Aggregator

esp8266-01调试 一、硬件设备 1.USB转TTL 2.esp8266-01 3.杜邦线 4.电脑 二、接线 按表格接好线如下 三、调试 把usb转ttl模块插入电脑，在 此电脑-管理-设备管理器 中查看该设备端口号 若是出现上图的黄色箭头警告，就卸载原usb转ttl驱动，重新下载ft232

Introduction This paper was published in CCS 2015. With the introduction of the various mitigation deployed in the user space, especially sandbox, the vulnerability in the linux kernel has become a target of the attacker. However, the memory space in the kernel is hard to predict since the kernel space are used by various tasks. […]

No single defense is perfect, but with the right set of diverse, overlapping controls, most threats can be rebuffed.

No single defense is perfect, but with the right set of diverse, overlapping controls, most threats can be rebuffed.

No single defense is perfect, but with the right set of diverse, overlapping controls, most threats can be rebuffed.

影响版本

F5 Labs' Mike Convertino writes for Dark Reading, discussing the big trends CISOs are dealing with across the industry.

该文被密码保护。

# CVE-2018-4407 ICMP DOS # https://lgtm.com/blog/apple_xnu_icmp_error_CVE-2018-4407 # from https://twitter.com/ihackbanme import sys try: from scapy.a

也是经过一通扫描和测试，没发现其他有用信息，感觉这是个sql注入。其实对于二阶sql注入我以前没实践过，也没看过资料，只是知道这个名字，但不知道为何看到这道题就让我回想起了这个名词，所以查了一下二阶sql注入的资料：二阶sql注入。简单来说，就是第一次构造的恶意数据直接储存到了数据库中，但在其他地方

这道题其实是考jsp和java的，我没学过jsp，java倒是有一点了解，但是刚拿到题的时候还是看不懂java代码里的内容，所以去简单学习了下jsp（jsp教程），按照教程里的步骤搭建了eclipse 环境并打开这道题提供的项目源码在本地进行调试，然后又去百度了源码中的各个java函数，大致理解了整

首先观察这个web应用的功能，可以任意留言，也可以搜索留言，当然我还用cansina扫描过网站，查看过源码，抓包查看过header等。没发现其他提示的情况下断定这就是个sql注入，可能存在的注入点呢，就是留言时产生 insert into 注入，或者搜索时产生的 like '%xx%' 注入。经过多

We’ve developed Random Network Distillation (RND), a prediction-based method for encouraging reinforcement learning agents to explore their environments through curiosity, which for the first time exceeds average human performance on Montezuma’s Revenge.

S2-033 影响版本

Introduction I will continue to talk about the exploitation of CVE-2017-7308. In this post, I will discuss the implementation details of buddy allocator and SLUB allocator in Linux-4.10.6. I will show how to put the victim object (struct packet_sock in this post) next adjacent to the vulnerable buffer (packet rv_ring buffer in previous post). In […]

沈永宁（周鸣振）这狗比，晚上才发现他隐姓埋名偷偷刷了分还刷到了第一名，不行我也刷。。。我刷刷刷😷 Crypto 滴滴答答 摩斯电码。 Do you know Base64? 右键属性存在base64值，解码。 凯撒后院的栅栏 先栅栏保证{}在第五位和最后一位，4栏，再凯撒得到flag{}格式头。