[
News
|
Newsletters
|
Blogs
|
Reddits
|
Lists
|
Media
|
Jobs
]
HoneyDB
/r/netsec
CVE-2025-32756: Write-Up of a Buffer Overflow in Various Fortinet Products
Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428)
Rare Code Base is a free and open-source learning platform for ethical hacking, programming, and more.
Automating MS-RPC vulnerability research
Authenticated Remote Code Execution in Netwrix Password Secure (CVE-2025-26817)
How to Enumerate and Exploit CefSharp Thick Clients Using CefEnum
CVE-2024-45332 brings back branch target injection attacks on Intel
CVE-2025-26147: Authenticated RCE In Denodo Scheduler
BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
EvilWorker: a new AiTM attack framework leveraging service workers — much more effective, autonomous, and adaptable than Evilginx2? 🎣
/r/Malware
Looking for resources on malware unpacking and deobfuscation
Fibratus 2.4.0 | Adversary tradecraft detection, protection, and hunting
Microsoft Says Lumma Malware Infected Over 394,000 Windows Computers Globally
[Video] Reverse-Engineering ClickFix: From Fake Cloudflare Prompt to Quasar RAT Dropper
Almoristics Malware
This is really cool if you zoom in.
Zig vs Nim vs Rust
Fake GLS delivery status email with foxwhoops links all over the place
Cracked Software and Keygens
Capev2 + proxmox setup
/r/pwned
Loopscale Breach Twist: Hacker Offers to Return Funds for 20%
Data breaches you might have missed this month
Thousands of Records, Including PII, Exposed Online in Healthcare Marketplace Connecting Facilities and Nurses Data Leak
Has TradingView ever experienced any data breaches?
1 Million Accounts Impacted by the Massive 2023 Glamira Data Breach, 875,000 Emails Exposed
Anna Jaques Hospital ransomware breach exposed data of 300K patients
Hot Topic Breach Confirmed, Millions of Credit Cards Exposed
UnitedHealth breach leaks info on over 100M people. Including medical records.
Internet Archive hacked, data breach impacts 31 million users
Australians among 560 million users around the world caught in Ticketmaster hack
/r/blackhat
U.S.-Based Trustpilot Review Seller – Long-Term High-Volume Work ($5.50/review to start)
Looking for input/help
Looking For
Living-off-the-COM-Type-Coercion-Abuse
Nunflix downloaded a .exe into my downloads folder
Exploiting DLL Search Order Hijacking in Microsoft Edge’s Trusted Directory: A Red Team Tactic
CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability - Crowdfense
LockbitGPT - Helps cybersecurity & OSINT researchers analyze Lockbit ransomware messages
Need some assistance
[Demo Release] PollyLocker – Silence Their System (Educational Purposes Only)
/r/websec
How do these illegal clear web websites accept bank payments?
Bitcoin Casinos
Need your advice for bug hunting
I made a FOSS tool for observable / IoC analysis (domain, URL, IP, hash)
How was this fraud committed?
Research paper CS
weshlient: A simple tool to interact with web shells and command injection vulnerabilities
The Global InfoSec / Cybersecurity Salary Index for 2024 💰📊
Secure Code Review: How to find XSS in code(for beginners)
How to find XXE(XML External Entities) vulnerabilities during Secure Code Review
/r/computerforensics
Thoughts on Shanon Burgess Testimony?
Cellebrite Chat Strings with Date Limits Question
MalChela 2.2 “REMnux” Release
Taking GCFE Exam after 13Cubed Windows course?
Memory analysis, how often are you doing it?
Hmm what am I missing here? USB thumb drive insertion logs with KAPE?
Best practices for soc entry level jobs.
MIUI Bootloop
c0c0n 2025 CFP/CFV is now open
How saturated is it? And what about AI?
/r/xss
XSerum - Web Attack Payload Generator
Mutation XSS: Explained, CVE and Challenge | Jorian Woltjer
GitHub - b3rito/peeko: peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
Client Side Validation Is Insecure!
XSS Wiki
I know the basics of Cross Site Scripting but I really want to go deeper, but how?
XSS noob needs help
The Biggest XSS Attack Was Samy
Server-side issues leading to stored XSS
How to use deepseek to exploit xss vuln
/r/cybersecurity
Cyber systems security engineer
Cyber phishing impersonation
Managing Up Is A Difficult Conversation
Learning Wazuh at an Advanced Level – Beyond the Official Docs?
The anatomy of a stealer package -- Lumma Stealer
Thoughts on going to study law and possible pathways after obtaining bachelors in cybersecurity?
Software Development on macOS - How much security do I have to sacrifice?
License agreements that require the customer notify the vendor in case of a potential breach or unauthorized access?
Botnet Aisuru has surfaced capable of "killing most companies"
Hack of Contractor Was at Root of Massive Federal Data Breach | Bloomberg News
/r/crypto
Apache Tomcat - PQC support
Announcing HPU on FPGA: The First Open-source Hardware Accelerator for FHE
Go Cryptography Security Audit
Weekly cryptography community and meta thread
Monthly cryptography wishlist thread
Ring Oscillators: How Do Xor Gates Help with Random Bit Generation?
The cryptography behind passkeys
Random Oracles: How Do They Ensure Robustness in Random Generation?
Send files privately. No cloud. No trace.
Using encryption instead of hashing for checking passwords - why?
/r/HackBloc
Hactivists say they hacked Belarus rail system to stop Russian military buildup
Can anyone here be my free "hacker friend"?
Reccomendations
The Internet's Own Boy - The Story of Aaron Swartz
Hacktivism as a social movement is back
Why did no one show up to the MMM in Los Angeles?
where do I find a million mask march meetup?
Firewall dropping me off from an ssh connection
[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!
Docker for CTFs (Application Virtualization)
© 2024 RiskDiscovery | Sponsored by:
Deception Logic
HoneyDB