Aggregator

去年猫猫托梦的两颗土豆。

前面我们提到了网络赌球的大动脉——非法四方支付平台，今天我们来看看跨境网络赌博的全貌，每个环节都很“刑”。

MS-RPC is a widely used protocol, but not much security research is done on it. In this blog, see an overview of MS-RPC and their security mechanisms.

全文142页，2022的文字输出到此为止，初学内网才疏学浅，错漏颇多，恳请大佬指正修改，拜谢拜谢，阿里嘎多~

迎新年，庆元旦｜LYSRC双倍奖励活动即日开启

自Window10 1803/Server2016及以上打了微软的补丁后，基于OXID 反射NTLM提权已经失效，代表作如JuicyPotato、SweetPotato，本文将从COM开发与调用开始，寻找替代OXID 反射NTLM提权的方法

Microsegmentation can stop a ransomware attack from moving laterally across your organization and prevent malicious behavior.

概述

近期，我们的BotMon系统连续捕获到一个由Go编写的DDoS类型的僵尸网络家族，它用于DDoS攻击，使用了包括SSH/Telnet弱口

As 2022 draws to a close, the Threat Research Team at McAfee Labs takes a look forward—offering their predictions for...

The post McAfee 2023 Threat Predictions: Evolution and Exploitation appeared first on McAfee Blog.

Elevate players? gaming experiences with Akamai EdgeWorkers and Macrometa Stream Workers.

东软NetEye互联互通技术框架, 在一套平台与架构中能实现集成所有的安全能力，以在分散的IT世界中实现安全、集中的安全监控和操作，用于提升一致的整体安全态势能力，从而提高了安全保护、检测和响应的有效性和效率。

ChatGPT，或许是一个新的里程碑

F5 Labs and experts across F5 share their experience from the past twelve months to predict what might be the biggest causes for concern in 2023.

Understanding which cloud platforms are the best fit for which workloads can maximize your return on investment and your customers? output.

CIS是互联网安全中心的缩写，该组织从安全领域专家的视角，针对企业网络不同层面的安全问题，提出了相应的安全保护措施和操作规范，供不同规模的企业参考实施。

After reading this post about ChatGPT imitating Linux, I wanted it to be a database server. Let’s try it out! Imagine you are a Microsoft SQL Server. I type commands, and you reply with the result, and no other information or descriptions. Just the result. Start with exec xp_cmdshell ‘whoami’; Wow, this looks like a promising start. And, it “thinks” that it is running as LOCAL SYSTEM - quite funny actually.

分析 反序列化时会自动调用与GetObjectData函数同样参数的构造函数。所以会走到这里。 TextFormattingRunProperties实现ISerializable接口，在其序列化的构造函数中，进行this.GetObjectFromSerializationInfo("Foregr

最近挖了一些漏洞，还挺有意思的。这边分享两个需要细节一点才能挖到的sql注入，希望给大家带来一些漏洞挖掘思路。 黑盒是很有意思的，有趣的。 1.搜索功能的隐藏sql注入，post data数据内容如下: {"product":"","offer":"DIV","variant":"*","searc

Elkeid 社区版 v1.9.1 发布