Seclog - #30

seclinks #

Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware

Swing VPN app is a DDOS botnet | Greek geek

5 Challenges to Implementing DevSecOps and How to Overcome Them

AWS WAF Clients Left Vulnerable to SQL Injection Due to Unorthodox MSSQL Design Choice

Testing a new encrypted messaging app's extraordinary claims

EJS Vulnerabilities in CTF

Introduction to container security - Part 1

Detecting and decrypting Sliver C2 – a threat hunter's guide

[109] Data Falsificada (Part 1): "Clusterfake" - Data Colada

DNS Analyzer - Finding DNS vulnerabilities with Burp Suite

secvideo #

Hacking Google Cloud?

Authentication Vulnerabilities

Scale Your Cloud Infrastructure (Hosting CTFs)

secgit #

yuske/server-side-prototype-pollution

CERT-Polska/Artemis

transmissions11/solcurity

mindedsecurity/semgrep-rules-android-security

tenable/EscalateGPT

hakluke/hakcheckurl

pgrok/pgrok

BishopFox/jsluice

joshhighet/ransomwatch