Aggregator

The 2021 TLS Telemetry Report

F5 Labs
4 years 2 months ago
Creating an encrypted HTTPS website depends on a lot more than simply throwing a digital certificate at it and hoping for the best. In fact, Transport Layer Security (TLS) and HTTPS misconfigurations are now so commonplace that in the 2021 OWASP Top 10, Cryptographic Failures now comes in second place.

The 2021 TLS Telemetry Report

F5 Labs
4 years 2 months ago
Creating an encrypted HTTPS website depends on a lot more than simply throwing a digital certificate at it and hoping for the best. In fact, Transport Layer Security (TLS) and HTTPS misconfigurations are now so commonplace that in the 2021 OWASP Top 10, Cryptographic Failures now comes in second place....

Offensive BPF: Understanding and using bpf_probe_write_user

Embrace The Red
4 years 2 months ago

This post is part of a series about Offensive BPF to learn how BPFs use will impact offensive security, malware, and detection engineering.

Click the “ebpf” tag to see all relevant posts.

Building advanced BPF programs

So far in this Offensive BPF series the focus was on bpftrace to build and run BPF programs.

The next thing I wanted to investigate is what options are available to modify data structures during BPF execution. This is where I hit limitations with bpftrace.

Managed ad