I'm sorry I didn't post for last week because I've become a father for the second time. <3

seclinks

• Nuclei v2.8.0 - Fuzz all the way!

• {JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF | Claroty

• Scanning in the IDE: A Bad IDE(A) for Developers | securing.dev

• Exploiting CORS Misconfigurations - attack ships on fire

• Sniffing SSH Passwords | The Network Logician

• Pre-Auth RCE with CodeQL in Under 20 Minutes | Frycos Security Diary

• An open source SMS gateway for pentest projects | Pentagrid AG

• Unauthenticated Remote Code Execution in Spotify’s Backstage #vulnerability

• I've fuzzed a small part of the GitHub API. Here are my findings. · m's blog

• How to not lose your job as a CISO – PwnDefend

• Fuzzing ping(8)

• Nebuchadnezzar | Practically-exploitable Cryptographic Vulnerabilities in Matrix

• Common pitfalls of breaking up HTTPS connections | Almost Secure

• DevSecOps – DoD Cyber Exchange

• Visual Studio Code: Remote Code Execution · Advisory · google/security-research

• Sandboxing V8 - Google Slaytlar

• A Brief History of Containers: From the 1970s Till Now

• Introduction to Serverless Vulnerabilities

• Novel Pipeline Vulnerability Discovered; Rust Found Vulnerable

• Zero Day Initiative — Pwn2Own Toronto 2022 - Day Three Results

secgit

• awesome-cto

• payloadartist/offensive-chatgpt: Offensive security use cases of ChatGPT

• ustayready/fireprox: AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

• kleiton0x00/RedditC2: Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

• byt3bl33d3r/tailscalesd: Prometheus Service Discovery for Tailscale (Python Edition)

• obiscr/ChatGPT: This project is a plugin that supports ChatGPT running on JetBrains series IDE.

• spyboy-productions/r4ven: Track ip and gps Location.

P.S: Thanks a lot of Dogan Can Bakir.