9/19王團研究室—防毒必招-零時差守護之術：必修課程-認識USB病毒

•Download as KEY, PDF•

1 like•560 views

研究主題：防毒必招-零時差守護之術 1.必修課程：認識USB病毒 2.菁英課程：主動防禦、即時截毒─防毒雙刀流沒有萬能的防毒─不可不知的外部救援妙招 3. OPEN BOOK隨堂測驗 4. Q&A時間詳情請看：http://www.techbang.com.tw/?p=15373

Technology News & Politics

USB Kavo.exe

Taso.exe
Tavo.exe

Avpo.exe Kavo.exe
Mnso.exe

Mmvo.exe Amvo.exe

USB Kavo.exe

Taso.exe
Tavo.exe

Avpo.exe Kavo.exe
Mnso.exe

Mmvo.exe Amvo.exe
2007 2008 B USB

Conficker
✤

P2P MD6 4096bits

✤

✤

Windows

Conficker
✤

P2P MD6 4096bits

✤

✤

Windows

✤

2009 Conﬁcker

Windows XP

Windows XP Home Tweak UI http://tinyurl.com/h8zs

This was my presentation for the OWASP Omaha Feb 2018 meeting. The abstract for the presentation was: "Deserialization attacks are a hot topic in security, but often times these attacks seem like magic. Exploitation of these attacks tend to happen in complex systems that require knowledge in the setup of all the things. To help you better understand why and how these attacks work, we’re using an intentionally broken system with a quick and easy setup.".

Ato Zguest7aefb1f

Password reset

Avnish Sharma

2A soporte y mantenimiento #descarga de instaladores de software

alejand47104271

Cheating in Computer GamesIftach Ian Amit

Making windows 7 bootable usb device

Ravi Kumar Lanke

Care and Feeding of Healthy Computers

Lorens Tech Solutions

Maintaining Your Computer

JimWhite

Maintaining Your Computer presentation given at Socastee, South Carolina public library by Jim White of WhiteHouseComputing. Covers cleaning, determining and fixing reasons for running slow, determining low memory (RAM) conditions, low (hard disk storage) memory conditions, freeing space on hard disk, adding RAM memory, determining maximum possible and practical RAM memory size and type for your specific computer, how to defrag hard drive, keeping fixes and patches up with Windows Update, and doing backup.

Return of the Command Line: New Text Interfaces

David Noble

Windows 7 installation stepsDarshini Parikh

Webcam app ppt

Rohit Ranjan

Screencasting Matrix

Michael Sensiba

Алексей Мисник - USB устройства для пентеста

HackIT Ukraine

USB-устройства, такие как клавиатуры и мыши, могут быть использованы для взлома персональных компьютеров в качестве потенциального нового класса атак, которые обходят все известные механизмы защиты. Я покажу все типы USB атак и вы увидите эффективность USB атак на практике.

What happens when firefox crashes?

Erik Rose

Follow a Firefox crash from its genesis in a collapsing browser process through the dizzying array of collection, storage, and reporting systems that make up Socorro, our open-source crash collector. Enjoy war stories of weird, interlocking failures, and see how we nevertheless continue to fulfill our mandate: “Never lose a crash.” Observe some patterns that emerged from this system which can be useful in yours.

44CON London 2015 - Is there an EFI monster inside your apple?

44CON

Is there an EFI monster inside your apple? by Pedro Vilaça - CODE BLUE 2015

CODE BLUE

A few months ago I publicly disclosed an Apple EFI firmware zero day. It was a very powerful bug allowing direct access to the EFI firmware from the operating system. EFI rootkits are some of the most powerful and most interesting rootkits. Because they work at a very low level they can play a lot of tricks to hide themselves from forensics and persist for a long time. EFI monsters are a bit like jaguars, stealthy and rarely seen by humans. This doesn't mean they do not exist. EFI monsters are most certainly part of spy agencies rootkits catalog. Very few tools exist to chase them. This talk is about introducing you to the EFI world so you can also start to chase these monsters. EFI world might look scary but it's a bit easier than you think and a lot of fun. Thunderstrike 2 (to be presented at BlackHat) is a fine example of the power of EFI rootkits and the problems they present.

How to-create-a-dos-bootable-usb-pendrive

parag dhok

If you are searching for how to create a bootable USB pendrive you might find this article useful.For computer booting we usually boot from a CD or DVD which is a traditional way for computer boot.There are many drawbacks using a CD or DVD for computer booting the bootable CD or DVD normally gets corrupted or become damaged as its very hard to maintain or keep safe from scratches. So nowadays many professional and home users create bootable pen drive for installing new and fresh operating systems to their computer or laptops. You can find many articles on web when you google them but here I am going to share every possible way to make a bootable USB pen drive or flash drive.

