Aggregator

January threat actor activity focused heavily on exploiting a ThinkPHP remote code execution vulnerability and infecting vulnerable Oracle WebLogic systems with a Mirai variant.

TTPs & IOCs & 痛苦金字塔

Viola后花园

5 years 8 months ago

之前介绍了 Richard Bejtlich 和 Robert M. Lee 就 hunting 术语定义进行的博客辩论。这次讨论还衍生出关于 TTPs 和 IOCs 的问题。今天的分享将围绕这个话题。

Padding Oracle + CBC 字节翻转学习

rmb122's notebook

5 years 8 months ago

之前一直就很想了解的技术, 这次同样是在 hgame 上碰到, 刚好从师傅那里学习一下, 更详细的可以去看 wiki.

简单来讲就是通过服务器对 Padding 正确和错误返回的不同状态, 来猜解所谓的中间值, 从而达成解密数据, 伪造数据.

DNS Rebind 在 SSRF 中的作用

rmb122's notebook

5 years 8 months ago

这几天沉迷 hgame, 题目质量还是不错的, 其中有一题用到了 DNS rebind, 这里重新记一下笔记. 因为我估计也没多少人看我博客 233, 就直接写了, 不等比赛结束了.

NCSC advice for Dixons Carphone plc customers

NCSC Feed

5 years 8 months ago

Advice for Dixons Carphone customers following its data breach.

安卓APP测试之双向证书认证

浮萍

5 years 8 months ago

0x01 前言

在《安卓APP测试之HOOK大法-Frida篇》文章中有一个双向证书认证没详细说明，经过孔已己的提示，现在补充一下。

浮萍

Opening statement to the Intelligence and Security Committee 20 February 2019

Government Communications Security Bureau

5 years 8 months ago

Speaking Notes for the Opening Statement to the Intelligence & Security Committee by Andrew Hampton, Director-General, Government Communications Security Bureau.

MWC 2019: The Key to Establishing Digital Trust with Intelligent Connectivity

Security News, Insights and Analysis | McAfee

5 years 8 months ago

These days, it’s rare to walk into a home that doesn’t have a smart device in use. From voice assistants,...

The post MWC 2019: The Key to Establishing Digital Trust with Intelligent Connectivity appeared first on McAfee Blog.

McAfee

Are security questions leaving a gap in your security?

NCSC Feed

5 years 8 months ago

Even the best authentication can't help you if there is an easy way to bypass it.

Aggregator

Managed ad