#security

Bookmarks

🔗 🦮 Application vs. Database: Where Should Permissions Live? (2025-09-18) #database #security #blue
🔗 🦮 Tool Guides (2025-08-29) #security #blue
🔗 🦮 Vulnerability Database (2025-04-20) #security
🔗 🦮 Cross-Site WebSocket Hijacking Exploitation in 2025 - Include Security Research Blog (2025-04-18) #security #websocket
🔗 🦮 praetorian-inc/noseyparker: Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history. (2025-03-31) #security
🔗 🦮 Traversal-resistant file APIs - The Go Programming Language (2025-03-27) #go #path-traversal #security
🔗 🦮 Breaking and Fixing Content-Defined Chunking (2025-03-26) #content-defined-chunking #security
🔗 🦮 Padmé: Efficiently hiding file sizes (2025-03-24) #security #privacy #padding
🔗 🦮 Chunking Attacks on File Backup Services using Content-Defined Chunking (2025-03-22) #content-defined-chunking #pdf #security
🔗 🦮 CVE-2024-9956 - PassKey Account Takeover in All Mobile Browsers (2025-03-20) #passkey #security #mitm
🔗 🦮 SAML roulette: the hacker always wins (2025-03-19) #saml #red #xml #security
🔗 🦮 UTS #55: Unicode Source Code Handling (2024-12-01) #unicode #security
🔗 🦮 Low-Level Software Security for Compiler Developers (2024-06-23) #compiler #security
🔗 🦮 "^[[31m"?! ANSI Terminal security in 2023 and finding 10 CVEs (2023-10-20) #security #red #terminal #ansi
🔗 🦮 ⚙ D68720 Support -fstack-clash-protection for x86 (2023-09-11) #llvm #security #stack-clash
🔗 🦮 https://gcc.gnu.org/legacy-ml/gcc-patches/2017-07/msg00556.html (2023-09-11) #security #stack-clash #gcc
🔗 🦮 Bringing Stack Clash Protection to Clang / X86 — the Open Source Way (2023-09-11) #llvm #security #stack-clash
🔗 🦮 The Stack Clash (2023-09-11) #security #qualys #stack-clash
🔗 🦮 https://www.enricobassetti.it/2023/09/cve-2023-4809-freebsd-pf-bypass-when-using-ipv6 (2023-09-09) #security #cve #red #pf #ipv6 #fragment
🔗 🦮 mTLS: When certificate authentication is done wrong (2023-08-20) #security #mtls
🔗 🦮 EFAIL (2023-08-17) #security #crypto #red #cbc #cfb
🔗 🦮 Eclypsium Protection for “Downfall” Vulnerabilities on Intel processors (2023-08-16) #cpu #security #downfall
🔗 🦮 https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/gather-data-sampling.html (2023-08-16) #cpu #security #intel
🔗 🦮 Smashing the state machine: the true potential of web race conditions (2023-08-14) #security #red #web #race
🔗 🦮 there are no good constant-time data structures (2023-08-13) #security #time-attack #structure
🔗 🦮 Shellcode Injection (2023-08-13) #security
🔗 🦮 The pre-play vulnerability in Chip and PIN (2023-08-13) #security #reverse #emv
🔗 🦮 http://www.darknet.org.uk/2015/03/wig-cms-identification-information-gathering-tool (2023-08-13) #security #red #cms
🔗 🦮 Plus rien ne marche, qu’est-ce qu’on fait ? (2023-08-13) #security
🔗 🦮 Cracking Candy Crush (2023-08-13) #security
🔗 🦮 C++11 regex insecure by default (2023-08-13) #security #regex #c++
🔗 🦮 Reverse Engineer a Verisure Wireless Alarm part 1 – Radio Communications (2023-08-13) #security #reverse
🔗 🦮 Why the Security of USB Is Fundamentally Broken (2023-08-13) #security #usb
