Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
Ever since I started learning how to code, I have been fascinated by the level of trust we put in a simple command like this one: pip install package_nameSome programming languages, like Python, come with an easy, more or less official method of installing dependencies for your projects. These installers are usually tied to public code repositories where anyone can freely upload code packages for
ãƒã‚°ãƒãƒ³ã‚¿ãƒ¼è¦–点ã«ã‚ˆã‚‹ã‚µãƒ—ライãƒã‚§ãƒ¼ãƒ³ã®è„†å¼±æ€§
Findy TECH BATON「ã‚ãªãŸã®çŸ¥ã‚‰ãªã„ â€ã‚µãƒ—ライãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒâ€ã‚’語る ã‚»ã‚ュリティ LT Night〠https://findy.connpass.com/event/375960/
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Reconeer – Recon Buccaneer
GitHub - sari3l/Poc-Monitor: 🔠Github CVE POC ä¿¡æ¯ç›‘æŽ§æŽ¨é€ ðŸš€
SVN Extractor for Web Pentesters | Blog of Anant Shrivastava
Exposed SVN directory
IP.THC.ORG - Reverse-DNS, Subdomain and CNAME Lookups
GitHub - UndeadSec/DockerSpy: DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.
https://infosecwriteups.com/exposing-source-code-via-svn-a-400-discovery-9fc54b3f3f31
{{#tags}}- {{label}}
{{/tags}}