渗透技巧

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
域内定点渗透技巧

资料目录域内定点打击简述 [ OWA登录日志利用 ] 域内定点打击简述 [ 域用户登录脚本 ] 域内定点打击简述 [ 域用户登录日志 ] 收藏 0

红队攻防揭秘

2020年3月8日 750 0 0 1

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
口令字典实用版下载（含APT34）

弱口令字典，上次apt34里的所有口令整理，加上自己的部分积累~~ 量不多，但精度应该会不错~~ 字典下载：收藏 0

红队攻防揭秘

2020年3月7日 528 1 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
cobalt strike 4.0翻译手册

Cobalt Strike 4.0 手册（80页）——献给渗透测试人员的先进威胁战术(2019年12月2日更新版本) Cobalt Strike 是一个为对手模拟和红队行动而设计的平台，主要用于执行有目标的攻击和模拟高级威胁者的后渗透行动。收藏 0

红队攻防揭秘

2020年3月7日 990 1 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
FireEye：ICS网络数据分析

FireEye发布工业数据分析slide：《Go-To Analysis for ICS Network Packet Captures》，以Modbus协议为例，着重分析了工业协议的在“抗重传”方面的缺陷。资料下载：收藏 0

网空博弈论

2020年3月5日 447 1 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
RSAC提出TOP 10 Cloud Attack Killchains

RSAC DisruptOps发表演讲《Break the Top 10 Cloud Attack Killchains》，试图提出流行的云攻击思路和有效的防御方法。云敏感数据泄露包括： GitHub/BitBucket Shared images Snapshots Compromised instance -> embedded code Com…

网空博弈论

2020年3月3日 594 3 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
RedTeam Att&CK视角工具合集（共264项）

Red Teaming / Adversary Simulation Toolkit 内容侦察武器化交货命令与控制横向运动建立立足点升级特权数据泄露杂项收藏 0

蘑菇小编

2020年2月28日 582 0 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
域环境渗透技巧~

因各种法规限制，也为避免一些不必要的麻烦，让密圈能长期正向发展，以后尽量全部都用本地环境来写了，虽然表面上看着是本地环境，但其实基本都是严格依据真实环境的标准来搭建部署的[这样才会尽可能多的遇到各种问题]，跟脱敏后的实际生产环境也不会相差太远，亦希望能借此尽量多给弟兄们多提供一些思路，为照顾到一些新手弟兄，文章虽然偏科普，但基于此思路所能衍生的用法，还很多，…

红队攻防揭秘

2020年2月28日 717 1 0 0

APT分析

{"term_id":17,"name":"APT\u5206\u6790","slug":"apt%e5%88%86%e6%9e%90","term_group":0,"term_taxonomy_id":17,"taxonomy":"category","description":"","parent":9,"count":34,"filter":"raw","cat_ID":17,"category_count":34,"category_description":"","cat_name":"APT\u5206\u6790","category_nicename":"apt%e5%88%86%e6%9e%90","category_parent":9}
APT分析
NSA棱镜门路由器后门技术分析

一年前的棱镜门，NSA TAO具备了在Cisco，Juniper和华为等厂商路由器、交换机和防火墙等网络设备中植入后门的技术。实际上去年就有人找到了相关的后门、并对其进行了分析，我当时还找了材料给某司负责IRT的同学去分析。不过这大半年来也没看到国内有详细描述一下这个东西的文章，今天分享一下，好东西不怕来得晚。在2013年六月，在斯诺登爆料的同时，一群黑客…

远望.网信防务

2020年2月21日 627 1 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
大规模内网快速识别特定漏洞思路

0x01 用法 0x02 实战应用场景脚本仅限于安全研究学习和授权渗透之用！严禁将其用于任何恶意非法用途，由此所产生的一切法律责任，均由使用者自行承担！收藏 0

红队攻防揭秘

2020年2月20日 447 0 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
Shodan Hacking实战技巧

红队攻防揭秘

2020年2月19日 453 0 0 0

南向会员

{"term_id":369,"name":"\u5357\u5411\u4f1a\u5458","slug":"%e5%8d%97%e5%90%91%e4%bc%9a%e5%91%98","term_group":0,"term_taxonomy_id":369,"taxonomy":"category","description":"","parent":368,"count":52,"filter":"raw","cat_ID":369,"category_count":52,"category_description":"","cat_name":"\u5357\u5411\u4f1a\u5458","category_nicename":"%e5%8d%97%e5%90%91%e4%bc%9a%e5%91%98","category_parent":368}
南向会员
Shadowsocks流密码重定向漏洞复现利用

