Aggregator

Panda malware is back with a March 2019 campaign that targets U.S. companies, and moves from cryptocurrencies to targeting web giants.

MLSRC两倍积分活动，并额外奖励价值千元的DEF CON CHINA门票~

Attackers using IP addresses in China, the United States, and the Netherlands focus on attacking applications over SSH, SMB and HTTP.

Making sense of cyber security in OT environments

At Akamai, we believe the future of tech is full of amazing opportunities. However, to ensure these opportunities are fulfilled, some things in the industry need to change. To enable these changes, we are committed to providing opportunities to anyone...

接下来的文章都会实战复现一些关于路由器的 web /二进制漏洞，可能会写的比较细，希望能给大家带来启发。 若这里图片显示不出来可以试试挂个梯子 。 前言 本文在复现 DIR 805L 任意文件读取漏洞时，将会比较详细的分析一下用于 cgi 处理的 函数其中的一些功能。在逆向 二进制文件时，常常会遇到

Ramnit’s latest configuration targets Europe leading up to tax season, focusing on Italian banks and international online advertisers.

划水做了两个pwn和两个逆向...... 二进制题目备份 Re easyGO Go语言，输入有Please字样，ida搜索sequence of bytes搜please的hex值找到字符串变量，交叉引用查到主函数是sub_495150，IDA断点动态调试发现直接出现了flag...... bbvv

XSS实战: 跳转XSS 前言 跳转XSS实际上并不是一种新类型的攻击方式, 主要形成原因是 以前网站外部跳转时是直接接受参数然后跳转,导致了URL重

周所周知，我在扯淡。

”我还活着“系列

WEB 滴~ http://117.51.150.246/index.php?jpg=TmpZMlF6WXhOamN5UlRaQk56QTJOdz09 观察链接可发现jpg的值是文件名转hex再base64编码两次得到，由此得到任意文件读取漏洞 读取index.php http://117.51.1

More stories from CISOs who describe how they would “do it over” again in some of their early security program deployments.

Attackers are using IP addresses in the Netherlands, United States, and China to target systems in Europe over SIP, Microsoft SMB, and SSH.

CWPP产品市场的“前世今生”……

前言 挖src也将近两个月了,写篇博客总结一下. 首先挖洞成果 3中危 2低危, 收入~2k. 真实菜到扣脚,收入连泡面都吃不起.只挖了bilibili

RSAC2019已近余波消散，再回头看看会上的热点，并以此展开写创新，是个不错的选择。无论议题或大厂展台或初创博览，创新处处可见。如果参与者自己未曾留意或根本看不到，从而评论说缺乏创新，那未免大大委屈了此次业界盛会。

cheating 是 CTF 里的一道 PWN 题，主要攻击点就在于格式化字符串漏洞的利用。