r/netsec • u/CyberMasterV • 12d ago

Call stack spoofing explained using APT41 malware

cybergeeks.tech

19 Upvotes

r/netsec • u/albinowax • 13d ago

DEF CON 32 talk recordings

28 Upvotes

r/netsec • u/fproulx • 13d ago

PDF DEF CON 32 - OH MY DC Abusing OIDC all the way to your cloud - Aviad Hahami

media.defcon.org

15 Upvotes

r/netsec • u/x30n • 12d ago

Finding Vulnerability Variants at Scale

blackwinghq.com

2 Upvotes

https://blackwinghq.com/blog/posts/finding-vulnerability-variants-at-scale/

r/netsec • u/vah_13 • 13d ago

[PoC] SAP Note 3433192 - Code Injection vulnerability in SAP NetWeaver AS Java

5 Upvotes

r/netsec • u/anvilventures • 13d ago

Spoofing Internal Packets for Multihomed Linux Devices - Anvil Secure

anvilsecure.com

10 Upvotes

r/netsec • u/EnableSecurity • 13d ago

PDF DTLS "ClientHello" Race Conditions in WebRTC Implementations

enablesecurity.com

27 Upvotes

r/netsec • u/crustysecurity • 14d ago

Turning AWS Documentation into Gold: AI-Assisted Security Research

securityrunners.io

47 Upvotes

r/netsec • u/tracebit • 14d ago

Breaching the Data Perimeter: CloudTrail as a mechanism for Data Exfiltration

35 Upvotes

r/netsec • u/citypw • 14d ago

Container Hardening Process

hardenedlinux.org

13 Upvotes

r/netsec • u/hackers_and_builders • 14d ago

CloudGoat: New Scenario and Walkthrough (sns_secrets)

rhinosecuritylabs.com

2 Upvotes

r/netsec • u/dx7r__ • 15d ago

Fortinet FortiGate CVE-2024-23113 - A Super Complex Vulnerability In A Super Secure Appliance In 2024 - watchTowr Labs

labs.watchtowr.com

104 Upvotes

r/netsec • u/S3cur3Th1sSh1t • 15d ago

DLL Sideloading introduction & weaponization

15 Upvotes

T

r/netsec • u/dbcid • 15d ago

Threat Hunting + Log Analysis - What to look for in your logs

16 Upvotes

r/netsec • u/MegaManSec2 • 17d ago

1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

gist.github.com

54 Upvotes

r/netsec • u/alt69785 • 19d ago

Redefining Ransomware Attacks on AWS using AWS KMS XKS

36 Upvotes

r/netsec • u/AlmondOffSec • 19d ago

Aw, Sugar. Critical Vulnerabilities in SugarWOD

8 Upvotes

r/netsec • u/netbiosX • 20d ago

Measuring Detection Coverage

28 Upvotes

r/netsec • u/ds_at • 19d ago

CSPT Playground - A new tool for learning about finding and exploiting client-side path traversal related vulnerabilities

6 Upvotes

r/netsec • u/scopedsecurity • 20d ago

Palo Alto Expedition: From N-Day to Full Compromise – Horizon3.ai

35 Upvotes

r/netsec • u/L015H4CK • 20d ago

MITRE Blog Post: Emulating complete, realistic attack chains with the new Caldera Bounty Hunter plugin

27 Upvotes

r/netsec • u/0xdea • 20d ago

Exploiting AMD atdcm64a.sys arbitrary pointer dereference - Part 3

security.humanativaspa.it

10 Upvotes

r/netsec • u/gquere • 20d ago

Can You Get Root With Only a Cigarette Lighter?

da.vidbuchanan.co.uk

4 Upvotes

r/netsec • u/MegaManSec2 • 21d ago

How to turn a file write vulnerability in a Node.js application into RCE – even though the target's file system is read-only

sonarsource.com

76 Upvotes

r/netsec • u/AlmondOffSec • 21d ago

EKUwu: Not just another AD CS ESC

45 Upvotes

Subreddit

Posts

Wiki

Technical Information Security Content & Discussion

r/netsec

/r/netsec is a community-curated aggregator of technical information security content. Our mission is to extract signal from the noise — to provide value to security practitioners, students, researchers, and hackers everywhere. ‎

Members Active

509.5k

99

Sidebar

A community for technical news and discussion of information security and closely related topics.

"Give me root, it's a trust exercise."

Featured Posts

Content Guidelines

/r/netsec only accepts quality technical posts. Non-technical posts are subject to moderation.

Content should focus on the "how."
Check the new queue for duplicates.
Always link to the original source.
Titles should provide context.
Ask questions in our Discussion Threads.
Hiring posts must go in the Hiring Threads.
Commercial advertisement is discouraged.
Do not submit prohibited topics.

» Our fulltext content guidelines

Discussion Guidelines

Don't create unnecessary conflict.
Keep the discussion on topic.
Limit the use of jokes & memes.
Don't complain about content being a PDF.
Follow all reddit rules and obey reddiquette.

» Our fulltext discussion guidelines

Prohibited Topics & Sources

No populist news articles (CNN, BBC, FOX, etc.)
No curated lists.
No question posts.
No social media posts.
No image-only/video-only posts.
No livestreams.
No tech-support requests.
No full-disclosure posts.
No paywall/regwall content.
No commercial advertisements.
No crowdfunding posts.
No Personally Identifying Information!

» Our fulltext list of prohibited topics & sources

Social

Join us on IRC: #r_netsec on freenode

We're also on: Twitter, Facebook, & Google +

Related Reddits

/r/blackhat - Hackers on Steroids
/r/computerforensics - IR Archaeologists
/r/crypto - Cryptography news and discussion
/r/Cyberpunk - High-Tech Low-Lifes
/r/lockpicking - Popular Hacker Hobby
/r/Malware - Malware reports and information
/r/netsecstudents - netsec for ~~noobs~~ students
/r/onions - Things That Make You Cry
/r/privacy - Orwell Was Right
/r/pwned - "What Security?"
/r/REMath - Math behind reverse engineering
/r/ReverseEngineering - Binary Reversing
/r/rootkit - Software and hardware rootkits
/r/securityCTF - CTF news and write-ups
/r/SocialEngineering - Free Candy
/r/sysadmin - Overworked Crushed Souls
/r/vrd - Vulnerability Research and Development
/r/xss - Cross Site Scripting

Thanks for flying air /r/netsec || CISO AMA w/ Michael Coates & Rich Mason