Seclog - #103

09 Dec 2024

"In the realm of cyber, victory belongs not to the swiftest click, but to the most strategic mind." - The Art of Cyber War

VX Underground Giveaways - Platform listing donations and resources - Read More

Everything Curl - Comprehensive guide to curl usage and features - Read More

LINQPad Deserialization Vulnerability - Detailed analysis of a discovered deserialization vulnerability in LINQPad - Read More

RCE vs Command Injection - Understanding the technical differences between RCE and command injection attacks - Read More

Android CVE-2020-0238 Analysis - Deep dive into AccountTypePreferenceLoader vulnerability - Read More

Solana Web3.js Supply Chain Attack - Confirmation of supply chain compromise in @solana/web3.js package - Read More

Hacking with Curl - Advanced techniques for security testing using curl - Read More

AI Security Challenges - Analysis of unknown factors in AI security landscape - Read More

Ruby Safe Marshal Escape - Explanation of Gem::SafeMarshal escape technique - Read More

Prompt Stealing Analysis - Investigation into user prompt theft techniques - Read More

WAF Bypass Technique - Novel method using phantom $Version cookie to bypass WAFs - Read More

Telco Infrastructure Security - Discussion on end-to-end encryption importance and VPN vulnerabilities in telecom infrastructure - Read More

SecLists 2024.4 - Latest release of the security tester's companion wordlists - Explore on GitHub

Sunlight - Linux rootkit and malware detection tool - Explore on GitHub

RequestShield - Free OpenSource tool for HTTP access log analysis and threat detection - Explore on GitHub

Tamanoir - Advanced keylogger using eBPF technology - Explore on GitHub

Vanir - Google's source code-based static analysis tool for identifying missing security patches - Explore on GitHub