<h3 id="heading-seclinks">seclinks</h3>
<ul>
<li><a target="_blank" href="https://blog.sicuranext.com/aws-waf-bypass/">AWS WAF Bypass: invalid JSON object and unicode escape sequences</a>
</li>
<li><a target="_blank" href="https://blog.doyensec.com/2023/07/18/streamlining-websocket-pentesting-with-wsrepl.html">Streamlining Websocket Pentesting with wsrepl</a>
</li>
<li><a target="_blank" href="https://sec-consult.com/blog/detail/melting-the-dns-iceberg-taking-over-your-infrastructure-kaminsky-style/">Melting the DNS Iceberg: Taking over your infrastructure Kaminsky style</a>
</li>
<li><a target="_blank" href="https://officercia.mirror.xyz/M0QAuwwbppAFj2KWZV02DEC8CtrxaX3R47kdpcTspvE">How hackers may steal your Ethers and why does eth_sign function</a>
</li>
<li><a target="_blank" href="https://www.picussecurity.com/resource/blog/securing-macos-a-closer-look-at-built-in-macos-application-security">Securing macOS: A Closer Look At Built-In macOS Application Security</a>
</li>
<li><a target="_blank" href="https://blog.redteam-pentesting.de/2023/monsoon-next-level/">RedTeam Pentesting - Blog - Bringing Monsoon to the Next Level</a>
</li>
<li><a target="_blank" href="https://samcurry.net/points-com/">Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform</a>
</li>
<li><a target="_blank" href="https://trufflesecurity.com/blog/secrets-leak-in-ci-cd/">How Secrets Leak in CI/CD Pipelines</a>
</li>
<li><a target="_blank" href="https://www.securesystems.de/blog/svg-security-risks-not-just-a-scalable-graphic/">SVG Security Risks - not just a scalable graphic</a>
</li>
<li><a target="_blank" href="https://bishopfox.com/blog/server-side-spreadsheet-injections">Server-Side Spreadsheet Injection - Formula Injection to…</a>
</li>
<li><a target="_blank" href="https://matduggan.com/serverless-functions-post-mortem/">Serverless Functions Post-Mortem</a>
</li>
<li><a target="_blank" href="https://dropbox.tech/machine-learning/prompt-injection-with-control-characters-openai-chatgpt-llm">Don’t you (forget NLP): Prompt injection with control characters in ChatGPT</a>
</li>
<li><a target="_blank" href="https://portswigger.net/blog/new-techniques-and-tools-for-web-race-conditions">New techniques and tools for web race conditions</a>
</li>
<li><a target="_blank" href="https://downfall.page/">Downfall Attacks</a>
</li>
</ul>
<h3 id="heading-secgit">secgit</h3>
<ul>
<li><a target="_blank" href="https://github.com/ignis-sec/puff">ignis-sec/puff</a>
</li>
<li><a target="_blank" href="https://github.com/omar2535/GraphQLer">omar2535/GraphQLer</a>
</li>
<li><a target="_blank" href="https://github.com/doyensec/wsrepl">doyensec/wsrepl</a>
</li>
<li><a target="_blank" href="https://github.com/scipag/websocket_fuzzer">scipag/websocket_fuzzer</a>
</li>
<li><a target="_blank" href="https://github.com/henry-richard7/Browser-password-stealer">henry-richard7/Browser-password-stealer</a>
</li>
<li><a target="_blank" href="https://github.com/nullenc0de/ChromeAudit">nullenc0de/ChromeAudit</a>
</li>
<li><a target="_blank" href="https://github.com/LemonSec/johnnyapplethief">LemonSec/johnnyapplethief</a>
</li>
<li><a target="_blank" href="https://github.com/yunuscadirci/XboxOneDirectoryTraversal">yunuscadirci/XboxOneDirectoryTraversal</a>
</li>
<li><a target="_blank" href="https://github.com/padok-team/cognito-scanner">padok-team/cognito-scanner</a>
</li>
<li><a target="_blank" href="https://github.com/adityatelange/bhhb">adityatelange/bhhb</a>
</li>
<li><a target="_blank" href="https://github.com/Escape-Technologies/goctopus">Escape-Technologies/goctopus</a>
</li>
<li><a target="_blank" href="https://github.com/hahwul/noir">hahwul/noir</a>
</li>
</ul>

