Red Team Tales 0x01: From MSSQL to RCE tarlogic.com

Pre-authentication XXE vulnerability in the Services Drupal module synacktiv.com

HQL : Hyperinsane Query Language (or how to access the whole SQL API within a HQL injection ?) synacktiv.com

HOW TO EXPLOIT LIFERAY CVE-2020-7961 : QUICK JOURNEY TO POC synacktiv.com

Databases - start.me start.me

Stack Overflow stackoverflow.com

ssltest ssllabs.com

SQL Injection Wiki sqlwiki.netspi.com

sqlchop sqlchop.chaitin.cn

SPLOITUS sploitus.com

The world of Site Isolation and compromised renderer speakerdeck.com

The Cookie Monster in Your Browsers speakerdeck.com

Infosec Newbie sneakymonkey.net

JavaScript MVC and Templating Frameworks slideshare.net

ECMAScript 6 from an Attacker's Perspective - Breaking Frameworks, Sandboxes, and everything else slideshare.net

ORM Injection slideshare.net

Introduction to Web Application Security slideshare.net

OSINT x UCCU Workshop on Open Source Intelligence slideshare.net

ORM2Pwn: Exploiting injections in Hibernate ORM slideshare.net

XXE OOB extracting via HTTP+FTP using single opened port skavans.ru

$7.5k Google services mix-up sites.google.com

$36k Google App Engine RCE sites.google.com

Google VRP and Unicorns sites.google.com

SMTP over XXE − how to send emails using Java's XML parser shiftordie.de

Hardcoded secrets, unverified tokens, and other common JWT mistakes semgrep.dev

SELinux Game selinuxgame.org

Fail2ban fail2ban.org

Egalito egalito.org

DynInst dyninst.org

Sigcheck docs.microsoft.com

Crossfeed docs.crossfeed.cyber.dhs.gov

Drool dns-oarc.net

DefectDojo defectdojo.org

Dangerzone dangerzone.rocks

Crowd Inspect crowdstrike.com

Cortex cortexmetrics.io

Watchtower containrrr.dev

Conftest conftest.dev

RedEye cisagov.github.io

Logging Made Easy (LME) cisa.gov

Chef InSpec chef.io

Certbot certbot.eff.org

Geneva (Genetic Evasion) censorship.ai

Caldera caldera.mitre.org

AttackerKB attackerkb.com

Atomic Red Team atomicredteam.io

tfsec aquasecurity.github.io

Ansible Lockdown ansiblelockdown.io

git-crypt agwa.name

Schuyler Towne channel youtube.com

Lockpicking videos and security talks.