Greptile’s Post

🦎Greptile can now review your pull requests! The hardest part about reviewing PRs is having full context of the codebase, which is exactly what Greptile is great at! Greptile's PR review bot can comment on things like: ✨ potential bugs introduced by the changes ✨ potential security issues introduced by the changes ✨ duplicate code which may exist elsewhere in the codebase ✨ potentially missed edge cases ...and more! Learn more here 👉 https://lnkd.in/eiwnEiHx

Having difficulty debugging 🪲rust smart contracts? 😕 Dive into this Resonance Security guide 👋 and discover how CodeLLDB can be your trusty sidekick in navigating the murky waters of Rust smart contract debugging: https://lnkd.in/eM-GWpHP Let’s get those bugs squashed! 🪲❌ 〰️ resonance.security Michał Bazyli

Even if your container images come from another registry than Docker Hub, you need to scan their vulnerabilities. Here is an alternative to docker scout...

Have you tried out the new Semgrep VS Code Extension? Start incorporating security early in the development cycle, getting warnings well before you've submitted a PR for review. Check out this 3-min video to learn more: go.semgrep.dev/43DxqZR

We are so back. Finished another pro lab from HackTheBox, Dante. I recommend this lab for beginners that want to start owning entire networks as opposed to single boxes. As usual, the lab consists of a simulated external and internal network that allows players to practice pivoting and performing attacks through proxies. This lab tests knowledge on the following topics: * Basic enumeration * Web application attacks * Exploit development (basic buffer overflows) * Lateral movement * Local privilege escalation * Simple Active Directory enumeration and exploitation

“Compared with YOLOv8-X, YOLOv9-X has 15% less parameters, 25% less calculations, and has significant improvement of 1.7% AP.” 1. PGI framework to address information bottleneck problem in deeper neural networks and error accumulation problem caused by deep supervision 2. GELAN architecture that combines CSPNet and ELAN

Yups! Published a new article on Windows Unicode Based Buffer Overflows and Venetian Stack Alignment. Exploit been tested on Goldwave 5.70 where the Open URL feature was vulnerable to an vanilla SEH BOF Vulnerability. However, instead of ASCII, GoldWave uses Unicode; which made the exploitation part a bit tougher than the classical one's. Hope you love it, Do read. https://lnkd.in/danaNpkM

This article discusses a critical vulnerability (CVE-2024-23652) in Docker Buildkit = v0.12.4, which allows arbitrary file deletion in the host OS. Mitigation involves updating to Buildkit v0.12.5 or later. More: https://lnkd.in/gT5BpzQk