NPM Supply Chain Attack: Part 02
An in-depth analysis of the second NPM supply chain attack, exploring its methods, impact, and the lessons learned for the cybersecurity community.
ANORAK WRITES
Finding a Missing Subresource Integrity (SRI) Vulnerability
How I found missing SRI using just curl and how it led to my first valid bug.
Bash Scripting Cheatsheet
A Handy cheatsheet that you might require while writing some cool exploit scripts
Using PConT to Stay Anonymous
Detailed blog on how to use the proxy configuration tool to stay anonymous
The Ultimate NMap Cheatsheet
A Place to recall and revisit all the popular NMap commands
Tragic Case of Aaron
Deepdive into life of Aaron Swartz, the founder of reddit
LINUX Commands You need to Know
A list of 60 most used linux commands for beginners
Phases of Vulnerability Analysis
A comprehensive guide to the phases of vulnerability analysis, detailing each step from planning to remediation in the vulnerability management lifecycle.
Major Supply Chain Attack on NPM Project NX
A detailed technical analysis of a major supply chain attack on the Nx npm package, exposing how malicious code harvested sensitive credentials via Github.
Organizing Your Protections with the MITRE ATT&CK Framework
A practical guide to understanding and applying the MITRE ATT&CK Framework, a living knowledge base of adversary tactics and techniques.