Wrote about a funny little vulnerability in goreportcard I encountered just before publishing oauth-labs.

Give it a read if you have some time to kill :)

https://0dave.ch/posts/goreportcard/

#infosec #vulnerability #writeup

Quick http://ghmlwr.0dave.ch/ update:
I've included raw JSON data and an RSS feed (atom), check it out :)

(let me know if either of these two files are borked).

#github #malware #threatintel #update

It's sunday. You are very bored, you want to make the world a better place and report malicious repositories on GitHub.

You can: https://ghmlwr.0dave.ch/

#github #malware #threatintel #security

So I've implemented the status check for the repositories (online vs. offline) over at https://ghmlwr.0dave.ch/. Any other ideas? :)

#threatintel #github #malware

Wrote a short post on how ghmlwr.0dave.ch works. Nothing too crazy, but if you're interested, read on:

https://0dave.ch/posts/ghmlwr/

#malware #github #threatintel

New day, new malware on GitHub :(

Looks like the stargazers have increased as well this fine monday. Curious!

#malware #github

Malware on GitHub?!

If only there were bored people on the internet who would report those repositories. Wouldn't that be great.

https://ghmlwr.0dave.ch/

#malware #GitHub #security

Malware on GitHub?!
(yes, there's been malware on GitHub for quite some time now)

https://ghmlwr.0dave.ch/

#malware #GitHub #security