Aggregator

亮点是对开源生态中从漏洞发现到下游软件漏洞修复整个生命周期中多个时间差测量。

上一篇推文我们主要学习了一些IDA使用小技巧，这次我们来学习IDA脚本编写。本文内容全部来自《IDAPython 初学者指南》，手动翻译成了ida7.5+python3。

这篇文章我们学习了反汇编导航中跳转的快捷键、栈帧、调用约定、局部变量的访问、怎样进入栈视图。还学习了反汇编的一些操作，大家可以自己总结成cheat sheet。接下来数据类型和数据结构部分，怎样建立和导入结构体，bindiff的使用。。。

Our longest-standing Developer Advocate, Mike Elissen, noticed an opportunity to make Akamai?s developer relations even stronger. He co-created Developer Champions, an advocacy program that helps Akamai employees better meet customer needs.

RTASS是一套针对红蓝双方对抗式网络实战攻防演练中：攻击方、防守方、业务方以及企业风险进行评分的框架。RTASS适用于网络红蓝对抗演练、网络实战攻防演习、红队评估、蓝军评估等通过模拟黑客APT手段对企业开展实网攻击的安全评估场景。

Tornado的现金池，以DAI池子为例，每个Coin为100DAI。 目前有三个Coin：C1, C2, C3。 C1,C2,C3 在池子里，即300DAI，另外还有2个nullifier在合约里存储。 nullifier是为了防止双花的数据结构，存储的是花出去的note对应的nullifier。 C1,C2,C3 被保存在一个Merkle树中，这些Coin对外是公开的。 H1, H2是哈希函数。 接下来是deposit过程，比如Alice转100DAI到Torn...

This guidance is aimed at service owners and security specialists involved in the provision of online services.

Akamai announced our intent to acquire Linode. The acquisition is intended to create the world?s most distributed compute platform. This new cloud to edge platform will make it easier for developers and businesses to build, run, and secure applications, especially given the complexities of Web3.

1&1 Versatel is a B2B provider for fibre gigabit connections and network-related services in Germany. The company is part of the United Internet AG and as such a sister company of 1&1 AG. 1&1 Versatel operates one of the biggest and most powerful fibre networks in Germany - providing its own network in more than 250 German cities and has implemented over 50,000 business customer solutions. We?re delighted that such an innovative company has chosen to partner with Akamai to increase the reach of its customer base to include smaller enterprises and to make its operations secure.

Akamai is compliant with applicable data privacy regulations in countries where we and our customers conduct business. This is a fundamental tenet of our company?s core values. After all, when you make life better for billions of people, billions of times a day, there?s an expectation that you will also protect their lives online. And that is exactly what we do.

Learn how the threat landscape evolved in 2021 so you can tune your defenses to suit.

Summary An advisory from IBM's X-Force Research has uncovered an exploit proof of concept (PoC) involving a vulnerability in several Cisco SSL VPN devices. Threat Type Vulnerability Overview According IBM's X-Force Research team, a critical vulnerability in Cisco RV340/RV345 series SSL VPN devices has led to the discovery of a PoC that has been released to the public. Should this vulnerability be exploited, a unauthenticated remote adversary obtaining privileged arbitrary code execution. On February 11, 20

Good practises for the management of public domain names owned by your organisation.

What if you could see how a real cyberattack might unfold in your network? Imagine the insights you would gain into your security posture if you could safely and easily simulate the behavior of malicious actors before they hit your defenses. That?s what the Infection Monkey does.

代码审计必备技能,github代码对比,写一笔: 搜索某开源组建漏洞,搜索出来某个版本rce: 通过消息得出:存在漏洞版本:1.10.10 ,修复漏洞版本1.10.11 去github寻找apache-airflow: 打开就是主分支: 切换到漏洞版本分支: 有两个办法: (1)https://gi

ssrf深入利用,打redis,不仅仅是打redis,还可以做很多事情,用redis抛砖引玉 打redis重要的两个协议: (1)gopher协议 (2)dict协议 用http(s)判断出网: 如果出网,直接gopher://vps:port/,nc监听即可 机器不出网如何判断支持gopher协议

个人学习笔记1: 主题:redis写文件: 大量知识参考:http://redisdoc.com/ 查看redis所有配置选项 config get * 127.0.0.1:6379> CONFIG GET * 1) "dbfilename" 2) "dump.rdb" 3) "requirepas

ascii jar构造之旅