📚 SecMisc

• WHOIS Database Download: Whois History of 561 Million Domains - Comprehensive access to historical WHOIS data for over 561 million domains. Read More

📰 SecLinks

• Testing Handbook - Burp - A detailed guide on using Burp for security testing. Read More

• Edition 26: Scaling Security Design Reviews and why the time is now - Insights on scaling security design reviews in today's environment. Read More

• Leaking All Users Google Drive Files - An exploration of vulnerabilities leading to data leaks in Google Drive. Read More

• plORMbing your Django ORM - Enhancing and securing your Django ORM. Read More

• Over 1 Million websites are at risk of sensitive information leakage - Addressing the widespread risk of information leakage on websites. Read More

• An Introduction to GCPwn – Part 1 - A beginner's guide to pentesting Google Cloud Platform. Read More

• Flying Prompt Airlines - High Signal Security – Exploring security in the context of aviation. Read More

• A Beginner’s Guide to Identifying Explosive Ordnance in Social Media Imagery - Techniques for identifying explosive devices in social media images. Read More

• You Can't Spell WebRTC without RCE - Part 1 - Margin Research – Security vulnerabilities in WebRTC. Read More

• Chrome Stealer - BernKing – Examining the methods used by Chrome Stealer malware. Read More

• Poisoning the SSM Command Document Well - High Signal Security – Techniques for compromising SSM Command Documents. Read More

💻 SecGit

• evrenyal/langtsunami - Multi-Lingual GenAI Red Teaming Tool. Explore on GitHub

• imadr/Unity-game-hacking - A guide for hacking Unity games. Explore on GitHub

• ClusterM/wg-obfuscator - WireGuard obfuscator for bypassing ISP/government blocks. Explore on GitHub

• sys0wn/css-scrollbar-attack - PoC for leaking text nodes via CSS injection. Explore on GitHub

• stealthcopter/deepce - Docker Enumeration, Escalation of Privileges, and Container Escapes. Explore on GitHub

• fyoorer/ShadowClone - Unleash the power of the cloud. Explore on GitHub

• ZitaoTech/Hackberry-Pi_Zero - A handheld Linux terminal with Raspberry Pi Zero 2W. Explore on GitHub

• SeanPesce/CVE-2024-22243 - Exploitable scenarios for CVE-2024-22243 in the Spring framework. Explore on GitHub

• wikiZ/RedGuard - A C2 front flow control tool to evade detection. Explore on GitHub

• trick77/ipset-blacklist - A script to ban IP addresses from blacklists. Explore on GitHub

For suggestions and any feedback, please contact: securify@rosecurify.com