网络安全笔记

DevSecOps中的漏洞管理生命周期 https://is.gd/V6rjB3

https://t.me/caixinsharing

https://mp.weixin.qq.com/s/clrJtUd6AZ7Ert8G1-M4OA

#Github 📃 开箱即用的 Obsidian / Typora 简历 😁 https://github.com/BingyanStudio/LapisCV

检测规则 CVE-2024-3094-p.yara import "elf" rule ELF_Droplet_Object { meta: description = "Droplet object used during xz / liblzma incident" reference = "CVE-2024-3094" author = "Matthias Weckbecker" strings: $1 = { f30f1efa554889f54c89ce5389fb81e7000000804883ec28488954241848894c2410 } condition: elf.machine == elf.EM_X86_64 and ( ( elf.number_of_sections > 100 and elf.number_of_sections <= 242 and for any s in (".text.crc64_resolve", ".text._get_cpuid"): ( for any i in (0 .. elf.number_of_sections): ( ((elf.sections[i].name == s) and (elf.sections[i].type == elf.SHT_PROGBITS)) ) ) ) or $1 ) }

https://bbycroft.net/llm

#红队如何使用apkleaks工具从Android移动应用的APK文件中提取API

#蓝队如何通过使用SpecterInsight工具模拟勒索软件攻击

#红队利用 Linux udev 实现持久化

https://github.com/LLM-Red-Team/qwen-free-api