Aggregator

CobaltStrike的检测

半块西瓜皮
4 years 5 months ago

CobaltStrike是一款渗透测试神器，支持http/https、tcp、smb等多种通信方式。

在hvv防守方、应急响应等场景中，都有检测CobaltStrike的需求。

半块西瓜皮

Integrating Akamai mPulse with Consent Management Providers

The Akamai Blog
4 years 5 months ago
Akamai mPulse is a real user monitoring solution, providing detailed information about the user experiences delivered by your web applications. mPulse can be configured within your Akamai property to automatically start collecting data from your customer visits. This initial setup will gather the data required to use advanced features in Adaptive Acceleration such as Script Manager, Automatic Server Push, and Automatic Preconnect.
Simon Hearne

端内钓鱼，反制蚁剑

学蚁致用
4 years 5 months ago
推荐阅读这篇文章。有攻有防，砥砺前行。推荐语只能 120 字，我把其它的想法和解决方案附在文末。

端内钓鱼，反制蚁剑

学蚁致用
4 years 5 months ago
推荐阅读这篇文章。有攻有防，砥砺前行。推荐语只能 120 字，我把其它的想法和解决方案附在文末。

端内钓鱼，反制蚁剑

学蚁致用
4 years 5 months ago
推荐阅读这篇文章。有攻有防，砥砺前行。推荐语只能 120 字，我把其它的想法和解决方案附在文末。

Offensive BPF: Sniffing Firefox traffic with bpftrace

Embrace The Red
4 years 5 months ago

This post is part of a series about Offensive BPF that I’m working on to learn how BPFs use will impact offensive security, malware, and detection engineering.

Click the “ebpf” tag to see all relevant posts.

One of the issues I ran into when trying out sslsniff-bpfcc was that it did not work with Firefox or Chrome traffic.

This post is about me learning how to hook user space APIs with bpftrace using uprobes.

Managed ad