Aggregator

According to Verizon’s 2014 Data Breach Investigations Report, “Web applications remain the proverbial punching bag of the Internet.” Things haven’t improved much since then. What is it about web applications that makes them so...

From clothes to food – we practically buy everything on the internet these days. That includes ransomware as well. And...

The post New App Allows Cybercriminals to Create Customized Ransomware appeared first on McAfee Blog.

~\(≧▽≦)/~ 八哥你走开！

Cyber crooks use several common URL disguising techniques to trick users into thinking their sham sites are legitimate.

On August 17th, 2017, multiple Content Delivery Networks (CDNs) and content providers were subject to significant attacks from a botnet dubbed WireX. The botnet is named for an anagram for one of the delimiter strings in its command and control protocol. The WireX botnet comprises primarily Android devices running malicious applications and is designed to create DDoS traffic. The botnet is sometimes associated with ransom notes to targets.

一篇虎头蛇尾的番外

前两天刚解决了 WiFi 的网卡驱动问题，用了没多久又发现新问题了，真是应了那句话，生命在于折腾。 好吧，有了问题光抱怨是没用的，问题还是得解决。 第一步，执行命令

因为浏览器嫌你 “太快” 导致的漏抓，你能修复吗？

前言 在学习了一段时间 Larvel 后，写了个生成短网址小应用，把应用部署到服务器上的时候就出现了问题….. 以此文祭奠我失去的青春… 正文

将蜜罐技术应用到内网攻击感知中，一篇硕士论文的研究过程与demo实现，抛砖引玉。

How InfoSec leaders can build successful threat models by defining the threat landscape and its component resources, then asking simple, situational questions.

分享我在使用 python subprocess 进行扫描器开发过程中踩过的坑，以及应用在分布式扫描程序中的时候，可能存在的远程命令执行漏洞。

The Internet is full of information about your company that’s easily accessible to anyone and particularly useful to attackers.

Gray hats might have good intentions launching their “vigilante” botnets, but are they really helping us win the war against Death Star-sized thingbots?

Vulnerabilities are an emergent property of modern software’s complexity, requested features, and the way data inputs are handled.

目前我国无人机发展迅猛，虽然已经有不少机构针对无人机取证进行研究，但是至今为止，尚未有相关取证软件发布。

作为一个学习web安全的菜鸟，前段时间被人问到PHP反序列化相关的问题，以前的博客中是有这样一篇反序列化漏洞的利用文章的。但是好久过去了，好多的东西已经记得不是很清楚。所以这里尽可能写一篇详细点的文章来做一下记录。 我们来参考这里： 我们根据官方文档中的解释，一个一个来进行测试。 __constru

With “thingbots” now launching Death Star-sized DDoS attacks, hosting banking trojans, and causing physical destruction, all signs point to them becoming the attacker infrastructure of the future.