Blog
[ 24 / notes from the community ]
Write-ups, announcements, and security notes from the BSides Mumbai community.
Showing posts tagged #red-team · clear filter
macOS Dylib Injection: How DYLD_INSERT_LIBRARIES Works (and Why Apple Silicon Broke It)
The macOS answer to Windows DLL injection - how dyld loads dynamic libraries, how attackers hijack that process with DYLD_INSERT_LIBRARIES, and how SIP, AMFI, code signing, and restricted segments make it far harder on M-series Macs.
Read →
Introduction to AWS Serverless Exploitation: Attacking Lambda, API Gateway & Cognito
A beginner-friendly guide to AWS serverless security - the shared responsibility model, the OWASP top 10 serverless risks, and a live demo that turns a command injection in a Lambda function into stolen AWS credentials.
Read →
Pwning IPv6 Networks: The Infamous IPv6 DNS Takeover Attack
See how the infamous IPv6 DNS takeover attack lets an attacker pwn IPv6 networks and seize a whole Windows domain in minutes, plus how to shut it down.
Read →