Some Security Notes
Open in Telegram
Some security notes with talks and my opinion. New posts every 2-3 days. Π‘ΡΠ°ΡΡΠΈ ΠΈ Π½ΠΎΠ²ΠΎΡΡΠΈ ΡΠ²ΡΠ·Π°Π½Π½ΡΠ΅ Ρ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ Π±Π΅Π·ΠΎΠΏΠ°ΡΠ½ΠΎΡΡΡΡ. ΠΠΎΠ΄Π±ΠΎΡΠΊΠ° ΠΌΠ°ΡΠ΅ΡΠΈΠ°Π»ΠΎΠ² ΠΏΠΎ Π·Π°ΠΏΡΠΎΡΠ°ΠΌ/ΡΠ²ΠΎΠ΅ΠΌΡ Π²ΠΊΡΡΡ. ΠΠ±Π½ΠΎΠ²Π»Π΅Π½ΠΈΡ ΠΊΠ°ΠΆΠ΄ΡΠ΅ 2-3 Π΄Π½Ρ.
Show moreThe country is not specifiedThe category is not specified
1 453
Subscribers
No data24 hours
No data7 days
+1630 days
Data loading in progress...
Similar Channels
Tags Cloud
No data
Any problems? Please refresh the page or contact our support manager.
Incoming and Outgoing Mentions
---
---
---
---
---
---
Attracting Subscribers
December '24Dec '24
December '24
+3
in 0 channels
November '24
+10
in 0 channels
Get PRO
October '24
+27
in 1 channels
Get PRO
September '24
+13
in 0 channels
Get PRO
August '24
+153
in 2 channels
Get PRO
July '240
in 0 channels
Get PRO
June '240
in 3 channels
Get PRO
May '240
in 1 channels
Get PRO
April '240
in 0 channels
Get PRO
March '24
+21
in 3 channels
Get PRO
February '24
+39
in 2 channels
Get PRO
January '24
+198
in 4 channels
Get PRO
December '230
in 1 channels
Get PRO
November '230
in 3 channels
Get PRO
October '230
in 0 channels
Get PRO
September '230
in 0 channels
Get PRO
August '230
in 0 channels
Get PRO
July '230
in 0 channels
Get PRO
June '230
in 0 channels
Get PRO
May '230
in 0 channels
Get PRO
April '230
in 0 channels
Get PRO
March '230
in 0 channels
Get PRO
February '230
in 0 channels
Get PRO
January '230
in 0 channels
Get PRO
December '220
in 0 channels
Get PRO
November '220
in 0 channels
Get PRO
October '220
in 0 channels
Get PRO
September '220
in 0 channels
Get PRO
August '220
in 0 channels
Get PRO
July '220
in 0 channels
Get PRO
June '220
in 0 channels
Get PRO
May '220
in 0 channels
Get PRO
April '220
in 0 channels
Get PRO
March '220
in 0 channels
Get PRO
February '22
+4
in 0 channels
Get PRO
January '22
+8
in 0 channels
Get PRO
December '21
+7
in 0 channels
Get PRO
November '21
+8
in 0 channels
Get PRO
October '21
+12
in 0 channels
Get PRO
September '21
+28
in 0 channels
Get PRO
August '21
+37
in 0 channels
Get PRO
July '21
+76
in 0 channels
Get PRO
June '21
+1 835
in 0 channels
| Date | Subscriber Growth | Mentions | Channels | |
| 09 December | +1 | |||
| 08 December | 0 | |||
| 07 December | 0 | |||
| 06 December | +1 | |||
| 05 December | 0 | |||
| 04 December | 0 | |||
| 03 December | 0 | |||
| 02 December | +1 | |||
| 01 December | 0 |
Channel Posts
#xss #web #pentests
ΠΠΎΠ΄Π±ΠΎΡΠΊΠ° ΠΈΠ· 10ΡΠΈ ΠΏΠ»ΠΎΡΠ°Π΄ΠΎΠΊ Π½Π° ΠΊΠΎΡΠΎΡΡΡ
ΠΌΠΎΠΆΠ½ΠΎ ΠΏΠΎΠΏΡΠ°ΠΊΡΠΈΠΊΠΎΠ²Π°ΡΡΡΡ Π² ΡΠΊΡΠΏΠ»ΡΠ°ΡΠ°ΡΠΈΠΈ xss.
