Curated security research, vulnerabilities, advisories and tools for practitioners.

#golang

Security coverage tagged golang.

1.

Golang Beacons and VS Code Tunnels: Tracking a Cobalt Strike Server Leveraging Trusted Infrastructure

blog | 2025-01-07 00:00 | hunt.io | original ↗ | #threat-hunting | #c2 | #golang

2.

Let’s Go into the rabbit hole (part 3) — the challenges of dynamically hooking Golang programs

research | 2024-07-08 22:00 | blog.quarkslab.com | original ↗ | #cloud | #reverse-engineering | #golang

3.

Let’s Go into the rabbit hole (part 2) — the challenges of dynamically hooking Golang programs

research | 2024-06-10 22:00 | blog.quarkslab.com | original ↗ | #cloud | #reverse-engineering | #golang

4.

Announcing two new LMS libraries

blog | 2024-04-26 13:00 | blog.trailofbits.com | original ↗ | #open-source | #rust | #post-quantum-cryptography

5.

Spotting SparkRAT: Detection Tactics & Sandbox Findings

blog | 2024-04-23 00:00 | hunt.io | original ↗ | #threat-hunting | #c2 | #detection

6.

BlueShell: Four Years On, Still A Formidable Threat

blog | 2024-04-09 00:00 | hunt.io | original ↗ | #backdoor | #golang | #tls-certificates

7.

The Family of Safe Golang Libraries is Growing!

blog | 2024-02-26 00:00 | bughunters.google.com | original ↗ | #open-source | #secure-coding | #software-security

8.

Preventing SQL Injection in Golang

vulnerability | 2024-01-03 04:35 | hackerone.com | original ↗ | #secure-coding | #sql-injection | #web-security

9.

Golang's Improper Error Handling: A Subtle Path to Security Vulnerabilities

blog | 2023-11-30 03:41 | hackerone.com | original ↗ | #appsec | #authentication-bypass | #secure-coding

10.

Secure and Effective Logging in Golang: Best Practices and Tools

blog | 2023-11-28 04:18 | hackerone.com | original ↗ | #secure-coding | #best-practices | #monitoring

11.

Let’s Go into the rabbit hole (part 1) — the challenges of dynamically hooking Golang programs

research | 2023-10-02 22:00 | blog.quarkslab.com | original ↗ | #cloud | #reverse-engineering | #containers

12.

Improving the state of go-fuzz

blog | 2022-04-26 11:00 | blog.trailofbits.com | original ↗ | #open-source | #fuzzing | #tooling

13.

Smart (and simple) ways to prevent symlink attacks in Go

blog | 2020-11-24 13:00 | blog.trailofbits.com | original ↗ | #secure-coding | #go | #vulnerabilities

14.

Unit Testing in Go

blog | 2020-07-10 01:00 | hackerone.com | original ↗ | #best-practices | #testing | #golang

15.

How to check if a mutex is locked in Go

blog | 2020-06-09 11:50 | blog.trailofbits.com | original ↗ | #go | #debugging | #concurrency

16.

SAVE THE DATE!!! #LevelUp0x06 Date Announced

blog | 2020-04-07 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #virtual-conference

17.

Golang from a C Programmer's Perspective

blog | 2019-09-03 10:00 | hackerone.com | original ↗ | #golang | #programming | #c-programming

18.

A How-To Guide for Using Sliver

blog | 2019-08-05 00:00 | bishopfox.com | original ↗ | #red-team | #c2 | #penetration-testing

19.

Austin Golang User Group Recap

blog | 2019-03-21 10:00 | hackerone.com | original ↗ | #code-review | #best-practices | #quality