[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

/r/netsec - Information Security News & Discussion
Remote code execution in Elixir-based Paginator - Alphabot Security
The State Of Secure Software Development - Three Open Source Security Foundation Courses
Discovering, exploiting and shutting down a dangerous Windows print spooler vulnerability
SSRFs caused by bad RegEx in server-side npm package "private-ip" - 4 year old 0day - 12,000+ weekly installs - CVE-2020-28360: IP Phone Home
PYSA/Mespinoza Ransomware - Over the course of 8 hours the PYSA/Mespinoza threat actors used Empire and Koadic as well as RDP to move laterally throughout the environment, grabbing credentials from as many systems as possible on the way to their objective.
Code Spotlight: the Reference Implementation of Ed25519 (Part 1)
Introducing another free CA as an alternative to Let's Encrypt
Testing the MAYHEM RF Pentesting HackRF/Portapack firmware.
ImageMagick - Shell injection via PDF password
SD-PWN — Part 3 — Cisco vManage — Another Day, Another Network Takeover
Malware Analysis & Reports
Deep Dive into all the encryption and obfuscation methods used by CryptoWall Ransomware
Process Injection Detection with Sysmon
RAT virus on CSGO cracked cheats.
LightBot: TrickBot’s new reconnaissance malware for high-value targets
Parent PID (PPID) Spoofing ransomware analysis using Ghidra and Sysmon (T1134)
Why are questions blocked here �
Indians working as malware analyst
I need to obtain a copy of memory, Belkansoft and Magnet Man tools are not working.
How to (seriously) analyze a PDF
Cerberus the android banking trojan is active
Blackhat Library: Hacking techniques and research
PayPal's confusing UI design could be a threat to user account security
Its that easy to mess with these?
Authorization Bypass vulnerability in JamoDat – TSMManager Collector <= 6.5.0.21 & Buffer Overflow in IBM Tivoli Storage Manager <= 5.2.0.1
IP's not to scan!
Which Wifi Card/Antenna Brand is Most Secure from Exploit or Attack?
Website with known vulnerabilities?
Yantra Manav - A wormable SSH bot
NAT Slipstreaming
Spying on an Unprotected Network
Is Dehashed.com subscription safe? Can you cancel it at any time?
Discussion and Disclosure of Web Vulnerabilities
Does anyone know how to protect robots.txt?
Anyone know an alternative to VPN that still lets you control who can reach your site/service, but with a more convenient client-side setup?
Attacking Roku sticks for fun and profit
Mail allegedly from Voodoo Bear claiming they will DDOS us unless we pay them BTC - anyone else? If so did they follow through?
{FREE GIFT} SQL Injection Unlocked Course - Giving Back to Community which gave me everything :)
Application Security Testing as part of the SDLC
How do SSL Certificates gets added initially to our Phone/PC?
Is there such a thing as a javascript request destination allow-list? That could prevent a site from sending information to malicious servers through xss?
Web cache attacks in the tangled web | APNIC Blog
Web Cache Deception at HacktivityCon2020, HackerOne
Computer Forensics
Imaging an Encrypted Drive
Do Forensix imaging tools have a dark mode?
DIY Portable Forensics Imaging System
PYSA/Mespinoza Ransomware - Over the course of 8 hours the PYSA/Mespinoza threat actors used Empire and Koadic as well as RDP to move laterally throughout the environment, grabbing credentials from as many systems as possible on the way to their objective.
MD5deep help
How can Autopsy use an .AD1 file?
Does anyone have issues with the newer Windows profiles in Volatility?
Android forensics – rooting?
What happens to discarded snapchats or instagram images?
Ultra-320 SCSI Drives - Imaging
XSS - Cross Site Scripting
BugPoc XSS Challenge Write-up
Company forced to change name that could be used to hack websites | UK news
Can you please help me with this Hard XSS Filter ?
XSS Mind Map
the worst XSS command ever DO NOT TRY THIS
Evading defences using VueJS script gadgets - PortSwigger Research
How do I bypass this XSS filter?
XSS Learning resource
Beat resources to learn XSS bug finding and becoming pro
Beyond Alert(1): Demonstrating the impact of an XSS
pwned
Stock photo website 123rf has data breach exposing 8.3 million records. Md5 hashed passwords are included in the records
Nearly 28 million licensed Texas drivers hit by data breach
Campari, Aperol and Wild Turkey drinks group hit by Ragnarlocker
Capcom hit by Ragnar Locker ransomware, 1TB allegedly stolen
Isentia media intelligence and data technology company hit by ransomware
Trump lawsuit site to report rejected votes leaked voter data
7,500 educational organizations hacked, access sold on Russian hacker forums
Hosting Provider Leaked 63M Records Including user/password for Magento, WordPress and MySql.
Enel Group hit by ransomware again, Netwalker demands $14 million
Ransomware disables Georgia county election database
Cryptography news and discussions
Implementing Crypto As A Self-Taught Programmer
Rawr: A TypeScript Implementation of an X3DH Variant Using Libsodium
Help needed in starting a group project!
RSA: Don't sign crap with your private key dude - AUCTF
Code Spotlight: the Reference Implementation of Ed25519 (Part 1)
Homemade Symmetric Key Generation Algorithm Review Request
Key Reuse attack - ChaCha20
Is Applied Cryptography by Bruce Schneier out of date?
For practical security (Gnupg and Protonmail), what is the benefit of using ed25519 over RSA 4096?
Rules governing duplicate, repeated characters when encrypting from plaintext to ciphertext.
Hack Bloc
Liquid is Crypto's Latest Hacking Victim
Mr Robot - Season 1 Episode 5 to 10 - All Hacks Explained
gec, a Linux tool to redundantly store encrypted files in GitHub+GitLab for free
Cracking WiFi only using phone?
Militant neo-nazi group surfaces in Colorado
Mr Robot Season1 Episode4 - All Hacks Explained
Self Confessed Pedophile Running For Congress In Virginia
regarding rapey.co
Why the Left Should Care about Value Accounting feat. Dr. Sarah Grace Manski
Setup a Forever Free AdBlocking WireGuard Server with PiHole in the Cloud