Aggregator

堆溢出是应用程序中相当常见的漏洞。利用这些漏洞通常需要对堆的底层管理机制非常了解。Windows10最近改变了内核中堆的管理方式，本文旨在介绍Windows NT内核堆管理机制的最新发展，同时介绍对内核池的新的利用技术

Microsoft Bing today announced the rollout of IndexNow, a new protocol designed in conjunction with Yandex that can allow ?websites to easily notify search engines whenever their website content is created, updated, or deleted.? The goal is to reduce the amount of time it takes for search engines to discover and index website changes ? a process often measured in days and even weeks ? to mitigate traffic loss and the potential adverse effects on customers and even revenues.

0x01 简介

SSRF(Server-side request forgery，服务端跨站请求伪造)是一种

前言 本文是 Yar 源码系列的第一篇文章，主要介绍 Yar 以及服务端、客户端的基本使用，详细的源码分析会放在后续的文章中。 为什么要研究 Yar？ 我从 8 月初开始阅读 《P

实际工作中的一些思考，欢迎交流

我爱这精彩的世界 交织着太多的悲喜 我爱这精彩的电影 如梦幻如空花 我那总沉默的朋友 你让我感觉到力量 曾在我心中的伤痛 如过眼的云烟

术语WordPressWordPress是一个以PHP和MySQL为平台的自由开源的博客软件和内容管理系统。WordPress具有插件架构和模板系统。截至2018年4月，排名前1000万的网站中...

术语WordPressWordPress是一个以PHP和MySQL为平台的自由开源的博客软件和内容管理系统。WordPress具有插件架构和模板系统。截至2018年4月，排名前1000万的网站中...

根据安全团队定制化协同管理项目安全，可快速查找历史漏洞，快速预览漏洞分布图，项目域名自动归类，批量导出报告，脱离编写报告苦恼。

CobaltStrike是一款渗透测试神器，支持http/https、tcp、smb等多种通信方式。

在hvv防守方、应急响应等场景中，都有检测CobaltStrike的需求。

Akamai mPulse is a real user monitoring solution, providing detailed information about the user experiences delivered by your web applications. mPulse can be configured within your Akamai property to automatically start collecting data from your customer visits. This initial setup will gather the data required to use advanced features in Adaptive Acceleration such as Script Manager, Automatic Server Push, and Automatic Preconnect.

本文介绍beyondProd的实现架构、关键技术。

推荐阅读这篇文章。有攻有防，砥砺前行。推荐语只能 120 字，我把其它的想法和解决方案附在文末。

JumpServer 是全球首款开源的堡垒机

渗透过程中在有数据库权限的情况下如何解密?

通过对源代码的阅读，记录如下

This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware, and detection engineering. Click the “ebpf” tag to see all relevant posts. One of the issues I ran into when trying out sslsniff-bpfcc was that it did not work with Firefox or Chrome traffic. This post is about me learning how to hook user space APIs with bpftrace using uprobes.

PHP全局变量传参

大家都知道PHP的全局变量有：$GET

要加油学习，不然太菜连挖洞的基础都没有——松鼠A

个人解读《2021年网络安全产业分析报告》

Breaking news: we just completed an 850-user pilot with Akamai MFA. In this blog, the first in a series, I?ll explain why we switched to Akamai MFA, how we ran our pilot, and employee feedback so far. Check back for my next blog, when we?re midway through our global deployment. A burglar checks for open windows. Neglecting to lock just one is like leaving the door wide open. In the same way, cyber attackers look for the easiest user accounts to take over ? whether that?s network access credentials, email, on-premise applications, or cloud/SaaS applications. If they?re lucky, they can also use the stolen credentials to breach other systems, an action known as lateral movement.

使用函数的风格调用 JS 方法。如何做到简单且无副作用。