Rosecurify

Seclog - #68

Rosecurify's photo
Rosecurify
·

2 min read

Seclog - #68

Photo by Justin Kauffman on Unsplash

  • Backdooring AMIs for Fun and Profit - Ratnakar Singh explores the potential and pitfalls of backdooring Amazon Machine Images. Read More

  • WIFI Credential Dumping - Techniques to retrieve the Pre-Shared Key (PSK) from a compromised workstation. Read More

  • HTTP/2 CONTINUATION Flood - Technical details of the HTTP/2 CONTINUATION flood attack. Read More

  • The XZ Utils Backdoor (CVE-2024-3094) - Everything you need to know about the XZ Utils backdoor. Read More

  • DJI Mavic 3 Drone Firmware Analysis - A deep dive into the firmware of the DJI Mavic 3 drone. Read More

  • Exploiting Empire C2 Framework - Insights into vulnerabilities within the Empire Command and Control framework. Read More

  • The V8 Sandbox - A look into the sandboxing mechanism of the V8 JavaScript engine. Read More

  • Panning For Gold: Sifting Through Network Logs - Techniques for analyzing network logs for security insights. Read More

  • Azure Redirect URI Takeover Vulnerability - Exploring a vulnerability in Azure's redirect URI handling. Read More

  • Securing Flutter Applications - Best practices for enhancing the security of Flutter applications. Read More

  • 10,000 Bugfixes in 10,000 Days - Reflecting on the milestone of fixing 10,000 bugs. Read More

  • 10 > 64, in QR Codes - Exploring encoding efficiency in QR codes. Read More

  • Fault Injection and the Supply Chain - Analyzing the impact of fault injection attacks on supply chain security. Read More

  • Fine-tuning Semgrep for Ruby Security - Customizing Semgrep rules for Ruby security. Read More

  • Security Research Without Ever Leaving GitHub - Leveraging GitHub for end-to-end security research. Read More

  • The Dangers of AI Agents Unfurling Hyperlinks - Discussing the security risks of AI agents automatically unfurling hyperlinks. Read More

💻 SecGit

  • xzbot - Notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094). Explore on GitHub

  • endlessh-go - A Golang implementation of endlessh exporting Prometheus metrics, visualized by a Grafana dashboard. Explore on GitHub

  • burp2caido - A tool to migrate Burpsuite HTTP history to Caido. Explore on GitHub

  • apkd - APK downloader from a few sources. Explore on GitHub

  • biotime-rce-8.5.5 - Exploit covering several vulnerabilities in BioTime leading to Remote Code Execution or directory traversal. Explore on GitHub

For suggestions and any feedback, please contact: securify@rosecurify.com

seclogSecurity