmar's military, but here’s how it can help
[Limited Time] Active Directory Pentesting Full Course - Red Team Hacking | Free Udemy Course-
Interview with Supermarkt cofounder, Ela Kagel, on creating collaborative, digital economies.
Arch GNULinux Install Anarchism - We made a shirt influenced by the debian GNU+Linux one.
Last month's "world-wide" virtual reality meetup was a moderate success, so it's happening again in March.
World wide 2600 meetup with Hispagatos
Join our mozilla hubs virtual anarchist hacker "barrio"
Online Anarchist/Anti-Capitalist Mardi Gras Festival in February!