踩大坑了！今天一服务器出现 kdevtmpfsi 挖矿病毒，CPU 跑满，挖掘后终于找到了“天坑”！原来 docker 安装 PHP 网上教程都是 docker run -p 9000:9000 指定端口，但这会将端口直接暴露到公网，黑客能随便搞你！！所以这类容器，必须限制本机访问，创建容器时需 -p 127.0.0.1:9000:9000，否则后患无穷...

#工程师学习 突然觉得那种「大学生计算机考研专业课程」的备考笔记整理很适合已经工作的软件工程师去看，相比去看焦虑文要好不少，有些像读书笔记的整理的感觉，这个仓库整理了作者从2022年6月备考以来的学习408心得，可收藏看，不过我个人不是很赞同用仓库来存文档。 🤖 github.com/ddy-ddy/cs-408

Creating Windows hacking labs has gotten a lot easier with this new tool I've developed: It's a reverse engineering of Microsoft's hidden downloading API - fully automated to always grab the most up-to-date Windows ISO so you never have to do it again! 🚀 github.com/ElliotKillick/…

MIT麻省理工学院关于深度学习方法的入门课程，可应用于机器人等领域！ introtodeeplearning.com 课程描述 一个高效、高强度的训练营，旨在尽快教会你深度学习的基础知识！ 麻省理工学院深度学习方法入门课程，可应用于计算机视觉、自然语言处理、生物学等领域！

Download Free PDF! The Little Book of #DeepLearning: fleuret.org/public/lbdl.pdf ———— #AI #MachineLearning #NeuralNetworks #GenerativeAI #BigData #DataScience #DataScientists

看到一个 Prompt 届的 Github 产品，FlowGPT，flowgpt.com，以开源社区运作方式聚集了上百万的 Prompt Engineers，在上面有逛到非常多实用的 Prompts。 网站还提供了免费的 ChatGPT 调试能力，方便你对 Prompt 做编写、测试、发布和管理工作，发布出来的 Prompt

Introduction to hardware hacking to bypass BIOS passwords Credits CyberCX blog.cybercx.co.nz/bypassing-bios… #hardware #infosec

JUST RELEASED at the #DFIRSummit the #macOS & #iOSForensicAnalysis poster This poster features "Evidence of..." categories that provide key macOS and iOS operating system artifacts that are relevant to digital investigations DOWNLOAD HERE: sans.org/u/1rPB

#工程师工具 推荐一款很牛的用于清除浏览器地址栏里链接无用参数的扩展「ClearURLs」，特别适合强迫症患者使用，让你分享给朋友的地址链接干净又卫生。 chrome.google.com/webstore/detai…

向大家报告，我写了一本《TypeScript 教程》，已经发布在网道，欢迎访问。 我以前写过《JavaScript 教程》和《ES6 教程》，很自然地，一直有人问，有没有《TypeScript 教程》？嗯……现在终于有了。ruanyifeng.com/blog/2023/08/t…

I was taking a walk down memory lane. If you ever want to get a view into some of the history of volatility and #memoryforensics in general, you can read AAron Walters ‘s blog from a while back 😀 tumblr.com/volatility-blog It’s cool to see just how far we’ve come! #dfir

Added AV detection to MemProcFS Memory Forensics FindEvil! These are malwares that Defender on the analyzed system have detected and logged. Thank you 13Cubed for the idea from your excellent memory forensics training! github.com/ufrisk/MemProc…

Happy New Year! I have for you a new #PEbear (v0.6.7) with some of the requested features, such as strings, and patterns searching. Plus other improvements & bugfixes. Check it out! github.com/hasherezade/pe… 🐻💙

Happy New Year! Just released Collect-MemoryDump v1.0 with various enhancements. ARM64 Support, Pagefile Collection w/ Magnet RESPONSE, and much more. #MemoryAnalysis #DFIR github.com/evild3ad/Colle…

Lenovo X1 Carbon Bitlocker Key Sniffing any% Speedrun (42.9 seconds)

#DoubanBookPlus 最近终于有空把插件更新到 1.5.0 了，只有一件事，就是添加了 Anna's Archive 的支持。 Anna's Archive 可以视为 Zlibrary 的超集，拥有比 Zlibrary 更多的图书资源，不需要登录即可下载。希望这次更新可以更好地帮助大家寻找电子书资源，欢迎大家安装或升级！

Windows Thumbnail caches are a mostly unused artifact. Did you know they can point to paths on external systems? (Yes path embedded in thumbcache file, not from win search db) Can be helpful when threat actors actively delete logs and other artifacts! #DFIR

Anthropic 几个核心创始人罕见的一起录了一个播客 详细介绍了他们如何认识然后产生共识最后迫不得已创建公司的事情 整理了一下核心内容笔记： - 创始历程与动机 - 公司文化特点 - 几个联创展望未来 - 有趣的AI历史细节 里面很多以前没说过的事情，强烈建议看看

🦞OpenClaw 极简安全实践指南 (Security Practice Guide) 是面向 OpenClaw 的黑手册。 我尝试了其他一些方式来试图加固 OpenClaw，包括 Skill 方式，但是发现还不如给 OpenClaw 植入一个安全“思想钢印”来的有意思，这个“思想钢印”形成一个 md

Simplylily Baba Banaras™ No, this claim cannot be confirmed. Reuters reported in late Feb that Iran was nearing a deal for CM-302 anti-ship missiles from China (no delivery date or quantity). China’s Foreign Ministry has repeatedly denied any such deal or supply as disinformation. No verified reports