Friendly Reminder: ZIP Metadata is Not Encrypted, (Mon, Oct 2nd) ZIP archives store compressed files including their metadata (filesize, date/time, ...). When a con... 2023-10-2 14:36:36 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu crc32 pkzip zipdump educated mimikatz

Analyzing MIME Files: a Quick Tip, (Sun, Oct 1st) In my blog post "Quickpost: Analysis of PDF/ActiveMime Polyglot Maldocs" I explain how to search th... 2023-10-1 15:51:42 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu emldump activemime analysis microsoft

Simple Netcat Backdoor in Python Script, (Sat, Sep 30th) Why reinvent the wheel? We are all lazy and, if we have a tool that offers some interesting capabil... 2023-9-30 15:3:16 | 阅读: 15 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ncat archivo wqdaw chdir nombre

Are You Still Storing Passwords In Plain Text Files?, (Fri, Sep 29th) "Infostealer" malware have been in the wild for a long time now. Once the computer's victim is infe... 2023-9-29 15:35:31 | 阅读: 20 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu passwords yesterday xameco isc freelance

ISC Stormcast For Friday, September 29th, 2023 https://isc.sans.edu/podcastdetail/8680, (Fri, Sep 29th) 2023-9-29 10:15:2 | 阅读: 14 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers isc feeds stormcast podcasts

IPv4 Addresses in Little Endian Decimal Format, (Thu, Sep 28th) If you look at the XML EventData of Windows events like 1002 (DHCP error), you will see something l... 2023-9-28 13:45:44 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu endian decimal recipe cyberchef recipes

ISC Stormcast For Thursday, September 28th, 2023 https://isc.sans.edu/podcastdetail/8678, (Thu, Sep 28th) 2023-9-28 10:0:2 | 阅读: 9 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers 28th mastodon

ISC Stormcast For Wednesday, September 27th, 2023 https://isc.sans.edu/podcastdetail/8676, (Wed, Sep 27th) 2023-9-27 10:0:2 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds papers isc stevens

Apple Releases MacOS Sonoma Including Numerous Security Patches, (Tue, Sep 26th) CVE-2023-40384 [important] AirportA permissions issue was addressed with improved redact... 2023-9-27 04:30:9 | 阅读: 14 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu addressed moderate memory privileges bypass

ISC Stormcast For Tuesday, September 26th, 2023 https://isc.sans.edu/podcastdetail/8674, (Tue, Sep 26th) 2023-9-26 20:10:2 | 阅读: 12 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu papers isc feeds ssh

A new spin on the ZeroFont phishing technique, (Tue, Sep 26th) Last week, I came across an interesting phishing e-mail, in which a text written in a font with zer... 2023-9-26 17:13:25 | 阅读: 14 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing ffffff 2023t6 employment trustworthy

ISC Stormcast For Monday, September 25th, 2023 https://isc.sans.edu/podcastdetail/8672, (Mon, Sep 25th) 2023-9-25 10:0:2 | 阅读: 10 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc feeds papers diary

YARA Support for .LNK Files, (Sun, Sep 24th) Published: 2023-09-24Last Updated: 2023-09-24 23:40:24 UTCby Didier Stevens (Version: 1)The upc... 2023-9-25 07:40:24 | 阅读: 7 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens candidate senior

Scanning for Laravel - a PHP Framework for Web Artisants, (Sat, Sep 23rd) Today while reviewing my honeypot logs, I noticed an HTTP request for a directory this week I had n... 2023-9-24 02:16:11 | 阅读: 22 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc honeypot 3129 captured ipinfo