<h3 id="heading-seclinks">seclinks</h3>
<ul>
<li><p><a target="_blank" href="https://blog.thc.org/infecting-ssh-public-keys-with-backdoors">Infecting SSH Public Keys with backdoors</a></p>
</li>
<li><p><a target="_blank" href="https://jub0bs.com/posts/2023-05-05-smorgasbord-of-a-bug-chain/">A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF</a></p>
</li>
<li><p><a target="_blank" href="https://newsletter.threat.dev/p/stealing-the-information-of-millions">Stealing the Information of Millions of People</a></p>
</li>
<li><p><a target="_blank" href="http://zertux.net/index.php/2021/09/17/bypassing-the-internet-blackout/">Bypassing The Internet Blackout</a></p>
</li>
<li><p><a target="_blank" href="https://labs.lares.com/introducing-scraping-kit/">Introducing Scraping Kit</a></p>
</li>
<li><p><a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1749129">1749129 - Side-channel attack can deanonymize users (potential risk to journalists and activists)</a></p>
</li>
<li><p><a target="_blank" href="https://blog.doyensec.com/2023/03/28/wallet-info.html">The Case For Improving Crypto Wallet Security</a></p>
</li>
<li><p><a target="_blank" href="https://hackerone.com/reports/1923672">Report #1923672 - Account takeover due to insufficient URL validation on RelayState parameter</a></p>
</li>
<li><p><a target="_blank" href="https://www.bentasker.co.uk/posts/documentation/linux/307-building-a-tor-hidden-service-from-scratch-part-1.html">Building a Tor Hidden Service From Scratch - Part 1</a></p>
</li>
<li><p><a target="_blank" href="https://hackerone.com/reports/1946534">Report #1946534 - Open redirect due to scanning QR code via brave browser</a></p>
</li>
<li><p><a target="_blank" href="http://acme.sh">acme.sh</a> <a target="_blank" href="https://github.com/acmesh-official/acme.sh/issues/4659">runs arbitrary commands from a remote server · Issue #4659 · acmesh-official/acme.sh</a></p>
</li>
<li><p><a target="_blank" href="https://www.akamai.com/blog/security-research/owasp-authentication-threats-for-json-web-token">Analyzing Broken User Authentication Threats to JSON Web Tokens</a></p>
</li>
</ul>
<h3 id="heading-secvideo">secvideo</h3>
<ul>
<li><a target="_blank" href="https://www.youtube.com/watch?v=lz9wU3FnSA0">BSidesSF 2023 - You don’t have to patch! (Pedro Fortuna, Jasvir Nagra)</a></li>
</ul>
<h3 id="heading-secgit">secgit</h3>
<ul>
<li><p><a target="_blank" href="https://github.com/MatrixTM/MHDDoS">MatrixTM/MHDDoS</a></p>
</li>
<li><p><a target="_blank" href="https://github.com/yarrick/iodine">yarrick/iodine</a></p>
</li>
</ul>
<h3 id="heading-secmisc">secmisc</h3>
<ul>
<li><a target="_blank" href="https://cvexploits.io/">CVExploits</a></li>
</ul>


### seclinks

* [Infecting SSH Public Keys with backdoors](https://blog.thc.org/infecting-ssh-public-keys-with-backdoors)
    
* [A smorgasbord of a bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF](https://jub0bs.com/posts/2023-05-05-smorgasbord-of-a-bug-chain/)
    
* [Stealing the Information of Millions of People](https://newsletter.threat.dev/p/stealing-the-information-of-millions)
    
* [Bypassing The Internet Blackout](http://zertux.net/index.php/2021/09/17/bypassing-the-internet-blackout/)
    
* [Introducing Scraping Kit](https://labs.lares.com/introducing-scraping-kit/)
    
* [1749129 - Side-channel attack can deanonymize users (potential risk to journalists and activists)](https://bugzilla.mozilla.org/show_bug.cgi?id=1749129)
    
* [The Case For Improving Crypto Wallet Security](https://blog.doyensec.com/2023/03/28/wallet-info.html)
    
* [Report #1923672 - Account takeover due to insufficient URL validation on RelayState parameter](https://hackerone.com/reports/1923672)
    
* [Building a Tor Hidden Service From Scratch - Part 1](https://www.bentasker.co.uk/posts/documentation/linux/307-building-a-tor-hidden-service-from-scratch-part-1.html)
    
* [Report #1946534 - Open redirect due to scanning QR code via brave browser](https://hackerone.com/reports/1946534)
    
* [acme.sh](http://acme.sh) [runs arbitrary commands from a remote server · Issue #4659 · acmesh-official/acme.sh](https://github.com/acmesh-official/acme.sh/issues/4659)
    
* [Analyzing Broken User Authentication Threats to JSON Web Tokens](https://www.akamai.com/blog/security-research/owasp-authentication-threats-for-json-web-token)
    

### secvideo

* [BSidesSF 2023 - You don’t have to patch! (Pedro Fortuna, Jasvir Nagra)](https://www.youtube.com/watch?v=lz9wU3FnSA0)
    

### secgit

* [MatrixTM/MHDDoS](https://github.com/MatrixTM/MHDDoS)
    
* [yarrick/iodine](https://github.com/yarrick/iodine)
    

### secmisc

* [CVExploits](https://cvexploits.io/)

Infecting SSH, bug chain: postMessage, JSONP, WAF bypass, DOM-based XSS, CORS, CSRF, Building a Tor Hidden, etc.

Seclog - #28

Stay informed with Seclog your weekly update on the latest cybersecurity news, threats, and trends.


Stay informed with Seclog - Securify Spotlight: your weekly update on the latest cybersecurity news, threats, and trends.