[原创]starctf oob
[原创]starctf oob
2026-09-23 归档
今日共收录 1513 条安全情报，包含 580 个 CVE，548 篇安全通告，以及 93 篇研究论文。
← 返回归档列表[原创]基于MCP协议的x32dbg自动化调试平台设计与实现
[原创]基于MCP协议的x32dbg自动化调试平台设计与实现
[原创]透视 ZCode：基于逆向与动态调试，Git 全量源码上传事件分析
[原创]透视 ZCode：基于逆向与动态调试，Git 全量源码上传事件分析
[原创]基于 Trace 的 VMP 还原实践文档
[原创]基于 Trace 的 VMP 还原实践文档
Android App WebView JSBridge任意页面凭证窃取漏洞挖掘案例分析
Android App WebView JSBridge任意页面凭证窃取漏洞挖掘案例分析
【Web安全】GWT-RPC 逆向实战：混淆调用还原与请求重构
【Web安全】GWT-RPC 逆向实战：混淆调用还原与请求重构
基于Claude+多工具MCP搭建AI辅助Android逆向分析工具链
基于Claude+多工具MCP搭建AI辅助Android逆向分析工具链
山东航空AI逆向-为何我们常说总有些东西是AI代替不了的？
山东航空AI逆向-为何我们常说总有些东西是AI代替不了的？
[原创]Kasada KPSDK：协议采集
[原创]Kasada KPSDK：协议采集
[原创]关于某宝手表版本 apk 逆向分析过程
[原创]关于某宝手表版本 apk 逆向分析过程
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and cont
Introducing CAIRN: Frontier tracking for AI-integrated malware
Talos is releasing CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.
ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)
ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)
Macfinger ClickFix campaign, (Tue, Sep 22nd)
Introduction
The Truth about GET and HTTP Standards, (Tue, Sep 22nd)
On Friday, Xavier talked about the newly introduced HTTP Query method. This new method was introduced to allow "GET" req
ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)
ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP fi
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe-7731" that masquerades as
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it trig