KonBoot-Help

Mohammed Sinan

De-Gunking Your Computer

JimWhite

JS Fest 2019. Sebastian Golasch. The Universal Serial Web

JSFestUA

As a web developer it´s easy to feel intimidated by the world of hardware hacking and the physical web, we have to leave our comfort zone and need to get familiar with a completely new development environment. But not anymore, thanks to wonderful possibilities that the WebUSB Api brings to our browsers. In this talk I will give an intro to the endless wonders we can encounter in the hardware world through our browser windows. Aside from leaerning the basics of USB and serial port communication, we´ll paint on USB displays, live tweet to receipt printers, control an Arduino, steal data from Android phones and many more… The only limit is your imagination.

USB 2005

A Selim Salman

Universalserialweb

asciidisco

What's hot

Deserialization with the JavaScript for the lulz

Andrew Freeborn

Ato Zguest7aefb1f

Password reset

Avnish Sharma

2A soporte y mantenimiento #descarga de instaladores de software

alejand47104271

Cheating in Computer GamesIftach Ian Amit

Making windows 7 bootable usb device

Ravi Kumar Lanke

What's hot (6)

Deserialization with the JavaScript for the lulz

Ato Z

Password reset

2A soporte y mantenimiento #descarga de instaladores de software

Cheating in Computer Games

Making windows 7 bootable usb device

Similar to 9/19王團研究室—防毒必招-零時差守護之術：必修課程-認識USB病毒

Care and Feeding of Healthy Computers

Lorens Tech Solutions

Maintaining Your Computer

JimWhite

Return of the Command Line: New Text Interfaces

David Noble

Windows 7 installation stepsDarshini Parikh

Webcam app ppt

Rohit Ranjan

Screencasting Matrix

Michael Sensiba

Алексей Мисник - USB устройства для пентеста

HackIT Ukraine

What happens when firefox crashes?

Erik Rose

44CON London 2015 - Is there an EFI monster inside your apple?

44CON

Is there an EFI monster inside your apple? by Pedro Vilaça - CODE BLUE 2015

CODE BLUE

How to-create-a-dos-bootable-usb-pendrive

parag dhok

KonBoot-Help

Mohammed Sinan

De-Gunking Your Computer

JimWhite

JS Fest 2019. Sebastian Golasch. The Universal Serial Web

JSFestUA

USB 2005

A Selim Salman

Universalserialweb

asciidisco

Puppy430 tutorial-englishmimarsinantl

The Universal Serial Web @HolyJS

asciidisco

Pecha Kuchawucas

Pecha kuchawucas

Similar to 9/19王團研究室—防毒必招-零時差守護之術：必修課程-認識USB病毒 (20)

Care and Feeding of Healthy Computers

Maintaining Your Computer

Return of the Command Line: New Text Interfaces

Windows 7 installation steps

Webcam app ppt

Screencasting Matrix

Алексей Мисник - USB устройства для пентеста

What happens when firefox crashes?

44CON London 2015 - Is there an EFI monster inside your apple?

Is there an EFI monster inside your apple? by Pedro Vilaça - CODE BLUE 2015

How to-create-a-dos-bootable-usb-pendrive

KonBoot-Help

De-Gunking Your Computer

JS Fest 2019. Sebastian Golasch. The Universal Serial Web

USB 2005

Universalserialweb

Puppy430 tutorial-english

The Universal Serial Web @HolyJS

Pecha Kucha

Pecha kucha

Recently uploaded

GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024

Neo4j

Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf

Paige Cruz

Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack. While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack. I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:

Secstrike : Reverse Engineering & Pwnable tools for CTF.pptx

nkrafacyberclub

Free Complete Python - A step towards Data Science

RinaMondal9

20240605 QFM017 Machine Intelligence Reading List May 2024

Matthew Sinclair

GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...

Neo4j

Dr. Sean Tan, Head of Data Science, Changi Airport Group Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.

Microsoft - Power Platform_G.Aspiotis.pdf

Uni Systems S.M.S.A.

Monitoring Java Application Security with JDK Tools and JFR Events

Ana-Maria Mihalceanu

GraphSummit Singapore | Graphing Success: Revolutionising Organisational Stru...

