Censys

Domain and Infrastructure OSINT: WHOIS, crt.sh, Shodan, Censys

Domain and Infra OSINT: WHOIS, Passive DNS, crt.sh, Shodan, Censys

Cybersecsloth Editorial6 days ago11 hours ago04 mins

certificate transparency leaks the subdomains dns hides, passive dns reverses an ip into everything it ever hosted, and shodan tells you which port someone forgot to close.

Read Full News

meme dump: patch your stuff edition

Mistune’s RST Include Just Read Your .env (CVE-2026-115353)

Incus Backup Import: ../ in a Volume Name, Root on the Host (CVE-2026-115375)

vLLM Will Import Your Attacker’s Processor If You Ask Nicely (CVE-2026-114053)

WebRTC Datachannels: C2 That Looks Like a Call Your Firewall Already Allows

Your C2 Is a WebSocket Upgrade and the Proxy Logged It as Chat

Linux Fileless ELF: memfd_create, fexecve, and a Fake kworker Name

Plex2Shell: Your Home Theater Just Joined CISA KEV and Learned dlopen

PHP2Shell Just Turned Every Unpatched Upload Form Into a Shell Lottery

Verify or Burn a Claim: Chaining Photo, Map, and Public Records

Domain and Infra OSINT: WHOIS, Passive DNS, crt.sh, Shodan, Censys