cnbird
cnbird_个人页
cnbird
文章
4017
问答
3
视频
0
个人介绍
阿里云安全专家，主要负责阿里云云产品安全。
擅长的技术
-
发表了文章 2015-01-07
My Favorite Open Source Security Tools
So working at GitHub it is no surprise I believe in and use a lot of open source software.
-
发表了文章 2015-01-07
ebook
http://e-books-pdf.com/computer/page/43/
-
发表了文章 2015-01-06
Video archives of security conferences and workshops
http://contagiodump.blogspot.tw/2015/01/video-archives-of-security-conferences.
-
发表了文章 2015-01-03
网络安全分析取证
1. argus http://qosient.com/argus/ 2.networkmine 3.
-
发表了文章 2014-12-29
攻击者分析平台
http://linkurio.us/cyber-security-how-cisco-use-graph-analytics-to-identify-threats/ http://blogs.
-
发表了文章 2014-12-29
Facebook, Google, and the Rise of Open Source Security Software
http://www.wired.com/2014/10/facebook-builder-osquery/ Facebook chief security officer Joe Su...
-
发表了文章 2014-12-26
近期的安全视频,学习资料
http://www.nosuchcon.org/streaming/video/ https://www.
-
发表了文章 2014-12-17
近期想要入手的书籍
Fraud and Fraud Detection, + Website: A Data Analytics Approach (Wiley Corporate F&A) http://www.
-
发表了文章 2014-12-08
ident-user-enum
http://pentestmonkey.net/tools/user-enumeration/ident-user-enum ...
-
发表了文章 2014-12-08
Google's Application Security Tools For All To Learn With & Use! http://
https://www.google.com/about/appsecurity/tools/
-
发表了文章 2014-12-08
EVERY C99 / C99.PHP SHELL IS BACKDOORED (A.K.A. FREE SHELLS FOR EVERYONE!)
http://thehackerblog.com/every-c99-php-shell-is-backdoored-aka-free-shells/ Earlier I m...
-
发表了文章 2014-12-08
黑客大追踪：网络取证核心原理与实践
http://product.china-pub.com/3770791#ml
-
发表了文章 2014-12-05
ms14-068 poc
wmic useraccount get name,sid http://pcsupport.
-
发表了文章 2014-12-05
Software enumeration using Internet Explorer
We do regularly see software enumeration using Internet Explorer in web infections.
-
发表了文章 2014-12-04
big data security ebook
http://store.elsevier.com/Information-Security-Analytics/Mark-Talabis/isbn-9780128002070/ ...
-
发表了文章 2014-12-04
Mysql Geometric error-based
mysql>SELECT GeometryCollection((select*from(select*from(select group_concat(user,file_priv) from mysql.
-
发表了文章 2014-12-03
JMX学习笔记(一)-MBean
http://blog.csdn.net/qiao000_000/article/details/6061808
-
发表了文章 2014-11-27
security ebooks
http://it-ebooks.info/
-
发表了文章 2014-11-23
Advanced Log Parser Charts Part 1 - Working With Configuration Scripts
http://blogs.msdn.com/b/carloc/archive/2008/08/07/charting-with-logparser.
-
发表了文章 2014-11-18
PHP Execute Command Bypass Disable_functions
http://zone.wooyun.org/content/16631 http://www.
-
发表了文章 2014-11-18
Using Process Monitor to identify possible code injection
In the past, especially learnt from SANS FOR610, I use many tools in performing behavioural analysis of malware.
-
发表了文章 2014-11-12
TWC: Malware Hunting with Mark Russinovich and the Sysinternals Tools
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2014/DCIM-B368#fbid= ...
-
发表了文章 2014-11-11
注册表取证
一.注册表查看导出工具 1. accessdata registry viewer 2. regripper command and gui 3.
-
发表了文章 2014-11-11
ProcDOT, a new way of visual malware analysis.
http://www.procdot.com/index.htm
-
发表了文章 2014-11-10
Scaling the NetScaler
exploit:http://www.exploit-db.com/exploits/35180/ A few months ago I noticed that Citrix p...
-
发表了文章 2014-11-10
WebLogic undocumented hacking
During an external pentest – what a surprise – I found a WebLogic server with no interesting contents.
-
发表了文章 2014-11-10
How to get root access on FireEye OS
http://blog.silentsignal.eu/2014/07/28/how-to-got-root-access-on-fireeye-os/ 1.
-
发表了文章 2014-11-10
网络设备中限制用户命令交互的逃逸
在实际渗透场景中，有很多网络设备我们拿到了root权限后ssh登陆发现有命令执行限制，这是因为ssh接口提供了一个特殊的受限制的命令外壳程序，类似busybox的感觉，他可以允许root用...
-
发表了文章 2014-11-10
js 判断是否安装qq msn等
http://lcx.cc/?i=3065 New Document ...
-
发表了文章 2014-11-07
Breakout detection in the wild
https://blog.twitter.com/2014/breakout-detection-in-the-wild ...
-
发表了文章 2014-11-07
smarty3: CVE-2014-8350: secure mode bypass
Package: smarty3 Version: All below 3.1.21 Severity: important Smarty secure mode should allow...
