cnbird
cnbird_个人页
cnbird
文章
4015
问答
3
视频
0
个人介绍
阿里云安全专家，主要负责阿里云云产品安全。
擅长的技术
-
发表了文章 2014-09-17
n|u - The Open Security Community
http://www.slideshare.net/null0x00/presentations
-
发表了文章 2014-09-17
Barracuda WSF v4.x - Bypass & Persistent Vulnerabilities
Document Title: =============== Barracuda WSF v4.
-
发表了文章 2014-09-17
CVE-2014-6283: Privilege Escalation Vulnerability and Potential Remote Code Execution in SAP Adaptiv
On May 12, 2014, SAP published updates to Adaptive Server Enterprise versions 15.
-
发表了文章 2014-09-16
开源安全情报
http://www.slideshare.net/Shakacon/kyle-maxwell
-
发表了文章 2014-09-16
splunk源数据恶意程序分析
http://www.slideshare.net/Shakacon/threat-detection-via-metacharacteristic-analysis-of-machine-...
-
发表了文章 2014-09-16
老外的安全加固
http://www.slideshare.net/Shakacon/kevin-cardwell
-
发表了文章 2014-09-16
web恶意攻击分析项目
https://github.com/ahoernecke/ensnare github.com/ahoernecke http://www.
-
发表了文章 2014-09-16
自动化集成扫描思路
http://www.slideshare.net/Shakacon/neil-matatall-automating-application-security-continuous-del...
-
发表了文章 2014-09-16
big data安全数据分析
http://www.slideshare.net/emcacademics/h11031-transformingtraditionalsecuritystrategiesso?qid=b...
-
发表了文章 2014-09-16
List of discrete event simulation software
http://en.wikipedia.org/wiki/List_of_discrete_event_simulation_software http://en.
-
发表了文章 2014-09-16
Amazon.com Stored XSS via Book Metadata
Amazon's Kindle Library, also known as "Manage Your Content and Devices" and "Manage your Kind...
-
发表了文章 2014-09-16
alienvault OTX情报交换系统
http://www.alienvault.com/open-threat-exchange/dashboard
-
发表了文章 2014-09-16
Understanding IE’s New Exploit Mitigations: The Memory Protector and the Isolated Heap
http://securityintelligence.com/understanding-ies-new-exploit-mitigations-the-memory-protector-and-the-isolated-heap/#.
-
发表了文章 2014-09-16
SSRF漏洞利用框架
https://github.com/jayeshchauhan/SKANDA
-
发表了文章 2014-09-16
Script Execution and Privilege Escalation on Jenkins Server
Disclaimer: We would use only existing features of Jenkins, no 'exploits' here.
-
发表了文章 2014-09-16
openIOC
http://www.openioc.org/
-
发表了文章 2014-09-16
linux恶意程序检测和APT检测
https://github.com/rfxn/linux-malware-detect https://code.
-
发表了文章 2014-09-16
Finding Local Admin with the Veil-Framework
http://www.harmj0y.net/blog/penetesting/finding-local-admin-with-the-veil-framework/ ...
-
发表了文章 2014-09-16
shakacon video
https://www.youtube.com/user/ShakaconITConference/videos http://recon.
-
发表了文章 2014-09-16
Tracking Attackers: Honeypot, Part 1 (Honeyd)
http://resources.infosecinstitute.com/tracking-attackers-honeypot-part-1-honeyd/ ...
-
发表了文章 2014-09-16
Introducing Gupt: A Backdoor which uses Wireless network names for command execution
http://www.labofapenetrationtester.com/2014/08/Introducing-Gupt.
-
发表了文章 2014-09-16
NAC PacketFence
http://www.packetfence.org/
-
发表了文章 2014-09-15
短信嗅探
http://www.evil0x.com/posts/492.html http://blog.
-
发表了文章 2014-09-15
e-Commerce Bot Attacks! Learn How To Protect Your Website From Price Scraping
http://www.concise-courses.com/learn/protect-website-price-scraping/ ...
-
发表了文章 2014-09-15
NSA presentation about the TREASUREMAP tool
http://resources.infosecinstitute.com/osint-open-source-intelligence/ http://www.
-
发表了文章 2014-09-14
ElasticSearch 权威指南
https://www.gitbook.io/book/fuxiaopang/learnelasticsearch https://github.
-
发表了文章 2014-09-14
github资料主要是安全和数据可视化
https://github.com/showcases/data-visualization https://github.
-
发表了文章 2014-09-14
A database of PHP security advisories
https://github.com/sensiolabs/security-advisories
-
发表了文章 2014-09-14
Threat Intelligence Quotient Test
https://github.com/mlsecproject/tiq-test https://www.
-
发表了文章 2014-09-14
rdp 安全策略
1、 internet不直接连接 2、双因素认证 3、磁盘映射关闭 4、硬件防火墙设置只允许客户端访问 5、程序运行白名单 6、APPLOCKER http://msdn.
-
发表了文章 2014-09-14
powershell exploit toolkit
https://github.com/OneGet/oneget https://github.
-
发表了文章 2014-09-12
detecting apt activity with network traffic analysis
http://www.trendmicro.com/cloud-content/us/pdfs/security-intelligence/white-papers/wp-detecting-apt-activity-with-network-traffic-analysis.
