Top 10 foro.seguridadwireless.net Competitors

svcommunity.org

Calendar

skullsecurity.org

Recently, I had the privilege to write a detailed analysis of CVE-2023-34362, which is series of several vulnerabilities in the MOVEit file transfer application that lead to remote code execution. One of the several vulnerabilities involved an ISAPI module - specifically, the MoveITISAPI.dll ISAPI extension. One of the many vulnerabilities that comprised the MOVEit RCE was a header-injection issue, where the ISAPI application parsed headers differently than the .net application. This point is going to dig into how to analyze and reverse engineer an ISAPI-based service! This wasn’t the first time in the recent past I’d had to work on something written as an ISAPI module, and each time I feel like I have to start over and remember how it’s supposed to work. This time, I thought I’d combine my hastily-scrawled notes with some Googling, and try to write something that I (and others) can use in the future. As such, this will be a quick intro to ISAPI applications from the angle that matters to me - how to reverse engineer and debug them! I want to preface this with: I’m not a Windows developer, and I’ve never run an IIS server on purpose. That means that I am approaching this with brute-force ignorance! I don’t have a lot of background context nor do I know the correct terminology for a lot of this stuff. Instead, I’m going to treat these are typical DLLs from typical applications, and approach them as such.

apisecurity.io

This week, we have important news of a vulnerability in the OAuth social sign-in feature of many popular platforms, potentially impacting billions of users. We have two articles from The NewStack, the first a guide on securing your API gateway and the second how to design scalable SaaS API security. We also have news of [...]Read More...

sec-dojo.com

Learn, Play And Secure Your Future. We connect Cyber Talents, Schools, and Companies through a Gamified Cybersecurity Training and Hiring Platform.

phinsecurity.com

Want to learn about Phin Security? Check out Phin FAQs for information about our security awareness training, data security, policies, reports, and more.

becomingahacker.org

Read writing from Omar Santos on Medium. Focused on cybersecurity, AI security, vulnerability research, & disclosure. Co-lead of the DEF CON Red Team Village. Author of over 25 books.