Feed
-
On-prem AD foothold to Entra ID Global Admin: SyncJacking abuses Entra Connect hard match sync to hijack any cloud identity including Global Administrator. This issue covers MSOL credential extraction, PTA agent backdooring with PTASpy, the sync API abuse paths that survive Microsoft's patching, and AzureHound/ROADtools for attack path mapping. https://www.kayssel.com/newsletter/issue-53/ #InfoSec #CyberSecurity #pentesting #bugBounty #OffSec #ActiveDirector #EntraID
-
Enterprise SSO with SAML: one XML signature wrapping attack = access to every app in scope. This week I broke down XSW variants, void canonicalization bypass, NameID comment injection, and attribute-based escalation. Five quick checks that cover most real-world SAML bugs, all automatable with SAMLRaider. https://www.kayssel.com/newsletter/issue-54/ #InfoSec #CyberSecurity #Pentesting #BugBounty #OffSec #SAMl #SSo
-
eBPF rootkits: uprobe on libpam.so = cleartext creds from every sudo/ssh/VPN with zero binary modification. XDP at the NIC driver = full firewall bypass before iptables processes the packet. BPFDoor in production against telecoms since 2021. ShadowGuard hit 70+ orgs in 37 countries in Feb 2026. https://www.kayssel.com/newsletter/issue-55/ #infoSec #cyberSecurity #Pentesting #BugBounty #Offsec #Linux #ebpf
-
Most supply chain attacks need no vulnerability. They abuse how package managers resolve names and run install scripts. This issue covers dependency confusion (hit Apple and Microsoft), typosquatting, install-script RCE, maintainer account takeover (event-stream, ctx, aiocpa), and Shai-Hulud, the self-replicating npm worm that steals cloud creds and, in v2.0, wipes your home directory. https://www.kayssel.com/newsletter/issue-60/ #InfoSec #CyberSecurity #Pentesting #BugBounty #DevSecOps #SupplyC...
-
The buffer overflow was supposed to be dead. It just evolved. This issue walks the full escalation: classic stack smashing, ret2libc to survive NX, ROP chains that turn the stack into a Turing-complete program, leaking the stack canary, and the puts/GOT libc leak that unravels ASLR. Every mitigation adds a stage instead of a wall, and one memory leak is the master key to most of them. https://www.kayssel.com/newsletter/issue-63/ #InfoSec #CyberSecurity #BinaryExploitation #Pentesting #CTF #pwn
-
Mass assignment lives in the gap between the form the user sees and the object the server saves. The framework binds your whole request body to the user model. So you add "role":"admin" to a normal profile update, and the server writes it. This gave Egor Homakov commit access to rails/rails on GitHub in 2012. Every write endpoint is a candidate: enumerate what the object holds, not what the UI shows. https://www.kayssel.com/newsletter/issue-64/ #InfoSec #Cy...
-
SQL injection is not one payload, it's a spectrum of readout channels over the same primitive. Output on the page? UNION. No output? Boolean blind with binary search. Identical responses? Time-based. No channel at all? Exfil over DNS. And a read-only SQLi is never the ceiling: INTO OUTFILE, xp_cmdshell, and COPY FROM PROGRAM turn a query into a shell. MOVEit was one unauthenticated SQLi that became mass RCE. https://www.kayssel.com/newsletter/issue-65/ #InfoSec #CyberSecurity #Pentest...
-
Heap exploitation is metadata corruption, not data corruption. The stack gives you a return address. The heap gives you glibc's allocator, whose freelist pointers live inside the chunks you control. Overwrite a freed chunk's fd pointer and malloc hands you an arbitrary address. Version is everything: tcache (2.26), key check (2.29), safe-linking (2.32), hooks removed (2.34). Same bug, different difficulty on each. https://www.kayssel.com/newsletter/issue-66/ #InfoSec #CyberSec...
-
Creo que lo que ha pasado es que han hecho un estudio sobre la “pitopausia” pero el autocorrector les ha jugado una mala pasada🙄 Igualdad pide que se revise el estudio sobre menopausia basado en datos de hombres https://www.eldiario.es/1_cd8387
-
¡Qué importante es lo que cuentan aquí sobre el futuro de la ciencia y de la humanidad! Los genios de "lápiz y papel" contra la máquina insaciable: cómo la IA ha cambiado el significado de "ser científico" vía @eldiarioes https://www.eldiario.es/129_ce0e74
-
¡Leedlo, por favor! https://www.eldiario.es/sociedad/alumnado-aprenda-no-complicado-sacan-tijeras_129_13528720.html?utm_source=Al+d%C3%ADa&utm_campaign=c59dbcf9c6-EMAIL_CAMPAIGN_2026_09_27_07_08&utm_medium=email&utm_term=0_-c59dbcf9c6-62551681&mc_cid=c59dbcf9c6
-
RE: https://mastodon.social/@ElSaltoDiario/117405649918297328 Cuando quieren, bien que pueden comprar edificios. En fin😒
-
Pedro Sánchez ha decidido que no me quede otra que votar por correo justo cuando me ha caducado el certificado digital en septiembre. Y por la mierda de que nada funciona fuera de windows, pues no pude renovarlo. No me va a quedar otra que ir a verificarlo en persona porque ni de coña les mando yo un vídeo mio. En fin, que ya os iré contando porque ya he intentado comprando un lector de DNIe y el certificado tb está caducado🤦🏻♀️. Las elecciones más decisivas desde el 78 y yo con estos pelos.
-
HAY ESPERANZA. Vamos a ahora a por el genocida el martes 💪🏼
-
MOTHER JONES: “THEY WENT TO JARED… Trump’s son-in-law Jared Kushner used his position to hop in bed with autocrats and sell out America.” And the Hunter Biden hunters are silent. @MarshaBlackburn www.motherjones.com/politics/202...
-
Any good historical biography of Lula podcasts you would recommend?
-
Eilen hyperfokustelin 3D-mallin parissa ja kun odotin malttamattomana, että pääsisin maanantaina kirjastolle tulostamaan prototyyppiä, niin aloin järjestellä kodin askartelulaatikoita. Tänään vuorostani hyperfokusoin askartelulaatikoiden järjestämisessä ja muistin vasta nyt nukkumaan käydessä, että mun oli tarkoitus käydä kirjastolla 3D-tulostamassa 😃
-
Leibniz is the only philosopher in history to have a cookie named after him
-
@_patmurray are the paper cuts related to all of the long press menus disappearing?
-
@_Davidsmith are these kinds of ads really the kind of thing you want at the top of your apps?
-
@brentsimmons any eta on the iOS 26 update for NetNewsWire? I’m looking forward to the redesign
-
Wanna beta test my new iPhone/iPad/Mac app, TextMeter? It’s a utility that analyzes any text document you throw at it. You can import entire novels worth of text and in a few seconds, *without* connecting to a server, it gets you a bunch of interesting stats. https://testflight.apple.com/join/V8p8u2eq
-
Apple introduces the new 14-inch MacBook Pro with M6 Link: https://www.apple.com/newsroom/2026/10/apple-introduces-the-new-14-inch-macbook-pro-with-m6/ Discussion: https://news.ycombinator.com/item?id=50258521
-
So why would I launch https://columnly.social right before Pixelfed's new webUI? Columnly is built on several of the new Pixelfed webUI components, and I wanted to test them in production and also Nuxt with hybrid rendering to catch any pesky bugs before I deploy this to millions of people. The new Pixelfed webUI is much better than Columnly and the current experience. I can't wait ☺️ #pixelfed #Columnly
-
@board 这言论还是过于幽默了，颠倒黑白