[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Technical Information Security Content & Discussion
Public Disclosure for CVE-2022-42475
Hackers Using Microsoft OneNote Attachments To Spread Malware
/r/netsec's Q1 2023 Information Security Hiring Thread
PHP Development Server <= 7.4.21 - Remote Source Disclosure
Justice Dept. Dismantles a Major Ransomware Operation
Factorization (DCQF) of a 48-bit integer using 10 trapped-ion qubits
Kamailio's exec module considered harmful – RTC security
Pre-Auth RCE on OpenEMR: Using a rogue MySQL server to steal your health data
Fun with Gentoo: Why don't we just shuffle those ROP gadgets away?
Advisory: XXS Vulnerability for Arbitrary Domains in Skyhigh Security's Secure Web Gateway
Malware Analysis & Reports
Sometimes Feels Like Russian Roulette
Recommendations for becoming a better malware analyst as a non-coder
Video: Packers, polymorphism and common misconceptions
Malcat 0.9.0 (hexadecimal editor / disassembler for malware analysis)
Mac Malware Persistence: What It Is, How It's Achieved
New stealthy Python RAT "PY#RATION" malware targets Windows in attacks
New stealthy Python RAT "PY#RATION" malware targets Windows in attacks
What is Predator malware, and how can you tell if your device is infected
Collaboration needed: open source malware categorization platform
Ransomware Diaries: Volume 1
Blackhat Library: Hacking techniques and research
Curious about facebook exploits
Brute forcing 2 factor auth without getting soft locked
[ Removed by Reddit ]
Bypassing Cloudflare WAF: XSS via SQL Injection
How did they created this website anonymously
lost my Password to a throwaway.
Utilizing Obsidian in Malware
How do you think biometric data should be protected and stored?
Wattpad data breach
Embed Malware in Alternative Data Streams
Discussion and Disclosure of Web Vulnerabilities
Best VPNs (2023) - Fastest, Free, Streaming, Privacy/Security, Torrenting, Deals and for China
Bypassing Cloudflare WAF: XSS via SQL Injection
Tailscale bug allowed a person to share nodes from other tailnets without auth
WAF Bypass or find out about your WAF flaws before an attacker does
WAF bypass is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does.
Claroty Team 82 Generic WAF Bypass. Only open-appsec blocked it.
All Cybersecurity news - without ads, trackers or BS :)
GitHub Copilot Isn't Worth the Risk
Cybersecurity experts reveal the methods used for spam emails to bypass the anti spam system
Cybersecurity expert analysis about security vulnerabilities that alters exposed NGINX config files
Computer Forensics
SANS FOR500 roadmap (seeking advice)
Forensics tools - Apple Mx Pro
Need link to Magnet Acquire direct download.
Program for viewing .vcf
With the influx of post being question about DFIR and career advice I made a survey.
No iMessages in iCloud Backups - Solution
FTK Imager Lite still around?
Synchronization iPhone
Questions about printer steganography
Documents and media from iCloud device backup parsed in Cellebrite missing date/time metadata
XSS - Cross Site Scripting
XSS in Modern Frameworks
CSP bypass
Dom based XSS
Google reader xss
XSS Bypass Help
How to prevent xss attacks in Angular?
XSS HTML-Encoding Help
November XSS Challenge - Intigriti
How to bybass &quot
XSS Polyglot
pwned
Criminals attempt to extort $10M from Riot Games, threatening to leak ‘League of Legends’ source code
GoTo (LogMeIn) says criminals stole customers' backups and encryption key
37 million accounts hacked in latest T-Mobile data breach - second in less than two years
Twitter data leaked - 400 million user details up for sale
Okta's source code stolen after GitHub repositories compromised
FBI’s private info-sharing network ‘InfraGard’ infiltrated; user contact database scraped and offered for sale on cybercrime forum
In November 2022, the gaming website Abandonia suffered a data breach resulting in the exposure of 920k unique user records. This breach was in addition to another one 7 years earlier in 2015. The data contained email and IP addresses, usernames and salted MD5 hashes of passwords.
The Turkish Citizens Health Database (HSYS) (hsys.saglik.gov.tr) suffered a data breach that impacted 100 over million citizens
Sonder confirms data breach, documents and other PII potentially compromised, affecting guests before October 1, 2021, leaking usernames, encrypted passwords, names, phone numbers, DOB, addresses and email addresses
Personal data of nearly 4,000 people leaked in hack of Radio Free Asia, leaking addresses, driver license numbers, SSNs, passport numbers, health insurance information, medical information, and financial information
Cryptography news and discussions
Why is the Key in Blake2's keyed mode kept in a separate block?
Performance of NIST DRBGs
librandombytes: API for applications generating fresh randomness
The KGZ/Kate Polynomial Commitment Scheme
Typescript/WASM library with cryptographic operations based on libsodium, Shamir secret sharing, Merkle trees. Runs on Nodejs and the browser. Feedback is encouraged!
D.Bleichenbacher attack on RSA PKCS#1, part I
RSA with modulo close to power of 2
Weekly cryptography community and meta thread
Can someone help me do this POC length extension attack?
Looking for career paths closely related to cryptography
Hack Bloc
Hactivists say they hacked Belarus rail system to stop Russian military buildup
Can anyone here be my free "hacker friend"?
How can I hack a whatsapp account?
Reccomendations
The Internet's Own Boy - The Story of Aaron Swartz
Hacktivism as a social movement is back
Why did no one show up to the MMM in Los Angeles?
where do I find a million mask march meetup?
Firewall dropping me off from an ssh connection
[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!