🔗 🦮 Exploiting Server Side Request Forgery on a Node/Express Application (hosted on Amazon EC2) (2023-08-13) #security #exploit
🔗 🦮 How I disabled your Chrome security extensions (2023-08-13) #security
🔗 🦮 timing attacks vs hash tables (2023-08-13) #security #time-attack
🔗 🦮 http://www.daemonology.net/blog/2014-12-25-when-security-goes-right.html (2023-08-13) #security
🔗 🦮 Sednit Espionage Group Attacking Air-Gapped Networks (2023-08-13) #security #airgap
🔗 🦮 Bypassing path restriction on whitelisted CDNs to circumvent CSP protections - SECT CTF Web 400 writeup (2023-08-13) #security #cdn #web
🔗 🦮 Every C99 / C99.php Shell Is Backdoored (2023-08-13) #exploit #security
🔗 🦮 Recommended Reading for Starting Cybersecurity | The Homepage of @attrc (2023-08-13) #book #security
🔗 🦮 http://insanecoding.blogspot.com/2014/05/dealing-with-randomness.html (2023-08-13) #security #rand
🔗 🦮 http://hackaday.io/project/956/log/10108-aes256-is-not-enough-breaking-a-bootloader (2023-08-13) #security #crypto #aes
🔗 🦮 Copypest (2023-08-13) #js #security #slides #clipboard #xss #pdf
🔗 🦮 http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html (2023-08-13) #security #grub
🔗 🦮 Timing-safe memcmp and API parity (2023-08-13) #security #openbsd
🔗 🦮 DEF CON 22 - Joe Grand aka Kingpin - Deconstructing the Circuit Board Sandwich (2023-08-13) #video #security #defcon
🔗 🦮 The Shadow Brokers EPICBANANA and EXTRABACON Exploits (2023-08-13) #security #red #exploit
🔗 🦮 http://www.openbsd.org/papers/dev-sw-hostile-env.html (2023-08-13) #openbsd #security #dev
🔗 🦮 Analysis of CVE-2014-8476: a FreeBSD kernel memory disclosure vulnerability (2023-08-13) #security #freebsd #cve
🔗 🦮 RDTSCP – a recooked AntiRe trick (2023-08-13) #security #reverse #asm
🔗 🦮 Statistics Will Crack Your Password (2023-08-13) #security #password
🔗 🦮 http://www.slideshare.net/mobile/PacSecJP/hyperchem-ma-badbarcode-en1109nocommentfinal (2023-08-13) #security #slides #red #barcode
🔗 🦮 Efficiently bypassing SNI-based HTTPS filtering (2023-08-13) #pdf #security #https #sni
🔗 🦮 SSL Pulse: 49% vulnerable to CVE-2014-0224, 14% exploitable (2023-08-13) #security #exploit #cve
🔗 🦮 Compromising a Linux desktop using... 6502 processor opcodes on the NES?! (2023-08-13) #security #nes #gstreamer #exploit
🔗 🦮 Traffic correlation using netflows (2023-08-13) #security #netflow #tor
🔗 🦮 afl-fuzz: crash exploration mode (2023-08-13) #security #fuzz
🔗 🦮 https://sites.google.com/a/chromium.org/dev/Home/chromium-security/client-identification-mechanisms (2023-08-13) #security #chrome
🔗 🦮 GitHub - seastorm/PuttyRider: Hijack Putty sessions in order to sniff conversation and inject Linux commands. (2023-08-13) #security #ssh #putty #hijack
🔗 🦮 http://www.openwall.com/lists/oss-security/2016/01/27/2 (2023-08-13) #security #ntp #shodan
🔗 🦮 Zeroing buffers is insufficient (2023-08-13) #security #buffer #blue #compiler
🔗 🦮 http://blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications (2023-08-13) #security #perl
