Category: Mix
2025년 시작과 함께 ZAP 2.16이 릴리즈되었습니다 이번 업데이트는 기능적으로 추가된 부분들이 있어서 대표적인 기능 3가지 위주로 정리하면서 리뷰할까 합니다. Client…
Amelia Coen | 10 January 2025 at 15:53 UTC Extensibility in Burp Suite is about giving you and your team…
![[tl;dr sec] #269 - New AI Security Tools, Ransomware in AWS, How to Hack AI Apps](https://image.cybernoz.com/wp-content/uploads/2025/03/1743077918_tldr-sec-269-New-AI-Security-Tools-Ransomware-in.png "[tl;dr sec] #269 – New AI Security Tools, Ransomware in AWS, How to Hack AI Apps")
AI-powered web vuln scanner agent and Baby Naptime, 2 tools + guides on preventing ransomware in AWS, detailed guide on…
I was struggling to create tasks the way I wanted them formatted and feed them into Obsidian, so I let…
UL Member Content Table of Contents As with every piece in this series, I won’t pretend I can see what’s…
Mar 24, 2025 Swift, Sharp, and Set to Go! Greetings, fellow security enthusiasts! Dalfox v2.10.0 has arrived, and it’s an…
So, you’ve found a valid security vulnerability in one of your bug bounty programs, now it’s time to write the…
Amelia Coen | 13 February 2025 at 13:52 UTC Our commitment to innovation At PortSwigger, we’re always striving to push…
![[tl;dr sec] #270 - APT Attack Simulation, AWS Phishing, 7 Security Flywheels](https://image.cybernoz.com/wp-content/uploads/2025/03/1743075542_tldr-sec-270-APT-Attack-Simulation-AWS-Phishing-7.png "[tl;dr sec] #270 – APT Attack Simulation, AWS Phishing, 7 Security Flywheels")
I hope you’ve been doing well! This is a story, all about how… Recently some friends and I saw a…
Habits are so good. They even compound! But, they can be hard to start and maintain. I’ve successfully started new…
![[tl;dr sec] #271 - Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor's Telegram](https://image.cybernoz.com/wp-content/uploads/2025/03/1743072871_tldr-sec-271-Threat-Modeling-AI-Backdoored-GitHub.png "[tl;dr sec] #271 – Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor’s Telegram")
Threat modeling (with) LLMs, tj-actions woes, reading a threat actor’s Telegram C2 I hope you’ve been doing well! Working on…
A series of vulnerabilities, known as IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974), have been identified in ingress-nginx, a widely used Kubernetes…