山海关安全团队是一支专注网络安全的实战型团队,团队成员均来自国内外各大高校与企事业单位,总人数已达50余人。Arr3stY0u(意喻“逮捕你”)战队与W4ntY0u(意喻“通缉你”)预备队隶属于团队C...
D^3CTF 2025 writeup by Arr3stY0u
山海关安全团队是一支专注网络安全的实战型团队,团队成员均来自国内外各大高校与企事业单位,总人数已达50余人。Arr3stY0u(意喻“逮捕你”)战队与W4ntY0u(意喻“通缉你”)预备队隶属于团队C...
物尽其用,摩诃草攻击武器复用肚脑虫基础设施
团伙背景摩诃草,又名 Patchwork、白象、Hangover、Dropping Elephant 等,奇安信内部跟踪编号 APT-Q-36。该组织被普遍认为具有南亚地区背景,其最早攻击活动可追溯到...
一行代码让iPhone变砖,苹果反倒奖励我17500美元
来自公众号:OSC开源社区链接:https://www.oschina.net/news/347126/how-a-single-line-of-code-could-brick-your-iphon...
Arbitrarily control the vehicle (fixed)
part1点击上方蓝字关注我们0x01 IntroductionAfter purchasing a car, one would hope to understand and become fami...
Vanna AI中的提示注入漏洞暴露数据库面临RCE攻击
Cybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that ...
Could not run curl-config 的解决方式
Downloading/unpacking pycurl (from pyspider) Downloading pycurl-7.19.5.1.tar.gz (142kB): 142kB downl...
思科Secure Client VPN劫持漏洞修复
Cisco has released patches to address a high-severity security flaw impacting its Secure Client soft...
Windows-Exploit-Suggester - Windows下提权辅助工具
此工具是一款非常好用的Windows下提权辅助工具(已经支持Windows 10下的提权了),国内已经有许多人在用了,但是一直没有相应的中文文档,所以我特地翻译了一下,水平有限,如有错误,欢迎指出,谢...
The Dirty Pipe Vulnerability — The Dirty Pipe Vulnerability documentation
Max Kellermann <[email protected]> Abstract¶ This is the story of CVE-2022-0847, a vuln...
看我如何黑掉自己家的智能电视(双語版)
Everything in our home is connected to theInternet these days. Our thermostats and surveillance came...