Buaq.Net – Telegram

Buaq.Net

2.23K subscribers

115K links

https://buaq.net

Download Telegram

About

Blog

Apps

Platform

2.23K subscribers

如何使用goGetBucket扫描和发现AWS S3 Bucket
https://www.freebuf.com/articles/container/370983.html
https://unsafe.sh/go-171258.html

如何使用goGetBucket扫描和发现AWS S3 Bucket - FreeBuf网络安全行业门户

goGetBucket是一款针对AWS S3 Bucket的渗透测试与安全研究工具。

59 views10:58

推荐策略产品必备技能之推荐系统框架（上）
https://www.woshipm.com/pd/4705227.html
https://unsafe.sh/go-147098.html

推荐策略产品必备技能之推荐系统框架（上） | 人人都是产品经理

编辑导语：推荐策略产品的必备技能之一：推荐系统框架，可能有的同学还不太了解，作者简单地分享了一些相关知识，我们一起来看一下。本模块的目标：了解推荐系统框架，以及这套架构的演进了解推荐系统框架中的各个模块的功能了解推荐系统的数据流一、推荐系统架构组成模

61 views11:10

Felo 实时翻译 – 基于 AI 的免费实时翻译应用(GPT-4)[iOS]
https://www.appinn.com/felo-translator/
https://unsafe.sh/go-171484.html

Felo 实时翻译 - 基于 AI 的免费实时翻译应用(GPT-4)[iOS] - 小众软件

Felo 实时翻译（Felo Translator）是一款基于 AI 的免费实时翻译应用，目前仅发布了 iOS 版本。使用时只需打开应用，它就能以对话的形式，实时识别并相互翻译两种语言，无论是国际旅行、跨境商务沟通，还是单纯学习外语，都非常适合，就像是你的私人翻译。@Appinn

65 views11:24

每周蓝军技术推送（2023.7.1-7.7）
http://mp.weixin.qq.com/s?__biz=MzkyMTI0NjA3OA==&mid=2247491789&idx=1&sn=c78e40dca784fd075fff035b581010ad&chksm=c18420dcf6f3a9ca72b9a4803c164b901cafea6990e878689dcdf96a3d4d82cadd8e8496e85f#rd
https://unsafe.sh/go-171475.html

Weixin Official Accounts Platform

每周蓝军技术推送（2023.7.1-7.7）

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

59 views11:52

Pwning Adobe Reader Multiple Times with Malformed Strings
http://programlife.net/2020/04/29/pwning-adobe-reader-multiple-times-with-malformed-strings/
https://unsafe.sh/go-142457.html

Pwning Adobe Reader Multiple Times with Malformed Strings

这次我在 HITB Lockdown Livestream 上发表了题为《Pwning Adobe Reader Multiple Times with Malformed Strings》的演讲，该演讲本来是为 HITB 2020 Amsterdam 准备的，但由于受疫情影响，主办方被迫取消了原来的会议安排，转而在 YouTube 上举办了一次免费的在线会议。

54 views12:07

东方财富APP“宕机”，导致股票无法交易
http://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651220298&idx=2&sn=35287d71e0efe0c3375d331e10f1c89e&chksm=bd1dfbc18a6a72d75aa75a2c25ac1173b373d5b15e54c97cab2ae3375a2d4eb86752c2e54c7c#rd
https://unsafe.sh/go-154542.html

Weixin Official Accounts Platform

东方财富APP“宕机”，导致股票无法交易

3月21日上午，许多网友反映App无法正常登录交易。

52 views12:12

『VulnHub 系列』AI: Web: 2 靶机-Walkthrough
http://mp.weixin.qq.com/s?__biz=MzkxNDAyNTY2NA==&mid=2247501587&idx=4&sn=9653bd6397b1aa04426872b78059879c&chksm=c1763abcf601b3aa12c608c84e599670fc204d742eddbad38e3680d256215ac774bb4b1fef79#rd
https://unsafe.sh/go-154716.html

Weixin Official Accounts Platform

『VulnHub 系列』AI: Web: 2 靶机-Walkthrough

现在只对常读和星标的公众号才展示大图推送，建议大家能把渗透安全团队“设为星标”，否则可能就看不到了啦！Par

55 views12:12

PHP安全编码
https://www.virzz.com/2016/11/12/php_coding_safely.html
https://unsafe.sh/go-144020.html

61 views12:15

[原创]The simplest Windows driver written in rust
https://bbs.pediy.com/thread-277769.htm
https://unsafe.sh/go-171257.html

[原创]The simplest Windows driver written in rust-编程技术-看雪-安全社区|安全招聘|kanxue.com

65 views12:18

Nessus 5.2 XMLRPC Automation
https://nileshkapoor.blogspot.com/2014/01/nessus-52-xmlrpc-automation.html
https://unsafe.sh/go-164484.html

Nessus 5.2 XMLRPC Automation

Recently, I was trying to use my previously automated Nessus Automation scripts and detected they aren’t working on latest Nessus 5.2 XML...

