An Example of RocketMQ Exploit Scanner, (Sat, Dec 16th) A few months ago, RocketMQ[1], a real-time message queue platform, suffered of a nasty vulnerabilit... 2023-12-16 14:31:5 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu masscan lpath rocketmq pwd zzzzmodule

CSharp Payload Phoning to a CobaltStrike Server, (Fri, Dec 15th) I found an interesting CSharp source code on VT a few days ago. Its score is only 3/59 (SHA256:5aeb... 2023-12-15 17:8:24 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu hf dllimport payload

ISC Stormcast For Friday, December 15th, 2023 https://isc.sans.edu/podcastdetail/8780, (Fri, Dec 15th) 2023-12-15 10:0:2 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds diaries sensor

ISC Stormcast For Thursday, December 14th, 2023 https://isc.sans.edu/podcastdetail/8778, (Thu, Dec 14th) 2023-12-14 10:10:5 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers 8778 guy

T-shooting Terraform for DShield Honeypot in Azure [Guest Diary], (Wed, Dec 13th) [This is a Guest Diary by Michael Smith, an ISC intern as part of the SANS.edu BACS program]Intro... 2023-12-14 08:13:24 | 阅读: 41 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu dshield honeypot azurerm provisioner tfvars

Malicious Python Script with a TCL/TK GUI, (Wed, Dec 13th) One essential behavior of malware is to remain "stealthy" and perform nasty activities below the ra... 2023-12-13 17:22:12 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu gods tcl python nimbus roblox

ISC Stormcast For Wednesday, December 13th, 2023 https://isc.sans.edu/podcastdetail/8776, (Wed, Dec 13th) 2023-12-13 10:0:2 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers 8776 honeypot

Microsoft Patch Tuesday December 2023, (Tue, Dec 12th) Microsoft had a rather light patch Tuesday for us today. Today's set includes  4 critical, 30 impor... 2023-12-13 02:25:35 | 阅读: 36 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu microsoft windows elevation chromium remote

ISC Stormcast For Tuesday, December 12th, 2023 https://isc.sans.edu/podcastdetail/8774, (Tue, Dec 12th) 2023-12-12 10:0:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds isc papers duty weblogs

Apple Patches Everything, (Mon, Dec 11th) Apple today released updates for iOS, macOS, tvOS and watchOS. This updates 43 vulnerabilities. Two... 2023-12-12 03:14:53 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu addressed moderate termination memory maliciously

What is sitemap.xml, and Why a Pentester Should Care, (Mon, Dec 11th) Everyone seems to be familiar with robots.txt - the contents of that file are normally used to tell... 2023-12-11 21:47:10 | 阅读: 5 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu giac sitemap companyname mlp

ISC Stormcast For Monday, December 11th, 2023 https://isc.sans.edu/podcastdetail/8772, (Mon, Dec 11th) 2023-12-11 10:0:2 | 阅读: 11 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers feeds isc diary developers

Honeypots: From the Skeptical Beginner to the Tactical Enthusiast, (Sun, Dec 10th) [This is a Guest Diary by Nicolas Haney, an ISC intern as part of the SANS.edu BACS program]Intro... 2023-12-11 04:0:58 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu honeypot dshield cowrie vlan rsyslog

IPv4-mapped IPv6 Address Used For Obfuscation, (Sat, Dec 9th) A reader submitted an unusual URL:Notice the format of the hostname: ::ffff:a.b.c.dI had to l... 2023-12-10 16:59:28 | 阅读: 13 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu mapped ffff bypass transmit software

ISC Stormcast For Friday, December 8th, 2023 https://isc.sans.edu/podcastdetail/8770, (Fri, Dec 8th) 2023-12-8 10:0:1 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds 8th rpi

5Ghoul: Impacts, Implications and Next Steps, (Thu, Dec 7th) The introduction of 5G networks has brought increased quality-of-life upgrades such as increased ne... 2023-12-8 09:0:5 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 5ghoul security gnb network qualcomm

ISC Stormcast For Thursday, December 7th, 2023 https://isc.sans.edu/podcastdetail/8768, (Thu, Dec 7th) 2023-12-7 10:0:2 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers feeds isc rpi 7th

Revealing the Hidden Risks of QR Codes [Guest Diary], (Wed, Dec 6th) [This is a Guest Diary by Jeremy Wensuc, an ISC intern as part of the SANS.edu BACS program]Intro... 2023-12-7 08:59:10 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu qr security correction download phishing

Whose packet is it anyway: a new RFC for attribution of internet probes, (Wed, Dec 6th) While going through newly published RFCs last week, I noticed one which may turn out to be quite us... 2023-12-6 18:43:26 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security probes canonical malicious payload

ISC Stormcast For Wednesday, December 6th, 2023 https://isc.sans.edu/podcastdetail/8766, (Wed, Dec 6th) 2023-12-6 10:0:2 | 阅读: 8 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc papers feeds ssh stormcast