232
233

Hiring Thread/r/netsec's Q1 2017 Information Security Hiring Thread (self.netsec)

submitted by ranokTrusted Contributor[M] - announcement

0
1

discussionThe /r/netsec Weekly Discussion Thread - January 16, 2017 (self.netsec)

submitted by AutoModerator[M] - announcement

1
86
87

Huawei OTT Vulnerability (FREE TV FOR EVERYONE) - 60 days fixing period expired NO PATCH (linkedin.com)

submitted by nebojsa_terzic

2
•
•

Practical JSONP injection (securitycafe.ro)

submitted by Matasareanu13

3
413
414

FACEBOOK’S IMAGETRAGICK STORY (4lemon.ru)

submitted by Wick3dGeek

4
4
5

HashSuite Droid (aka JTR on Android) will melt your device (hashsuite.openwall.net)

submitted by phlame64

5
12
13

Bypassing Control Flow Guard in Windows 10 (improsec.com)

submitted by digicat

6
20
21

CVE-2016-3873: Arbitrary Kernel Write in Nexus 9 (sagi.io)

submitted by micgob

7
509
510

The Line of Death (textslashplain.com)

submitted by Involder

8
38
39

More routers with simple command injections... (seclists.org)

submitted by bitolas

9
19
20

Hardware hacking + Red Team = Meraki RCE: When Red Team and Vulnerability Research fell in love. Part 1 (research.trust.salesforce.com)

submitted by javuto

10
10
11

(Windows) Shellcode: Resolving API addresses in memory (modexp.wordpress.com)

submitted by pacotes

11
131
132

Deconstructing Secure HTTP without HTTPS (poshsecurity.com)

submitted by kieranjacobsen

12
37
38

Practical Android Debugging Via KGDB (blog.trendmicro.com)

submitted by mackwage

13
891
892

Stealing passwords from McDonald's users (finnwea.com)

submitted by Wick3dGeek

14
42
43

Wide Impact: Highly Effective Gmail Phishing Technique Being Exploited (wordfence.com)

submitted by catlasshrugged

15
22
23

Hardening Windows 10 with zero-day exploit mitigations (blogs.technet.microsoft.com)

submitted by based2

16
41
42

Hooking Android System Calls for Pleasure and Benefit (vantagepoint.sg)

submitted by secaggr

17
4
5

Qira - Timeless Debugger (qira.me)

submitted by RenegadeUser

18
125
126

How to steal PDFs by injecting JavaScript (insert-script.blogspot.in)

submitted by 1lastBr3ath

19
186
187

p0wnedShell - PowerShell Runspace Post Exploitation Toolkit (github.com)

submitted by manunkind13

20
40
41

Key rotation, user experience, and crypto reporting (tonyarcieri.com)

submitted by bascule

21
44
45

Here's a (somewhat messy) MongoDB proxy honeypot I wrote. (github.com)

submitted by Plazmaz1

22
126
127

Exploiting Misconfigured Apache server-status Instances with server-status_PWN (blog.mazinahmed.net)

submitted by mazen160

23
380
381

A practical guide to RFID badge copying (blog.nviso.be)

submitted by daanraman

24
72
73

[Gentoo exploit] Nginx Root Privilege Escalation Vulnerability exploitable on Gentoo pkgs (CVE-2016-1247 update) (legalhackers.com)

submitted by dawid_golunski

25
407
408

Google Infrastructure Security Design Overview (cloud.google.com)

submitted by sanderD

view more: next ›