本文推荐七个2021年值得关注的云安全开源工具。

In this video we will see following:
1. How to install AFLplusplus?
2. What are the different build options it have?
3. How to fuzz a simple C program with it.

Download AFLplusplus from here:
https://github.com/AFLplusplus/AFLplusplus

Sample C program mentioned…

Windows access token manipulation attacks are well known and abused from an offensive perspective, but rely on an extensive body of arcane Windows security internals: logon sessions, access tokens, UAC, and network authentication protocols, such as Kerberos…

Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. In the attacks observed, threat actors used this vulnerability to access on-premises Exchange servers, which…

While Kubernetes has many advantages, it also brings new security challenges.

Last December, we sent out a call to the community to help us shape ATT&CK for Containers as part of a Center for Threat-Informed Defense…

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware. - nomi-sec/PoC-in-GitHub

本文是我在探索和学习ATT&CK框架过程中，搭建本地实验环境的粗略过程，和尝试复现ATT&CK Evaluations中APT29的评估过程。

Downloads the netinstall or the live iso by torrent, http or ftp

Detect Tactics, Techniques & Combat Threats. Contribute to rabobank-cdc/DeTTECT development by creating an account on GitHub.

Exchange Server support tools and scripts. Contribute to microsoft/CSS-Exchange development by creating an account on GitHub.

How is attack&defence simulation automation done? Verify and control your Security and SOC teams 24/7. This attack was previously blocked…

Cobalt Strike servers 192.151.234.160 - 192.151.234.190 - Cobalt Strike servers 192.151.234.160 - 192.151.234.190