The /r/netsec Monthly Discussion Thread - December 2020 Security News & Discussion

---

• The /r/netsec Monthly Discussion Thread - December 2020
• 40 (!) remote code execution vulns in Micro Focus Operation Bridge Manager
• Visualizing IP Traffic with Brim, Zeek and NetworkX
• BruteShark Version v1.1.2 Released: BruteShark is now compatible with Neo4j for visualizing network diagram by analyzing a PCAP file connections :-)
• XSSworm.dev ~ Self-replication contest [write-up]
• iOS 1-day hunting: uncovering and exploiting CVE-2020-27950 kernel memory leak
• Warzone RAT comes with UAC bypass technique
• Win by Segfault and other notes on Exploiting Chess Engines
• Precursor is an open hardware development platform for secure, mobile computation and communication
• We created a Damn Vulnerable WooCommerce Plugins Environment that helps to practice how to write exploits from security advisories. A blog post outlining our approach can be found in the project.
• Bug or Feature: Privilege Escalation in Windows Autopilot
• Introducing PyOracle2 - Padding oracle attack tool
• AliExpress Captcha Reuse
• Multiplex TLS Traffic with SNI Routing, includes nginx configuration and explains HTTP/2 coalescing
• OpenClinic Version 0.8.2 - High-Risk Security Advisory

The /r/netsec Monthly Discussion Thread - December 2020 Posted: 30 Nov 2020 08:36 PM PST Overview Questions regarding netsec and discussion related directly to netsec are welcome here. Rules & Guidelines Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary. Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely. If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely. Avoid use of memes. If you have something to say, say it with real words. All discussions and questions should directly relate to netsec. No tech support is to be requested or provided on /r/netsec. As always, the content & discussion guidelines should also be observed on /r/netsec. Feedback Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox. submitted by /u/AutoModerator [link] [comments]

40 (!) remote code execution vulns in Micro Focus Operation Bridge Manager Posted: 01 Dec 2020 07:04 AM PST submitted by /u/ChoiceGrapefruit0 [link] [comments]

Visualizing IP Traffic with Brim, Zeek and NetworkX Posted: 01 Dec 2020 07:25 AM PST submitted by /u/Oliver-Brimsecurity [link] [comments]

BruteShark Version v1.1.2 Released: BruteShark is now compatible with Neo4j for visualizing network diagram by analyzing a PCAP file connections :-) Posted: 30 Nov 2020 05:20 PM PST submitted by /u/BruteShark [link] [comments]

XSSworm.dev ~ Self-replication contest [write-up] Posted: 01 Dec 2020 11:52 AM PST submitted by /u/_vavkamil_ [link] [comments]

iOS 1-day hunting: uncovering and exploiting CVE-2020-27950 kernel memory leak Posted: 01 Dec 2020 11:16 AM PST submitted by /u/Gallus [link] [comments]

Warzone RAT comes with UAC bypass technique Posted: 01 Dec 2020 06:26 AM PST submitted by /u/harroldhino [link] [comments]

Win by Segfault and other notes on Exploiting Chess Engines Posted: 01 Dec 2020 11:50 AM PST submitted by /u/Gallus [link] [comments]

Precursor is an open hardware development platform for secure, mobile computation and communication Posted: 01 Dec 2020 06:58 AM PST submitted by /u/EquityMSP [link] [comments]

We created a Damn Vulnerable WooCommerce Plugins Environment that helps to practice how to write exploits from security advisories. A blog post outlining our approach can be found in the project. Posted: 01 Dec 2020 11:27 AM PST submitted by /u/parzel [link] [comments]

Bug or Feature: Privilege Escalation in Windows Autopilot Posted: 01 Dec 2020 03:22 AM PST submitted by /u/dionas [link] [comments]

Introducing PyOracle2 - Padding oracle attack tool Posted: 01 Dec 2020 10:09 AM PST submitted by /u/L1QU1DF1R3 [link] [comments]

AliExpress Captcha Reuse Posted: 30 Nov 2020 09:36 PM PST submitted by /u/_kawhl [link] [comments]

Multiplex TLS Traffic with SNI Routing, includes nginx configuration and explains HTTP/2 coalescing Posted: 30 Nov 2020 11:37 PM PST submitted by /u/ssh-bi [link] [comments]

OpenClinic Version 0.8.2 - High-Risk Security Advisory Posted: 01 Dec 2020 08:23 AM PST submitted by /u/breach_house [link] [comments]

You are subscribed to email updates from /r/netsec - Information Security News & Discussion. To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Google, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States