常见漏洞总结归纳自学路线图SQL注入漏洞https://portswigger.net/web-security/sql-injectionhttps://portswigger.net/web-se...
【大模型安全】[文献整理] 大模型对抗攻击
[文献整理] 大模型对抗攻击阅读如下论文和材料,整理与LLM对抗攻击相关内容。Survey of Vulnerabilities in Large Language Models Revealed b...
迅雷客户端被称存在多个高危漏洞
朋友发给我的一篇文章,标题是《Numerous vulnerabilities in Xunlei Accelerator application》,也就是“在迅雷的加速器应用中发现数个漏洞”。文章原...
Magnet Goblin 黑客组织利用1天漏洞部署Nerbian RAT
A financially motivated threat actor called Magnet Goblin is swiftly adopting one-day security vulne...
【Vidar论文研读分享】基于签名的静态分析检测重复出现的漏洞
Wooseok Kang, Byoungho Son, and Kihong Heo. 2022. TRACER: Signature-based Static Analysis for Detect...
工具 | scan4all
注:仅供安全研究与学习之用,若将工具做其他用途,由使用者承担全部法律及连带责任,作者及发布者不承担任何法律及连带责任。0x00 简介scan4all是一款自动化扫描、发现、识别漏洞利用工具。0x01 ...
G.O.S.S.I.P 阅读推荐 2023-11-09 基于签名的静态分析检测重复出现的漏洞
Wooseok Kang, Byoungho Son, and Kihong Heo. 2022. TRACER: Signature-based Static Analysis for Detect...
论文解读Can LLM Identify And Reason About Security Vulnerabilities?
一. 综述来自波士顿大学、新南威尔士大学、IBM实验室的六位作者于12月19日发表了一篇名为《Can Large Language Models Identify And Reason About S...
CISA发布紧急指令:Ivanti产品零日漏洞
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday issued an emergency direc...
Bug Bounty Career - Web Hacking
根据joas的Ebooks加强网络安全Career&skills方面的学习From: Bug Bounty Career – WEB HACKING.pdflast update: 2020/...
Vulnerabilities Scan4all一款集成15000+PoC漏洞扫描器+90000+规则Port扫描
0x01特性 Vulnerabilities Scan;15000+PoC漏洞扫描;[ 23 ] 种应用弱口令爆破;7000+Web指纹;146种协议90000+规则Port扫描;Fuzz、HW打点、...
Pwn2Own 2023特斯拉Model 3安全漏洞
前言 This article is an introduction to how David Berard and Vincent Dehors discovered and exploited s...