https://www.acunetix.com/blog/web-security-zone/test-xss-skills-vulnerable-sites/
| 2 | #misc #programming
ΠΠ° ΡΠ°ΠΉΡΠ΅ ΠΏΡΠ΅Π΄ΡΡΠ°Π²Π»Π΅Π½Ρ ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΠ΅ΡΡΠΊΠΈΠ΅ ΠΈΠ΄ΠΈΠΎΠΌΡ, ΡΠΈΠΏΠΎΠ²ΡΠ΅ ΠΊΠ»Π°ΡΡΠΈΡΠ΅ΡΠΊΠΈΠ΅ Π·Π°Π΄Π°ΡΠΈ, ΡΠ΅Π°Π»ΠΈΠ·ΠΎΠ²Π°Π½Π½ΡΠ΅ Π½Π° ΡΠ°Π·Π»ΠΈΡΠ½ΡΡ
ΡΠ·ΡΠΊΠ°Ρ
.
https://programming-idioms.org/ | 1 012 |
| 3 | #linux #misc
ΠΠ° ΡΠ°ΠΉΡΠ΅ ΠΏΡΠΈΠ²Π΅Π΄Π΅Π½ΠΎ ΠΎΠ³ΡΠΎΠΌΠ½ΠΎΠ΅ ΠΊΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ ΠΎΠ΄Π½ΠΎΡΡΡΠΎΡΠ½ΠΈΠΊΠΎΠ² - ΠΏΠΎΠ»Π΅Π·Π½ΡΡ
ΠΊΠΎΠΌΠ°Π½Π΄ ΠΎΠ΄Π½ΠΎΠΉ ΡΡΡΠΎΠΊΠΎΠΉ.
https://linuxcommandlibrary.com/basic/oneliners.html | 1 170 |
| 4 | #k8 #pentests #guide
Π Π°ΡΡΠΌΠΎΡΡΠ΅Π½Ρ ΠΎΡΠ½ΠΎΠ²Π½ΡΠ΅ ΡΡΠ°ΠΏΡ ΠΈ ΠΌΠ΅ΡΠΎΠ΄Ρ ΠΏΠ΅Π½ΡΠ΅ΡΡΠ° Π΄Π»Ρ kubernetes, Π° ΡΠ°ΠΊΠΆΠ΅ ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΠ΅ΠΌΡΠ΅ Π΄Π»Ρ ΡΡΠΎΠ³ΠΎ ΡΡΠΈΠ»ΠΈΡΡ.
https://lobuhisec.medium.com/kubernetes-pentest-recon-checklist-tools-and-resources-30d8e4b69463 | 1 121 |
| 5 | #android #unpinning #guide
Π‘ΠΊΡΠΈΠΏΡ Π΄Π»Ρ ΠΎΠ±Ρ
ΠΎΠ΄Π° ΠΏΡΠΈΠ²ΡΠ·ΠΊΠΈ ΡΠ΅ΡΡΠΈΡΠΈΠΊΠ°ΡΠ° (ssl pinning bypass Π½Π° Π°Π½Π΄ΡΠΎΠΈΠ΄Π΅ Π΄Π»Ρ Π€ΡΠΈΠ΄Ρ.
https://codeshare.frida.re/@akabe1/frida-multiple-unpinning/ | 1 035 |
| 6 | #mitm #cheatsheet
ΠΡΠ΅Π½Ρ Ρ
ΠΎΡΠΎΡΠΈΠΉ ΡΠΈΡΡΠΈΡ ΠΏΠΎ mitm-Π°ΡΠ°ΠΊΠ°ΠΌ.
https://github.com/frostbits-security/MITM-cheatsheet | 1 022 |
| 7 | #misc #security
Π ΡΡΠ°ΡΡΠ΅ ΠΏΡΠΈΠ²ΠΎΠ΄ΠΈΡΡΡ ΠΎΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²ΡΠ΅ΠΌ ΠΈΠ·Π²Π΅ΡΡΠ½ΠΎΠΉ ΠΈΠ΄ΠΈΠΎΠΌΡ Security by obscurity.
