home.social

#paloaltounit42 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #paloaltounit42, aggregated by home.social.

  1. aegilops @aegilops ·

    That :javascript: JWT "vulnerability"?

    Nope 🙅

    Exploiting this requires a deserialization bug in an app using the library, or for an attacker to be able to control the code directly (at which point they have RCE already).

    Not CVSS 7.6, by any means: it requires an app to be dangerously deserializing untrusted input into a field for security token validation! Most apps hardcode a string.

    This is CVSS 0.

    This bug is not a vulnerability.

    #jwt #cve_2022_23529 #cve #javascript #paloaltounit42
  2. Dormidera @[email protected] ·

    Cobalt Strike Analysis and Tutorial: Identifying Beacon Team Servers in the Wild.

    unit42.paloaltonetworks.com/co

    #cobaltstrike #paloaltounit42

    #cobaltstrike #paloaltounit42