[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Technical Information Security Content & Discussion
Fuzzing Trackmania Nations Forever for RCE
dirsearch - release v0.4.3 - crawling supported
Pixel 6 bootloader: Emulation, ROP
A New Supply Chain Attack on PHP
Wireshark 4.0.0 has been released
Dissect: An incident response game-changer
pirebok - an adversarial fuzzer
Matano - Open source cloud native security lake built with Arrow2 + Rust
Secure your machine learning with Semgrep
When Athletic Abilities Just Aren't Enough - Scoreboard Hacking Part 3
Malware Analysis & Reports
Netwalker ransomware affiliate sentenced to 20 years in prison
The U.S. Government today released an alert about state-backed hackers using a custom CovalentStealer malware and the Impacket framework to steal sensitive data from a U.S. organization in the Defense Industrial Base (DIB) sector.
What hypervisor do you use?
Security Researchers shares Lockbit 3.0 ransomware technical details, defense tips on case study.
Lockbit ransomware case study
The Yaralyzer is a new tool for visualizing / force decoding YARA and regular expression matches in binary and text
EDR/AV bye pass technique
Diavol resurfaces
Microsoft has detected social engineering campaigns targeting employees of orgs across industries in the US, UK, India, Russia. MSTIC attributes the campaigns to North Korea-based actor ZINC, which used multiple weaponized open-source software.
New malware backdoors VMware ESXi servers to hijack virtual machines
Blackhat Library: Hacking techniques and research
Security Researcher's Guide to identifying exposed Redis Commanders online
US Govt: Hackers stole data from US defense org using new malware
Trojanized Comm100 Live Chat app installer distributed a JavaScript backdoor
Vulnerabilities in HTTP status code
Is there a way to track down bandwidth.com numbers?
Track down scammers using shelf company?
PrivEsc Windows Weak Registry Permissions
ae yo any one got the AnimeGame breach from february 2020
How To Attack Admin Panels Successfully
hashcat advice
Discussion and Disclosure of Web Vulnerabilities
17 hours to react to zero-day threats -- good enough? A perspective on Forrester’s WAF Vendors Wave
How to hide Http status codes
LockBit 3.0 Ransomware Case Study: A Huge Cybersecurity Risk
Default welcome page exposure poses significant security risk
Google Hacking or Criminal IP?
open-appsec machine learning WAF progress tracking
Need help understanding this Webadmin Dashboard
One minute about Web App & API Protection - Part 2 (False Positives and False Negatives)
Outdated and Patchless WebServers / Webpages?
open-source machine learning based WAF (openppsec.io)
Computer Forensics
TCU Live: 2022OCT04 (latest release)
TCU Passware (2022OCT04)
TCU Hashtopolis (2022OCT04)
Wire Transfer Scam w/ AnyDesk
What is your workflow for IIOC cases?
HDD Password Toshiba
Dissect enables you to go from acquisition of thousands of systems to answering the how, when, and what in a matter of hours – A game changer for incident response teams. It’s modular and concise API allows for anyone with Python experience to adapt it to their own needs and create output ..
Dissect: An incident response game-changer
Impacket Impediments
College Degree with LE and certs
XSS - Cross Site Scripting
Variable has an "Int?" data type detected for XSS
Porswigger - Our favourite community contributions to the XSS cheat sheet
How Do People Make Server Side Go Onto the Official Website
easy to follow writeup of intigritis xss challenge
XSS Challenges (by yamagata21) - Stage #1
What is the best place to learn advanced XSS?
What to fix Source or Sink
XSS Challenge
Bug in the Google XSS game
Does xss-game.appspot.com work for you?
pwned
American Airlines employees' Office365 accounts compromised by criminals; data breach affects over 1,700 customers and employees
Optus notifies customers of cyberattack compromising customer information
Uber hacked, internal systems breached and vulnerability reports stolen
Los Angeles Unified School District hit by ransomware over Labor Day Weekend, but classes and normal operations resumed Tuesday
US tax agency IRS unintentionally posted private data on ~120,000 taxpayers to its website
Samsung discloses data breach after July hack, their second in 2022. Data included customers' names, contacts and demographic information, dates of birth, and product registration data
Student Loan servicer Nelnet breached, exposing data of 2.5M borrowers, including contact details and Social Security Number
Delivery app-maker DoorDash breached by criminals who stole credentials from employees of a third-party vendor, Twillio
Password manager software company LastPass pwned; development environment accessed, source code and proprietary LastPass technical information stolen. Password vaults still secure and business operations as usual
Media-player software company Plex warns users to reset passwords after data breach
Cryptography news and discussions
Encrypt a message with LFSR cipher with key longer than message size
Encoded or Encrypted? A friend lost access to an application but wants to salvage some of the information
Career Advices
SSH protocol dissected, part IV
Weekly cryptography community and meta thread
DOMtegrity: Integrity checking for the web browser - A proposal by Newcastle University
r/Crypto, can you help take down an evil tool that's stealing people's private keys?
Utilizing OpenSSL In Javascript Within Node.js
monomorph: MD5-Monomorphic Shellcode Packer - Pack arbitrary shellcode into an executable that always has the same MD5 hash
Need Assistance Converting Public Key Types
Hack Bloc
Hactivists say they hacked Belarus rail system to stop Russian military buildup
Can anyone here be my free "hacker friend"?
How can I hack a whatsapp account?
Reccomendations
The Internet's Own Boy - The Story of Aaron Swartz
Hacktivism as a social movement is back
Why did no one show up to the MMM in Los Angeles?
Tryna get an Instagram. Name ur price
where do I find a million mask march meetup?
Firewall dropping me off from an ssh connection