DEV Community

# infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

Neo4j Cypher injection via Rust derive macros — full chain on HTB Sorcery

Comments
4 min read
Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

Subdomain takeover in 2026 — why dangling CNAMEs still pay, and how I find them at scale

Comments
5 min read
Hash Identification Reference Guide

Hash Identification Reference Guide

Comments
5 min read
Reverse Engineering a Live Specimen: A Practical Walkthrough of brbbot.exe (Static, Behavioral, Network, and C2 Analysis)

Reverse Engineering a Live Specimen: A Practical Walkthrough of brbbot.exe (Static, Behavioral, Network, and C2 Analysis)

Comments
6 min read
What I Did During My Summer Vacation: Day 1 - My First 10 Bug Bounty Reports

What I Did During My Summer Vacation: Day 1 - My First 10 Bug Bounty Reports

Comments
2 min read
Your Database Will Be Breached Someday. The Question Is: Will Passwords Be Inside?

Your Database Will Be Breached Someday. The Question Is: Will Passwords Be Inside?

1
Comments
3 min read
GHOST STADIUM: How 4,300 Fake Domains Targeted the FIFA World Cup 2026

GHOST STADIUM: How 4,300 Fake Domains Targeted the FIFA World Cup 2026

2
Comments
9 min read
Security Education and Awareness: Because Not Everyone Is Technical

Security Education and Awareness: Because Not Everyone Is Technical

Comments 1
2 min read
Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents

Fake AI Agent Skill Slipped Past Every Scanner and Reached 26,000 Agents

Comments
5 min read
The Role of CWE in Software Development

The Role of CWE in Software Development

Comments
2 min read
What is a CVE and Why Does It Matter?

What is a CVE and Why Does It Matter?

Comments
1 min read
Reading the Wild: A Guide to Environmental Analysis in OSINT Investigations (OSINT series Part 2)

Reading the Wild: A Guide to Environmental Analysis in OSINT Investigations (OSINT series Part 2)

Comments
7 min read
Making digital content court-admissible: eIDAS timestamps and e-signatures

Making digital content court-admissible: eIDAS timestamps and e-signatures

Comments
1 min read
Passive Reconnaissance on google.com — What I Found Using Shodan, WHOIS, and DNS Tools

Passive Reconnaissance on google.com — What I Found Using Shodan, WHOIS, and DNS Tools

5
Comments
10 min read
HackTheBox: Bamboo Writeup

HackTheBox: Bamboo Writeup

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.