Tag: hackers

The development tools

T-reqs: A syntax – based HTTP vulnerability mining tool

February 4, 2024

by Ms. Brenda Finch

No Comments

T-reqs t-REQS stands for Two Requests. T-reqs is a syntax-based HTTP fuzz test vulnerability mining tool that can target HTTP servers by sending variant HTTP...

Read More

The back-end

Small ideas for session utilization

February 4, 2024

by Arnav Mane

No Comments

Session file inclusion and session deserialization are two common methods of session deserialization. Session file inclusion and session deserialization are two common methods of session...

Read More

The back-end

Security classic JWT algorithm vulnerability

February 3, 2024

by Ms. Jacqueline Scott DVM

No Comments

1. What is JWT? JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and independent method for securely transferring information...

Read More

The back-end

Summary of penetration testing ideas

February 3, 2024

by Karen Wallace

No Comments

First, "Metasploit Penetration test devil training Camp" and other books have been more reasonable and thorough division of the penetration test procedures, but I feel...

Read More

The development tools

📚 Metasploit Penetration testing books

February 3, 2024

by Donald Coleman

No Comments

Metasploit Penetration testing books

Read More

The back-end

Common LAN attacks from switch security configuration

February 3, 2024

by David Patterson

No Comments

To build a zero-trust network, network access (NAC) is indispensable, which involves some security tests of switches, hence the article "Common LAN Attacks seen from...

Read More

The back-end

Middleware vulnerability recurrence for penetration testing

February 3, 2024

by Michael Brown

No Comments

Introduction: WebLogic is an application Server produced by Oracle Corporation in the United States. To be precise, it is a middleware developed based on JAVAEE....

Read More

The back-end

On the importance of infiltration information collection

February 3, 2024

by Denise Smith-Lewis

No Comments

This article is only used for exchange and learning. Any direct or indirect consequences and losses caused by the dissemination and use of the information...

Read More

reading

From double eleven to see ali Cloud security “Genesis” — interview Ali cloud security chief Xiao Li feeling

February 1, 2024

by 周佳樺

No Comments

"God said let there be light and there was light." In double eleven interviewed Ali cloud security chief Xiao Li, suddenly have a new understanding...

Read More

reading

Ali Cloud Situational Awareness Service (Part I)

February 1, 2024

by Victoria Parker

No Comments

(Situational Awareness is a big data security analysis platform that alerts all assets on your cloud and uses machine learning to detect potential intrusions and...

Read More

The back-end

Tesla’s Kubernetes console was hacked

February 1, 2024

by Armaan Brahmbhatt

No Comments

Abstract: Tesla was victimized because its Kubernetes platform was not password protected. A few months ago the RedLock staff discovered that hundreds of Kubernetes administrative...

Read More

reading

Apache Struts2 has revealed another serious security vulnerability

February 1, 2024

by Andrew Wheeler

No Comments

The Apache Struts framework has been exposed as a security breach in the wake of reports that hackers stole the personal details of 143 million...

Read More

reading

Know things by learning | how the enterprise leaders see the security situation of 2018?

February 1, 2024

by Rita Dunn

No Comments

Welcome to visit NetEase Cloud Community to learn more about NetEase's technical product operation experience. "Knowing Things from Learning" is a brand column created by...

Read More

reading

Medical security Defense: ‘We still buy unsafe medical devices’

February 1, 2024

by Brittany Robinson

No Comments

Welcome to visit NetEase Cloud Community to learn more about NetEase's technical product operation experience. "Knowing Things from Learning" is a brand column created by...

Read More

reading

Wearable medical devices are the hot property, but they also have data and security woes

February 1, 2024

by Brett Johnson

No Comments

Nowadays, Chinese people are facing serious physical health problems. According to incomplete statistics, breast cancer is the most common cancer among Chinese women, with 21.6...

Read More

The back-end

【HTB】Irked (software backdoor, image stegantry, custom SUID command hijacking)

February 1, 2024

by 方淑慧

No Comments

Disclaimer service discovery First check which ports are open on the target aircraft and then obtain the details of these ports. Open port 80, the...

Read More

The back-end

Raspberry PI — Build the honey Pot

February 1, 2024

by Anne Atkins

No Comments

Once upon a time, old friends, here I am, rollover freak! This may be the last issue of the Raspberry PI Safety issue, but it...

Read More

The back-end

【HTB】Shocker (Shellsock, Sudo abuse: Perl)

February 1, 2024

by Michael Brown

No Comments

The disclaimer service detects port 80, which opens with a simple page directory burst and only has a static page, which is a bit frustrating....

Read More

The back-end

【HTB】Validation

February 1, 2024

by Dhanuk Guha

No Comments

Disclaimer service detection directory burst only a few files, check the source code of the web page found nothing special index page need to enter...

Read More

The back-end

Summary of network security vulnerability analysis

February 1, 2024

by Romil Sarraf

No Comments

(1) Preface Thank you for the recurrence of some versions of Tongda OA sorted out by master. Starting from the point of vulnerability, analyze the...

Read More

The back-end

【HTB】Sauna (Kerberoasting, DCSync)

February 1, 2024

by David Gifford-Campbell

No Comments

The disclaimer service probes the port and finds detailed port information for DNS, Kerberos, and LDAP, which is clearly a DC server. Enumerating domain name...

Read More

The back-end

【HTB】Forest (Kerberoasting, Bloodhound, DCSync)

February 1, 2024

by Romil Sampath

No Comments

Disclaimer service probe view open port view details Apparently a DC server, domain name: htb.local, machine name: FOREST first add domain name to host file...

Read More

The back-end

Remember a penetration trip, network security learning first

February 1, 2024

by Steven Smith

No Comments

The so-called "killing pig pan" is an online scam in which fraudsters use online dating, usually of the opposite sex, to induce victims to download...

Read More

The back-end

【HTB】Antique (SNMP information leaks, lpadmin user group reads any file)

February 1, 2024

by Carly Phillips

No Comments

A Telnet service is enabled on port 23, and the greetings are HP JetDirect. HP printers need a password to log in to Telnet, but...

Read More

The back-end

Attacks And Defenses

February 1, 2024

by Julia Stephenson

No Comments

Buffer Overflow description Buffer Overflow is the oldest and most common program vulnerability, usually when a program is running if it accepts arguments from an...

Read More

The back-end

【HTB】 Bludit (Blunder)

February 1, 2024

by 郭宗翰

No Comments

Disclaimer service found that port 21 has been shut down, only port 80 is in one direction. I usually pop directories again with GoBuster and...

Read More

The back-end

Network security – the complete process of Intranet penetration

February 1, 2024

by Shannon Newton-Mason

No Comments

Because mainly want to practice the internal network, so I use the most simple and crude method to find the target, using FOFA to batch...

Read More

reading

All WiFi is a potential “third eye” on your privacy

February 1, 2024

by Dr. Russell Brown

No Comments

At present, the Internet era has arrived, WiFi has covered all aspects of life. Recently, however, computer security experts have found serious flaws in WiFi...

Read More

reading

The new “growth hacking” practice — building user communities

January 31, 2024

by Anthony Thompson

No Comments

Building Community Is the New "Growth Hack." The Hustle recently launched an Ambassador program and borrowed from companies that have already built successful ambassador programs....

Read More

The back-end

Vertical overreach vulnerability and code analysis

January 31, 2024

by 馬柏翰

No Comments

First, preface after the article is finished, the application for CVE has some trouble, but fortunately, or apply for two, environment construction according to the...

Read More