Aggregator

仅作为个人的漏洞类型和技巧记录 于阅读漏洞报告时记录 类型 不需要特殊技巧 简单就可以确认的类型 GraphQL查询漏洞 Graphql作为一种前端查询

Learn from the best CISOs how to handle the challenges of aligning technology and compliance with security architecture.

Learn from the best CISOs how to handle the challenges of aligning technology and compliance with security architecture.

Learn from the best CISOs how to handle the challenges of aligning technology and compliance with security architecture.

Global Traffic Management, or GTM, is a DNS-based load balancing service that offers application owners a level of flexibility and insight that is unmatched by traditional on-prem solutions.

前言 最近由于一直在用的travis-ci出现了迷之bug,加上想尝试一下github action就决定尝试用github action替换tr

Unvalidated redirect

Latin American systems received more attacks from IP addresses within the region that coincidentally did not attack anywhere else in the world.

Latin American systems received more attacks from IP addresses within the region that coincidentally did not attack anywhere else in the world.

Latin American systems received more attacks from IP addresses within the region that coincidentally did not attack anywhere else in the world.

0x01 工具介绍BurpSuite是一款信息安全从业人员必备的集成型的渗透测试工具，它采用自动测试和半自动测试的方式，包含了 Proxy,Spider,Scanner,Intruder,Rep...

Excited to announce the book that I have been working on:

Cybersecurity Attacks - Red Team Strategies

Learn about the foundational tactics, techniques and procedures to elevate your red teaming skills and enhance the overall security posture of your organization by leveraging homefield advantage.

Contents and Background

Red Team Strategies covers aspects that are not as commonly discussed in literature, including chapters around building and managing a pen test team. However, there is still plenty of technical content included as well. It is not a typical pen test book that focuses on common tools, or walks the reader through the various stages of a pen test.

The U.S. and Canada have 95% of top source traffic countries in common.

The U.S. and Canada have 95% of top source traffic countries in common.

The U.S. and Canada have 95% of top source traffic countries in common.

java -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=5005 -jar burpsuite_community_v2.1.0.jar 通过这篇文章学到的，https://www.freebuf.com/articles

01简介隧道是把一种网络协议封装进另外一种网络协议进行传输的技术。SSH构建隧道有三种方式: 本地转发、远程

01简介隧道是把一种网络协议封装进另外一种网络协议进行传输的技术。SSH构建隧道有三种方式: 本地转发、远程

前言 记录cms挖掘漏洞的几种下手方法 基于危险函数 最常见的应该是这种了 通过搜索常见的危险函数如assert|eval|system|file_

记录一下，我在docker容器中配置Mysql时遇到的坑，以及处理过程中学到的知识。

起因

最近作业量多，任务重结果还是被点名出题（