-
【漏洞预警】Apache Struts2插件高危漏洞(S2-052)
漏洞编号:CVE-2017-9805 漏洞作者:Man Yue Mo <mmo at semmle dot com> 影响版本:Struts 2.5 – Struts 2.5.12 漏洞等级:严重 漏洞简述:当启用 Struts REST的XStream handler去反序列化处理XML请求,可能造成远程代码执行漏洞。 漏洞描述: 当启用 Struts REST的XStre...作者:J0s1ph | 分类:漏洞公布 | 围观:146次发表评论
-
Understanding Presbyopia
Understanding Presbyopia Put a cap on your head and, in effect, you’ve “capped” the heat’s escape route. Your support makes a difference for people, families and entire communities across the globe. They are as follows: performing light hous...作者:J0s1ph | 分类:新闻资讯 | 围观:2,645次Understanding Presbyopia已关闭评论
-
Changing Car Door Locks in Seattle
Changing Car Door Locks in Seattle We offer fast, high-quality locksmithing services in all of Seattle. Do you have store front or physical locations? It is extremely important to have satisfied customers to be successful. Additionally, we won’t take a single momen...作者:J0s1ph | 分类:新闻资讯 | 围观:4,221次Changing Car Door Locks in Seattle已关闭评论
-
渗透测试神器Burp Suite v1.7.13
Burp Suite是一款信息安全从业人员必备的集 成型的渗透测试工具,它采用自动测试和半自动测试的方式,包含了: Proxy,Spider,Scanner,Intruder,Repeater,Sequencer,Decoder,Comparer等工具模块。通 过拦截HTTP/HTTPS的web数据包,充当浏览器和相关应用程序的中间人,进行拦截、修改、重...作者:J0s1ph | 分类:黑客攻防 | 围观:158次
-
一款用于发现SSRF、XXE、XSS漏洞的小工具
Ground-Control(GitHub传送门) 我这个GitHub库中托管的是我在服务器端所部属的一些安全增强脚本,它们可以检测SSRF(服务器端请求伪造),Blind XSS、以及XXE漏洞。目前本项目仍处于更新过程中,因为我现在还在收集相关的脚本。在使用这些脚本之前,我通常会重写脚本中的部分代码或...作者:J0s1ph | 分类:黑客攻防 | 围观:291次