03 – 汽车功能安全(ISO 26262)系列: 概念阶段开发 – 功能安全需求及方案(FSR&FSC)
本篇属于汽车功能安全专题系列第03篇内容，我们接着聊功能安全概念开发阶段剩余内容。ISO 26262 基于V模型，汽车功能安全开发活动始于概念阶段，该阶段主要包...
CVE-2022-26923 AD域提权漏洞深入分析
声明：本篇文章由 可可@ QAX CERT原创，仅用于技术研究，不恰当使用会造成危害，严禁违法使用 ，否则后果自负。一、背景在Windows Active Directory 中除了使...
Hunting a Global Telecommunications Threat: DecisiveArchitect and Its Custom Implant JustForFun
The security landscape is constantly developing to provide easier ways to establish endpoint visibility across networks through the use of endpoint...
新华三magicR100存在未授权RCE攻击
漏洞描述存在/AJAX/ajaxget接口可以非授权访问，通过ajaxmsg搭配上功能函数可以调用读取一些敏感信息，通过对信息泄露进行深入检查，发现可以泄露管理数据登...
New Research Paper: Pre-hijacking Attacks on Web User Accounts
In 2020, MSRC awarded two Identity Project Research Grants to support external researchers working to further strengthen the security of identity p...
NetUSB exploitation part 1: Setting up the environment
In Pwn2Own Austin 2021, we also exploited TP-Link Archer C7 and Netgear R6700v3 routers. This is the first part of how we attacked the NetUSB kerne...
Encrypting our way to SSRF in VMWare Workspace One UEM (CVE-2021-22054)
Introduction What is VMWare Workspace One UEM (AirWatch)? Code Analysis Making a PoC Discovering the Variants PoCs Vendor Response Re...
每周蓝军技术推送（2022.5.21-5.27）
Web安全Web skimming 攻击中的代码混淆技术https://www.microsoft.com/security/blog/2022/05/23/beneath-the-surface-uncovering-the-shift-in-web-skimming...
慢雾：29 枚 Moonbirds NFT 被盗事件溯源分析
By：山哥&耀@慢雾安全团队事件背景5 月 25 日，推特用户 @0xLosingMoney 称监测到 ID 为 @Dvincent_ 的用户通过钓鱼网站 p2peers.io 盗走了 29 枚 M...
蓝军技术推送-windows域专题（KrbRelayUp、bypass机器用户添加限制、ad域渗透可视化工具）
蓝军技术推送[文章推荐] Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp)文章看点：windows defender团...