Seclog - #106
📰 SecLinks #
Scraping By: My YouTube Data Adventure Exploring insights and lessons from a detailed journey into YouTube data scraping.
Read More
Announcing CodeQL Community Packs A deep dive into the new CodeQL Community Packs and their implications for vulnerability research.
Read More
Portspoof: Fighting Back Scanners Discover a new approach to thwart port and service scanners with Portspoof.
Read More
RCE via Prompt Injection How a terminal prompt injection vulnerability opens doors for RCE in Cursor.
Read More
Breaking Popular WAFs: Project NZT-48 An investigation into bypassing the most common Web Application Firewalls.
Read More
Databricks JDBC Attack via JAAS Analyzing the methods and impacts of a Databricks JDBC attack leveraging JAAS.
Read More
🐦 SecX #
Kevin Mitnick's Remote Attack (1994) Did Kevin Mitnick actually execute a remote attack using address spoofing and TCP sequence prediction?
Read More
First SQL Injection Demonstration (1998) Learn how rain.forest.puppy revealed the first SQL injection vulnerability in Phrack issue 54.
Read More
RCE Attempts Targeting TP-Link Routers A report on Mirai botnet attacks exploiting TP-Link Archer routers (#CVE-2023-1389).
Read More
🎥 SecVideo #
The Pager Plot; The Iron River; Joy to the World A comprehensive episode featuring riveting stories, including security-related narratives.
Watch Here
💻 SecGit #
Tomcat CVE-2024-50379 PoC A proof of concept for RCE via a race condition in Apache Tomcat.
Explore Here
Polyglot Files: HTML/ZIP/PNG Learn how to create polyglot files combining HTML, ZIP, and PNG formats.
Explore Here
Enjoyed this post? Subscribe to Seclog for more in-depth security analysis and updates.
For any suggestions or feedback, please contact us at: [email protected]Subscribe to Seclog
Enjoyed this post? Subscribe for more in-depth security analysis and updates direct to your inbox.
No spam. Only high-security insights. Unsubscribe at any time.