[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Account protections - A Google Perspective
Mitigating CVE-2021-20291: DoS affecting CRI-O and Podman
Morpheus Turns a CPU Into a Rubik’s Cube to Defeat Hackers
CRypted Admin SHell
Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316)
NoNameCon 2021 CFP
If you use OAUTH2 in native apps, beware
[FOSS] IntelOwl v2.3.0 is out!
Announcing Reddit’s Public Bug Bounty Program Launch
Reverse-engineering tcpip.sys: mechanics of a packet of the death (CVE-2021-24086)
Malware Analysis & Reports
Sample Deleted When Importing to IDA or Cutter
Current or former malware analysts/forensic folks that worked with malware, I am looking for some guidance
[Video] Malware Theory - Imphash algorithm explained
Carbine Loader Cryptojacking Campaign
I keep getting sms messages from random email address like these. I don't understand how. I get calls from fraudulent warranty departments too. I am registered under the DNC.
[Video] Makop Ransomware - Decrypting the Encrypted Section
Complete Malware Analysis VM Image
Researching sandbox reports
ee.exe
programming languages and malware
Blackhat Library: Hacking techniques and research
How to Exploit Google Photos’ Algorithm for People Tracking and Exploring
Working Around the Inherent Slowness of Debugger Conditional Breakpoints
Any good sms spoofing tools out there?
Breaking GitHub Private Pages for $35k
Exploit of CVE-2020-16040 Google Chrome <= 87.0.4280.88 vulnerability
Good residential proxy providers
Facebook data leak link
Is it possible for a USB dongle for wireless controller to have malware installed?
Apple iOS, iPadOS and watchOS universal XSS exploited in the wild (CVE-2021-1879)
Speculating the entire x86-64 Instruction Set In Seconds with This One Weird Trick
Discussion and Disclosure of Web Vulnerabilities
Does CSRF attacks really work?
Researching how organizations help developers tackle application security
Fully automate your bug bounty with Nuclei and a sprinkle of bash
[CVE-2021-28379] Abusing file uploads to get an SSH backdoor
Around 200 attacks per minute while testing a HoneyPot
Does your WAF have False Positive?
Digest authentication with ha1 generated by SHA256Hex on https - is there any known issues with this?
Attacking npm by using Abandoned Resources [LIVE]
Attack-Aware Web Applications Research
Stored, Reflected and DOM-Based XSS, Review the XXSer, XSStrike and Nemesida WAF
Computer Forensics
Is there a way to detect which user is visiting a specific Facebook page
Android forensics
ATT SMS record analysis
How Unique is a Craigslist Message ID?
FTK Imager Verification Question
Current or former malware analysts/forensic folks that worked with malware, I am looking for some guidance
Black and white mono printer tracking
Compromised Linux VM for DF training?
Creating Amazon Linux 2 Volatility Profile
SIMfill
XSS - Cross Site Scripting
xss
Bypass HTML reversing characters
Are there hackers and modders in video games multiplayer using xss attack to modify the gameplay?
So i'm doing the practice exercises on https://unescape-room.jobertabma.nl/
How do I see a xss that been injected in the request or response with a owasp zap?
Can someone help me understand this payload from PwnFunction My Name is Jefff Level
What are your 3 best payloads for testing Stored XSS?
Preventing SSRF Attacks
The Ultimate Guide to Finding and Escalating XSS Bugs | @Bugcrowd
March XSS Challenge - Intigriti
pwned
Mobikwik (India) KYC data leaked
$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll
Worldwide Hack: Microsoft Exchange Server Zero-day Exploits
American Armed Forces Mutual Aid Association hack impacted more than 161,000
CD Projekt Red 'EPICALLY pwned': Cyberpunk 2077 dev publishes ransom note after company systems encrypted
Florida city of Oldsmar's municipal water supply was almost poisoned during cyberattack, Sheriff says. A plant operator witnessed mouse movement on-screen and reverted the change
ENEL, Italian multinational manufacturer and distributor of electricity and gas with international customers, affected by data disclosure - 300,000 customers personal data leaked
Brazilian electric utility company COPEL hit by cyberattack; >1TB private data exfiltrated
Major Brazilian electric utility company Eletrobras hit by ransomware
EscortReviews.com vBulletin site suffers data breach; 470,000 members affected
Cryptography news and discussions
From one-key cryptography to two-key, now family key cryptography.
Opinion on Casa Multisig?
Setting Up Secure ECDLP
AES-GCM issue
If you use OAUTH2 in native apps, beware
Any underlying reason for similarity between Block Cipher and Neural Network design?
Known plain-text against stream ciphers
Quick question on ECC generators and number of possible keys
CRC in post quantum
Using neural networks to break cryptosystems
Hack Bloc
[Limited Time] Active Directory Pentesting Full Course - Red Team Hacking | Free Udemy Course-
Interview with Supermarkt cofounder, Ela Kagel, on creating collaborative, digital economies.
Arch GNULinux Install Anarchism - We made a shirt influenced by the debian GNU+Linux one.
Last month's "world-wide" virtual reality meetup was a moderate success, so it's happening again in March.
World wide 2600 meetup with Hispagatos
Join our mozilla hubs virtual anarchist hacker "barrio"
Online Anarchist/Anti-Capitalist Mardi Gras Festival in February!
Hackers Live-Streaming Swatting Incidents by Hijacking Smart Home Devices, FBI Warns
Anonymous claims hacking of multiple Russian websites to deliver a 'Christmas Gift'
Join my freestyle? Crypt 0 day v 1 [freestyle for fun]