Aggregator

新鲜出炉，敬请期待！

阿里云安全团队向Oracle官方报告了MySQL JDBC XXE漏洞

使用文件 Hash 值作为 NPM 包版本号，无需维护每个文件的版本状态

Creating an encrypted HTTPS website depends on a lot more than simply throwing a digital certificate at it and hoping for the best. In fact, Transport Layer Security (TLS) and HTTPS misconfigurations are now so commonplace that in the 2021 OWASP Top 10, Cryptographic Failures now comes in second place....

前置要求

1. 已获得域管理权限
2. 有一台域下的计算机SYSTEM权限

相较于其他维

This post is part of a series about Offensive BPF to learn how BPFs use will impact offensive security, malware, and detection engineering. Click the “ebpf” tag to see all relevant posts. Building advanced BPF programs So far in this Offensive BPF series the focus was on bpftrace to build and run BPF programs. The next thing I wanted to investigate is what options are available to modify data structures during BPF execution.

这是Facebook创立以来最严重的一次网络访问事故，在这起故障中，我们又看到了BGP的身影

文章开始前，说点题外话，接上次转发的文章（端内钓鱼，反制蚁剑）后台反馈下来的消息看，大家普遍都没整明白这波是什么操作

Last year, Akamai released research on obfuscation techniques being used by cybercriminals to create malicious JavaScript. The code is unreadable, un-debuggable, and as a result, much more challenging to analyze and detect.

We caught up with George Brown, founder of PORGiESOFT, about his first few weeks in NCSC For Startups...

《Go语言设计与实现》纸质书预计11月下旬出版，征集 5 条读者评论作为推荐语！

堆溢出是应用程序中相当常见的漏洞。利用这些漏洞通常需要对堆的底层管理机制非常了解。Windows10最近改变了内核中堆的管理方式，本文旨在介绍Windows NT内核堆管理机制的最新发展，同时介绍对内核池的新的利用技术

Microsoft Bing today announced the rollout of IndexNow, a new protocol designed in conjunction with Yandex that can allow ?websites to easily notify search engines whenever their website content is created, updated, or deleted.? The goal is to reduce the amount of time it takes for search engines to discover and index website changes ? a process often measured in days and even weeks ? to mitigate traffic loss and the potential adverse effects on customers and even revenues.

0x01 简介

SSRF(Server-side request forgery，服务端跨站请求伪造)是一种

前言 本文是 Yar 源码系列的第一篇文章，主要介绍 Yar 以及服务端、客户端的基本使用，详细的源码分析会放在后续的文章中。 为什么要研究 Yar？ 我从 8 月初开始阅读 《P

实际工作中的一些思考，欢迎交流

我爱这精彩的世界 交织着太多的悲喜 我爱这精彩的电影 如梦幻如空花 我那总沉默的朋友 你让我感觉到力量 曾在我心中的伤痛 如过眼的云烟

术语WordPressWordPress是一个以PHP和MySQL为平台的自由开源的博客软件和内容管理系统。WordPress具有插件架构和模板系统。截至2018年4月，排名前1000万的网站中...

术语WordPressWordPress是一个以PHP和MySQL为平台的自由开源的博客软件和内容管理系统。WordPress具有插件架构和模板系统。截至2018年4月，排名前1000万的网站中...

根据安全团队定制化协同管理项目安全，可快速查找历史漏洞，快速预览漏洞分布图，项目域名自动归类，批量导出报告，脱离编写报告苦恼。