PayloadsAllTheThings - SAML Injection github.com

PayloadsAllTheThings - Open Redirect github.com

PayloadsAllTheThings - CSRF Injection github.com

PayloadsAllTheThings - Command Injection github.com

PayloadsAllTheThings - CSV Injection github.com

Potential command injection in resolv.rb github.com

Prototype pollution attack in NodeJS application github.com

Inducing DNS Leaks in Onion Web Services github.com

X-Frame-Options: All about Clickjacking? github.com

A glimpse into GitHub's Bug Bounty workflow github.blog

GitHub's post-CSP journey github.blog

GitHub's CSP journey github.blog

The Absurdly Underestimated Dangers of CSV Injection georgemauer.net

What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability. foxglovesecurity.com

FOFA fofa.so

FLAWS flaws.cloud

IE11 Information disclosure - local file detection facebook.com

File Upload Restrictions Bypass exploit-db.com

MySQL Error Based SQL Injection Using EXP exploit-db.com

C.XSS Guide excess-xss.com

How to Hunt Bugs in SAML; a Methodology - Part III epi052.gitlab.io

How to Hunt Bugs in SAML; a Methodology - Part II epi052.gitlab.io

How to Hunt Bugs in SAML; a Methodology - Part I epi052.gitlab.io

Zenduty zenduty.com

Zenduty is a novel incident management platform providing end-to-end incident alerting, on-call management and response orchestration, giving teams greater control and automation over the incident management lifecycle.

Yomi yomi.yoroi.company

Free MultiSandbox managed and hosted by Yoroi.

X-Ways Forensics x-ways.net

Forensics tool for Disk cloning and imaging. It can be used to find deleted files and disk analysis.

WindowsSCOPE windowsscope.com

Memory forensics and reverse engineering tool used for analyzing volatile memory offering the capability of analyzing the Windows kernel, drivers, DLLs, and virtual and physical memory.

Valkyrie Comodo valkyrie.comodo.com

Valkyrie uses run-time behavior and hundreds of features from a file to perform analysis.

The ESF Playground themittenmac.com

A tool to view the events in Apple Endpoint Security Framework (ESF) in real time.

Kaspersky CyberTrace support.kaspersky.com

Threat intelligence fusion and analysis tool that integrates threat data feeds with SIEM solutions. Users can immediately leverage threat intelligence for security monitoring and incident report (IR) activities in the workflow of their existing security operations.

PALADIN sumuri.com

Modified Linux distribution to perform various forensics task in a forensically sound manner. It comes with many open source forensics tools included.

Youtube youtube.com

Open Computer Forensics Architecture sourceforge.net

Another popular distributed open-source computer forensics framework. This framework was built on Linux platform and uses postgreSQL database for storing data.

Stopping a Jeep Cherokee on the Highway Remotely wired.com

Chris Valasek's and Charlie Miller's pivotal research on hacking into Jeep's presented at DEFCON in 2015.

NST - Network Security Toolkit sourceforge.net

Linux distribution that includes a vast collection of best-of-breed open source network security applications useful to the network security professional.

O2OO web.archive.org

Works with the ELM327 to record data to a SQLite database for graphing purposes. It also supports reading GPS data. You can connect this to your car and have it map out using Google Maps KML data where you drive.

The Sleuth Kit & Autopsy sleuthkit.org

Unix and Windows based tool which helps in forensic analysis of computers. It comes with various tools which helps in digital forensics. These tools help in analyzing disk images, performing in-depth analysis of file systems, and various other things.

VicOne vicone.com

A subsidiary of Trend Micro which focuses on automotive security

Reverse.IT reverse.it

Alternative domain for the Hybrid-Analysis tool provided by CrowdStrike.

IT Security for Vehicles vdi-wissensforum.de

Conference run by the Association of German Engineers (VDI), with participation from US and European OEMs, Tier 1s, and others.

Uptane uptane.github.io

Uptane is an open and secure software update system design protecting software delivered over-the-air to the computerized units of automobiles and is designed to be resilient even to the best efforts of nation state attackers.

X-Ray 2.0 raymond.cc

Windows utility (poorly maintained or no longer maintained) to submit virus samples to AV vendors.

RaQet raqet.github.io

Unconventional remote acquisition and triaging tool that allows triage a disk of a remote computer (client) that is restarted with a purposely built forensic operating system.

UberATC uber.com

Uber Advanced Technologies Center, now Uber AV - [email protected].

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com

Twitter twitter.com