SEARCH KEYWORD -- customer service manageme



  Python Deserialization Attack Introduction: How to Build a Python Pickle Bomb

This article introduces an old and classic unsecured Python data serialization feature (the pickle library) and demonstrates how a red team attacker can exploit it to create a malicious binary or text data file that executes remote code or commands upon deserialization. The following attack flow diagram illustrates this process: We will follow 3 steps with the program code to show how Deserialization Attacks Work:   [ Step1 ] Crafting Malicious Data: An attacker crafts a malicious payloa...

       2024-07-07 03:08:22

  SIEM Big Data Visualization [03]:Graph-Based SIEM Log Analysis Dashboard

Program Design Purpose: The purpose of this program is to develop a Graph-Based SIEM (System Information and Event Management) dashboard that visualizes network communication patterns by processing and analyzing logs from IDS, firewalls, host computers, and other security devices. This dashboard will help security analysts quickly identify and investigate potential threats by using a Cytoscape-style Node-Edge graph for intuitive data representation. The program is an angular plug in which can i...

       2024-10-26 04:31:11

  IoT System Cyber Attack Case Study 02: Python Deserialization Attack and Library Hijacking Attack

Project Design Purpose: The objective of this cyber attack case study is to develop a workshop that demonstrates how a red team attacker can permanently compromise a people detection radar IoT device. The attack path is achieved through a series of attacks, including traffic eavesdropping, data deserialization attacks, web shell attacks, remote command/code execution, and Python library hijacking attacks. This case study is intended for IoT and data security professional training, aiming to ill...

       2024-07-14 01:40:09

  Privileged users get removed from database in GoDaddy shared hosting

GaDaddy is a famous web hosting platform where many people put their websites on its platform. If one has low budget and wanna a shared hosting, you can buy the service at GoDaddy and share some hosting resource with others. In such cases, there would be resource limit based on different plans. In this post, we will discuss one scenario which caused our application down caused by database usage on shared hosting plan and hope it helps readers who encounter similar issues. The issue we encounter...

   CPANEL,DATABASE,GODADDY,PRIVILEGED USER     2021-05-25 23:06:50

  IBM acquires Ustream to propel its cloud business

On January 21, 2016, IBM acquired Ustream, a leading live and on-demand video solution company, to propel its cloud service business. This acquisition will make IBM capable of providing enterprise live video stream service to the world. With this, a new member joining the IBM cloud service family. Ustream provides cloud-based video streaming to enterprises and broadcasters for everything from corporate keynotes to live music concerts. The company streams live and on-demand video to about 80 mil...

   IBM,CLOUD,IBM CLOUD,USTREAM     2016-01-23 06:18:36

  How to check a port is taken by which program on Linux

Lots of you may have encountered some error message stating that the port has been taken by another program while trying to start a program on Linux. And you would want to know which program takes the port you want to use. This post will provide some feasible ways to check out which program is taking a specific port. lsof -i:[port] lsof is the command to list open files on Linux. And if you know more about Linux you should get to know everything on Linux is a file even including networ...

   LINUX,PORT,NETSTAT,LSOF     2018-08-12 04:27:57

  Baidu is in a deadly crisis

In past few days, there was some news about Baidu(China's Google) which put this search engine giant in China in a devastating position. The news is about that the owners of a Tieba(Similar to Google Group) were replaced by a sponsored organization without notifying the original owners. This irritated the original owners of the Tieba and also the public. People are complaining that Baidu is doing something ridiculous and evil. The name of the Tieba group which was sold by Ba...

   BAIDU,NEWS,CHINA     2016-01-13 07:56:17

  First impression of Github Copilot

It has been some time since I heard about the new generation of AI powered coding assistant -- Github Copilot. Don't get chance to experience it until obtained the tech preview access recently. So this post will document some first impression while using it. For now, this tool is only supported in VSCode and it can support various different programming languages. To enable it, just need to search and install the Github Copilot extension within VSCode. Once that is enabled, you will find that whe...

   GITHUB COPILOT,FIRST IMPRESSION     2021-08-13 22:45:31

  Certificate is invalid for localhost in Chrome

...

   CHROME,LOCALHOST,HTTPS,CERTIFICATE,ELASTICSEARCH     2022-03-16 08:21:27