🔗 🦮 timing attacks vs interned strings (2023-08-13) #security #time-attack
🔗 🦮 http://blog.lxgr.net/posts/2013/05/20/uninitialized-buffers-in-opengl (2023-08-13) #security #opengl #buffer
🔗 🦮 Article (2023-08-13) #pdf #security #math #dh
🔗 🦮 20141106 asfws unicode hacks (2023-08-13) #pdf #security #unicode #slides
🔗 🦮 From fuzzing to 0-day (2023-08-13) #security #fuzz
🔗 🦮 http://netpatterns.blogspot.de/2016/01/the-rising-sophistication-of-network.html (2023-08-13) #security #ntp #shodan
🔗 🦮 TR-24 Analysis - Destory RAT family (2023-08-13) #security #malware
🔗 🦮 arc4random - 1996 to present (2023-08-13) #openbsd #security #rand #slides
🔗 🦮 http://www.openwall.com/presentations/PHDays2014-Yescrypt (2023-08-13) #security #hash #yescrypt
🔗 🦮 http://polymorf.github.io/sthack-slides-2015 (2023-08-13) #security #slides #reverse #challenge
🔗 🦮 677 (2023-08-13) #pdf #security #crypto #red
🔗 🦮 Miniduke still duking it out (2023-08-13) #exploit #security
🔗 🦮 http://incolumitas.com/2016/06/08/typosquatting-package-managers (2023-08-13) #security #unicode
🔗 🦮 the long tail of MD5 (2023-08-13) #security #md5
🔗 🦮 http://mksben.l0.cm/2015/10/css-based-attack-abusing-unicode-range.html (2023-08-13) #css #security #unicode
🔗 🦮 The story of a pentester recruitment (2023-08-13) #security #pentest
🔗 🦮 UTR #36: Unicode Security Considerations (2023-08-13) #security #unicode #blue
🔗 🦮 Exploiting CVE-2014-0196 a walk-through of the Linux pty race condition PoC (2023-08-13) #security #exploit #cve
🔗 🦮 HTML5 Security Cheatsheet (2023-08-13) #css #html #js #security #red #svg #json
🔗 🦮 How Nvidia breaks Chrome Incognito (2023-08-13) #security #opengl #buffer
🔗 🦮 reallocarray() in OpenBSD: Integer Overflow Detection for Free (2023-08-13) #openbsd #security #alloc
🔗 🦮 Quick notes about the bash bug, its impact, and the fixes so far (2023-08-13) #security #bash
🔗 🦮 RC4 NOMORE (2023-08-13) #security #crypto #rc4
🔗 🦮 An exploit on Gaana.com gave me access to their entire User Database (2023-08-13) #security #exploit
🔗 🦮 An in-depth analysis of SSH attacks on Amazon EC2 (2023-08-13) #security #ssh #blue
🔗 🦮 https://dustri.org/b/how-to-radare2-a-fake-openssh-exploit.html (2023-08-13) #security #reverse
🔗 🦮 https://blog.acolyer.org/2016/11/10/when-csi-meets-public-wifi-inferring-your-mobile-phone-password-via-wifi-signals (2023-08-13) #security #side-channel #wifi
🔗 🦮 https://www.brokenbrowser.com/abusing-of-protocols (2023-08-13) #security #protocol
🔗 🦮 https://www.slideshare.net/vanhoefm/predicting-and-abusing-wpa280211-group-keys (2023-08-13) #security #wpa2 #wifi
🔗 🦮 http://bits-please.blogspot.com/2016/06/extracting-qualcomms-keymaster-keys.html (2023-08-13) #security #fde #qualcomm
🔗 🦮 When Constant-Time Source Code May Not Save You (2023-08-13) #security #crypto #curve25519
🔗 🦮 https://dhavalkapil.com/blogs/Attacking-the-OAuth-Protocol (2023-08-13) #security #oauth
🔗 🦮 Cracking Random Number Generators using Machine Learning – Part 1: xorshift128 (2023-08-13) #security #xorshift128 #machine-learning #rand
🔗 🦮 GTFOBins (2023-03-10) #security