Aggregator

Overview

On Oct 21, 2022, 360Netlab's honeypot system captured a suspicious ELF file ee07a74d12c0bb3594965b51d0e45b6f, which propagated via F5 vulnerability with zero VT detection, our system observces that it communicates with IP 45.9.150.144 using SSL with forged Kaspersky certificates, this caught our attention. After further lookup,

Read about how organizations need microsegmentation to identify and remediate ransomware attacks, and the ransomware questions they need to answer.

MSSQL结合RBCD提权 原理 这里使用中继的方式给他中继到ldap中去添加msDS-AllowedToActOnBehalfOfOtherIdentity属性。默认域控的ms-DS-MachineAccountQuota属性设置允许所有域用户向一个域添加10个计算机帐户，就是说只要有一个域凭据就

Andrew A explains what you must check before giving Managed Service Providers (MSPs) the keys to your kingdom.

1月7日 在ADconf分享了 攻防创新相关的议题

概述

2022年10月21日，360Netlab的蜜罐系统捕获了一个通过F5漏洞传播，VT 0检测的可疑ELF文件ee07a74d12c0bb3594965b51d0e45b6f，流量监控系统提示它和

inlinehook是修改内存中的机器码来实现hook的方式

lsnrctl启动实例startup报错 ORA-03113: end-of-file on communication channel $ su - oracle Step 1: You need to look at the alert log. It isn't in /var/log as

东软NetEye电力行业网络安全解决方案已服务全国31个省级行政区。保障全国超7亿人安全用电，护航电力系统安全稳定运行。

知道安全架构建设，那又该如何建设安全架构呢？

当前，围绕电信网络诈骗犯罪已经形成一个门类齐全、分工明确、协作紧密的生态产业链。几乎所有与之相关联的

There is a combination of lesser known tools and techniques to capture and later decrypt SSL/TLS network traffic on Windows. This technique is neat because it does not require the installation of additional driver/software when capturing the traffic. Technique, Tools and Steps It is quite straight forward and consists of: Setting the SSLKEYLOGFILE environment variable to capture TLS session keys on target host Use netsh trace start to capture traffic (no need to install additional driver/software!

Effectively managing bot traffic requires a combination of strong detection and response strategies. Here, we explore Akamai?s methods for implementing both.

Vidar 邀请大家一起过兔兔的奇妙新年 o((>ω< ))o！

请注意：RWCTF体验赛日期变更！！！

XBB如期而至，关于XBB的谣言也如期而至。

本文是笔者2022年对于网安行业的一些思考和总结，从云原生攻防到蓝军价值思考，从DevSecOps到BIS网络安全条目解读再到态势感知体系运作。

本文主要为clair，trivy与vesta对layer整合和整合后文件扫描分析