Aggregator

看着曾经的战友女神、灰王都开了公众号写的不亦乐乎，我也产生了写一点文字的念想。公众号倒是悄悄开了，但是囿于自己水平有限，一直没有发内容。元旦假期自己一个人听着《平凡之路》飙在高速公路的时候，突然觉得有些经历和感受，可以在写一写。

By the numbers, Akamai's scale, reach and ability to help brands connect users to immersive and immediate online experiences while protecting their businesses from threats, is quite impressive. While I'm proud that Akamai connects with billions of devices daily and...

Honeypots are a popular way to protect data centers and learn about attackers. Learn the difference between high and low interaction honeypot security.

Regardless of the type of phish, you'll still need multiple layers of defence to protect your organisation.

背景 在复现vulhub上的漏洞ActiveMQ Deserialization Vulnerability (CVE 2015 5254)时，发现官方文档给出反弹shell的payload 其他部分倒是没什么说的，只是对其中的形如{command,parameter}的方式执行命令不是很理解，遂查

(0) 前言Burpsuite的Intruder功能可以对目标进行多线程爆破，比如账号密码爆破，验证码爆破等

F5 Labs' David Warburton writes for Venafi, explaining one of the key strategies for improving the use of OCSP for certificate revocation.

约瑟夫环又称为约瑟夫问题、丢手绢问题；一群人围在一起坐成环状，从某个编号开始报数，数到某个数的时候，此人出列，下一个人重新报数，一直循环，直到所有人

看完三篇文章应该就懂了csp是干嘛的。 https://www.cnblogs.com/Wayou/p/intro_to_content_security_policy.html https://www.w3.org/TR/CSP3/ http://drops.xmd5.com/static/dro

We surveyed infosec professionals from organizations with at least 5,000 employees to investigate the qualitative differences in running a security program at scale. We also distill 5 principles you can use to have a better chance at success.

笔者就今年的十大科技趋势做一次通俗易懂的解读方便大家理解。每个部分都包含具体的落地案例，会让你觉得这些科技就在身边。

F5 Labs' David Warburton writes for Venafi, discussing the different methods for checking a certificate's status, and their relative benefits.

看bolt，破thunder

看bolt，破thunder

看bolt，破thunder

看bolt，破thunder

看bolt，破thunder