Aggregator
Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in March 2019
6 years 9 months ago
In March, threat actors focused on targeting vulnerabilities released in the last few months. WordPress Easy SMTP Plugin Authentication Bypass vulnerability attacks had the most impact during that time frame.
Vulnerabilities, Exploits, and Malware Driving Attack Campaigns in March 2019
6 years 9 months ago
In March, threat actors focused on targeting vulnerabilities released in the last few months. WordPress Easy SMTP Plugin Authentication Bypass vulnerability attacks had the most impact during that time frame.
修复 ESXi 安装 No Network Adapter 错误
6 years 9 months ago
如果在安装 ESXi 的时候提示找不到网卡,这篇笔记可能会有帮助。
在 Linux 上安装 AnyConnect
6 years 9 months ago
在 Linux 上安装 AnyConnect 比想象中的还要复杂很多。
西湖论剑2019部分writeup - Vicen
6 years 9 months ago
做了一天水了几道题发现自己比较菜,mfc最后也没怼出来,被自己菜哭 easycpp c++的stl算法,先读入一个数组,再产生一个斐波拉契数列数组 main::{lambda(int)#1}::operator() 是相加函数 使用transform调用lambda(int)#1让数组从第二位到最后
Vicen
April 2019 Security Update Release
6 years 9 months ago
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.
Tags Security Advisory Security Update Update Tuesday
April 2019 Security Update Release
6 years 9 months ago
Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates.
More information about this month’s security updates can be found on the Security Update Guide.
Tags Security Advisory Security Update Update Tuesday
190409 逆向-RCTF2015(FlagSystem)
6 years 9 months ago
想起来前段时间搞了JEB3的泄露版,找了个安卓题来试试手
结果发现这题目也挺有意思的23333
提供的题目文件是一个二进制,十六进制查看器发现头部标着ANDROID BACKUP,显然就是个应用的备份文件了
查了一下可以通过abe.jar来解包,试了一下发现解出来的文件是乱码,毫无标志
于是找了一下文件解析,发现第三行为压缩标志位,源文件为0表示未压缩,于是将它改成1,再次解包,得到两个应用
看...
whklhhhh
Application Protection Report 2019, Episode 2: 2018 Breach Trends
6 years 9 months ago
Analysis of public breach reports showed a relationship between business models and breach vectors, with injection and phishing the leading causes.
Application Protection Report 2019, Episode 2: 2018 Breach Trends
6 years 9 months ago
Analysis of public breach reports showed a relationship between business models and breach vectors, with injection and phishing the leading causes.
The Leaders of the Future: Tech for Growing Minds
6 years 9 months ago
Jobs in the STEM and Tech fields are growing at "three times the pace of non-STEM jobs." The rise of technological advances means the tech industry is not slowing down anytime soon. In the next decade, there will be 1...
Akamai
Trojan 在 Debian 上的基础安装与配置
6 years 9 months ago
此篇教程将会介绍如何在 Debian 环境下进行基础 Trojan 安装与配置。
190407 逆向-西湖论剑杯
6 years 9 months ago
Re1-easyCpp
IDA打开发现一大堆模板很丑,但仔细看一下其实只有一堆变量来回操作而已
基本上就是各种STL和vector的用法,算法名都保留下来了所以难度下降很多
基本流程是接收输入、生成斐波那契数列的十六项
然后对输入依次使用transform和accumulate算法
分别是遍历vector中的一元运算和二元运算
运算都是自定义的方法,双击算法进去可以看到lambda函数
tra...
whklhhhh
AWS安全笔记|扯淡与权限
6 years 9 months ago
众所周知,我在扯淡。
AWS安全笔记|扯淡与权限
6 years 9 months ago
众所周知,我在扯淡。
物联网开发之 socket 通信点亮第一个 led 灯 - H4lo
6 years 9 months ago
工具 硬件:ESP8266 开发板、杜邦线、USB 数据线、LED 灯 软件:ESPlorer、socketools、flashtool 前提准备 NodeMcu 的介绍:https://baike.baidu.com/item/NodeMCU/17106281?fr=aladdin 去 NodeM
H4lo
Improving the cyber security resilience of New Zealand businesses
6 years 9 months ago
干掉 PHP 不死马
6 years 9 months ago
在 AWD 模式下经常碰到不死马, 不干掉的话就会一直被偷 flag, 很难受. 所以研究一下怎么干掉.
190404 逆向-利用溢出修改TLS的re题
6 years 9 months ago
偶然在52上看到 这个帖子
顺手打开看了一下
主函数这里有个错误指令,附近没有跳转所以大概不是花
往上翻一下
标准的try语句,新增了一个异常处理结构
可以看到handler指向了401269+1的地方,而401269正好就是错误指令地址
也就是说相当于一个花了
修正一下变成这个样子
直接输出RROR!然后退出
就全完了233
注意到输入的buff在data段,以及scanf是%s来的,所...
whklhhhh