Seclog - #15

25 Feb 2023

I Read The DoD Zero Trust Doc, Here's What You Need To Know...

Explained from First Principles

EmojiDeploy: Smile! Your Azure Web Service Got RCE’d Ermetic

SS - Monitor Socket Connections

Prototype Pollution Leads to Remote Code Execution in Node.js

OWASP Kubernetes Top 10 – Sysdig

Airbnb’s Approach to Access Management at Scale

How to use granular geographic match rules with AWS WAF | AWS Security Blog

AWS EKS Playground using Terraform | Rohit Salecha

Threat Hunting Series: Detection Engineering VS Threat Hunting

Exploiting API Framework Flexibility

yayi - Managing several SSH identities explained

Bug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass

Threat Modelling Cloud Platform Services by Example: Google Cloud Storage – NCC Group Research

nemesida-waf/waf-bypass: Check your WAF before an attacker does this one

Home - zrok

Poste.io ~ complete mail server

12ft Ladder

dns0.eu — The European public DNS that makes your Internet safer