Pulses - Sec.Today

Zero Day Initiative — CVE-2020-3947: Use-After-Free Vulnerability in the VMware Workstation DHCP Component

www.zerodayinitiative.com • Virtualization

VMware Workstation DHCP组件中的释放后使用漏洞(CVE-2020-3947)分析。 – lanying37 • 2 days ago

0

Hunting Azure Admins for Vertical Escalation: Part 2 - Lares

www.lares.com • Virtualization

本文章是Hunting Azure Admins纵向升级系列的第2部分。 – lanying37 • 2 days ago

0

Binary Exploitation 01 — Introduction

medium.com • Vulnerability

二进制开发系列教程01-介绍 – lanying37 • 2 days ago

2

[PDF] https://arxiv.org/pdf/2004.00622.pdf

arxiv.org

Evading Deepfake-Image Detectors with White- and Black-Box Attacks(Paper) – Jett • 2 days ago

0

20816 - oss-fuzz - OSS-Fuzz: Fuzzing the planet - Monorail

bugs.chromium.org

OpenSSL Client CRYPTO_DOWN_REF UAF 漏洞 – Jett • 2 days ago

0

SharpChromium

github.com • Browser Tools

SharpChromium - 用于从 Chromium 系列浏览器中获取 Cookie、访问历史、网站登录凭据等敏感信息的工具 – Jett • 2 days ago

1

NTLM Relay

en.hackndo.com • Windows

NTLM Relay 攻击综述 – Jett • 2 days ago

1

Honeyroasting. How to detect Kerberoast breaches with honeypots

Pen Test Partners

用蜜罐的方案检测 Kerberoasting 攻击 – Jett • 2 days ago

1

Win32k – Smash The Ref

Insanely Low-Level • Windows Vulnerability

研究员 Gil Dabah 对 win32k 漏洞的研究，包括一篇 Paper《Smash The Ref》和大量 PoC – Jett • 2 days ago

0

Offense and Defense – A Tale of Two Sides: Bypass UAC

Fortinet Threat Research Blog

FortiGuard Labs 研究员对 Windows UAC Bypass 的研究 – Jett • 2 days ago

0

Two Zoom Zero-Day Flaws Uncovered

Threatpost

macOS 版本 Zoom 客户端被发现两个漏洞 – Jett • 2 days ago

0

安全检查! | 百度云加速

versprite.com • Windows

Windows 10 x64 ESTROBJ STROBJ 数据结构逆向分析 – Jett • 2 days ago

0

CVE-2020–0796 Windows SMBv3 LPE Exploit POC Analysis

medium.com • Windows

CVE-2020-0796 Windows SMBv3 LPE漏洞 POC详细分析 – Schwarrzz • 2 days ago

0

Hacking - RootKit Development

www.youtube.com

Hacking-Rootkit开发系列教程视频。 – lanying37 • 3 days ago

2

USN-4313-1: Linux kernel vulnerability

usn.ubuntu.com

USN-4313-1：Linux内核漏洞 – lanying37 • 3 days ago

0

You need multiple SAML IDP signing keys

www.stackallocated.com

对SAML IDP签名密钥安全研究介绍。 – lanying37 • 3 days ago

0

Impact of DNS over HTTPS (DoH) on DNS Rebinding Attacks

research.nccgroup.com • Browser Network

DNS over HTTPS (DoH) 对 DNS Rebinding 攻击的影响 – Jett • 4 days ago

0

Attacking HelpDesks Part 1: RCE Chain on DeskPro, with Bitdefender as a Case Study

blog.redforce.io

Attacking HelpDesks Part 1: RCE Chain on DeskPro, with Bitdefender as a Case Study – Jett • 4 days ago

0

Exploiting CVE-2020-0041 - Part 1: Escaping the Chrome Sandbox

labs.bluefrostsecurity.de • Android Browser

Exploiting CVE-2020-0041 - Part 1: Escaping the Chrome Sandbox – Jett • 4 days ago

0

2 Path Traversal Cases

jlajara.gitlab.io

两个路径穿越漏洞案例分析 – Jett • 4 days ago

0