Neo4j

Sudheer Mechineni, Head of Application Frameworks, Standard Chartered Bank Discover how Standard Chartered Bank harnessed the power of Neo4j to transform complex data access challenges into a dynamic, scalable graph database solution. This keynote will cover their journey from initial adoption to deploying a fully automated, enterprise-grade causal cluster, highlighting key strategies for modelling organisational changes and ensuring robust disaster recovery. Learn how these innovations have not only enhanced Standard Chartered Bank’s data infrastructure but also positioned them as pioneers in the banking sector’s adoption of graph technology.

Large Language Model (LLM) and it’s Geospatial Applications

Rohit Gautam

Securing your Kubernetes cluster_ a step-by-step guide to success !

KatiaHIMEUR1

Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster. However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks. In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.

Essentials of Automations: The Art of Triggers and Actions in FME

Safe Software

In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation. We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios. Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!

Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...

James Anderson

Effective Application Security in Software Delivery lifecycle using Deployment Firewall and DBOM The modern software delivery process (or the CI/CD process) includes many tools, distributed teams, open-source code, and cloud platforms. Constant focus on speed to release software to market, along with the traditional slow and manual security checks has caused gaps in continuous security as an important piece in the software supply chain. Today organizations feel more susceptible to external and internal cyber threats due to the vast attack surface in their applications supply chain and the lack of end-to-end governance and risk management. The software team must secure its software delivery process to avoid vulnerability and security breaches. This needs to be achieved with existing tool chains and without extensive rework of the delivery processes. This talk will present strategies and techniques for providing visibility into the true risk of the existing vulnerabilities, preventing the introduction of security issues in the software, resolving vulnerabilities in production environments quickly, and capturing the deployment bill of materials (DBOM). Speakers: Bob Boule Robert Boule is a technology enthusiast with PASSION for technology and making things work along with a knack for helping others understand how things work. He comes with around 20 years of solution engineering experience in application security, software continuous delivery, and SaaS platforms. He is known for his dynamic presentations in CI/CD and application security integrated in software delivery lifecycle. Gopinath Rebala Gopinath Rebala is the CTO of OpsMx, where he has overall responsibility for the machine learning and data processing architectures for Secure Software Delivery. Gopi also has a strong connection with our customers, leading design and architecture for strategic implementations. Gopi is a frequent speaker and well-known leader in continuous delivery and integrating security into software delivery.

RESUME BUILDER APPLICATION Project for students

KAMESHS29

DevOps and Testing slides at DASA Connect

Kari Kakkonen

GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using Deplo...

James Anderson

Elizabeth Buie - Older adults: Are we really designing for our future selves?

Nexer Digital

Uni Systems Copilot event_05062024_C.Vlachos.pdf

Uni Systems S.M.S.A.

FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf

FIDO Alliance

Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI

Vladimir Iglovikov, Ph.D.

Presented by Vladimir Iglovikov: - https://www.linkedin.com/in/iglovikov/ - https://x.com/viglovikov - https://www.instagram.com/ternaus/ This presentation delves into the journey of Albumentations.ai, a highly successful open-source library for data augmentation. Created out of a necessity for superior performance in Kaggle competitions, Albumentations has grown to become a widely used tool among data scientists and machine learning practitioners. This case study covers various aspects, including: People: The contributors and community that have supported Albumentations. Metrics: The success indicators such as downloads, daily active users, GitHub stars, and financial contributions. Challenges: The hurdles in monetizing open-source projects and measuring user engagement. Development Practices: Best practices for creating, maintaining, and scaling open-source libraries, including code hygiene, CI/CD, and fast iteration. Community Building: Strategies for making adoption easy, iterating quickly, and fostering a vibrant, engaged community. Marketing: Both online and offline marketing tactics, focusing on real, impactful interactions and collaborations. Mental Health: Maintaining balance and not feeling pressured by user demands. Key insights include the importance of automation, making the adoption process seamless, and leveraging offline interactions for marketing. The presentation also emphasizes the need for continuous small improvements and building a friendly, inclusive community that contributes to the project's growth. Vladimir Iglovikov brings his extensive experience as a Kaggle Grandmaster, ex-Staff ML Engineer at Lyft, sharing valuable lessons and practical advice for anyone looking to enhance the adoption of their open-source projects. Explore more about Albumentations and join the community at: GitHub: https://github.com/albumentations-team/albumentations Website: https://albumentations.ai/ LinkedIn: https://www.linkedin.com/company/100504475 Twitter: https://x.com/albumentations