Aggregator

Wi-Fi Woes: Android Hotspot App Leaves 2 Million Passwords Exposed

Security News, Insights and Analysis | McAfee

5 years 6 months ago

Logging onto a free Wi-Fi network can be tempting, especially when you’re out running errands or waiting to catch a...

The post Wi-Fi Woes: Android Hotspot App Leaves 2 Million Passwords Exposed appeared first on McAfee Blog.

McAfee

Denial of Service Vulnerabilities Discovered in HTTP/2

5 years 6 months ago

SETTINGS frame abuse and Slow POST attacks in HTTP/2 can lead to CPU and memory exhaustion.

安全树洞

5 years 6 months ago

在2018年第一天我向唯品会提交了生涯中单个奖金最多的漏洞后，感觉自己失去了一些动力，单纯的不想挖洞了，自那后对于安全技术追求的动力深感一直在下降。

Burp Suite学习之Intruder的4种攻击模式 - bamb00

博客园_人怜直节生来瘦，自许高材老更刚。

5 years 6 months ago

burp suit的intruder攻击共有四种模式，如图所示，下面分别讲讲这四种模式的使用方法和场景。一、Sniper模式 Sniper模式使用一组payload集合，它一次只使用一个payload位置，假设你标记了两个位置“A”和“B”，payload值为“1”和“2”，那么它攻击会形成以下

bamb00

在golang项目开始使用Bazel

Posts on 青鸟的博客

5 years 6 months ago

在golang项目开始使用Bazel Bazel是一个由java编写的编译工具,支持多语言编译,扩展,远程缓存等大量功能. 下载推荐通过http

Panda Malware: It’s Not Just About Cryptocurrencies Anymore

5 years 6 months ago

Panda malware is back with a March 2019 campaign that targets U.S. companies, and moves from cryptocurrencies to targeting web giants.

MLSRC志愿者招募 | 极客大会DEFCON CHINA等你一起撬动世界

美丽联合集团安全应急响应中心

5 years 6 months ago

MLSRC两倍积分活动，并额外奖励价值千元的DEF CON CHINA门票~

Ciscn 2019 初赛 Writeup

rmb122's notebook

5 years 6 months ago

输出了两题 web + 一题 crypto, 太菜了 QAQ
因为也是要交上去的, 就写的比较简单了.

DDCTF2019 Writeup

rmb122's notebook

5 years 6 months ago

历时 N 天, 滴滴终于审完了 Writeup, 终于可以发 wp 了, 我从 33 名到 16 名, 太真实了…
部分题目质量还是不错的 _(:з」∠)_, 因为要交上去, 所以就没截图了, 凑合看吧 (逃

Regional Threat Perspectives: Australia

5 years 6 months ago

Attackers using IP addresses in China, the United States, and the Netherlands focus on attacking applications over SSH, SMB and HTTP.

Operational technologies

5 years 6 months ago

Making sense of cyber security in OT environments

The Problem with Perfection: Tech Confidence in Young Girls

The Akamai Blog

5 years 6 months ago

At Akamai, we believe the future of tech is full of amazing opportunities. However, to ensure these opportunities are fulfilled, some things in the industry need to change. To enable these changes, we are committed to providing opportunities to anyone...

Akamai

路由器漏洞挖掘之 DIR-805L 越权文件读取漏洞分析 - H4lo

5 years 6 months ago

接下来的文章都会实战复现一些关于路由器的 web /二进制漏洞，可能会写的比较细，希望能给大家带来启发。若这里图片显示不出来可以试试挂个梯子。前言本文在复现 DIR 805L 任意文件读取漏洞时，将会比较详细的分析一下用于 cgi 处理的函数其中的一些功能。在逆向二进制文件时，常常会遇到

H4lo

Ramnit Returns to its Banking Roots, Just in Time for Italian Tax Season

5 years 6 months ago

Ramnit’s latest configuration targets Europe leading up to tax season, focusing on Italian banks and international online advertisers.

CISCN 2019 writeup - Vicen

5 years 6 months ago

划水做了两个pwn和两个逆向...... 二进制题目备份 Re easyGO Go语言，输入有Please字样，ida搜索sequence of bytes搜please的hex值找到字符串变量，交叉引用查到主函数是sub_495150，IDA断点动态调试发现直接出现了flag...... bbvv

Vicen

XSS实战跳转XSS

Posts on 青鸟的博客

5 years 6 months ago

XSS实战: 跳转XSS 前言跳转XSS实际上并不是一种新类型的攻击方式, 主要形成原因是以前网站外部跳转时是直接接受参数然后跳转,导致了URL重

AWS安全笔记|云安全随想（上）

5 years 6 months ago

周所周知，我在扯淡。

All About OSQuery (一)

安全小黄鸭

5 years 6 months ago

”我还活着“系列

DDCTF 2019 部分WP - 淚笑

5 years 6 months ago

WEB 滴~ http://117.51.150.246/index.php?jpg=TmpZMlF6WXhOamN5UlRaQk56QTJOdz09 观察链接可发现jpg的值是文件名转hex再base64编码两次得到，由此得到任意文件读取漏洞读取index.php http://117.51.1

淚笑

If I Had To Do It Over Again, Part 3

5 years 6 months ago

More stories from CISOs who describe how they would “do it over” again in some of their early security program deployments.