Aggregator

While containers offer speed and flexibility that have not been possible before in the data center, they are also exposed to security threats such as ransomware, cryptomining, and botnets.

Learn about the widely used Java-based logging library Log4j and how its vulnerability and other capabilities presented a major opportunity to attackers.

Explore some of the Akamai Abuse and Fraud Prevention team?s predictions for the future of abuse and fraud protection in 2022 and beyond.

前言 今天这篇文章，主要介绍 Yar 客户端是如何实现远程调用的，进一步了解各个模块在远程调用的过程中都做了些什么。 客户端介绍 Yar 客户端的远程调用分为同步调用和并

0x00 引言这些年看到几个很有灵性的年轻人从一个啥也不懂的脚本小子一年时间就成长为业内漏洞挖掘机，一路交流

A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect.

0x00 引言这些年看到几个很有灵性的年轻人从一个啥也不懂的脚本小子一年时间就成长为业内漏洞挖掘机，一路交流

聊聊蚁剑新类型ASPXCsharp与ASP.NET下的内存马

聊聊蚁剑新类型ASPXCsharp与ASP.NET下的内存马

前言 在前面几篇文章中，更多的是在研究 Yar 传输的内容，比如协议的格式是什么样的、如何对数据进行编码等等。 今天这篇文章，主要介绍 Yar 编码模块的结构体定义，以及

Summary IBM X-Force Incident Command is following a recent disclosure regarding a vulnerability in the in the Log4j Java library. A report by LunaSec details the vulnerability as well as mitigation strategies for the vulnerability. Threat Type Vulnerability Overview ***UPDATE #9, January 5, 2021*** One of the largest cryptocurrency platforms in Vietnam (ONUS) has been hacked using the Log4Shell vulnerability. The payment software used by ONUS, Cyclos was compromised and escalated due to misconfigurations an

🔐 uid=0(root) gid=0(root) groups=0(root)

应厂商需求加🔐，待合适时间重新开放，请勿二次外泄

应厂商需求加🔐，待合适时间重新开放，请勿二次外泄

🔐 内部分享

本文章仅做技术学习交流，请支持、使用正版软件

定义起点、关键路径、终点和时间轴四个维度，排列组合搜寻好的工作想法。