Perfect DLL Proxy – Streamlining DLL Hijacking With Absolute Path Forwarding

Tamil S - 0

In the complex landscape of cybersecurity, DLL hijacking stands out as a notable technique for exploiting software vulnerabilities. This article introduces "Perfect DLL Proxy," a sophisticated method that refines the traditional approach to DLL hijacking. By leveraging a unique trick that utilizes absolute paths for forwarding, it bypasses the limitations of ASM stubs, offering a cleaner, more efficient proxy...

Read more

v9.8.0 – Catch ‘Em All: Network Vulnerabilities : A Deep Dive Into The Latest Nuclei Templates Release

Tamil S - 0

We're thrilled to share that with the launch of Nuclei Templates version 9.8.0, we've broadened our scope in network security checks. Our template library now boasts over 8,000 entries, encompassing more than 7,202 templates for web applications. This collection includes 2,200 web-related CVEs and features more than 850 templates aimed at identifying web vulnerabilities. With the help of active community...

Read more

AutoSmuggle – Revolutionizing File Transfer With HTML Smuggling

Tamil S - 0

A Utility to quickly create your HTML smuggled files. It is based on the blog post by Outflank. AutoSmuggle emerges as a groundbreaking utility designed to redefine the way digital files are transferred securely and efficiently. Inspired by Outflank's insightful exploration into HTML smuggling, this tool provides a seamless method for converting binaries into smuggled HTML or SVG files....

Read more

Awesome Embedded And IoT Security – Key Tools And Insights

Tamil S - 0

Botnets like Mirai have proven that there is a need for more security in embedded and IoT devices. This list shall help beginners and experts to find helpful resources on the topic. If you are a beginner, you should have a look at the Books and Case Studies sections. If you want to start right away with your own analysis, you should give the Analysis Frameworks a try. They...

Read more

Awesome DevSecOps – A Comprehensive Guide To Resources And Tooling

Tamil S - 0

DevSecOps is an extension of the DevOps movement that aims to bring security practices into the development lifecycle through developer-centric security tooling and processes. Contributions welcome. Add links through pull requests or create an issue to start a discussion. Contents Resources Articles Books Communities Conferences Newsletters Podcasts Secure Development Guidelines Secure Development Lifecycle Framework Toolchains Training Wikis Tools Dependency Management Dynamic Analysis Infrastructure as Code Analysis Intentionally Vulnerable Applications Monitoring Secrets Management Secrets Scanning Static Analysis Supply Chain Security Threat Modelling Related Lists Resources Articles Our Approach to Employee Security Training - Pager...

Read more

CVE-2024-1212 Command Injection Exploit For Kemp LoadMaster : A Comprehensive Guide

Tamil S - 0

This Python script is designed as a proof of concept (PoC) to demonstrate an unauthenticated command injection vulnerability in Kemp LoadMaster, identified as CVE-2024-1212. Features Scan a single target or multiple targets for the CVE-2024-1212 vulnerability. Execute commands on vulnerable targets. Utilize multi-threading for faster scanning of multiple targets. Save vulnerable targets to an output file for further analysis. Usage To use this script,...

Read more

HiddenVM – A Revolutionary Approach To Maximizing Digital Privacy

Tamil S - 0

HiddenVM is an innovation in computing privacy. Imagine you're entering a country at the airport. The border agents seize your laptop and force you to unlock it so that they can violate your privacy, treat you like a criminal, and insult your humanity. Is that the world you want to live in? Whether you use Windows, macOS or Linux, now there's a...

Read more

Awesome GDPR – Empowering Privacy through Comprehensive Compliance And Innovation

Tamil S - 0

The General Data Protection Regulation (GDPR) is a regulation on data protection and privacy for all individuals within the European Union and the European Economic Area. The regulation has increased the focus on privacy in companies and strengthened the data subjects influence. Contents Legal text Guidelines Rights of the data subject (art. 12 - 23) Privacy by Design - Guides for developers (art. 25) Records...

Read more

FormThief – A Deceptive Approach To Spoofing Windows Desktop Logins

Tamil S - 0

FormThief is a project designed for spoofing Windows desktop login applications using WinForms and WPF. Below is an example run for KeePass  Windows Forms (WinForms) and Windows Presentation Foundation (WPF) are two powerful UI frameworks provided by Microsoft for building desktop applications on the Windows platform. While they are primarily used for developing software, they also offer a unique opportunity...

Read more

RustRedOps – Advanced Red Team Tooling And Techniques In Rust

Tamil S - 0

"RustRedOps" stands as a groundbreaking repository, pioneering the development of sophisticated Red Team tools and techniques, all crafted in the Rust programming language. It offers a comprehensive suite of projects aimed at enhancing security assessments and intrusion testing for professionals. This article delves into the rich array of tools available, from APC injection to encryption and anti-debugging, showcasing the...

Read more
1...515253...406Page 52 of 406