<h3 id="heading-seclinks">seclinks</h3>
<ul>
<li><a target="_blank" href="https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/">Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware</a>
</li>
<li><a target="_blank" href="https://lecromee.github.io/posts/swing_vpn_ddosing_sites/">Swing VPN app is a DDOS botnet | Greek geek</a>
</li>
<li><a target="_blank" href="https://insights.sei.cmu.edu/blog/5-challenges-to-implementing-devsecops-and-how-to-overcome-them/">5 Challenges to Implementing DevSecOps and How to Overcome Them</a>
</li>
<li><a target="_blank" href="https://www.gosecure.net/blog/2023/06/21/aws-waf-clients-left-vulnerable-to-sql-injection-due-to-unorthodox-mssql-design-choice/">AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice</a>
</li>
<li><a target="_blank" href="https://crnkovic.dev/testing-converso/">Testing a new encrypted messaging app's extraordinary claims</a>
</li>
<li><a target="_blank" href="https://blog.huli.tw/2023/06/22/en/ejs-render-vulnerability-ctf/">EJS Vulnerabilities in CTF</a>
</li>
<li><a target="_blank" href="https://s3cur3.it/home/introduction-to-container-security-part-1">Introduction to container security - Part 1</a>
</li>
<li><a target="_blank" href="https://www.immersivelabs.com/blog/detecting-and-decrypting-sliver-c2-a-threat-hunters-guide/">Detecting and decrypting Sliver C2 – a threat hunter's guide</a>
</li>
<li><a target="_blank" href="https://datacolada.org/109">[109] Data Falsificada (Part 1): "Clusterfake" - Data Colada</a>
</li>
<li><a target="_blank" href="https://sec-consult.com/blog/detail/dns-analyzer-finding-dns-vulnerabilities-with-burp-suite/">DNS Analyzer - Finding DNS vulnerabilities with Burp Suite</a>
</li>
</ul>
<h3 id="heading-secvideo">secvideo</h3>
<ul>
<li><a target="_blank" href="https://www.youtube.com/watch?v=uOvizKc1WZY">Hacking Google Cloud?</a>
</li>
<li><a target="_blank" href="https://www.youtube.com/watch?v=mox6DL4zK7I">Authentication Vulnerabilities</a>
</li>
<li><a target="_blank" href="https://www.youtube.com/watch?v=GQQsCfMUq4A">Scale Your Cloud Infrastructure (Hosting CTFs)</a>
</li>
</ul>
<h3 id="heading-secgit">secgit</h3>
<ul>
<li><a target="_blank" href="https://github.com/yuske/server-side-prototype-pollution">yuske/server-side-prototype-pollution</a>
</li>
<li><a target="_blank" href="https://github.com/CERT-Polska/Artemis">CERT-Polska/Artemis</a>
</li>
<li><a target="_blank" href="https://github.com/transmissions11/solcurity">transmissions11/solcurity</a>
</li>
<li><a target="_blank" href="https://github.com/mindedsecurity/semgrep-rules-android-security">mindedsecurity/semgrep-rules-android-security</a>
</li>
<li><a target="_blank" href="https://github.com/tenable/EscalateGPT">tenable/EscalateGPT</a>
</li>
<li><a target="_blank" href="https://github.com/hakluke/hakcheckurl">hakluke/hakcheckurl</a>
</li>
<li><a target="_blank" href="https://github.com/pgrok/pgrok">pgrok/pgrok</a>
</li>
<li><a target="_blank" href="https://github.com/BishopFox/jsluice">BishopFox/jsluice</a>
</li>
<li><a target="_blank" href="https://github.com/joshhighet/ransomwatch">joshhighet/ransomwatch</a>
</li>
</ul>

### seclinks

* [Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware](https://labs.jumpsec.com/advisory-idor-in-microsoft-teams-allows-for-external-tenants-to-introduce-malware/)
    
* [Swing VPN app is a DDOS botnet | Greek geek](https://lecromee.github.io/posts/swing_vpn_ddosing_sites/)
    
* [5 Challenges to Implementing DevSecOps and How to Overcome Them](https://insights.sei.cmu.edu/blog/5-challenges-to-implementing-devsecops-and-how-to-overcome-them/)
    
* [AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice](https://www.gosecure.net/blog/2023/06/21/aws-waf-clients-left-vulnerable-to-sql-injection-due-to-unorthodox-mssql-design-choice/)
    
* [Testing a new encrypted messaging app's extraordinary claims](https://crnkovic.dev/testing-converso/)
    
* [EJS Vulnerabilities in CTF](https://blog.huli.tw/2023/06/22/en/ejs-render-vulnerability-ctf/)
    
* [Introduction to container security - Part 1](https://s3cur3.it/home/introduction-to-container-security-part-1)
    
* [Detecting and decrypting Sliver C2 – a threat hunter's guide](https://www.immersivelabs.com/blog/detecting-and-decrypting-sliver-c2-a-threat-hunters-guide/)
    
* [\[109\] Data Falsificada (Part 1): "Clusterfake" - Data Colada](https://datacolada.org/109)
    
* [DNS Analyzer - Finding DNS vulnerabilities with Burp Suite](https://sec-consult.com/blog/detail/dns-analyzer-finding-dns-vulnerabilities-with-burp-suite/)
    

### secvideo

* [Hacking Google Cloud?](https://www.youtube.com/watch?v=uOvizKc1WZY)
    
* [Authentication Vulnerabilities](https://www.youtube.com/watch?v=mox6DL4zK7I)
    
* [Scale Your Cloud Infrastructure (Hosting CTFs)](https://www.youtube.com/watch?v=GQQsCfMUq4A)
    

### secgit

* [yuske/server-side-prototype-pollution](https://github.com/yuske/server-side-prototype-pollution)
    
* [CERT-Polska/Artemis](https://github.com/CERT-Polska/Artemis)
    
* [transmissions11/solcurity](https://github.com/transmissions11/solcurity)
    
* [mindedsecurity/semgrep-rules-android-security](https://github.com/mindedsecurity/semgrep-rules-android-security)
    
* [tenable/EscalateGPT](https://github.com/tenable/EscalateGPT)
    
* [hakluke/hakcheckurl](https://github.com/hakluke/hakcheckurl)
    
* [pgrok/pgrok](https://github.com/pgrok/pgrok)
    
* [BishopFox/jsluice](https://github.com/BishopFox/jsluice)
    
* [joshhighet/ransomwatch](https://github.com/joshhighet/ransomwatch)

IDOR in Microsoft Teams, VPN app is a DDOS botnet, EJS Vulnerabilities, container security, Data Falsificada: "Clusterfake", DNS Analyzer, etc.

Seclog - #30

Stay informed with Seclog your weekly update on the latest cybersecurity news, threats, and trends.


Stay informed with Seclog - Securify Spotlight: your weekly update on the latest cybersecurity news, threats, and trends.