Aggregator

ICANN’s Accountability and Transparency – a Retrospective on the IANA Transition

Verisign Security Blog
2 years 7 months ago

As we passed five years since the Internet Assigned Numbers Authority transition took place, my co-authors and I paused to look back on this pivotal moment; to take stock of what we’ve learned and to re-examine some of the key events leading up to the transition and how careful planning ensured a successful transfer of […]

The post ICANN’s Accountability and Transparency – a Retrospective on the IANA Transition appeared first on Verisign Blog.

Keith Drazek

转载：零信任安全产品的变与不变

白日放歌须纵9
2 years 7 months ago
抓住零信任的金线，是理解和落地零信任的第一步，本文作者基于多年甲方实践，带着对零信任深刻的理解和认知，深入洞悉身份和权限对于零信任的灵魂所在，预祝创业成功，为市场和客户带来更好的零信任产品。

转载：零信任安全产品的变与不变

白日放歌须纵9
2 years 7 months ago
抓住零信任的金线，是理解和落地零信任的第一步，本文作者基于多年甲方实践，带着对零信任深刻的理解和认知，深入洞悉身份和权限对于零信任的灵魂所在，预祝创业成功，为市场和客户带来更好的零信任产品。

转载：零信任安全产品的变与不变

白日放歌须纵9
2 years 7 months ago
抓住零信任的金线，是理解和落地零信任的第一步，本文作者基于多年甲方实践，带着对零信任深刻的理解和认知，深入洞悉身份和权限对于零信任的灵魂所在，预祝创业成功，为市场和客户带来更好的零信任产品。

gospray - Simple LDAP bind-based password spray tool

Embrace The Red
2 years 7 months ago
On a network and need credentials? Try password spraying the domain controller directly. A few years ago, I wrote this password spray tool called gospray that was used succesfully in a couple of engagements since. It does an LDAP bind directly against the domain controller to validate credentials. This doesn’t require an SMB server (or other servers) as target. So, it’s pretty quiet and number of concurrent Go routines is configurable.

Commons BeanUtils反序列化

M1kael‘s Blog
2 years 7 months ago
前言前面在cc2和cc4中我们使用了PriorityQueue类，这个类在cb链中也得到了利用，所以我们来学习一下cb链Apache Commons BeanutilsBeanUtils主要提供...
M1kael

针对U盘文件的盗与防攻略

VLabTeam
2 years 7 months ago
近年来，使用U盘作为介质完成的网络攻击屡见不鲜。本文介绍分析一种在不获取主机控制权限条件下对U盘文件进行读取的方法。

针对U盘文件的盗与防攻略

VLabTeam
2 years 7 months ago
近年来，使用U盘作为介质完成的网络攻击屡见不鲜。本文介绍分析一种在不获取主机控制权限条件下对U盘文件进行读取的方法。

Managed ad