Aggregator

我得说DDCTF真的是脑洞太大，一言难尽。。。

滴~

文件包含，需要一些转换。转成hex值之后两次base64。

”我还活着“系列

”我还活着“系列

”我还活着“系列

”我还活着“系列

”我还活着“系列

”我还活着“系列

”我还活着“系列

WEB 滴~ http://117.51.150.246/index.php?jpg=TmpZMlF6WXhOamN5UlRaQk56QTJOdz09 观察链接可发现jpg的值是文件名转hex再base64编码两次得到，由此得到任意文件读取漏洞 读取index.php http://117.51.1

rest.AnonymousClientConfig() does not remove the serviceaccount credentials from config created by rest.InClusterConfig()

More stories from CISOs who describe how they would “do it over” again in some of their early security program deployments.

More stories from CISOs who describe how they would “do it over” again in some of their early security program deployments.

More stories from CISOs who describe how they would “do it over” again in some of their early security program deployments.

Attackers are using IP addresses in the Netherlands, United States, and China to target systems in Europe over SIP, Microsoft SMB, and SSH.

Attackers are using IP addresses in the Netherlands, United States, and China to target systems in Europe over SIP, Microsoft SMB, and SSH.

Attackers are using IP addresses in the Netherlands, United States, and China to target systems in Europe over SIP, Microsoft SMB, and SSH.

`kubectl --http-cache=<world-accessible dir>` creates world-writeable cached schema files

CWPP产品市场的“前世今生”……

前言 挖src也将近两个月了,写篇博客总结一下. 首先挖洞成果 3中危 2低危, 收入~2k. 真实菜到扣脚,收入连泡面都吃不起.只挖了bilibili

RSAC2019已近余波消散，再回头看看会上的热点，并以此展开写创新，是个不错的选择。无论议题或大厂展台或初创博览，创新处处可见。如果参与者自己未曾留意或根本看不到，从而评论说缺乏创新，那未免大大委屈了此次业界盛会。