ΠΡΠ±ΠΎΠΏΡΡΠ½ΠΎ.
https://securitygoat.medium.com/security-by-obscurity-you-dont-know-it-d57ff9f84576 | 953 |
| 8 | ΠΠΎ Π·Π°ΠΏΡΠΎΡΠ°ΠΌ ΠΈ ΠΏΠΎΠΆΠ΅Π»Π°Π½ΠΈΡΠΌ Π½Π° ΡΠ»Π΅Π΄ΡΡΡΠ΅ΠΉ Π½Π΅Π΄Π΅Π»Π΅ ΡΠΎΠ·Π΄Π°ΠΌ ΠΎΠ±ΡΠΈΠΉ ΡΠΏΠΈΡΠΎΠΊ ΠΊΠ°Π½Π°Π»ΠΎΠ², Π½Π° telegra.ph.
ΠΠΈΡΠΈΡΠ΅ Π² ΠΊΠΎΠΌΠΌΠ΅Π½ΡΠ°ΡΠΈΡΡ
, Π΅ΡΠ»ΠΈ Π΅ΡΡΡ ΡΠ΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΠΈ, Π΄ΠΎΠ±Π°Π²Π»ΡΡ.
Π‘ΠΏΠΈΡΠΎΠΊ Π±ΡΠ΄Π΅Ρ Π² Π°Π»ΡΠ°Π²ΠΈΡΠ½ΠΎΠΌ ΠΏΠΎΡΡΠ΄ΠΊΠ΅. ΠΠΎ ΠΌΠ΅ΡΠ΅ ΡΠΈΠ» ΠΈ Π²ΡΠ΅ΠΌΠ΅Π½ΠΈ Π±ΡΠ΄Ρ ΡΠ°ΠΊΠΆΠ΅ ΠΎΠ±Π½ΠΎΠ²Π»ΡΡΡ.
Π Π΅ΠΆΠ΅Π½Π΅Π΄Π΅Π»ΡΠ½ΡΠ΅ ΡΠ΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΠΈ ΡΠ°ΠΊΠΆΠ΅ ΠΏΡΠΎΠ΄ΠΎΠ»ΠΆΡ ΠΏΠΈΡΠ°ΡΡ ΡΠ°Π· Π² Π½Π΅Π΄Π΅Π»Ρ | 1 |
| 9 | ΠΠ°ΠΊ ΠΈ ΠΎΠ±Π΅ΡΠ°Π», ΠΎΡΠ΅ΡΠ΅Π΄Π½Π°Ρ ΡΠ΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΡ:
@cybersecuritytechnologies
ΠΡΠ±Π»ΠΈΠΊΡΡΡΡΡ ΠΌΠ°ΡΠ΅ΡΠΈΠ°Π»Ρ ΠΏΠΎ ΡΠ»Π΅Π΄ΡΡΡΠΈΠΌ ΡΠ΅ΠΌΠ°ΠΌ:
β’BlueTeam(APT/OpSec/TreatHunting/DFIR)
β’Offensive Security(RedTeaming/PenTesting)
β’Reverse Engineering/Malware Analisys(TTPs)
β’Web Security/DevSecOps
β’Tools/PoC/Research
ΠΡΠ΅Π½Ρ ΠΏΠΎΠ»Π΅Π·Π½ΡΠΉ ΠΈ Ρ
ΠΎΡΠΎΡΠΈΠΉ ΠΊΠ°Π½Π°Π», ΠΊΠΎΡΠΎΡΡΠΉ Π΅ΠΆΠ΅Π΄Π½Π΅Π²Π½ΠΎ ΠΏΡΠ±Π»ΠΈΠΊΡΠ΅Ρ ΠΏΠΎΡΡΡ ΠΏΠΎ ΠΠ ΠΈ ΡΠ²ΡΠ·Π°Π½Π½ΠΎΠΉ ΡΠ΅ΠΌΠ°ΡΠΈΠΊΠ΅.
ΠΠΎ ΠΌΠ½ΠΎΠ³ΠΎΠΌ Π²Π΄ΠΎΡ
Π½ΠΎΠ²Π»ΡΠ»ΡΡ ΠΈΠΌΠ΅Π½Π½ΠΎ ΡΡΠΈΠΌ ΠΊΠ°Π½Π°Π»ΠΎΠΌ, ΠΏΡΠ°Π²Π΄Π° Ρ ΡΠ΅Π±Ρ Ρ ΠΏΡΠ±Π»ΠΈΠΊΡΡ Π±ΠΎΠ»Π΅Π΅ ΡΠ·ΠΊΡΡ ΠΏΠΎΠ΄Π±ΠΎΡΠΊΡ ΠΌΠ°ΡΠ΅ΡΠΈΠ°Π»ΠΎΠ².
