66
67

hiring thread/r/netsec's Q3 2017 Information Security Hiring Thread (self.netsec)

submitted by Katana__Blazing Crimson[M] - announcement

20
21

discussionThe /r/netsec Monthly Discussion Thread - September 2017 (self.netsec)

submitted by AutoModerator[M] - announcement

1
156
157

CCleaner update from Talos - Looking at the C2 (blog.talosintelligence.com)

submitted by WorksAtCisco

2
289
290

Evidence Aurora Operation Still Active: Supply Chain Attack Through CCleaner (intezer.com)

submitted by 0xbaadf00dsec

3
86
87

Joomla! Login Bypass via LDAP Injection (blog.ripstech.com)

submitted by websecdev

4
22
23

PoC for CVE-2017-0785 Android information leak (Blueborne) (github.com)

submitted by unbkenwost

5
21
22

Running unsigned code in Intel Management Engine (blackhat.com)

submitted by jeffmcjunkin

6
7
8

SharpHound: Evolution of the BloodHound Ingestor [xpost /r/WindowsSecurity] (blog.cptjesus.com)

submitted by m8urn

7
30
31

Breaking out of restricted windows environment (weirdgirlweb.wordpress.com)

submitted by kapilajain23

8
15
16

BSides Augusta 2017 [Videos] (youtube.com)

submitted by reaperb0t

9
0
1

Python object injection exploitation (defencely.com)

submitted by pm_me_your_findings

10
5
6

Abusing delay load DLLs for remote code injection (hatriot.github.io)

submitted by FILLABUSTA

11
204
205

pdfHVACKer - Bridging the Air-Gap by Manipulating the Environment Temperature (sicherheitsforschung-magdeburg.de)

submitted by 0xKaishakunin

12
48
49

Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malicious sample and automatically generates a list of mutexes that could be used to as “vaccines” against the sample. (github.com)

submitted by GelosSnake

13
59
60

Using ssdeep (fuzzy hash) in huge scale for file clustering (intezer.com)

submitted by desegel

14
17
18

Common WiFi Attacks And How To Detect Them (wtf.horse)

submitted by lennartkoopmann

15
34
35

pdfCure53 Browser Security White Paper (Chrome/Edge/IE) (cure53.de)

submitted by reknerxam

16
49
50

Surviving Apache Struts CVE-2017-5638 (alexgaynor.net)

submitted by kingkilr

17
17
18

Epson EasyMP Projector Takeover (CVE-2017-12860 / CVE-2017-12861) (rhinosecuritylabs.com)

submitted by oh_herro_sir

18
33
34

pdfKernel Driver mmap Handler Exploitation (labs.mwrinfosecurity.com)

submitted by maxxori

19
26
27

X41 Browser Security White Paper (Chrome/Edge/IE) (x41-dsec.de)

submitted by reknerxam

20
2020
2021

CCleanup: A Vast Number of Machines at Risk (blog.talosintelligence.com)

submitted by moviuro

21
112
113

DigitalOcean suffers 1-Click Setup vulnerability affecting debian-sys-maint MySQL user (github.com)

submitted by hp777us

22
72
73

Have I been pwned list at 99.34% on Hashes.org by community effort. (hashes.org)

submitted by s3inlc

23
26
27

AWS Extender - A burp plugin for assessing cloud based web apps (virtuesecurity.com)

submitted by virtue-elliott

24
12
13

Linux Attack Surface Analysis -- dawgmon 1.0 release (anvilventures.com)

submitted by anvilventures

25
40
41

Optionsbleed - HTTP OPTIONS method can leak Apache's server memory (blog.fuzzing-project.org)

submitted by oherrala

view more: next ›