Technical Information Security Content & Discussion
submitted by /u/yohanes [link] [comments]
submitted by /u/907jessejones [link] [comments]
Hey all! Ive been publishing some introductory resources for getting into hardware reverse engineering for a while now. Just wanted to share with the community submitted by /u/wrongbaud [link] [comments]
Batteries included collaborative knowledge management solution for threat intelligence researchers. submitted by /u/small_talk101 [link] [comments]
submitted by /u/ulldma [link] [comments]
submitted by /u/repoog [link] [comments]
submitted by /u/Electrical-Wish-4221 [link] [comments]
submitted by /u/Individual-Gas5276 [link] [comments]
submitted by /u/small_talk101 [link] [comments]
submitted by /u/uBaze [link] [comments]
submitted by /u/buherator [link] [comments]
submitted by /u/Fugitif [link] [comments]
submitted by /u/oridavid1231 [link] [comments]
submitted by /u/unknownhad [link] [comments]
submitted by /u/AlbatrossMaximum4489 [link] [comments]
submitted by /u/amitschenedel [link] [comments]
submitted by /u/freebie1234 [link] [comments]
submitted by /u/hardenedvault [link] [comments]
submitted by /u/piraterapper [link] [comments]
submitted by /u/citirix [link] [comments]
submitted by /u/boybeaid [link] [comments]
submitted by /u/PM_ME_YOUR_SHELLCODE [link] [comments]
submitted by /u/kinso1338 [link] [comments]
submitted by /u/DrorDv [link] [comments]
submitted by /u/Longjumping-Read2892 [link] [comments]
submitted by /u/kholejones8888 [link] [comments]
submitted by /u/Justin_coco [link] [comments]
submitted by /u/we-we-we [link] [comments]
submitted by /u/Longjumping-Top2717 [link] [comments]
submitted by /u/Mempodipper [link] [comments]
submitted by /u/AlmondOffSec [link] [comments]
submitted by /u/Ancient_Title_1860 [link] [comments]
submitted by /u/unknownhad [link] [comments]
submitted by /u/bajk [link] [comments]
submitted by /u/bajk [link] [comments]
submitted by /u/Hackmosphere [link] [comments]
submitted by /u/barakadua131 [link] [comments]
I came across an interesting case that I wanted to share with r/netsec - it shows how traditional vulnerability scoring systems can fall short when prioritizing vulnerabilities that are actively being exploited. The vulnerability: CVE-2024-50302 This vulnerability was just added to CISA's KEV (Known Exploited Vulnerabilities) catalog today, but if you were looking at standard metrics, you probably wouldn't have prioritized it: Base CVSS: 5.5 (MEDIUM) CVSS-BT (with temporal): 5.5 (MEDIUM) EPSS Score: 0.04% (extremely low probability of exploitation) But here's the kicker - despite these metrics, this vulnerability is actively being exploited in the wild. Why standard vulnerability metrics let us down: I've been frustrated with vulnerability management for a while, and this example hits on three problems I consistently see: Static scoring: Base CVSS scores are frozen in time, regardless of what's happening in the real world Temporal limitations: Even CVSS-BT (Base+Temporal) often doesn't capture actual exploitation activity well Probability vs. actuality: EPSS is great for statistical likelihood, but can miss targeted exploits A weekend project: Threat-enhanced scoring As a side project, I've been tinkering with an enhanced scoring algorithm that incorporates threat intel sources to provide a more practical risk score. I'm calling it CVSS-TE. For this specific vulnerability, here's what it showed: Before CISA KEV addition: - Base CVSS: 5.5 (MEDIUM) - CVSS-BT: 5.5 (MEDIUM) - CVSS-TE: 7.0 (HIGH) - Already elevated due to VulnCheck KEV data - Indicators: VulnCheck KEV After CISA KEV addition: - Base CVSS: 5.5 (MEDIUM) - CVSS-BT: 5.5 (MEDIUM) - CVSS-TE: 7.5 (HIGH) - Further increased - Indicators: CISA KEV + VulnCheck KEV Technical implementation Since this is r/netsec, I figure some of you might be interested in how I approached this: The algorithm: 1. Uses standard CVSS-BT score as a baseline 2. Applies a quality multiplier based on exploit reliability and effectiveness data 3. Adds threat intelligence factors from various sources (CISA KEV, VulnCheck, EPSS, exploit count) 4. Uses a weighted formula to prevent dilution of high-quality exploits The basic formula is: CVSS-TE = min(10, CVSS-BT_Score * Quality_Multiplier + Threat_Intel_Factor - Time_Decay) Threat intel factors are weighted roughly like this: - CISA KEV presence: +1.0 - VulnCheck KEV presence: +0.8 - High EPSS (≥0.5): +0.5 - Multiple exploit sources present: +0.25 to +0.75 based on count The interesting part What makes this vulnerability particularly interesting is the contrast between its EPSS score (0.04%, which is tiny) and the fact that it's being actively exploited. This is exactly the kind of case that probability-based models can miss. For me, it's a validation that augmenting traditional scores with actual threat intel can catch things that might otherwise slip through the cracks. I made a thing I built a small lookup tool at github.io/cvss-te where you can search for CVEs and see how they score with this approach. The code and methodology is on GitHub if anyone wants to take a look. It's just a weekend project, so there's plenty of room for improvement - would appreciate any feedback or suggestions from the community. Anyone else run into similar issues with standard vulnerability metrics? Or have alternative approaches you've found useful? submitted by /u/skimfl925 [link] [comments]
submitted by /u/_PentesterLab_ [link] [comments]
submitted by /u/nibblesec [link] [comments]
submitted by /u/maltfield [link] [comments]
Unlock the full potential of The Firewall Project’s appsec platform with our rich API! 🚀 Seamlessly integrate our platform into your workflow and build custom automations for inventory management, scan results, and incident response. Empower your team with the flexibility they deserve. Check out: https://docs.thefirewall.org/api-reference submitted by /u/Inevitable_Explorer6 [link] [comments]
submitted by /u/CyberMasterV [link] [comments]
submitted by /u/sadyetfly11 [link] [comments]
submitted by /u/slypieok [link] [comments]
submitted by /u/RedTeamPentesting [link] [comments]
submitted by /u/Justin_coco [link] [comments]
submitted by /u/litheon [link] [comments]
A few weeks ago, there was a post in another sub-reddit asking for any suggestions on how to get their payloads past the anti-malware scan interface and Windows defender. This problem has definitely become more challenging overtime, and has forced me to write new AMSI bypasses. My goal with this post is to give a concrete example of selecting a set of bypasses and applying tailored obfuscation to evade AV and bypass defenses. Please let me know if you find this post helpful. Let me know if there’s anything I can do to improve! submitted by /u/pracsec [link] [comments]
submitted by /u/0xceba [link] [comments]
You can subscribe to this RSS to get more information