ΠΠ°Π½Π°Π» Π±Π΅Π· ΡΠ΅ΠΊΠ»Π°ΠΌΡ Ρ
ΠΎΡΡ Π·Π°ΠΌΠ΅ΡΠΈΡΡ!
(ΠΈ ΠΎΡΠ΅Π½Ρ Π½Π°Π΄Π΅ΡΡΡ ΡΡΠΎ ΡΠ°ΠΊΠΈΠΌ ΠΆΠ΅ ΠΈ ΠΎΡΡΠ°Π½Π΅ΡΡΡ, ΡΠ΅ΡΠΏΠ΅ΠΊΡ Π²Π»Π°Π΄Π΅Π»ΡΡΡ)
Upd.:
ΠΠΎ Π·Π°ΠΏΡΠΎΡΠ°ΠΌ ΠΈ ΠΏΠΎΠΆΠ΅Π»Π°Π½ΠΈΡΠΌ Π½Π° ΡΠ»Π΅Π΄ΡΡΡΠ΅ΠΉ Π½Π΅Π΄Π΅Π»Π΅ ΡΠΎΠ·Π΄Π°ΠΌ ΠΎΠ±ΡΠΈΠΉ ΡΠΏΠΈΡΠΎΠΊ ΠΊΠ°Π½Π°Π»ΠΎΠ², Π½Π° telegra.ph.
ΠΠΈΡΠΈΡΠ΅ Π² ΠΊΠΎΠΌΠΌΠ΅Π½ΡΠ°ΡΠΈΡΡ
, Π΅ΡΠ»ΠΈ Π΅ΡΡΡ ΡΠ΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΠΈ, Π΄ΠΎΠ±Π°Π²Π»ΡΡ.
Π‘ΠΏΠΈΡΠΎΠΊ Π±ΡΠ΄Π΅Ρ Π² Π°Π»ΡΠ°Π²ΠΈΡΠ½ΠΎΠΌ ΠΏΠΎΡΡΠ΄ΠΊΠ΅. ΠΠΎ ΠΌΠ΅ΡΠ΅ ΡΠΈΠ» ΠΈ Π²ΡΠ΅ΠΌΠ΅Π½ΠΈ Π±ΡΠ΄Ρ ΡΠ°ΠΊΠΆΠ΅ ΠΎΠ±Π½ΠΎΠ²Π»ΡΡΡ.
Π Π΅ΠΆΠ΅Π½Π΅Π΄Π΅Π»ΡΠ½ΡΠ΅ ΡΠ΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°ΡΠΈΠΈ ΡΠ°ΠΊΠΆΠ΅ ΠΏΡΠΎΠ΄ΠΎΠ»ΠΆΡ ΠΏΠΈΡΠ°ΡΡ ΡΠ°Π· Π² Π½Π΅Π΄Π΅Π»Ρ | 955 |
| 10 | #graphql #web #pentests
Π ΡΡΠ°ΡΡΠ΅ ΠΏΡΠΈΠ²ΠΎΠ΄ΠΈΡΡΡ ΠΎΠΏΠΈΡΠ°Π½ΠΈΠ΅ ΠΎΡΠ½ΠΎΠ²Π½ΡΡ
Π½Π΅Π΄ΠΎΡΡΠ°ΡΠΊΠΎΠ² GraphQL.
https://securitygoat.medium.com/common-graphql-misconceptions-a-rant-489647167ca3 | 966 |
| 11 | #sql #misc #database
Π ΡΡΠ°ΡΡΠ΅ ΡΠ°ΡΡΠΌΠ°ΡΡΠΈΠ²Π°ΡΡΡΡ ΠΏΠ΅ΡΡΠΏΠ΅ΠΊΡΠΈΠ²Ρ ΠΏΡΠΈΠΌΠ΅Π½Π΅Π½ΠΈΡ sql Π² ΠΊΠΎΠ½ΡΠ΅ΠΊΡΡΠ΅ Π²Π΅Π±Π°.
https://jlongster.com/future-sql-web | 992 |
| 12 | #api #pentests #web
Π ΡΡΠ°ΡΡΠ΅ ΡΠ°ΡΡΠΌΠ°ΡΡΠΈΠ²Π°ΡΡΡΡ Π°ΠΊΡΡΠ°Π»ΡΠ½ΡΠ΅ ΠΌΠ΅ΡΠΎΠ΄Ρ, ΠΏΡΠΈΠΌΠ΅Π½ΡΠ΅ΠΌΡΠ΅ ΠΏΡΠΈ Π²Π·Π»ΠΎΠΌΠ΅ api-ΡΠ½Π΄ΠΏΠΎΠΉΠ½ΡΠΎΠ².