### seclinks

* [AWS WAF Bypass: invalid JSON object and unicode escape sequences](https://blog.sicuranext.com/aws-waf-bypass/)
    
* [Streamlining Websocket Pentesting with wsrepl](https://blog.doyensec.com/2023/07/18/streamlining-websocket-pentesting-with-wsrepl.html)
    
* [Melting the DNS Iceberg: Taking over your infrastructure Kaminsky style](https://sec-consult.com/blog/detail/melting-the-dns-iceberg-taking-over-your-infrastructure-kaminsky-style/)
    
* [How hackers may steal your Ethers and why does eth\_sign function](https://officercia.mirror.xyz/M0QAuwwbppAFj2KWZV02DEC8CtrxaX3R47kdpcTspvE)
    
* [Securing macOS: A Closer Look At Built-In macOS Application Security](https://www.picussecurity.com/resource/blog/securing-macos-a-closer-look-at-built-in-macos-application-security)
    
* [RedTeam Pentesting - Blog - Bringing Monsoon to the Next Level](https://blog.redteam-pentesting.de/2023/monsoon-next-level/)
    
* [Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform](https://samcurry.net/points-com/)
    
* [How Secrets Leak in CI/CD Pipelines](https://trufflesecurity.com/blog/secrets-leak-in-ci-cd/)
    
* [SVG Security Risks - not just a scalable graphic](https://www.securesystems.de/blog/svg-security-risks-not-just-a-scalable-graphic/)
    
* [Server-Side Spreadsheet Injection - Formula Injection to…](https://bishopfox.com/blog/server-side-spreadsheet-injections)
    
* [Serverless Functions Post-Mortem](https://matduggan.com/serverless-functions-post-mortem/)
    
* [Don’t you (forget NLP): Prompt injection with control characters in ChatGPT](https://dropbox.tech/machine-learning/prompt-injection-with-control-characters-openai-chatgpt-llm)
    
* [New techniques and tools for web race conditions](https://portswigger.net/blog/new-techniques-and-tools-for-web-race-conditions)
    
* [Downfall Attacks](https://downfall.page/)
    

### secgit

* [ignis-sec/puff](https://github.com/ignis-sec/puff)
    
* [omar2535/GraphQLer](https://github.com/omar2535/GraphQLer)
    
* [doyensec/wsrepl](https://github.com/doyensec/wsrepl)
    
* [scipag/websocket\_fuzzer](https://github.com/scipag/websocket_fuzzer)
    
* [henry-richard7/Browser-password-stealer](https://github.com/henry-richard7/Browser-password-stealer)
    
* [nullenc0de/ChromeAudit](https://github.com/nullenc0de/ChromeAudit)
    
* [LemonSec/johnnyapplethief](https://github.com/LemonSec/johnnyapplethief)
    
* [yunuscadirci/XboxOneDirectoryTraversal](https://github.com/yunuscadirci/XboxOneDirectoryTraversal)
    
* [padok-team/cognito-scanner](https://github.com/padok-team/cognito-scanner)
    
* [adityatelange/bhhb](https://github.com/adityatelange/bhhb)
    
* [Escape-Technologies/goctopus](https://github.com/Escape-Technologies/goctopus)
    
* [hahwul/noir](https://github.com/hahwul/noir)

Spotlight: Websocket Pentesting with wsrepl, SVG Security Risks, New techniques Race conditions, XboxOneDirectoryTraversal, websocket_fuzzer etc.

Seclog - #36

Stay informed with Seclog your weekly update on the latest cybersecurity news, threats, and trends.


Stay informed with Seclog - Securify Spotlight: your weekly update on the latest cybersecurity news, threats, and trends.