Aggregator

0x00 引言这些年看到几个很有灵性的年轻人从一个啥也不懂的脚本小子一年时间就成长为业内漏洞挖掘机，一路交流

聊聊蚁剑新类型ASPXCsharp与ASP.NET下的内存马

前言 在前面几篇文章中，更多的是在研究 Yar 传输的内容，比如协议的格式是什么样的、如何对数据进行编码等等。 今天这篇文章，主要介绍 Yar 编码模块的结构体定义，以及

Summary IBM X-Force Incident Command is following a recent disclosure regarding a vulnerability in the in the Log4j Java library. A report by LunaSec details the vulnerability as well as mitigation strategies for the vulnerability. Threat Type Vulnerability Overview ***UPDATE #9, January 5, 2021*** One of the largest cryptocurrency platforms in Vietnam (ONUS) has been hacked using the Log4Shell vulnerability. The payment software used by ONUS, Cyclos was compromised and escalated due to misconfigurations an

Video game downloads and console updates helped game industry traffic peak at 125% above average on Christmas day according to Akamai, which supports more than 225 game publishers globally.

定义起点、关键路径、终点和时间轴四个维度，排列组合搜寻好的工作想法。

The last weeks of 2021 got quite interesting for security professionals and software engineers. Apache’s log4j library and its now prominent Java Naming and Directory Interface support, which enables easy remote code execution, made the news across the industry. What makes Log4Shell scary is the widespread adoption of the Log4j library amongst Java applications, and the ease of remote exploitation. A dangerous combination. Patches got released, bypasses were discovered more patches were released and so forth.

2022.01.03 新年好啊

In preparation for an upcoming FOR500 class I thought I would test out one of the recent additions to the class. This post by my colleague Zach shows that Win10 1903 and later has a registry key that will store the full path of any executable that utilises the computers camera or microphone. Zach shows […]

2022新年快乐！来看了看GZTime的元旦解谜，随便写了写题解啦。

承影安全团队恭祝各位朋友们新年快乐！Happy New Year!

对2021年的安全架构、安全攻防、安全技术总结和对2022年安全的展望。

话语体系是思想理论体系和知识体系的外在表达，它不像权力或者口径可以通过仪式化的方式获取，只能通过长期运营建立。

又是一年南邮校赛NCTF，今年的题目太难了啊，做不来做不来，本来还想恰烂钱的，最后摆烂了。

我的年度总结

2021 我做了什么？这一年我在博客发表了14 篇技术文章这一年我的《Java 代码审计（入门篇）》出版了，并且我为这本书录制了17 节课时的讲解视频这一年我拿到了腾讯和蚂蚁的实习 offer，...

该文被密码保护。