68 views12:20

Windows Kernel Exploitation Basics - Part 4 : Stack-based Buffer Overflow exploitation (bypassing cookie)
https://poppopret.blogspot.com/2011/07/windows-kernel-exploitation-basics-part_16.html
https://unsafe.sh/go-164047.html

Windows Kernel Exploitation Basics - Part 4 : Stack-based Buffer Overflow exploitation (bypassing cookie)

In this article, we'll exploit the Stack-based Buffer Overflow that is present into the DVWDDriver when we pass a too big buffer to the dr...

69 views12:21

Advanced Windows TaskScheduler Playbook - Part.3 from RPC to lateral movement
http://www.zcgonvh.com/post/Advanced_Windows_Task_Scheduler_Playbook-Part.3_from_RPC_to_lateral_movement.html
https://unsafe.sh/go-153934.html

60 views12:25

我被狗咬了。。。
http://mp.weixin.qq.com/s?__biz=MzU1NzY3NjM4Mg==&mid=2247506625&idx=2&sn=53c557daca1665bae55609f6589d8ff8&chksm=fc30b8f0cb4731e6320b930bdc1cac3e8443b4ed74c088b23d334bfb215d4860a68970770839#rd
https://unsafe.sh/go-150569.html

Weixin Official Accounts Platform

我被狗咬了。。。

64 views12:34

1day漏洞反推技巧实战(2) - 飘渺红尘✨
https://www.cnblogs.com/piaomiaohongchen/p/15215885.html
https://unsafe.sh/go-143128.html

1day漏洞反推技巧实战(2) - 飘渺红尘✨ - 博客园

学习存货(2) CVE-2018-11784简单分析之反推的魅力看着挺有趣的,简单分析下: 通过搜索tomcat漏洞找到: http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.91 修改了这两个文件,我们看java

63 views12:39

深度拆解：一文讲透云集商业模式的本质是什么（下）
https://www.woshipm.com/marketing/4053653.html
https://unsafe.sh/go-134436.html

深度拆解：一文讲透云集商业模式的本质是什么（下） | 人人都是产品经理

作为一家新兴的电商公司，云集的高速发展离不开其会员的“社交裂变”。但是这背后也存在诸多争议：云集的模式到底是啥？云集模式是否涉嫌传销？会员制社交电商是否具有真正的社会价值？本文作者梳理了云集的发展之路，对其代理制度和会员分配机制展开了深入分析，与大家分享。 2

60 views12:50

Badsecrets - A Library For Detecting Known Secrets Across Many Web Frameworks
http://www.kitploit.com/2023/07/badsecrets-library-for-detecting-known.html
https://unsafe.sh/go-171490.html

KitPloit - PenTest & Hacking Tools

Badsecrets - A Library For Detecting Known Secrets Across Many Web Frameworks

58 views13:01

Differential fuzz testing upgradeable smart contracts with Diffusc
https://blog.trailofbits.com/2023/07/07/differential-fuzz-testing-upgradeable-smart-contracts-with-diffusc/
https://unsafe.sh/go-171488.html

The Trail of Bits Blog

Differential fuzz testing upgradeable smart contracts with Diffusc

On March 28, 2023, SafeMoon, a self-styled “community-focused DeFi token” on Binance Smart Chain, lost the equivalent of $8.9 million in Binance Coin BNB to an exploit in a liquidity pool. The exploit leveraged a simple error introduced in an upgrade to SafeMoon’s…

62 views13:01

本周看什么 | 最近值得一看的 9 部作品
https://sspai.com/post/80914
https://unsafe.sh/go-171487.html

少数派 - 高品质数字消费指南

本周看什么 | 最近值得一看的 9 部作品 - 少数派

☕️TL;DR近期佳作推荐：[电影]八角笼中、[美剧]战士第三季、[台剧]八尺门的辩护人、[韩剧]恶鬼、[日剧]再会了，美好时光、[国产]古相思曲、[纪录片]闪闪的儿科医生、[动画]命运/奇异赝品-黎 ...

72 views13:01

关于内容社区产品的一些思考框架
https://www.woshipm.com/operate/5612644.html
https://unsafe.sh/go-131158.html

关于内容社区产品的一些思考框架 | 人人都是产品经理

社区本质是链接人与人的工具，内容社区是链接「人」与「内容」的社交平台。核心在于打造平台价值、服务，组织好人与内容。一定程度上可以理解为用户与内容的「容器」，通过产品及数据策略能力挖掘信息交流价值，链接不同身份及不同阶段的用户，通过人群及内容互动讨论产生更深度的

72 views13:16

Debugging with gdb - Fixing a NULL Pointer Dereference in dhcpcd
https://www.archcloudlabs.com/projects/gdb-debugging-1/
https://unsafe.sh/go-171412.html

Arch Cloud Labs

Debugging with gdb - Fixing a NULL Pointer Dereference in dhcpcd

About the Project Several tutorials exist on how to leverage the GNU Debugger (GDB) to debug misbehaving applications. However, a majority of these blogs just show commands to run that poke at memory addresses, and don’t show the process of resolving said…

68 views13:42