-
发表了文章 2014-11-06
firmware analysis
binwalk https://github.com/cnbird1999/binwalk firmware-mod-kit https://code.
-
发表了文章 2014-11-05
win7 和 win8的电子书
http://blogs.msdn.com/b/mssmallbiz/archive/2014/07/07/largest-collection-of-free-microsoft-eboo...
-
发表了文章 2014-11-04
Hack turns the Cisco phone on your desk into a remote bugging device
http://arstechnica.com/security/2013/01/hack-turns-the-cisco-phone-on-your-desk-into-a-remote-b...
-
发表了文章 2014-11-03
My Threat Intelligence and Threat Assessment Research Papers Publish
http://blogs.gartner.com/anton-chuvakin/2014/05/15/my-threat-intelligence-and-threat-assessmen...
-
发表了文章 2014-11-02
Speaking at Gartner Catalyst Conference 2014
http://blogs.gartner.com/anton-chuvakin/2014/06/12/speaking-at-gartner-catalyst-conference-2014/ http://www.
-
发表了文章 2014-11-02
Structured Threat Information eXpression
https://stix.mitre.org/ http://www.sans.org/reading-room/whitepapers/warfare/tools-standards-cy...
-
发表了文章 2014-11-02
AirHopper:断网状态下黑客使用FM信号监控电脑信息（含视频）
http://bobao.360.cn/news/detail/730.html
-
发表了文章 2014-11-01
Reflected File Download - A New Web Attack Vector
PLEASE NOTE: As promised, I've published a full white paper that is now available for download...
-
发表了文章 2014-10-31
ruxcon slide
https://ruxcon.org.au/slides/
-
发表了文章 2014-10-31
内核hook工具
systemtap
-
发表了文章 2014-10-31
Managing and Exploring Malware Samples with Viper
Keeping track of all the samples on your plate can become cumbersome and at times, next to imp...
-
发表了文章 2014-10-29
Drupal 7.31 GetShell via /includes/database/database.inc SQL Injection Exploit
http://www.beebeeto.com/pdb/poc-2014-0100/ #!/usr/bin/env python # coding=utf-8 """ Site: http://www.
-
发表了文章 2014-10-29
Uncover Security Design Flaws Using The STRIDE Approach
http://msdn.microsoft.com/en-us/magazine/cc163519.
-
发表了文章 2014-10-27
威胁建模工具
http://www.youtube.com/results?search_query=threat+modeling+tool+2014+ ...
-
发表了文章 2014-10-27
二进制比对工具
http://corelabs.coresecurity.com/index.php?module=Wiki&action=view&type=tool&name=turbodiff ...
-
发表了文章 2014-10-26
GRRCON 2014 video
http://www.securitytube.net/video/11380
-
发表了文章 2014-10-24
Windows API Index
http://msdn.microsoft.com/en-us/library/windows/desktop/ff818516(v=vs.
-
发表了文章 2014-10-23
Storm在实时网络攻击检测和分析的应用与改进
http://www.slideshare.net/hdhappy001/storm-29273863
-
发表了文章 2014-10-22
Testing your Cisco ASA appliance for vulnerabilities with Nmap
Finally finished some scripts that I have been working on for a while.
暂无更多信息
-
发表了文章
2018-02-06
Microsoft BuleHat 2018 Videos and Slides
-
发表了文章
2018-02-05
From Serialized to Shell :: Auditing Google Web Toolkit
-
发表了文章
2018-02-01
Microsoft Ignite Videos
-
发表了文章
2018-02-01
AWS Reinvent 2017 Security Sessions
-
发表了文章
2018-01-28
Google Patent
-
发表了文章
2018-01-28
GOOGLE CLOUD PLATFORM 安全性
-
发表了文章
2018-01-21
OBIEE Pentest
-
发表了文章
2018-01-20
分布式系统
-
发表了文章
2017-12-06
MTCS Certification Scheme
-
发表了文章
2017-12-03
Attack OGC WFS Implementation
-
发表了文章
2017-11-20
Alictf 2015决赛题目设计和解题思路
-
发表了文章
2017-11-12
Lync server 2013 部署开发常用工具下载
-
发表了文章
2017-08-23
Big Data Secuity Solution
-
发表了文章
2017-08-11
Google漏洞过滤规则研究
-
发表了文章
2017-08-10
INTEL Processor Trace for vulnerability discovery
-
发表了文章
2017-08-04
AWS自动化合规slide
-
发表了文章
2017-08-04
Secure Multi-party Computation
-
发表了文章
2017-08-01
Harvesting the Low-hanging Fruits: Defending Against Automated Large-Scale Cyber-Intrusions by Focus
-
发表了文章
2017-07-29
Blackhat 2017&Defcon 25学习笔记
-
发表了文章
2017-07-25
MapReduce技术的初步了解与学习
滑动查看更多
-
回答了问题
2015-02-02
【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！
Re【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！ 支持王挺，我是来支持王挺的赞0 踩0 评论0 -
提交了问题
2014-04-30
ECS可以做负载均衡吗
-
回答了问题
2014-04-30
ECS可以做负载均衡吗
ReECS可以做负载均衡吗 好的我去试试赞0 踩0 评论0
滑动查看更多
暂无更多信息