/r/netsec's Q3 2018 Information Security Hiring Thread Security News & Discussion

/r/netsec's Q3 2018 Information Security Hiring Thread
Reverse Engineering The Medium Android App And Making All Stories In It Free
Active Directory Leaks via Azure
PoC of how someone can grab db settings from config files, if they are edited in Vim on a server (for example, if an admin user edits WordPress' wp-config.php file, an attacker can just download the .swp file and get the credentials)
How I did not get a shell
Headless Burp: Provides a suite of Burp extensions and a maven plugin to automate security tests using BurpSuite.

/r/netsec's Q3 2018 Information Security Hiring Thread

Posted: 09 Jul 2018 04:39 PM PDT

Overview

If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.

We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.

Please reserve top level comments for those posting open positions.

Rules & Guidelines

Include the company name in the post. If you want to be topsykret, go recruit elsewhere.
Include the geographic location of the position along with the availability of relocation assistance or remote work.
If you are a third party recruiter, you must disclose this in your posting.
Please be thorough and upfront with the position details.
Use of non-hr'd (realistic) requirements is encouraged.
While it's fine to link to the position on your companies website, provide the important details in the comment.
Mention if applicants should apply officially through HR, or directly through you.
Please clearly list citizenship, visa, and security clearance requirements.
You can see an example of acceptable posts by perusing past hiring threads.

Feedback

Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)

submitted by /u/ranok
[link] [comments]

Reverse Engineering The Medium Android App And Making All Stories In It Free

Posted: 03 Sep 2018 07:36 AM PDT

submitted by /u/HUCK45
[link] [comments]

Active Directory Leaks via Azure

Posted: 03 Sep 2018 01:41 AM PDT

submitted by /u/CyberBullets
[link] [comments]

PoC of how someone can grab db settings from config files, if they are edited in Vim on a server (for example, if an admin user edits WordPress' wp-config.php file, an attacker can just download the .swp file and get the credentials)

Posted: 03 Sep 2018 12:29 PM PDT

submitted by /u/web_dev_etc
[link] [comments]