Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Xavier Mertens

Threat Level: green

Date	Author	Title
2024-12-09	Jesse La Grew	CURLing for Crypto on Honeypots
2024-10-14	Xavier Mertens	Phishing Page Delivered Through a Blob URL
2024-09-06	Jesse La Grew	Enrichment Data: Keeping it Fresh
2024-07-10	Jesse La Grew	Finding Honeypot Data Clusters Using DBSCAN: Part 1
2023-10-11	Johannes Ullrich	CVE-2023-38545: curl SOCKS5 oversized hostname vulnerability. How bad is it?
2023-02-24	Brad Duncan	URL files and WebDAV used for IcedID (Bokbot) infection
2022-12-03	Guy Bruneau	Linux LOLBins Applications Available in Windows
2022-10-09	Didier Stevens	Curl's resolve Option
2022-08-25	Rob VandenBrink	Taking Apart URL Shorteners
2022-08-11	Xavier Mertens	InfoStealer Script Based on Curl and NSudo
2022-04-03	Didier Stevens	jo
2022-04-02	Didier Stevens	curl 7.82.0 Adds --json Option
2022-03-09	Xavier Mertens	Infostealer in a Batch File
2021-03-15	Didier Stevens	Finding Metasploit & Cobalt Strike URLs
2020-09-30	Johannes Ullrich	Scans for FPURL.xml: Reconnaissance or Not?
2020-09-20	Guy Bruneau	Analysis of a Salesforce Phishing Emails
2020-02-17	Didier Stevens	curl and SSPI
2020-02-14	Xavier Mertens	Keep an Eye on Command-Line Browsers
2019-11-08	Xavier Mertens	Microsoft Apps Diverted from Their Main Use
2019-03-08	Remco Verhoef	Analysing meterpreter payload with Ghidra
2018-08-12	Didier Stevens	A URL shortener handy for phishers
2018-07-30	Xavier Mertens	Exploiting the Power of Curl
2017-12-24	Didier Stevens	PDF documents & URLs: update
2017-12-02	Xavier Mertens	Using Bad Material for the Good
2017-10-05	Johannes Ullrich	pcap2curl: Turning a pcap file into a set of cURL commands for "replay"
2017-08-22	Xavier Mertens	Defang all the things!
2016-01-29	Xavier Mertens	Scripting Web Categorization
2012-12-06	Daniel Wesemann	Rich Quick Make Money!
2009-06-16	John Bambenek	URL Shortening Service Cligs Hacked
2009-03-10	Swa Frantzen	TinyURL and security
2009-01-12	William Salusky	Web Application Firewalls (WAF) - Have you deployed WAF technology?
2007-01-03	Toby Kohlenberg	VLC Media Player udp URL handler Format String Vulnerability