Aggregator
.NET内网实战：通过 TrustedInstaller 实现父进程欺骗技术
9 months 3 weeks ago
.NET 实战对抗，内网渗透中红队通过 Windows 钩子记录用户键盘指令
9 months 3 weeks ago
天融信发布2024年报，业绩扭亏为盈；“白宫平面图”等因操作不当被共享给超11200人 | 牛览
9 months 3 weeks ago
新闻速览 •67款移动应用违规收集使用个人信息被通报，快自查卸载 •“白宫平面图”等因操作不当被共享给超112 […]
aqniu
WinDiff: allows browsing and comparing symbol and type information of Microsoft Windows binaries
9 months 3 weeks ago
WinDiff WinDiff is an open-source web-based tool that allows browsing and comparing symbol and type information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to...
The post WinDiff: allows browsing and comparing symbol and type information of Microsoft Windows binaries appeared first on Penetration Testing Tools.
ddos
深度研究 | 智能化安全运营建设的常见挑战与应对建议
9 months 3 weeks ago
本文内容摘自为安全牛最新发布的《智能化安全运营中心应用指南（2025年）》研究报告 目前各组织正积极升级SOC […]
aqniu
[local] tar-fs 3.0.0 - Arbitrary File Write/Overwrite
9 months 3 weeks ago
tar-fs 3.0.0 - Arbitrary File Write/Overwrite
[remote] OpenSSH server (sshd) 9.8p1 - Race Condition
9 months 3 weeks ago
OpenSSH server (sshd) 9.8p1 - Race Condition
[local] Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
9 months 3 weeks ago
Microsoft Windows 11 23h2 - CLFS.sys Elevation of Privilege
[remote] WonderCMS 3.4.2 - Remote Code Execution (RCE)
9 months 3 weeks ago
WonderCMS 3.4.2 - Remote Code Execution (RCE)
[remote] code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
9 months 3 weeks ago
code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)
[remote] Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
9 months 3 weeks ago
Firefox ESR 115.11 - PDF.js Arbitrary JavaScript execution
[webapps] WordPress Core 6.2 - Directory Traversal
9 months 3 weeks ago
WordPress Core 6.2 - Directory Traversal
[local] Microsoft Windows 11 - Kernel Privilege Escalation
9 months 3 weeks ago
Microsoft Windows 11 - Kernel Privilege Escalation
Windows内存泄漏追踪战：一线工程师现网故障排查实录
9 months 3 weeks ago
一次真实的现网主机操作系统内存泄漏问题的定位分析过程。
Cross Site Scripting ( XSS ) Vulnerability Payload List
9 months 3 weeks ago
Cross Site Scripting ( XSS ) Vulnerability Payload List
Dark Web Informer - Cyber Threat Intelligence
UCSC CTF 2025高校网络安全联合选拔赛 writeup
9 months 3 weeks ago
UCSC CTF 2025高校网络安全联合选拔赛 writeup
9 months 3 weeks ago
UCSC CTF 2025高校网络安全联合选拔赛 writeup
9 months 3 weeks ago
金融专网安全双维防御：蜜罐溯源技术与敏感信息合规传输策略解析。｜总第285周
9 months 3 weeks ago
本期周报简介：1、在金融专网安全防护中，如何通过技术手段与合规策略解决以下核心问题？
2、在安全运营中，如何通过技术与管理手段解决以下痛点，提升效率并降低长期成本？