Seclog - #16

seclinks #

Salt Labs | Traveling with OAuth - Account Takeover on Booking.com

Unauthenticated RCE in Goanywhere - vsociety

Skylight Cyber | A-Salt: attacking SaltStack

Oxy is Cloudflare's Rust-based next generation proxy framework

Abusing Maven's pom.xml - hn security

DNS Hijacking: In-Depth — Officer's Blog

Also : DNS Abuse Techniques Matrix

Don't JSFuck with me: Part 1 – Trickster Dev

Exploiting Distroless Images

#1700734 Shop App - Attacker is able to intercept authorization code during authentication (OAuth) and is able to get access to Microsoft Outlook email account

secvideo #

Bug Patterns in Solidity and Smart Contract Auditing

#NahamCon2022EU: Hunting for Amazon Cognito Security Misconfigurations

secgit #

rizemon/exploit-writing-for-oswe

[ossu/computer-science)

greshake/llm-security: New ways of breaking app-integrated LLMs

New ways of breaking app-integrated LLMs

authomize/okta_scim_attack_tool

fbkcs/ThunderDNS

gojue/ecapture

Limmen/awesome-rl-for-cybersecurity

secservice #

Rosenpass