Clik here to view.
NSS Labs 2016 NGIPS Group Testing
Fortinet is highly committed to the public testing of its products and solutions because it helps us to continuously improve our products and provide the best technology to our customers. We...
View ArticleNSA后门可让攻击者轻松解密HTTPS、VPN加密流量
研究人员发明了一种新办法，可以在使用加密体系保护的网站、VPN和互联网服务器中放入不被检测的后门，这一壮举使得黑客可以轻松解密数以亿计的加密通信和密钥。 这一技术最引人注目的地方就是它将一个后门程序(也可以说是“陷阱”)放在了Diffie-hellman...
View ArticleKali-linux下创建wifi热点（wifi绵羊墙搭建）
方案1：iwconfig命令查看是否成功识别airmon-ng命令查看无线网卡情况，找到接入的USB无线网卡名称，airmon-ng start wlan2命令使USB无线网卡工作在监听模式；airbase-ng –e “KFC” –c 11 wlan0mon命令并回车，这样就生成了一个工作在11频道、SSID名称为“KFC”的热点；ifconfig...
View ArticleOpenSSL 1.1.0: remote client memory corruption in ssl_add_clienthello_tlsext()
This requires tickets, requesting certificate status from server, and a large ALPN list. The most unusual requirement is that the client sets a very large ALPN list. This is very unlikely in a...
View ArticlePork Explosion Unleashed
While I did “mock hype” this vulnerability, I was mostly making fun of those companies using bland and boring vulnerability disclosures as a PR stunt, Pork Explosion is certainly real and today we...
View Article不小心删除win7账户怎么办？
阅读： 3 阅读此文章你将知道： 如何解决对系统某盘进行操作显示“您需要管理者权限才能进行XX操作”？ 如何在无账户和密码情况下进入系统？ 如何在安装了杀毒软件情况下恢复已删除账号？ 文章目录 如何解决对某盘操作的时显示“您需要管理者权限才能进行XX操作”？ 如何无账号密码进入win7系统？ 如何解决在系统装有杀毒软件的情况下恢复已删除账号？...
View ArticleClik here to view.
New SourceClear Integration Automates Security Analysis for Builds
Security is critical to every software team, but monitoring vulnerable dependencies and keeping libraries updated can feel like an impossible task. The new SourceClear integration for CircleCI brings...
View ArticleClik here to view.
Rethinking Infrastructure, an Interview With Docker’s Security Director
Docker’s emphasis on the customer’s experience is a hallmark of its stated mission to create tools of mass innovation. That philosophy is directly relevant to Docker 1.12, which integrates clustering...
View Article高危漏洞通告 BIND最新漏洞将导致DoS攻击 PoC满天飞 攻击者已经开始利用这个漏洞了
上个月，流行DNS软件BIND中的一个严重DoS漏洞得到了修补，但是该漏洞已经被广泛利用，以摧毁系统。 该漏洞由互联网系统联盟（ISC）发现并以CVE-2016-2776的ID进行追踪。9月下旬，BIND 9.9.9-P3、9.10.4-P3、9.11.0rc3的发布修补了这一漏洞。攻击者可通过特制的DNS报文，利用该漏洞进行DoS攻击。 BIND是什么...
View Articlepsql with SSL
To enable SSL connection in sql, we can follow the instruction in below: Generate certificate openssl req -new -text -out server.req -nodes openssl rsa -in privkey.pem -out server.key rm privkey.pem...
View ArticleClik here to view.
从少年成名的传奇黑客到白手起家的科技大佬，我们把最酷的人带到你身边
ID：geohot 真名：乔治霍兹（George Hotz） 年龄：27 岁的轻狂少年 职业：多个科技界重要破解背后的传奇黑客 技能：世界首次破解 iPhone 运营商频段锁；越狱 iOS；首次攻陷无人能黑的 PS3；发布万能 root 工具 towelroot…… 现职：创始人兼 CEO，与特斯拉、Google 无人汽车竞争，计划推出999美元的自动驾驶系统，让自动驾驶技术能应用到普通车上。...
View ArticleClik here to view.
希拉里团队主席不仅电邮被泄，黑客称还攻破了他的推特、iPhone 、iPad 和 iCloud
今年的美国大选简直就是一场“黑客秀”。 前几天，希拉里和川普还在美国大选第二场辩论互撕，希拉里直指川普“不适合当总统”，又说川普把女孩子从1分到10分打分“成何体统”，川普揪着希拉里“邮件门”事件不放，说希拉里删除了数以万计的机密邮件来规避调查。 据外媒softpedia 10月14日报道，黑客又挑事了，希拉里要头疼了。 John Podesta...
View ArticleClik here to view.
BCTF第二周writeup分析
题目地址： http://9fb415bb7167473eb3645f73ee47d3a3581b58bc45ed4964.game.ichunqiu.com/index.php?id=1 打开连接，页面显示的是: flag{在数据库中} 找到注入点 使用burp查看网页的源代码，发现: <!--SELECT * FROM info WHERE id=1--><br...
View ArticleCards at Risk as Online Skimming Jumps 69%
Security researchers are warning that the number of e-commerce stores infected with credit card stealing malware has risen 69% over the past year, with many site owners failing to take action. Dutch...
View ArticleClik here to view.
Microsoft’s October 2016 patch rollup: 10 bulletins, 4 zero-days
Microsoft’s October 2016 security updates have launched its new “rollup” monthly routine with 10 bulletins, with five marked critical. The critical parts of MS16-118 to MS16-127 are all remote code...
View ArticleClik here to view.
Why website security is important
On 14, Oct 2016 | InBlog, Web Design , Web Design in Cumbria ,Web Services | Bystephen little Earlier this week i received an email from the Google Search Console Team informing me about a website...
View ArticleClik here to view.
Post-referendum UK still part of Euro cyberterror stress test... for now
European enterprises are teaming with information security agencies and governments to run a pan-European cyberwar readiness exercise today. Cyber Europe 2016 - which involves thousands of experts from...
View ArticleTippingPoint Threat Intelligence and Zero-Day Coverage Week of October 10, 20...
I was in Miami, Florida this week meeting with our TippingPoint sales team. We stayed at a property that is owned by a certain U.S. presidential candidate. On our last night there, we get back from...
View ArticleClik here to view.
MACsec: a different solution to encrypt network traffic
MACsec is an IEEE standard for security in wired ethernet LANs. This blog , will give an overview of what MACsec is, how it differs from other security standards, and present some ideas about how it...
View ArticleClik here to view.
eScan empowers Businesses to defend against RANSOMWARE
Last couple of months has seen an unprecedented growth of attacks by Ransomware, and it has cost millions of dollars in loss to businesses. Apart from the valuable data and IP losses, it has crippled...
View Article