Aggregator

本文转载自“中国网安”微信公众号中国网安发声POC安全大会 分享安全“奥密”获得广泛关注 近日，国际安全大

F5 threat intelligence reports attackers are still doing DNS water torture DDoS, DNS reflection DDoS, expired domain takeover, and using DNS requests for covert channels.

从11月12号开始，我在twitter上公布了一个新的Linux僵尸网络家族后台，我那时也没意识到这是Sat

BUGKU 逆向(reverse) writeup 前言：在bugku上把能写的逆向都写了，由于大佬们的writeup太深奥或者说太简洁了让我(小白)看得云里雾里。所以我写了这个详细点的writeup（理解错的地方望指出），尽量让大家都看得懂。最近比较忙先写到了这里，未完待续 入门逆向 下载后ida

-_-

F5 Labs' Ray Pompon writes for Help Net Security, demonstrating how even with accepted risks you can still make things worse - or better - for yourself.

We continuously find that the most basic attack methods that worked ten years ago still work and will probably continue to be effective in the future.

这是一个XorDDoS僵尸网络变种的C2后台，专注于SSH暴力破解，C2后台界面还挺漂亮的，就是有漏洞。--

向着太阳奔跑吧~得儿驾！

Rumi said, "Clean out your ears, don't listen for what you already know." And that's exactly what leaders at Akamai India did during the pilot event of Flip, a reverse mentoring event, held earlier this month. High potential women from...

Application programming interfaces (APIs) are a growing attack surface, offering predators unprecedented access to large data stores. As serverless, mobile, and online platforms grow, API attacks will surely rise.

1.关于使用frida遇到的一些问题 （1）如果出现以下错误： 可以通过以下方式关闭SELinux，在adb shell中执行： （2）如果出现“frida.ServerNotRunningError: unable to connect to remote frida-server”的错误，试试端

本篇概述了笔者在设计NDR/NTA产品过程中参考的国外领先产品界面，讲讲如何在满足行业共识基本要求的同时，体现自身技术优势以突出亮点。笔者也希望借此一文分享心得，有助于业内厂商全面提升网络流量安全分析产品的水平。

F5 Labs' Preston Hogue writes for SecurityWeek, looking at how digital transformation has changed even how we confirm a Supreme Court Justice.

挺多不错的东西，点点散散记到笔记就不知道跑哪去了。 代码审计 1、全面总结 http://find sec bugs.github.io/bugs.htm 2、python安全 https://github.com/bit4woo/python_sec 内网渗透 1、内网渗透攻防总结 https:/