Seclog - #88

25 Aug 2024

Surveillance Watch: They Know Who You Are - Explore surveillance technologies and their implications. Read More

Make Firefox Private Again - Learn how to enhance your Firefox browser's privacy settings. Read More

Phrack Magazine - Latest issue of the long-running hacker magazine. Read More

macOS Red Teaming - Comprehensive guide for red teaming on macOS systems. Read More

OpenSSH Backdoors - Analysis of potential backdoors in OpenSSH. Read More

Critical SSRF vulnerability in Microsoft Copilot Studio - Details on a significant security flaw. Read More

Unauthenticated remote code execution on BYOB - Exploring a vulnerability in BYOB. Read More

Xiaomi Patched an RCE Vulnerability Before Pwn2Own Toronto 2023 - Insight into Xiaomi's patching practices. Read More

Internet Bug Bounty Report #2646493 - Details on a potential SQL injection in Django. Read More

Threat Modeling - STRIDE Template - Resource for threat modeling using the STRIDE framework. Read More

Data Exfiltration from Slack AI via indirect prompt injection - Analysis of a potential vulnerability in Slack AI. Read More

Walkthrough of CVE-2023-7028 - Account Takeover via Password Reset - Detailed explanation of a critical vulnerability. Watch Here

microsoft/ebpf-for-windows - eBPF implementation for Windows systems. Explore on GitHub

manticoresoftware/manticoresearch - Open-source search engine alternative to Elasticsearch. Explore on GitHub

EgeBalci/sgn - Shikata ga nai encoder ported to Go with improvements. Explore on GitHub

silverhack/monkey365 - Tool for Microsoft 365 and Azure security configuration reviews. Explore on GitHub

meithecatte/bashfuck - Write bash scripts using only punctuation characters. Explore on GitHub

0xBienCuit/InfraRed-AWS - AWS security assessment tool. Explore on GitHub

AI-Voodoo/Red_Reaper_v2 - Security tool for AI systems. Explore on GitHub

synacktiv/octoscan - Static vulnerability scanner for GitHub action workflows. Explore on GitHub