Aggregator

When you feel like you’re losing the security battle, try one, a few, or all of these tips to re-invigorate your program and stay on a positive track.

搞一个机器学习的东西需要大量的带标签的图片，想了一下，还是直接用百度或者搜狗这类直接搜索得到的结果比较快。 首先看一下百度搜图，打开之后发现这是一个异步加载的页面，只有滑倒最低端的时候才会继续加载。这里先抓包看一下： 可以发现这就是向 这个objURL在html中是图片的原始…

上次整理FILE结构体的时候还说以后有空再慢慢想利用吧，结果这么快就遇到一道利用FLIE结构体的题，收了自己的flag。 FILE结构体的一些信息可以看我之前的文不对题的文章浅析stdout。这道题的难点就在于伪造出一个合适的FILE结构体。 在调用fclose()的时候会调…

其实这道题主要的难点是在编写可打印的shellcode，而且长度限制为80字节，网上能找到的通用的大概都超过了这个长度。 首先整理一下在可打印范围内能用的汇编指令： 1.数据传送: push/pop eax... pusha/popa 2.算术运算: inc/dec eax.…

Even URLs that look legitimate can be fake, so train, train, train your users to verify links before they click.

Even URLs that look legitimate can be fake, so train, train, train your users to verify links before they click.

Even URLs that look legitimate can be fake, so train, train, train your users to verify links before they click.

dubblesort --- 能从这道题学到的小技巧还是很多的。 首先是一种leak栈信息的办法，read没有在读入数据之后做处理，所以可以让字符串不以‘\\x00’结尾，之后用\"%s\"打印的时候就可以打印出栈上的信息。 经过动态调试可以发现，栈上有一个libc的地址，打印出来…

快看~~ js也能报洞了~~

快看~~ js也能报洞了~~

快看~~ js也能报洞了~~

快看~~ js也能报洞了~~

快看~~ js也能报洞了~~

Your company could lose hundreds of thousands in an impersonation scam, but here are eight things you can do to protect yourself.

Your company could lose hundreds of thousands in an impersonation scam, but here are eight things you can do to protect yourself.

Your company could lose hundreds of thousands in an impersonation scam, but here are eight things you can do to protect yourself.

这word有毒~

这word有毒~

这word有毒~