ΠΠΊΡΡΠ°Π»ΡΠ½ΡΠΉ ΠΈ ΡΠ²Π΅ΠΆΠΈΠΉ (2021) ΠΎΠ±Π·ΠΎΡ.
https://labs.detectify.com/2021/08/10/how-to-hack-apis-in-2021/ | 1 109 |
| 13 | #pentests #linux #privesc
Π ΡΡΠ°ΡΡΠ΅ ΡΠ°ΡΡΠΌΠ°ΡΡΠΈΠ²Π°ΡΡΡΡ ΡΠΏΠΎΡΠΎΠ±Ρ ΠΏΠΎΠ²ΡΡΠ΅Π½ΠΈΡ ΠΏΡΠΈΠ²ΠΈΠ»Π΅Π³ΠΈΠΉ Ρ ΠΏΠΎΠΌΠΎΡΡΡ ΠΏΠ°ΠΊΠ΅ΡΠ½ΡΡ
ΠΌΠ΅Π½Π΅Π΄ΠΆΠ΅ΡΠΎΠ².
https://blog.ikuamike.io/posts/2021/package_managers_privesc/ | 1 327 |
| 14 | #obfuscation #guide #malware
Π Π΅ΠΏΠΎΠ·ΠΈΡΠΎΡΠΈΠΉ ΡΠΎΠ΄Π΅ΡΠΆΠΈΡ Π³Π°ΠΉΠ΄ Ρ ΠΏΡΠΈΠΌΠ΅ΡΠ°ΠΌΠΈ ΡΠ΅Ρ
Π½ΠΈΠΊ ΠΎΠ±ΡΡΡΠΊΠ°ΡΠΈΠΈ ΠΊΠΎΠ΄Π°.
https://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation/ | 1 778 |
| 15 | #web #http #desync
Π ΡΡΠ°ΡΡΠ΅ ΡΠ°ΡΡΠΌΠ°ΡΡΠΈΠ²Π°ΡΡΡΡ ΡΠΏΠΎΡΠΎΠ±Ρ Π²ΡΡΡΠ°ΠΈΠ²Π°Π½ΠΈΡ ΡΠ²ΠΎΠΈΡ
Π·Π°ΠΏΡΠΎΡΠΎΠ² ΠΏΡΠΈ ΠΎΠ±ΡΠ°ΡΠ΅Π½ΠΈΡ ΠΊ ΡΠ΅ΡΠ²Π΅ΡΡ (Π°ΠΊΠ° request smuggling), ΠΏΡΠ΅Π΄ΡΡΠ°Π²Π»Π΅Π½Π½Π°Ρ Π½Π΅ΡΠΊΠΎΠ»ΡΠΊΠΎ Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄ Π½Π° black hat.
ΠΡΠΎΡΠ°Ρ ΡΡΡΠ»ΠΊΠ°, Π½Π° ΠΎΠΏΠ΅Π½Π½Π΅Ρ, ΡΠΎΠ΄Π΅ΡΠΆΠΈΡ ΠΎΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π½Π° ΡΡΡΡΠΊΠΎΠΌ ΡΠ·ΡΠΊΠ΅.
https://portswigger.net/research/http2
https://www.opennet.ru/opennews/art.shtml?num=55601 | 1 210 |
| 16 | #guide #mimt #phishing
ΠΠΎΡΡΠ°ΡΠΎΡΠ½ΠΎ ΠΏΠΎΠ΄ΡΠΎΠ±Π½ΡΠΉ Π³Π°ΠΉΠ΄ ΠΏΠΎ ΡΠΈΡΠΈΠ½Π³Ρ. Π‘ ΡΡΡΡΠΎΠΌ Π²ΠΎΠ·ΠΌΠΎΠΆΠ½ΠΎΡΡΠ΅ΠΉ mitm-Π°ΡΠ°ΠΊ, ΡΠ°ΠΊ ΡΡΠΎ Π² ΠΎΠ±ΡΠ΅ΠΏΡΠΈΠ½ΡΡΠΎΠΌ ΡΠΌΡΡΠ»Π΅ ΠΏΠΎΡΡΠΎΠ²ΠΎΠ³ΠΎ ΡΠΈΡΠΈΠ½Π³Π° Π³Π°ΠΉΠ΄ Π½Π΅ ΠΎΡΠ΅Π½Ρ ΠΏΡΠΈΠΌΠ΅Π½ΠΈΠΌ.
https://telegra.ph/Samyj-podrobnyj-gajd-po-fishingu-v-2021-godu-08-03 | 1 148 |
| 17 | ΠΠ°ΠΊ ΠΈ ΠΎΠ±Π΅ΡΠ°Π».
