ocdsec

ZAP Blog: June Updates www.zaproxy.org/blog/2026-07... More PTK integration, lots of Client Spider improvements, and much more.. #zaproxy #appsec

A Chinese think tank has published a hit piece on seven cybersecurity and policy experts specializing in Chinese cyber operations www.guancha.cn/xinzhiguanch...

Ukraine Hackers Attacking Russian Aerospace Companies and Other Defence-Related Sectors

LibIPC is a simple Crystal Palace shared library for inter-process communication, based on Named Pipes. github.com/pard0p/LibIPC

Slides from Alexander Bluhm (bluhm@)'s talk "Update on #OpenBSD Networking Performance Improvements" today at #EuroBSDcon 2025. www.openbsd.org/papers/eurob...

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)

New Batavia spyware targets Russian industrial enterprises

Hundreds of GitHub Malware Repos Targeting Novice Cybercriminals Linked to Single User

From over at the Bad Place: There's an interesting NTFS symlink attack outlined here: https://dfir.ru/2025/02/23/symlink-attacks-without-code-execution/ Basically, if an NTFS filesystem is corrupted in a way to provide duplicate file names, Windows will […] [Original post on infosec.exchange]

cybercrime but its bigger and on both sides.

VulnCheck has extracted and made a list of all the CVEs mentioned in a recent leak from the internal Matrix chat server of the BlackBasta ransomware group. The list includes 62 vulnerabilities. VulnCheck says the group focuses on CVEs with already public exploits vulncheck.com/blog/black-b...

"Over the course of the GitVenom campaign, the threat actors behind it have created hundreds of repositories on GitHub that contain fake projects with malicious code" Campaign delivers an infostealer, obviously. The threat-du-jour these days securelist.com/gitvenom-cam...

I just finished our #shmoocon talk on container security. Here's my seccomp bpf disassembler and diffing tool. github.com/antitree/sec...

Diving into ADB protocol internals: part 01: www.synacktiv.com/publications... part 02: www.synacktiv.com/en/publicati... #adb #mobile #protocol #informationsecurity #cybersecurity #reverseengineering

These are some really nice blog posts regarding algo confusion bugs in JWT by @pentesterlab.com pentesterlab.com/blog/jwt-alg... & pentesterlab.com/blog/another... nice one @snyff.pentesterlab.com!

Wow, a fairly serious auth bypass in Next.js, a super popular frontend framework: "If a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed." securityonline.info/...

The #OpenBSD Foundation is currently at ~$230,280 (65%) raised of the $350,000 goal for their 2024 Fundraising Campaign, and it's nearly the end of December. 🐡 www.openbsdfoundation.org/campaign2024... www.openbsdfoundation.org/donations.html Donations fund events for developers, infra. costs.

I did a blog instead of working on my projects again. This time a maldev blog talkin' about PE runtime decryption and other ways to be an asshole to the analyst. amethyst.systems/blog/posts/v... #infosec #malware

The #OBTS day 2 livestream is on! www.youtube.com/watch?v=Nm0z...

Decrypting CryptProtectMemory without code injection: blog.slowerzs.net/posts/cryptd... #crypto #decryption #cybersecurity #informationsecurity #rdp #windows #programming

"We can now share that our latest investigation also found links between some of Doppelganger’s activities and individuals associated with MGIMO (Moscow State Institute of International Relations)." via Meta/PDF: scontent.fotp7-2.fna.fbcdn.net/v/t39.8562-6...

NTLM Relaying – Making the Old New Again labs.jumpsec.com/ntlm-relayin...

Great article on ESC15 especially after you realise PKInit won't work to auth but there is a workaround supplied too. medium.com/@offsecdeer/...

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...

despite the world becoming scary i still have a perhaps niave but unwaivering belief that a better world is possible

Cyberattackers may have compromised lots of organizations by exploiting two zero-day vulnerabilities found in widely used Palo Alto Networks systems. unit42.paloaltonetworks.com/cve-2024-001...

Learn how BARK's latest functions enhance adversarial tradecraft research relevant to Azure Key Vault. In his blog post, @andyrobbins.bsky.social shares an example of how a #redteam operator may use these commands over the course of an assessment. Read more 👉 ghst.ly/3CEtXSo

Rust pseudo code 👀 🦀🦀🦀

miss these guys

I'm going to be working on the DNS C2 Profile for Mythic this week (designing it), so if anybody has specific requests, comments, ideas, suggestions, etc, let me know! Also going to track a discussion here: github.com/its-a-featur...

C++ code designed to easily perform stack spoofing with a fake stack frame after the gadget. This project is based on LoudSunRun, but instead of using the jmp RBX gadget, it utilizes jmp RDI

We’re finally live! You can now watch “Listen to the whispers: web timing attacks that actually work” on YouTube: youtube.com/watch?v=zOPj...

AMD 7000-series graphics cards now work on Raspberry Pi. 4K Doom Eternal. 4K Crysis. OBS hardware video transcoding. It all works!!! It's not perfect, but what graphics card driver is? Here's the video: www.youtube.com/watch?v=7Qx_... (more details on my blog).

All that’s gonna be left on X is bots talking to each other 😂🤣

youtu.be/tn9arlUXe6U?...

To solve Axlle from HackTheBox, I'll create and phish with a malicous XLL file, edit a .url file, do some Bloodhound pivots, and abuse StandaloneRunner.exe.