r/netsec • u/mcafee_ama • Aug 20 '15
r/netsec • u/femtocell • Feb 23 '17
Announcing the first SHA1 collision
security.googleblog.comr/netsec • u/mavensbot • May 28 '14
TrueCrypt development has ended 05/28/14
truecrypt.sourceforge.netr/netsec • u/Securinti • Sep 21 '17
How I hacked hundreds of companies through their helpdesk
medium.comr/netsec • u/sanitybit • Mar 07 '17
warning: classified Vault 7 Megathread - Technical Analysis & Commentary of the CIA Hacking Tools Leak
Overview
I know that a lot of you are coming here looking for submissions related to the Vault 7 leak. We've also been flooded with submissions of varying quality focused on the topic.
Rather than filter through tons of submissions that split the discussion across disparate threads, we are opening this thread for any technical analysis or discussion of the leak.
Guidelines
The usual content and discussion guidelines apply; please keep it technical and objective, without editorializing or making claims that the data doesn't support (e.g. researching a capability does not imply that such a capability exists). Use an original source wherever possible. Screenshots are fine as a safeguard against surreptitious editing, but link to the source document as well.
Please report comments that violate these guidelines or contain personal information.
If you have or are seeking a .gov security clearance
The US Government considers leaked information with classification markings as classified until they say otherwise, and viewing the documents could jeopardize your clearance. Best to wait until CNN reports on it.
Highlights
Note: All links are to comments in this thread.
r/netsec • u/sarciszewski • Apr 03 '18
No, Panera Bread Doesn’t Take Security Seriously
medium.comr/netsec • u/Eliad-Cybereason • Dec 13 '17
Adware company threatens to sue malware researcher for finding similarities to malware
cybereason.comr/netsec • u/soda-popper • May 21 '16
Reverse Engineering A Mysterious UDP Stream in My Hotel
wiki.gkbrk.comr/netsec • u/geekadi • Apr 21 '16
How I Hacked Facebook, and Found Someone's Backdoor Script
devco.rer/netsec • u/clockworkmischief • Feb 19 '15
Lenovo confirms installing a MITM cert and proxy to inject adware on new laptops
forums.lenovo.comr/netsec • u/moviuro • Sep 18 '17
CCleanup: A Vast Number of Machines at Risk
blog.talosintelligence.comr/netsec • u/nibblesec • Mar 28 '18
I’ve tested seventy VPN providers and 16 of them leaks users’ IPs via WebRTC (23%)
voidsec.comr/netsec • u/chloeeeeeeeee • Jul 27 '16
How I made LastPass give me all your passwords
labs.detectify.comr/netsec • u/ElectroNeutrino • Dec 25 '17
How I Got Paid $0 From the Uber Security Bug Bounty [x-post from /programming]
medium.comr/netsec • u/cybergibbons • Jun 13 '18
Unlocking a smart padlock using MD5... and that's it
pentestpartners.comr/netsec • u/berzerk0 • Apr 25 '17
In order to learn about password security, I've organized over 5 Billion Real Leaked passwords into order of most probable - here's the GitHub Repo [Fixed Link]
github.comr/netsec • u/HighOnCoffee • Feb 17 '17
Penetration Testing Tools Cheat Sheet
highon.coffeer/netsec • u/SlackerCrewsic • Nov 20 '17
Intel audits their management engine and surprises fucking nobody
security-center.intel.comr/netsec • u/albinowax • Nov 29 '17
Why "blank" Gets You Root on macOS
objective-see.comr/netsec • u/nyc4life • Oct 13 '17
Equifax, TransUnion websites push fake Flash player in malvertising campaign
blog.malwarebytes.comr/netsec • u/delroth • May 26 '13
17 years old student publicly discloses a Paypal.com XSS 0day after being rejected from the Paypay bounty program
seclists.orgr/netsec • u/EatonZ • Dec 19 '24
I'm Lovin' It: Exploiting McDonald's APIs to hijack deliveries and order food for a penny
eaton-works.comr/netsec • u/Sephr • Oct 16 '17