Silhouette

Silhouette Por Gabriel Landau y Mark Mager en Elastic Security. De Hide Your Valuables — Mitigating Physical Credential Dumping Attacks presentado en Shmoocon 2023. Diapositivas aquí. Manteniendo los secretos de LSA fuera de la memoria física Silhouette es un POC que mitiga el uso de memoria físi...

Smartphone User Fingerprinting on Wireless Traffic

Due to the openness of the wireless medium, smartphone users are susceptible to user privacy attacks, where user privacy information is inferred from encrypted Wi-Fi wireless traffic. Existing attacks are limited to recognizing mobile apps and their actions and cannot infer the smartphone user...

Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

The newly discovered Chinese nation-state actor known as Volt Typhoon has been observed to be active in the wild since at least mid-2020, with the hacking crew linked to never-before-seen tradecraft to retain remote access to targets of interest. The findings come from CrowdStrike, which is...

silhouette-ac.com Cross Site Scripting vulnerability OBB-2278152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

silhouette-ac.com XSS vulnerability

Open Bug Bounty ID: OBB-634122 Description| Value ---|--- Affected Website:| silhouette-ac.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...