cnbird_个人页

redline教程

http://www.youtube.com/watch?v=6p7FqSav6Ho http://www.

威胁情报分析工具

https://code.google.com/p/collective-intelligence-framework/wiki/ThreatIntelligenceTools ...

基于hadoop恶意样本分析

http://www.slideshare.net/jasontrost/binary-24851796 https://github.

IRMA Incident Response Malware Analysis

http://irma.quarkslab.com/

Advisory: Oracle Forms 10g Unauthenticated Remote Code Execution (CVE-2014-4278)

Vulnerability Description: Oracle Forms 10g contains code that does not properly validate user input.

SSLStrip 的未来 —— HTTPS 前端劫持

http://www.cnblogs.com/index-html/p/ssl-frontend-hijack.

SSH 安全性和配置入门

http://www.ibm.com/developerworks/cn/aix/library/au-sshsecurity/ ...

kafka strom elasticsearch demo

https://github.com/mvalleavila/Kafka-Storm-ElasticSearch

storm组件学习

场景 伴随着信息科技日新月异的发展，信息呈现出爆发式的膨胀，人们获取信息的途径也更加多样、更加便捷，同时对于信息的时效性要求也越来越高。

开源日志收集系统比较

docker app 打包笔记

docker介绍 https://www.docker.io/ 我的需求 此次希望将要发布的app和执行环境进行打包, app使用python django开发。

Twiki Perl Code Execution

This is an advisory for TWiki administrators: The debugenableplugins request parameter allows arbitrary Perl code execution.

badusb exploit

https://github.com/adamcaudill/Psychson

nginx apache lighttpd 禁止某些目录执行php

If your web server is apache ,you can add follow line: php_flag engine off We want disab...

Shakacon LLC video

https://www.youtube.com/playlist?list=UUIvytJLrQS3x8lTusvTLaOQ 推荐里面的 Threat Detection via Met...

rhel 6.3 多物理网卡，多虚拟网卡桥接

http://rajaruan.blog.51cto.com/2771737/955479

pcap输出5元组和DNS记录

http://stackoverflow.com/questions/10207423/code-to-analyze-pcap-file http://www.

【Twitter Storm系列】flume-ng+Kafka+Storm+HDFS 实时系统搭建

一直以来都想接触Storm实时计算这块的东西，最近在群里看到上海一哥们罗宝写的Flume+Kafka+Storm的实时日志流系统的搭建文档，自己也跟着整了一遍，之前罗宝的文章中有一些要注意...

Centralized Logging Architecture

http://jasonwilder.com/blog/2013/07/16/centralized-logging-architecture/ In Centralized Loggi...

ElasticSearch video

http://www.elasticsearch.org/videos/

brocon 2014 video and ppt

https://www.bro.org/community/brocon2014.html

Pwnage with Human Interface Devices

https://code.google.com/p/kautilya/

Firing up OpenAppID

The purpose of this post is to provide guidance to Snort users who would like to try out Snort 2.

Meterpreter-Scripts windows ad pentest tools

https://github.com/darkoperator/Meterpreter-Scripts

powershell adsi

https://www.google.com/?gws_rd=ssl#q=powershell+adsi

Using Software Restriction Policies to Protect Against Unauthorized Software

http://technet.microsoft.com/en-us/library/bb457006.

Remote Server Administration Tools windows

https://www.google.com/?gws_rd=ssl#q=rsat

BSides Las Vegas 2014 Videos

http://www.irongeek.com/i.php?page=videos/bsideslasvegas2014/mainlist http://www.

OpenSSH <=6.6 SFTP misconfiguration exploit for 64bit Linux

http://seclists.org/fulldisclosure/2014/Oct/35 OpenSSH lets you grant SFTP access to users wit...

opensoc

http://opensoc.github.io/https://www.youtube.com/watch?v=UKgjd4ttg8o http://www.

sdl辅助工具

https://teammentor.net/teamMentor http://www.denimgroup.

shmoocon 2014 video

https://www.youtube.com/user/ChRiStIaAn008/playlists

取证学习资料DVD

http://www.infiniteskills.com/training/learning-computer-forensics.

Windows Application Compatibility

http://www.forensicswiki.org/wiki/Windows_Application_Compatibility ...

Zero Wine: Malware Behavior Analysis

http://zerowine.sourceforge.net/ http://whips.

Cross Site Port Attacks - XSPA - Part 2

http://www.riyazwalikar.com/2012/11/cross-site-port-attacks-xspa-part-2.

blackhat 2014 usa video

https://www.youtube.com/playlist?list=UUbbgnifxfH-nqx6z9XQ963Q ...

第三方支付风控系统的演进过程

http://www.infoq.com/cn/presentations/third-party-payment-process-control-system ...

MALICIOUS DOCUMENTS – PDF ANALYSIS IN 5 STEPS

Mass mailing or targeted campaigns that use common files to host or exploit code have been and are a very popular vector of attack.

csaw ctf坐等writeup(更新writeup已经公布)

https://ctf.isis.poly.edu/ https://github.com/ctfs/write-ups/tree/master/csaw-ctf-2014 http://shankaraman.

Stealing unencrypted SSH-agent keys from memory

If you've ever used SSH keys to manage multiple machines, then chances are you've used SSH-agent.

编写基于PHP扩展库的后门

http://drops.wooyun.org/tips/3003 https://github.

通过dns进行文件下载

http://drops.wooyun.org/tools/1344 http://www.

kippo-graph

https://github.com/ikoniaris/kippo-graph

owasp appsec 2014 usa online video

http://2014.appsecusa.org/2014/about/live-streaming/ http://vimeo.

twitter 监控登陆活动

http://vicenteaguileradiaz.com/download/tinfoleak/tinfoleak-1.

About Two Recently Patched IBM DB2 LUW Vulnerabilities

IBM recently released patches for three security vulnerabilities affecting various versions of DB2 for Linux, Unix and Windows.

web恶意分析

http://www.lastline.com/papers/large-scale-detection.

硬件小tips

http://www.rtl-sdr.com/rtl-sdr-tutorial-analyzing-gsm-with-airprobe-and-wireshark/ http://meal.

PAX and grsecurity

http://pax.grsecurity.net/docs/