loss_type:data × latest_source_host:trustedsec.com × limpar

Resultados

2 casos · pág. 1/1

trustedsec.com · há 1d medium

TrustedSec releases waf-fu to harvest and replay credentials from AWS WAF logs exposing unredacted headers

TrustedSec researcher Lilly Mayo published waf-fu, an offensive tool that pulls AWS WAF log data into a local sqlite database and enables replay of logged requests. During an engagement, the author found WAF logs in CloudWatch that captured all headers unredacted, including session cookies and other authentication material, which can be r…

trustedsec.com · há 1d low

hate_crack maintainer's git hook mishap pushes private notes to public repo; project splits config and hardens its release process

TrustedSec's Justin Bollinger describes how a prek pre-push hook corrupted his git index on July 30. The resulting commit deleted 85,280 lines across about 165 files and staged gitignored, local-only paths (CLAUDE.md, .claude/, docs/plans/, docs/superpowers/). The commit reached the public trustedsec/hatecrack remote before it was force-p…