Silhouette

Silhouette Di Gabriel Landau e Mark Mager presso Elastic Security. Da Hide Your Valuables — Mitigating Physical Credential Dumping Attacks presentato allo Shmoocon 2023. Diapositive qui. Tenere i segreti di LSA fuori dalla memoria fisica Silhouette è un POC che mitiga l'uso della memoria fisica p...

Smartphone User Fingerprinting on Wireless Traffic

Due to the openness of the wireless medium, smartphone users are susceptible to user privacy attacks, where user privacy information is inferred from encrypted Wi-Fi wireless traffic. Existing attacks are limited to recognizing mobile apps and their actions and cannot infer the smartphone user...

Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

The newly discovered Chinese nation-state actor known as Volt Typhoon has been observed to be active in the wild since at least mid-2020, with the hacking crew linked to never-before-seen tradecraft to retain remote access to targets of interest. The findings come from CrowdStrike, which is...

silhouette-ac.com Cross Site Scripting vulnerability OBB-2278152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

silhouette-ac.com XSS vulnerability

Open Bug Bounty ID: OBB-634122 Description| Value ---|--- Affected Website:| silhouette-ac.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...