tag:blogger.com,1999:blog-1441759431140700676.comments2012-01-05T09:26:23.043+08:00Wayne Huangnoreply@blogger.comBlogger234125blogspot/armorize_cht_commentshttp://feedburner.google.comSubscribe with My Yahoo!Subscribe with NewsGatorSubscribe with BloglinesSubscribe with NetvibesSubscribe with GoogleSubscribe with PageflakesSubscribe with PlusmoSubscribe with FeedLoungeSubscribe with The Free DictionarySubscribe with Bitty BrowserSubscribe with Live.comSubscribe with Excite MIXSubscribe with Yourminis.comSubscribe with Attensa for OutlookSubscribe with WebwagSubscribe with netomat HubSubscribe with Daily RotationSubscribe with Podcast ReadySubscribe with FlurrySubscribe with ParticlsAdd to Any Feed ReaderSubscribe with fwickitag:blogger.com,1999:blog-1441759431140700676.post-68407573948381755172012-01-05T09:26:23.044+08:002012-01-05T09:26:23.044+08:00@Kevin 阿碼的 HackAlert 是全球最大的惡意網站監測平台之一，我們團隊每天會分析掃瞄結果。譬如賽門鐵克的全球掛馬監控系統，就是我們提供並維運的。<br /><br />像這種的案例很頻繁，看我們有沒有時間寫部落格而已。我們寫出來的也不盡然為最「大」的事件，只是剛好那時有空寫。不然如果說一有大型網站被掛馬，我們就寫，那其實是寫不完的。也有很多我們研究與分析的案例，是不適合公開的。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=CpiR3_2g5g4:PkqN5dtpYD4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=CpiR3_2g5g4:PkqN5dtpYD4:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=CpiR3_2g5g4:PkqN5dtpYD4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=CpiR3_2g5g4:PkqN5dtpYD4:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/CpiR3_2g5g4" height="1" width="1"/>Wayne Huanghttp://www.armorize.comnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/10/speedtestnet-openxsecurity-sphere-2012.html?showComment=1325726783044#c6840757394838175517tag:blogger.com,1999:blog-1441759431140700676.post-90368461708395772752012-01-04T12:17:09.884+08:002012-01-04T12:17:09.884+08:00my question is,,how do you guys find out speedtest.net was injected?<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=lIM8ZmNRZJ4:AUX45lAMZ1c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=lIM8ZmNRZJ4:AUX45lAMZ1c:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=lIM8ZmNRZJ4:AUX45lAMZ1c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=lIM8ZmNRZJ4:AUX45lAMZ1c:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/lIM8ZmNRZJ4" height="1" width="1"/>kevin tingnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/10/speedtestnet-openxsecurity-sphere-2012.html?showComment=1325650629884#c9036846170839577275tag:blogger.com,1999:blog-1441759431140700676.post-17537966091951311712011-09-20T19:37:21.703+08:002011-09-20T19:37:21.703+08:00不錯的公司，業界有名，大推!.....可惜，國軍online中...<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=HKN1AY_M-pw:sCjU35YOze4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=HKN1AY_M-pw:sCjU35YOze4:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=HKN1AY_M-pw:sCjU35YOze4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=HKN1AY_M-pw:sCjU35YOze4:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/HKN1AY_M-pw" height="1" width="1"/>Alex Fanghttp://www.facebook.com/people/Alex-Fang/100000258337443noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316518641703#c1753796609195131171tag:blogger.com,1999:blog-1441759431140700676.post-41893499241150379762011-09-20T19:36:06.585+08:002011-09-20T19:36:06.585+08:00不錯的公司，業界有名，大推!!!<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=n5H4NlpBlJI:2K9_J0DQC5M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=n5H4NlpBlJI:2K9_J0DQC5M:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=n5H4NlpBlJI:2K9_J0DQC5M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=n5H4NlpBlJI:2K9_J0DQC5M:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/n5H4NlpBlJI" height="1" width="1"/>Alex Fanghttp://www.facebook.com/people/Alex-Fang/100000258337443noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316518566585#c4189349924115037976tag:blogger.com,1999:blog-1441759431140700676.post-4387487390190777952011-09-20T19:33:41.816+08:002011-09-20T19:33:41.816+08:00不錯的公司，業界有名，大推!!!