Pulses - Sec.Today

How does JVM allocate objects? - Java

umumble.com

JVM 虚拟机创建对象的过程分析 – Jett • 25 minutes ago

0

Patch Analysis: Examining a Missing Dot-Dot in Oracle WebLogic

Zero Day Initiative - Blog

WebLogic CVE-2019-2618 CVE-2019-2827 补丁分析 – whip1ash • 30 minutes ago

0

AMD Radeon Graphics Cards Open VMware Workstations to Attack

Threatpost

AMD Radeon 图形卡驱动漏洞影响 VMware Workstation 15 64 位 Windows 10 Guest 虚拟机 – Jett • 30 minutes ago

0

microsoft/STL

github.com

微软开源了 MSVC 的 C++ 标准库 STL – Jett • 52 minutes ago

1

A2nkF/macOS-Kernel-Exploit

github.com • macOS

研究员 A2nkF 公开了一个 macOS 内核 0Day Exploit – Jett • 54 minutes ago

1

Continuous Integration Continuous Bounties.pdf

drive.google.com

Alex Chapman 关于在软件持续集成/部署流程中挖掘漏洞的实践，来自 44CON 会议 – Jett • 59 minutes ago

1

rohanpadhye/jqf

github.com • Fuzzing

针对 Java 语言的基于覆盖率的 Fuzz 框架 – Jett • an hour ago

0

Barakat/CVE-2019-16098

github.com • Windows

Micro-Star MSI Afterburner 4.6.2.15658 Windows 驱动内存任意读写漏洞 Exploit(CVE-2019-16098) – Jett • 1 day ago

1

Requests-Racer: A Python Library for Exploiting Concurrency-Related Vulnerabilities in Web Applications

www.nccgroup.trust • Web

Requests-Racer - NCCGroup 开源的一个用于攻击 Web 应用中条件竞争相关的漏洞 – Jett • 1 day ago

0

使用Ghidra对iOS应用进行msgSend分析

Galaxy Lab • iOS

编写 Ghidra 脚本实现对 _objc_msgSend 分析，得到最终调用的类和方法 – Jett • 1 day ago

0

allpaca/V8Harvest

github.com • Browser

V8Harvest - V8 代码库近期回归测试样本的分析，方便分析 v8 的漏洞 – Jett • 1 day ago

1

[PDF] https://dragos.com/wp-content/uploads/CRASHOVERRIDE.pdf

dragos.com • Attack

Dragos 对 2016 年乌克兰电网被攻击事件的分析报告 – Jett • 1 day ago

0

CVE-2019-0708 metasploit EXP分析 - 360CERT

cert.360.cn • Windows

360-CERT 对 Metasploit 框架中新增的 CVE-2019-0708 Exploit 的分析 – Jett • 1 day ago

0

You Can Run, But You Can’t Hide — Detecting Process Reimaging Behavior

posts.specterops.io • Windows

Process Reimaging 杀软逃逸行为的检测 – Jett • 1 day ago

0

Objective-See's Blog

Objective-See's Blog • macOS

基于 macOS 的 Endpoint Security Framework，写一个 Process Monitor – Jett • 1 day ago

0

Azure AD privilege escalation - Taking over default application permissions as Application Admin

dirkjanm.io

Azure AD 环境的特权提升漏洞分析 – Jett • 1 day ago

0

Overview of Windows Execution Aliases

Tyranid's Lair • Windows

Windows Execution Aliases 机制概述以及一个相关的 TOCTOU 漏洞 – 靓仔 • 4 days ago

0

JWT Exfiltration Optimization & Blind MySQLi

b1twis3.ca

JWT Exfiltration 优化与 MySQL 盲注 – Jett • 5 days ago

0

Watchbog and the Importance of Patching

Talos Blog • Windows Malware

Talos Blog 对 Watchbog Botnet 渗透过程和 Payload 的分析 – Jett • 5 days ago

0

lucasg/findrpc

github.com • Tools

基于 IDA 脚本实现的枚举系统 RPC 接口的工具 – Jett • 5 days ago

1