Aggregator

漏洞复现|F5 BIG-IP TMUI（CVE-2020-5902）

小陈的Life
5 years 7 months ago
F5 BIG-IP 是美国 F5 公司的一款集成了网络流量管理、应用程序安全管理、负载均衡等功能的应用交付平台。近日，F5官方公布流量管理用户界面（TMUI）使用程序的特定页面中存在一处远程代码执行漏洞（CVE-2020-5902）

Cybersecurity Myths That Are Harming Your Business

F5 Labs
5 years 7 months ago
Cybersecurity experts are falling prey to seven myths in the effort to protect their business. Shape's Daniel Woods writes for Forbes, explaining where these myths have led us astray, and how to keep the useful bits while discarding the chaff.

Taking a Human Approach to a Global Crisis

The Akamai Blog
5 years 7 months ago
Since March, the COVID crisis has caused massive disruption to every area of life and work. It has tested us, as individuals and as a business. Akamai has taken a very human-centric approach during the pandemic. Our guiding principle has been to do what is right for the health and safety of employees, customers and partners. I feel proud of this, because when I think about what I'm grateful for, it really does come down to people. I'm grateful to be working for a company that is keeping people connected to the world through technology. I'm grateful to be among smart, immensely resilient colleagues. And I'm grateful to have friends and family who are sticking together. Ultimately, it's the humanity that matters.
Prasad Mandava

Blast from the past: Cross Site Scripting on the AWS Console

Embrace The Red
5 years 7 months ago
Amazon Bug Bounty!

Great news: Amazon is now offering bounties via a security vulnerabiltiy research program

Bad news: AWS is out of scope!

When I read this I remembered that a few years ago I found persistent Cross-Site-Scripting on the AWS Console.

This post is a write up on how I found the XSS back then, techniques I used and how they evolved over the years and Amazon’s response.

AWS Console and Cross Site Scripting

The story is that I had just created an AWS account and started using the service.

TCTF 2020 Web Writeup partial

xmsec(陌小生)
5 years 7 months ago
To begin with

今年 TCTF Web 题目比原来要多，但还是那么强（做不出来

easyphp

这道题被非预期了，正确解法也是在看到一叶飘零的

xmsec

Managed ad