-
发表了文章 2014-09-11
top ten vps
http://www.hosting-review.com/hosting-directory/top-10-lists/Top-VPS-Hosting-Companies.
-
发表了文章 2014-09-11
Large-scale Monitoring of broadband internet infrastructures lobster
http://www.ist-lobster.org/downloads/index.html ftp://ftp.
-
发表了文章 2014-09-08
Bash: History to Syslog
For those who still ignore, Bash 4 is out for a few days! Bash is the most used shell on UNIX hosts.
-
发表了文章 2014-09-08
开源日志关联系统 opensource log Correlation
http://static.usenix.org/events/lisa10/tech/full_papers/Krizak.
-
发表了文章 2014-09-08
不错的一些大数据分析tips
https://dl.acm.org/results.cfm?h=1&cfid=557536594&cftoken=73828472 http://ieeexplore.
-
发表了文章 2014-09-06
不错的安全书籍
http://www.amazon.cn/Advanced-Persistent-Threat-Hacking-The-Art-and-Science-of-Hacking-Any-Org...
-
发表了文章 2014-09-06
Fingerping web application use png
https://github.com/0xcite/fingerping
-
发表了文章 2014-09-06
githubgrep
https://github.com/HockeyInJune/Contemporary-Automatic-Program-Analysis .
-
发表了文章 2014-09-04
The Bug Bounty List
https://bugcrowd.com/list-of-bug-bounty-programs
-
发表了文章 2014-09-03
true-positive，false-positive，true-negative，false-negative差别
考虑一个二分问题，即将实例分成正类（positive）或负类（negative）。对一个二分问题来说，会出现四种情况。
-
发表了文章 2014-09-02
F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution
http://packetstorm.igor.onlinedirect.bg/1408-exploits/F5_Unauthenticated_rsync_access_to_Remote_Root_Code_Execution.
-
发表了文章 2014-09-02
在CoreOS上运行Kubernetes（一）
Kubernetes是谷歌开源的容器集群管理系统，它提供一个统一的工作流程管理运行在集群中的容器Kubernetes引入容器仓的概念，通过容器仓我们可以把一组容器作为一个逻辑上独立的服务部署。
-
发表了文章 2014-09-02
docker
https://docs.docker.com/userguide/dockerimages/
-
发表了文章 2014-08-31
Cisco Energywise
http://www.cisco.com/web/CN/products/products_netsol/switches/products/energywise/energywise_white_paper01.
-
发表了文章 2014-08-31
powershell exploit post-framework
https://github.com/mattifestation/PowerSploit
-
发表了文章 2014-08-31
blackhat 2013 usa all 93 video
http://www.youtube.com/watch?v=rbeTi7CQF94&list=PLiq_fDYFoqMocM7ADQCTfGAdI9CXA-kUs&index=93 ...
-
发表了文章 2014-08-31
凯文经典书籍
http://product.china-pub.com/3770468#ml http://product.
-
发表了文章 2014-08-31
mailfeet and webfeet
webfeet: https://github.com/nccgroup/WebFEET
暂无更多信息
-
发表了文章
2018-02-06
Microsoft BuleHat 2018 Videos and Slides
-
发表了文章
2018-02-05
From Serialized to Shell :: Auditing Google Web Toolkit
-
发表了文章
2018-02-01
Microsoft Ignite Videos
-
发表了文章
2018-02-01
AWS Reinvent 2017 Security Sessions
-
发表了文章
2018-01-28
Google Patent
-
发表了文章
2018-01-28
GOOGLE CLOUD PLATFORM 安全性
-
发表了文章
2018-01-21
OBIEE Pentest
-
发表了文章
2018-01-20
分布式系统
-
发表了文章
2017-12-06
MTCS Certification Scheme
-
发表了文章
2017-12-03
Attack OGC WFS Implementation
-
发表了文章
2017-11-20
Alictf 2015决赛题目设计和解题思路
-
发表了文章
2017-11-12
Lync server 2013 部署开发常用工具下载
-
发表了文章
2017-08-23
Big Data Secuity Solution
-
发表了文章
2017-08-11
Google漏洞过滤规则研究
-
发表了文章
2017-08-10
INTEL Processor Trace for vulnerability discovery
-
发表了文章
2017-08-04
AWS自动化合规slide
-
发表了文章
2017-08-04
Secure Multi-party Computation
-
发表了文章
2017-08-01
Harvesting the Low-hanging Fruits: Defending Against Automated Large-Scale Cyber-Intrusions by Focus
-
发表了文章
2017-07-29
Blackhat 2017&Defcon 25学习笔记
-
发表了文章
2017-07-25
MapReduce技术的初步了解与学习
滑动查看更多
-
回答了问题
2015-02-02
【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！
Re【安全测试分享】阿里巴巴安全测试专家分享，等你来挑战！ 支持王挺，我是来支持王挺的赞0 踩0 评论0 -
提交了问题
2014-04-30
ECS可以做负载均衡吗
-
回答了问题
2014-04-30
ECS可以做负载均衡吗
ReECS可以做负载均衡吗 好的我去试试赞0 踩0 评论0
滑动查看更多
暂无更多信息