ΠΡΠ΄Ρ ΡΠ°Π· Π² Π½Π΅Π΄Π΅Π»Ρ ΠΏΠΎΡΡΠΈΡΡ ΡΡΡΠ»ΠΊΠΈ Π½Π° ΠΈΠ½ΡΠ΅ΡΠ΅ΡΠ½ΡΠ΅ ΠΊΠ°Π½Π°Π»Ρ ΠΏΠΎ ΡΡ
ΠΎΠΆΠ΅ΠΉ/ΠΈΠ½ΡΠ΅ΡΠ΅ΡΠ½ΠΎΠΉ ΡΠ΅ΠΌΠ°ΡΠΈΠΊΠ΅. ΠΠ°ΠΊ ΡΠΎΠ»ΡΠΊΠΎ Π½Π°Π±Π΅ΡΡΡΡΡ Π΄ΠΎΡΡΠ°ΡΠΎΡΠ½ΠΎΠ΅ ΠΊΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ - ΠΎΠ±ΡΠ΅Π΄ΠΈΠ½Ρ Π² ΡΠΏΠΈΡΠΎΠΊ.
ΠΠΎΠΊΠ° ΡΡΠΎ ΡΠ΅ΡΠΈΠ» ΠΏΠΎ ΠΎΠ΄Π½ΠΎΠΌΡ ΠΊΠ°Π½Π°Π»Ρ Π² Π½Π΅Π΄Π΅Π»Ρ ΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°ΡΡ, ΠΈΠ½Π°ΡΠ΅ ΡΠΏΠΈΡΠΎΠΊ ΠΊΠ°Π½Π°Π»ΠΎΠ² ΡΠ»ΠΈΡΠΊΠΎΠΌ Π±ΡΡΡΡΠΎ ΠΈΡΡΠ΅ΡΠΏΠ°Π΅ΡΡΡ | 1 033 |
| 18 | @club1337
Π‘Π²Π΅ΠΆΠΈΠ΅ Π½ΠΎΠ²ΠΎΡΡΠΈ ΠΈΠ· ΠΌΠΈΡΠ° Threat Intelligence & Security Research
Π Π΅ΠΊΠΎΠΌΠ΅Π½Π΄ΡΡ ΠΏΠΎΠ΄ΠΏΠΈΡΠ°ΡΡΡΡ. Π‘Π²Π΅ΠΆΠΈΠ΅ Π½ΠΎΠ²ΠΎΡΡΠΈ ΠΈΠ· ΠΌΠΈΡΠ° ΠΈΠ½ΡΠΎΡΠ΅ΠΊΠ° ΠΊΠ°ΠΆΠ΄ΡΠΉ Π΄Π΅Π½Ρ. | 1 083 |
| 19 | #saml #security
Π ΡΡΠ°ΡΡΠ΅ ΡΠ°ΡΡΠΌΠΎΡΡΠ΅Π½Ρ Π½Π΅Π΄ΠΎΡΡΠ°ΡΠΊΠΈ ΡΡΠ°Π½Π΄Π°ΡΡΠ° SAML.
https://joonas.fi/2021/08/saml-is-insecure-by-design/ | 1 407 |
| 20 | #vulnerabilities #race #guide
Π ΡΡΠ°ΡΡΠ΅ ΠΎΠΏΠΈΡΡΠ²Π°Π΅ΡΡΡ ΠΏΡΠΎΡΠ΅ΡΡ ΠΏΠΎΠΈΡΠΊΠ° ΠΈ ΡΠΊΡΠΏΠ»ΡΠ°ΡΠ°ΡΠΈΠΈ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ ΡΠΈΠΏΠ° race condition.
https://blog.0xffff.info/2021/06/23/winning-the-race-signals-symlinks-and-toc-tou/ | 1 807 |
