Aggregator

职场春秋：未到中年别平庸

掮客酒馆
6 years 7 months ago
我始终相信一条路并不会因为它路边长满荆棘而丧失其美丽，旅行者会照旧前进，而那些讨厌的荆棘也终会留在某个时间点枯死。

职场春秋：未到中年别平庸

掮客酒馆
6 years 7 months ago
我始终相信一条路并不会因为它路边长满荆棘而丧失其美丽，旅行者会照旧前进，而那些讨厌的荆棘也终会留在某个时间点枯死。

职场春秋：未到中年别平庸

掮客酒馆
6 years 7 months ago
我始终相信一条路并不会因为它路边长满荆棘而丧失其美丽，旅行者会照旧前进，而那些讨厌的荆棘也终会留在某个时间点枯死。

Google Leaks Your Alternate Email Addresses to Unauthenticated Users

Embrace The Red
6 years 7 months ago

The Google Login Flow leaks additional email account information to unauthenticated users. I discovered this in the Google Account Login flow while building KoiPhish.

Responsible Disclosure

I reported this issue to Google and they looked into it and after a about 5 weeks of back and forth they decided that this is not an issue worth fixing. After asking if I can post about it publicly I got Google’s okay.

Identifying Vulnerabilities in Phishing Kits

The Akamai Blog
6 years 7 months ago
While recently examining hundreds of phishing kits for ongoing research, Akamai discovered something interesting - several of the kits included basic vulnerabilities due to flimsy construction or reliance on outdated open source code. Considering the impact phishing kits have on...
Larry Cashdollar

从外网到内网的渗透姿势分享 - H4lo

H4lo
6 years 7 months ago
现在这段时间是全员 hw 时期，刚好前几天也有幸参与了某个地方的 hw 行动，作为攻击方，这里就简单总结一下最近挖洞的思路吧。因为可能怕涉及到敏感的东西，这里就有的地方不会细说了。 因为本人比较菜，所以只能做一点比较基础的总结，大佬们请忽略吧... 渗透的大体过程 整个渗透测试的流程就是通过信息收，
H4lo

Managed ad