Aggregator

本文是Fuzzing战争系列的第二篇，也是Fuzzing战争：从刀剑弓斧到星球大战的续篇

Technical report on best practice use of this fundamental data routing protocol.

取证小知识-99

和RcoIl一起写的小工具，可上传下载文件，xp_cmdshell和xp_cmdshell与sp_oacreate双回显和clr加载程序集执行相应操作。

JumpServer在上周被披露出一个远程命令执行漏洞，这个远程命令执行主要由一个log日志跨目录读取引发。

某次，对某客户的系统进行渗透测试，上头的命令是必须拿下网站系统管理员用户的权限，经过分析后发现该系统使用Spr …

继续阅读“对一个使用JWT验证的系统渗透纪实”

If you turned on a new game console and/or downloaded video games over the holidays, you certainly weren't alone. New data from Akamai shows that game-related traffic delivered across our network was more than double the Q4 average on December 25, and up nearly 50% on December 26. During the same period, traffic for all other industries combined was relatively even compared to the rest of the quarter.

While I've worked for Silicon Valley-based startups and even spent time in the travel tech industry, I'd sometimes feel I was just part of the system. Working each day to earn my keep, and with no bigger purpose than that.

让你不听话，蓝屏了吧？WIndows condrv.sys 组件存在一处逻辑漏洞，当本地用户向该组件传递特定的路径时会导致操作系统蓝屏，并拒绝服务。condrv.sys组件用于当开发者想要直接与...

年度奖励计划&新年三倍活动

This is the fourth in a multi-part series on cryptography and the Domain Name System (DNS). One of the “key” questions cryptographers have been asking for the past decade or more is what to do about the potential future development of a large-scale quantum computer. If theory holds, a quantum computer could break established public-key […]

The post Securing the DNS in a Post-Quantum World: New DNSSEC Algorithms on the Horizon appeared first on Verisign Blog.

Check out these features around segmentation and visibility that can help working with Guardicore Centra even simpler.

What if you had a single solution that was able to detect non-compliant and high-risk endpoints and servers, assess their level of exposure, and then immediately secure these servers and endpoints with laser-sharp segmentation policies?

短信平台一般是指用于企业内部统一提供短信服务的系统，一般包含发送短信、校验短信验证码等功能。虽然

Vulnerability Scanning solutions offer a cost-effective way to discover and manage common security issues.

chrome导致win10蓝屏？ chrome：不是我的锅！

一、 概述 1．CVE-2018-8120 是通过一个空指针解引用达到任意读写的漏洞。其实个人感觉单凭空指针

列出了四种方法来查找某个端口当前正在运行的服务

禅道自动化代码安全审计，任意文件下载漏洞与xcheck适配禅道框架思路。