Aggregator

Offensive BPF: Understanding and using bpf_probe_write_user

Embrace The Red
4 years 5 months ago

This post is part of a series about Offensive BPF to learn how BPFs use will impact offensive security, malware, and detection engineering.

Click the “ebpf” tag to see all relevant posts.

Building advanced BPF programs

So far in this Offensive BPF series the focus was on bpftrace to build and run BPF programs.

The next thing I wanted to investigate is what options are available to modify data structures during BPF execution. This is where I hit limitations with bpftrace.

Scoop the Windows 10 pool! 翻译 & 复现

天玄安全实验室
4 years 5 months ago
堆溢出是应用程序中相当常见的漏洞。利用这些漏洞通常需要对堆的底层管理机制非常了解。Windows10最近改变了内核中堆的管理方式，本文旨在介绍Windows NT内核堆管理机制的最新发展，同时介绍对内核池的新的利用技术

Scoop the Windows 10 pool! 翻译 & 复现

天玄安全实验室
4 years 5 months ago
堆溢出是应用程序中相当常见的漏洞。利用这些漏洞通常需要对堆的底层管理机制非常了解。Windows10最近改变了内核中堆的管理方式，本文旨在介绍Windows NT内核堆管理机制的最新发展，同时介绍对内核池的新的利用技术

Scoop the Windows 10 pool! 翻译 & 复现

天玄安全实验室
4 years 5 months ago
堆溢出是应用程序中相当常见的漏洞。利用这些漏洞通常需要对堆的底层管理机制非常了解。Windows10最近改变了内核中堆的管理方式，本文旨在介绍Windows NT内核堆管理机制的最新发展，同时介绍对内核池的新的利用技术

What Microsoft Bing’s IndexNow Means for CDN Users

The Akamai Blog
4 years 5 months ago
Microsoft Bing today announced the rollout of IndexNow, a new protocol designed in conjunction with Yandex that can allow “websites to easily notify search engines whenever their website content is created, updated, or deleted.” The goal is to reduce the amount of time it takes for search engines to discover and index website changes — a process often measured in days and even weeks — to mitigate traffic loss and the potential adverse effects on customers and even revenues.
Jon Alexander

Yar 源码阅读笔记：开篇

她和她的猫
4 years 5 months ago
Yar（yet another RPC framework,）是鸟哥在 2012 年开发的一个轻量级的并行 RPC 框架，支持多种编码方式（JSON、msgpack、PHP）及 HTTP、TCP 两种数据传输方式

Managed ad