Pulses - Sec.Today

Kali Linux 2021.1 Release (Command-Not-Found) | Kali Linux Blog

www.kali.org • Linux Tools

Kali Linux 2021.1发行版 – lanying37 • an hour ago

0

A Journey Combining Web Hacking and Binary Exploitation in Real World!

blog.orange.tw

2020年的PHPWind RCE漏洞复现视频。 – lanying37 • an hour ago

0

Top 10 web hacking techniques of 2020

portswigger.net • Tools

Top 10 web hacking techniques of 2020 – Jett • 13 hours ago

0

1144662 - chromium - An open-source project to help move the web forward. - Monorail

bugs.chromium.org

Issue 1144662: Bypassing ASLR using Oilpan’s conservative garbage collector – Jett • 13 hours ago

0

Unauthorized RCE in VMware vCenter – PT SWARM

swarm.ptsecurity.com

VMware vCenter RCE 漏洞的分析（CVE-2021-21972） – Jett • 13 hours ago

0

Google Funds Linux Kernel Developers to Focus Exclusively on Security

linuxfoundation.org • Linux

Google 赞助 Linux 内核开发者，加强对内核安全的重视 – Jett • 13 hours ago

0

Developer Guidance for Hardware-enforced Stack Protection

techcommunity.microsoft.com

微软更新了一些基于 Intel CET 的保护机制 – Jett • 13 hours ago

0

Samsung Investigation Part 1: TEEs, TrustZone and TEEGRIS

www.riscure.com

Riscure 安全团队对三星 TEE、TrustZone 的研究 – Jett • 13 hours ago

0

2122 - Chrome: OOB-read in network DataElement struct traits. - project-zero

bugs.chromium.org

Issue 2122: Chrome: OOB-read in network DataElement struct traits – Jett • 13 hours ago

0

[PDF] https://download.vusec.net/papers/debug2_asplos21.pdf

download.vusec.net

Who’s Debugging the Debuggers? Exposing DebugInformation Bugs in Optimized Binaries – Jett • 13 hours ago

0

VMware warns of critical remote code execution flaw in vSphere HTML5 client

www.theregister.com • Web

VMware官方揭露了vSphere套件在HTML5客户端中的存在严重漏洞。 – lanying37 • 23 hours ago

0

2021 Global Threat Report: Adversary Trends & Analysis | CrowdStrike

www.crowdstrike.com • Attack Report

由CrowdStrike威胁情报团队发布的《 CrowdStrike 2021年全球威胁报告》 – lanying37 • 23 hours ago

0

Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs

thehackernews.com

研究人员近期发现一种新颖“”影子攻击”，并破坏数字签名PDF文档的安全性。 – lanying37 • 1 day ago

0

Learn How to Unpack ASPack Tutorial

www.youtube.com

学习如何解压缩ASPack恶意软件视频教程。 – lanying37 • 1 day ago

0

GitHub - kitabisa/teler: Real-time HTTP Intrusion Detection

github.com • Tools Defend

teler - 基于 HTTP 访问日志的实时入侵检测工具 – Jett • 1 day ago

0

[PDF] https://rohan.padhye.org/files/bonsai-icse21.pdf

rohan.padhye.org

Growing A Test Corpus with Bonsai Fuzzing – Jett • 1 day ago

0

Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks

arxiv.org

Zoom on the Keystrokes，有研究员发表 paper，研究如何在视频聊天中窃取对方的键盘敲击记录 – Jett • 1 day ago

0

proposal: testing: add fuzz test support · Issue #44551 · golang/go

github.com

Go 语言社区计划在 1.17 版本增加对 Go Fuzz 测试的支持 – Jett • 1 day ago

0

A Cyber Threat Intelligence Self-Study Plan: Part 1

medium.com

威胁情报自学指南 Part 1 – Jett • 1 day ago

0

Linux Kernel Exploitation Technique by overwriting modprobe_path

lkmidas.github.io

基于改写 modprobe_path 的 Linux 内核漏洞利用 – Jett • 1 day ago

0