sensiblesec

6 ms·

1.
Hacking Htmx Applications(medium.com)
2 points by sensiblesec 3y ago|1 comments
2.
by sensiblesec 3y ago
Guide to testing htmx applications
3.
How useful is CVSS Score in CVE triage – The CVSS who cried wolf(inthewild.io)
1 points by sensiblesec 4y ago|0 comments
4.
by sensiblesec 4y ago
operative word is can again. I'd doubt that this happens on large scale (we would see/hear more because of the sizes of botnets). also when it does happen, removing it from bans will probably cost you less work then applying th
5.
by sensiblesec 4y ago
Agree. I see an argument about C2 and DDoS from a public good perspective but it is misguided to think this will be addressed by individuals
6.
by sensiblesec 4y ago
This is classic security overreaction, when talking about home routers. Just to be clear if this is an issue for you, make sure you do not connect to any wifi you have not hardened yourself beforehand! Also articles on the page fail to sh
7.
We analyzed 750 exploited vulnerabilities so you don't have to(inthewild.io)
4 points by sensiblesec 4y ago|0 comments
8.
by sensiblesec 4y ago
This is part 1 of sharing some experience from the trenches about phishing. Prior to working with Kaufland e-commerce, I never had to deal with phishing targeting end-users on a large scale. I have to say I held some misconceptions and unre
9.
Your users are getting phished. Now what?(medium.com)
1 points by sensiblesec 4y ago|1 comments
10.
by sensiblesec 5y ago
Giving you a simple to expand initial access test case and some pointers based on our testing experience to help better target your EDR coverage testing efforts
11.
Testing EDRs for Linux – Things I wish I knew before getting started(medium.com)
4 points by sensiblesec 5y ago|1 comments
12.
by sensiblesec 5y ago
That's fair my misunderstanding in that case I'm questioning the people publishing the PoC
13.
by sensiblesec 5y ago
While that is definitely a good theoretical argument but in practice it seem to be the case that most of the (non 0day) vulnerabilities that get exploited in the wild are the ones that have solid public exploits, and it does also seem to ha
14.
by sensiblesec 5y ago
EDIT: was not clear to me that Lumio has done only the writeup and not the original researchers finding the vulneraility mea culpa Lunasec, you're doing god's work! Probably there isn't a broad agreement on ethical standards
15.
by sensiblesec 5y ago
Often work with SMEs and startups kicking off their security programs. One main topic is vulnerability management. For these early steps I missed 2 tools: 1, For companies that don’t do any vulnerability discovery, something that warns them
16.
Show HN: Easy to use vulnerability exploitation data to help patching(github.com)
1 points by sensiblesec 5y ago|1 comments
17.
3 Pillars of SEC in DevSecOps(medium.com)
1 points by sensiblesec 5y ago|0 comments
18.
Where Do All the Attacks Go? (2011) [pdf](microsoft.com)
3 points by sensiblesec 5y ago|1 comments
19.
by sensiblesec 5y ago
If everything is supposedly so bad in cyber security how come not everyone is getting hacked all the time?
20.
by sensiblesec 6y ago
Hey, I'm the author, good point! Fixed to language to make it clearer. Thanks for pointing it out