Cyber Research #27

Mert Coskuner

2 min readFeb 26, 2022

Articles

SameSite: Hax - Exploiting CSRF With The Default SameSite Policy

Feb 23 2022 Default SameSite settings are not the same as SameSite: Lax set explicitly. TLDR? A two-minute window from…

pulsesecurity.co.nz

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

It was found that unexpected behaviors in the query’s escape function could cause a SQL injection in mysqljs/mysql

flattsecurity.medium.com

Managing Network Policies for namespaces isolation on a multi-tenant Kubernetes cluster

This article is part of the Developer Productivity Engineering Camp blog series, brought to you by Yohei Kanemaru from…

engineering.mercari.com

Microsoft Brings eBPF to Windows - The New Stack

If you want to run code to provide observability, security or network functionality, running it in the kernel of your…

thenewstack.io

0xSha-v3

Edit description

0xsha.io

Running Cobalt Strike BOFs from Python

Python might be used to run Cobalt Strike's BOFs by using previous work from Trustedsec and FalconForce, one can pick a…

www.naksyn.com

AWS GuardDuty Exfiltration Bypass

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations…

blog.devgenius.io

AWS Security Fundamentals | Free Digital Training | AWS

Learn fundamental AWS security concepts In this self-paced course, you will learn fundamental AWS cloud security…

aws.amazon.com

How to secure API Gateway HTTP endpoints with JWT authorizer | Amazon Web Services

This blog post demonstrates how you can secure Amazon API Gateway HTTP endpoints with JSON web token (JWT) authorizers…

aws.amazon.com

Kubectl auth changes in GKE v1.25 : gke-gcloud-auth-plugin | Google Cloud Blog

While Google created Kubernetes, the platform has become the de-facto standard for container orchestration thanks to a…

cloud.google.com

Client Authorization with gRPC and Traffic Director | Google Cloud Blog

With the new authorization support, you can explicitly permit access to servers from specific clients and ensure that…

cloud.google.com

Now available: CIS benchmarks for Kubernetes | Azure updates | Microsoft Azure

Azure Kubernetes Service (AKS) complies with SOC, ISO, PCI DSS, and HIPAA standards. We have now applied security…

azure.microsoft.com

Tools

GitHub - cyb3rfox/Aurora-Incident-Response: Incident Response Documentation made easy. Developed by…

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders. Aurora brings…

github.com

Certipy 2.0: BloodHound, New Escalations, Shadow Credentials, Golden Certificates, and more!

As the title states, the latest release of Certipy contains many new features, techniques and improvements. This blog…

research.ifcr.dk

Thank you for reading!

If you find this newsletter useful and know other people who would too, forward it to them to help spread the knowledge. If you have questions, comments or feedback, reach out via /in/mcoskuner.

Cyber Research #27

Articles

SameSite: Hax - Exploiting CSRF With The Default SameSite Policy

Feb 23 2022 Default SameSite settings are not the same as SameSite: Lax set explicitly. TLDR? A two-minute window from…

Finding an unseen SQL Injection by bypassing escape functions in mysqljs/mysql

It was found that unexpected behaviors in the query’s escape function could cause a SQL injection in mysqljs/mysql

Managing Network Policies for namespaces isolation on a multi-tenant Kubernetes cluster

This article is part of the Developer Productivity Engineering Camp blog series, brought to you by Yohei Kanemaru from…

Microsoft Brings eBPF to Windows - The New Stack

If you want to run code to provide observability, security or network functionality, running it in the kernel of your…

0xSha-v3

Edit description

Running Cobalt Strike BOFs from Python

Python might be used to run Cobalt Strike's BOFs by using previous work from Trustedsec and FalconForce, one can pick a…

AWS GuardDuty Exfiltration Bypass

In January 20, 2022 Amazon AWS has introduced a new threat detection in GuardDuty to block credential exfiltrations…

AWS Security Fundamentals | Free Digital Training | AWS

Learn fundamental AWS security concepts In this self-paced course, you will learn fundamental AWS cloud security…

How to secure API Gateway HTTP endpoints with JWT authorizer | Amazon Web Services

This blog post demonstrates how you can secure Amazon API Gateway HTTP endpoints with JSON web token (JWT) authorizers…

Kubectl auth changes in GKE v1.25 : gke-gcloud-auth-plugin | Google Cloud Blog

While Google created Kubernetes, the platform has become the de-facto standard for container orchestration thanks to a…

Client Authorization with gRPC and Traffic Director | Google Cloud Blog

With the new authorization support, you can explicitly permit access to servers from specific clients and ensure that…

Now available: CIS benchmarks for Kubernetes | Azure updates | Microsoft Azure

Azure Kubernetes Service (AKS) complies with SOC, ISO, PCI DSS, and HIPAA standards. We have now applied security…

Tools

GitHub - cyb3rfox/Aurora-Incident-Response: Incident Response Documentation made easy. Developed by…

Incident Response Documentation made easy. Developed by Incident Responders for Incident Responders. Aurora brings…

Certipy 2.0: BloodHound, New Escalations, Shadow Credentials, Golden Certificates, and more!

As the title states, the latest release of Certipy contains many new features, techniques and improvements. This blog…

Thank you for reading!

Written by Mert Coskuner