作者：LeadroyaL 2020年2月12日，Zhiniang Peng 在 github 上公开了对于 shadowsocks 的攻击理论,在阅读完作者的文档后获益匪浅，但 github 中主要是理论，代码和场景写的描述的非常混乱，本文亲自演示一遍整个流程，把整个攻击演示的更清楚。感谢 chenyuan 的帮助和交流。本文的全部代…

Seebug

2020年2月19日 549 2 0 0

Red Team

{"term_id":30,"name":"Red Team","slug":"red-team","term_group":0,"term_taxonomy_id":30,"taxonomy":"category","description":"","parent":10,"count":18,"filter":"raw","cat_ID":30,"category_count":18,"category_description":"","cat_name":"Red Team","category_nicename":"red-team","category_parent":10}
Red Team
DeadEye：发布基于ATT&CK的渗透手册

DeadEye安全团队，根据ATT&CK知识体系编制出长达400页的渗透手册。目录：一、Initial Access（入口点）二、Execution（命令执行）三、Persistence（持久化）四、Privilege Escalation（权限提升）五、Defense Evasion（绕过防御）六、Credential Access（…

网空博弈论

2020年2月15日 687 0 0 1

安全漏洞

{"term_id":29,"name":"\u5b89\u5168\u6f0f\u6d1e","slug":"%e5%ae%89%e5%85%a8%e6%bc%8f%e6%b4%9e","term_group":0,"term_taxonomy_id":29,"taxonomy":"category","description":"","parent":10,"count":15,"filter":"raw","cat_ID":29,"category_count":15,"category_description":"","cat_name":"\u5b89\u5168\u6f0f\u6d1e","category_nicename":"%e5%ae%89%e5%85%a8%e6%bc%8f%e6%b4%9e","category_parent":10}
安全漏洞
密码保护：ss中间人监听漏洞poc发布

无法提供摘要。这是一篇受保护的文章。

黑鸟

2020年2月14日 441 0 0

安全漏洞

{"term_id":29,"name":"\u5b89\u5168\u6f0f\u6d1e","slug":"%e5%ae%89%e5%85%a8%e6%bc%8f%e6%b4%9e","term_group":0,"term_taxonomy_id":29,"taxonomy":"category","description":"","parent":10,"count":15,"filter":"raw","cat_ID":29,"category_count":15,"category_description":"","cat_name":"\u5b89\u5168\u6f0f\u6d1e","category_nicename":"%e5%ae%89%e5%85%a8%e6%bc%8f%e6%b4%9e","category_parent":10}
安全漏洞
美方程式工具已集成到MSF系统

美国方程式的工具DOUBLEPULSAR植入Metasploit模块中（RDP的RCE） https://blog.rapid7.com/2020/02/04/doublepulsar-rce-2-an-rdp-story/ https://packetstormsecurity.com/files/156200/RDP-DOUBLEPULSAR-Remot…

网空博弈论

2020年2月13日 381 0 0

研究报告

{"term_id":33,"name":"\u7814\u7a76\u62a5\u544a","slug":"%e7%a0%94%e7%a9%b6%e6%8a%a5%e5%91%8a","term_group":0,"term_taxonomy_id":33,"taxonomy":"category","description":"","parent":230,"count":12,"filter":"raw","cat_ID":33,"category_count":12,"category_description":"","cat_name":"\u7814\u7a76\u62a5\u544a","category_nicename":"%e7%a0%94%e7%a9%b6%e6%8a%a5%e5%91%8a","category_parent":230}
研究报告
渗透技巧——导出Firefox浏览器中保存的密码

0x00 前言在之前的文章《渗透技巧——导出Chrome浏览器中保存的密码》介绍了导出Chrome浏览器密码的原理和利用方法，本文将要对导出Firefox浏览器密码的原理和利用方法进行介绍，分析利用思路。 0x01 简介本文将要介绍以下内容: · 密码保存方式 · 原理介绍 · 常用的导出工具 · 利用思路 0x02 密码保存方式正常用户在访问网站…

嘶吼

2020年2月11日 426 0 0

联系我们