×

70
71

hiring thread/r/netsec's Q4 2017 Information Security Hiring Thread (self.netsec)

submitted by sanitybit[M] - announcement

4
5

discussionThe /r/netsec Monthly Discussion Thread - December 2017 (self.netsec)

submitted by AutoModerator[M] - announcement

1
236
237

Intel Management Engine Critical Firmware Update (Intel-SA-00086) (intel.com)

submitted by QuirkySpiceBush

2
116
117

PowerShell script to dump generic Windows credentials from the Credential Manager without admin (github.com)

submitted by peewpw

3
8
9

How anyone could have hacked the Panama Papers law firm (medium.com)

submitted by Pissy_Tree_Hugger

4
1
2

Cool review: vulnerability detection plugins for Burp Suite and Google Chrome (avleonov.com)

submitted by isox_xx

5
847
848

HP keylogger (zwclose.github.io)

submitted by coragr

6
41
42

x86-64 Windows Jurassic Park Payload (github.com)

submitted by zznop_

7
52
53

How I Hacked WhatsApp, and Added Contacts to Groups When Being Blocked (linkedin.com)

submitted by HUCK45

8
79
80

macOS High Sierra 10.13.1 insecure cron system (m4.rkw.io)

submitted by lyinch

9
5
6

pdfExposing Hidden Exploitable Behaviors in Programming Languages Using Differential Fuzzing (blackhat.com)

submitted by cwardnet

10
458
459

pdfHow to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine (blackhat.com)

submitted by maxxori

11
21
22

Dark Army has 600k+ implants (Mr Robot ep3.8 writeup) (medium.com)

submitted by fr3dsmith

12
14
15

Detecting Lateral Movement through Tracking Event Logs (Version 2). By JPCERT (blog.jpcert.or.jp)

submitted by 2xyo

13
216
217

Sysinternals Sysmon suspicious activity guide (blogs.technet.microsoft.com)

submitted by Moti_Ba

14
8
9

Elevation of Privilege vulnerability (CVE-2017-3891) in QNX Qnet (midnightbluelabs.com)

submitted by 2ROT13

15
68
69

pdfBanking apps vulnerable to MITM. Spinner: Semi-Automatic Detection of Pinning without Hostname Verification (cs.bham.ac.uk)

submitted by americanmonty

16
24
25

When Scriptlets Attack: Excel’s Alternative to DDE Code Execution (lastline.com)

submitted by teksquisite

17
46
47

CTF365 - Blitz CTF write-up. 5 challenges, created for beginners. (medium.com)

submitted by thel3l

18
0
0

Disco: a plug-and-play protocol to encrypt communications and a cryptographic library in Golang (discocrypto.com)

submitted by davidw_-

19
2
3

Lost in Transaction: Process Doppelgänging (Complete Slide Deck) (blackhat.com)

submitted by tal_liberman

20
0
0

Disco, or what happens when you attempt to merge the Noise and Strobe protocol frameworks (cryptologie.net)

submitted by davidw_-

21
5
6

BSidesSF 2018 CFP is open! (bsidessf.org)

submitted by reedloden

22
199
200

BlueSteal: Popping GATT Safes (twosixlabs.com)

submitted by m3t0lius

23
20
21

EasyCSRF 2.0 extension for Burp Suite (github.com)

submitted by 0ang3el

24
1
2

New Targeted Attack in the Middle East by APT34, a Suspected Iranian Threat Group, Using CVE-2017-11882 Exploit (fireeye.com)

submitted by EvanConover

25
8
9

Penetration Testing Apache Thrift Applications (mdsec.co.uk)

submitted by mdsec

view more: next ›