Aggregator

1.命令替换 实现方法 替换系统中常见的进程查看工具（比如ps、top、lsof）的二进制程序 对抗方法 使用stat命令查看文件状态并且使用md5sum命令查看文件hash，从干净的系统上拷贝这些工具的备份至当前系统，对比hash是否一致，不一致，则说明被替换了。 注：需要在bin目录下执行。 2

2021年2月23日，VMware发布了一份公告（VMSA-2021-0002），公布了影响VMware ESXi、VMware vCenterServer和VMware Cloud Foundation的三个威胁

2021年2月23日，VMware发布了一份公告（VMSA-2021-0002），公布了影响VMware ESXi、VMware vCenterServer和VMware Cloud Foundation的三个威胁

2021年2月23日，VMware发布了一份公告（VMSA-2021-0002），公布了影响VMware ESXi、VMware vCenterServer和VMware Cloud Foundation的三个威胁

TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.

TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.

TA551 (AKA Shathak) deploys the IcedID banking trojan using COVID-19 in Microsoft Word documents containing a malicious macro that drops an installer.

We’ve discovered neurons in CLIP that respond to the same concept whether presented literally, symbolically, or conceptually. This may explain CLIP’s accuracy in classifying surprising visual renditions of concepts, and is also an important step toward understanding the associations and biases that CLIP and similar models learn.

In the constant press of rolling out ever better products and services to our customers, it can be easy-- and often necessary-- to fall into a reactive mode around reliability.

Next week (on March, 9th 2021) I will be speaking at the Hong Kong Information Security Summit 2021.

歡迎, 你好!

I was invited to share my thoughts around protecting the modern (and remote) workplace. Of course, my talk is addressing this topic from a red teaming point of view. Conference details are here.

The adversary will come to your house

The name of the talk is “Red Team Strategies for Helping Protect the Modern Workplace” which might seem less creative, but there is some (hopefullly) good and interesting information in my talk.

This week, Akamai was again recognized as a Leader in the latest The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021.

Recently, many reports of incidents have been making headlines, proving that no business or industry is immune to advanced threat actors. Applying user and entity behavior analytics (UEBA) for the challenging task of the detection of compromised devices over time can play a critical role in enterprises' defense mechanisms.

文章首发地址 https://xz.aliyun.com/t/9205 前言 网上闲逛的时候，发现github有个开源的蓝牙协议栈项目 https://github.com/sj15712795029/bluetooth_stack 看介绍支持STM32，网上支持嵌入式芯片的开源协议栈貌似很少，这里

分享攻防场景中的云原生相关漏洞挖掘及漏洞利用实例。

[胖猴小玩闹]专题从这篇起将开始一个新的系列

[胖猴小玩闹]专题从这篇起将开始一个新的系列

[胖猴小玩闹]专题从这篇起将开始一个新的系列

[胖猴小玩闹]专题从这篇起将开始一个新的系列

[胖猴小玩闹]专题从这篇起将开始一个新的系列

从基础知识、内存分配、垃圾回收和高级垃圾回收四个部分介绍内存管理技术