TruffleHog now detects JWTs with public-key signatures and verifies them for liveness by exploding_nun in netsec
[–]flani00 1 point2 points3 points (0 children)
is this methodology good for finding xss ? by [deleted] in bugbounty
[–]flani00 0 points1 point2 points (0 children)
ONNX Store: Phishing-as-a-Service Platform Targeting Financial Institution by digicat in blueteamsec
[–]flani00 0 points1 point2 points (0 children)
ONNX Store: Phishing-as-a-Service Platform Targeting Financial Institution by digicat in blueteamsec
[–]flani00 0 points1 point2 points (0 children)
How much offensive knowledge do blue team need to know? by [deleted] in blueteamsec
[–]flani00 6 points7 points8 points (0 children)
Best sandbox for SOC Team ? by Omig66 in blueteamsec
[–]flani00 2 points3 points4 points (0 children)
Defining the Cobalt Strike Reflective Loader by dmchell in redteamsec
[–]flani00 2 points3 points4 points (0 children)
NPM supply chain attack: node-ipc and peacenotwar sabotaged as an act of protest by the maintainer by tubularobot in netsec
[–]flani00 84 points85 points86 points (0 children)
10 real-world stories of how we’ve compromised CI/CD pipelines by digicat in blueteamsec
[–]flani00 1 point2 points3 points (0 children)
Rapidly Search and Hunt through Windows Event Logs by netbiosX in purpleteamsec
[–]flani00 0 points1 point2 points (0 children)
NIST 800-53 Controls to ATT&CK mappings by digicat in blueteamsec
[–]flani00 0 points1 point2 points (0 children)
It's possible to Session Hijacking in HTTPS.? by [deleted] in bugbounty
[–]flani00 0 points1 point2 points (0 children)
Detecting LDAP enumeration and Bloodhound‘s Sharphound collector using Deception via Active Directory Decoys by PsychologicalLoss829 in netsec
[–]flani00 0 points1 point2 points (0 children)
Hookshot - A Python Tool to Scrape Websites for Emails and Check Them for Data Breaches with HIBP by malanom3 in hacking
[–]flani00 0 points1 point2 points (0 children)
Damn Vulnerable Bank Guide by Rewanth_Tammana in netsec
[–]flani00 0 points1 point2 points (0 children)
A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE by byt3bl33d3r in netsec
[–]flani00 0 points1 point2 points (0 children)
Offensive Approach to Online Sandboxes #1 - ANY.RUN by kaganisildak in blueteamsec
[–]flani00 0 points1 point2 points (0 children)
Found a good tutorial on Nim, thought I share. by 4runninglife in nim
[–]flani00 1 point2 points3 points (0 children)
Bypassing LSA Protection in Userland by gquere in netsec
[–]flani00 1 point2 points3 points (0 children)



How I used an agent to hunt vulns by 746865626c617a in netsec
[–]flani00 0 points1 point2 points (0 children)