r/netsec • u/nibblesec • 4h ago
ElectroNG is now open source. ElectronJS Security Scanner.
blog.doyensec.comElectroNG is now free and open source.
r/netsec • u/netsec_burn • Jul 02 '26
Overview
If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company.
We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education.
Please reserve top level comments for those posting open positions.
Rules & Guidelines
Include the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work.
You can see an example of acceptable posts by perusing past hiring threads.
Feedback
Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.)
r/netsec • u/albinowax • 26d ago
Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.
As always, the content & discussion guidelines should also be observed on r/netsec.
Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.
r/netsec • u/nibblesec • 4h ago
ElectroNG is now free and open source.
r/netsec • u/bitbutter • 2h ago
In Godot 4.0 and later, in games using the engine's standard spawning setup, a peer with authority over the relevant spawner - by default the server the client joins - can crash that client with one crafted packet.
I've recently released a blog covering how I discovered a new Kerberos delegation abuse path!
By combining Elad Shamir's Reflective RBCD with James Forshaw's U2U sacrificial user technique, Constrained Delegation without Protocol Transition can now be abused against SPN-less accounts. I also had to add S4U2Proxy + U2U support to Impacket to get this working. :)
Impacket PR: https://github.com/fortra/impacket/pull/2324
r/netsec • u/DrAdalbbert • 20h ago
You can overwrite the prepareStackTrace property of the Error object by String prototype's functions and invoke them without parentheses. Then by overwriting the Error and Array prototype it is possible to control the arguments. Combining this behavior, together with some JSFuck-inspired tricks, it is possible to generate arbitrary JavaScript strings and run arbitrary JavaScript with only letters + - = and ,
r/netsec • u/acronis • 19h ago
Our Threat Research Unit published a breakdown of “The Gentlemen” - a Russian-speaking ransomware-as-a-service group that emerged in mid-2025, reportedly after affiliates split off from established groups like LockBit and Qilin. A few things that stood out from the research:
Full technical writeup linked below for anyone who wants to dig into the IOCs and affiliate details.
https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/
r/netsec • u/One_Paint8721 • 3h ago
r/netsec • u/bitbutter • 1d ago
r/netsec • u/LordAlfredo • 1d ago
r/netsec • u/tracebit • 2d ago
r/netsec • u/utku1337 • 3d ago
r/netsec • u/MrTuxracer • 4d ago
r/netsec • u/Content-Winter5328 • 5d ago
r/netsec • u/LordAlfredo • 5d ago