，可惜....還在國軍online...<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=p9QXBPy--L8:TIlsCl9lFW8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=p9QXBPy--L8:TIlsCl9lFW8:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=p9QXBPy--L8:TIlsCl9lFW8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=p9QXBPy--L8:TIlsCl9lFW8:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/p9QXBPy--L8" height="1" width="1"/>Mimi806002noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316518421816#c438748739019077795tag:blogger.com,1999:blog-1441759431140700676.post-66301183464259486072011-09-18T16:59:28.855+08:002011-09-18T16:59:28.855+08:00你們有沒有成績跟我一點關係都沒有，何需怪你們?<br />http://www.ptt.cc/bbs/Soft_Job/M.1315313970.A.799.html<br />一個堂堂CEO/CTO說他一個人做了三個人的報告卻違反證據<br /><br />→ armorize:@boylee defcon他們第一次去，是去年，不是今年，那一次 09/11 23:42<br />→ armorize:並不難，他們去的第一年，我一個人寫三份投稿，投去三份 09/11 23:45<br />→ armorize:都上。有些人是真的有技術，但是這階段不一定合適，有些 09/11 23:46<br />→ armorize:人，則是...不說吧，點到為止。<br />→ teadrinker:另外剛好最近在研究SQL, 看到去年defcon的一個影片, 09/13 00:34<br />→ teadrinker:http://youtu.be/Qr5J0DoKkPo?t=26s 09/13 00:35<br />→ teadrinker:好像不是阿碼CTO做的研究啊? <br /><br />不但一開始就說這顏就是別人做的(自己打自己嘴)，看看這台風明顯不但研究不是自己做的 Slides說不定也不是，照著Slides念完一場演講看了真丟臉。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=8DdpdY32lfI:14WGyARlGvg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=8DdpdY32lfI:14WGyARlGvg:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=8DdpdY32lfI:14WGyARlGvg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=8DdpdY32lfI:14WGyARlGvg:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/8DdpdY32lfI" height="1" width="1"/>StevenChengnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316336368855#c6630118346425948607tag:blogger.com,1999:blog-1441759431140700676.post-74105134090880490362011-09-14T22:31:29.144+08:002011-09-14T22:31:29.144+08:00Startup徵人當然得格外用心。當初Jobs要成立Apple時，Woz一開始是拒絕他而決定留在HP的。另外，我們很有成績啊！你沒成績不能怪我們，別急著對號入座。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Rqr7uUYQ8cg:YxjmI1zYFI8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Rqr7uUYQ8cg:YxjmI1zYFI8:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Rqr7uUYQ8cg:YxjmI1zYFI8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=Rqr7uUYQ8cg:YxjmI1zYFI8:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/Rqr7uUYQ8cg" height="1" width="1"/>Wayne Huanghttp://www.armorize.comnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316010689144#c7410513409088049036tag:blogger.com,1999:blog-1441759431140700676.post-8633968534505196442011-09-14T21:37:00.204+08:002011-09-14T21:37:00.204+08:00剛才我們投資人，Skype創辦團隊之一，在FB上分享一個文章給我，這邊與大家分享：「Sequoia合夥人建議startup:閉嘴」。http://read.bi/oPoJZK 他說startup兩大優勢：隱密性跟速度。文章是昨天刊的，所以我不是抄他的 :P Sequoia投資案例包含：Google, Yahoo, Apple, Cisco, Oracle。號稱以各fund為單位來看的話，還沒賠過。創投是否真的賺，不與置評，但是這篇文章我很認同。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=-gZ_hBYaJgs:lZ2f4fAKscE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=-gZ_hBYaJgs:lZ2f4fAKscE:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=-gZ_hBYaJgs:lZ2f4fAKscE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=-gZ_hBYaJgs:lZ2f4fAKscE:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/-gZ_hBYaJgs" height="1" width="1"/>Wayne Huanghttp://www.armorize.comnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316007420204#c863396853450519644tag:blogger.com,1999:blog-1441759431140700676.post-33007894553204809562011-09-14T21:34:10.060+08:002011-09-14T21:34:10.060+08:00可以，開發產品，不一定需要有資安經驗，進來才學亦可。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=xNFW3dDkJEM:TR9t1pMXIF8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=xNFW3dDkJEM:TR9t1pMXIF8:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=xNFW3dDkJEM:TR9t1pMXIF8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=xNFW3dDkJEM:TR9t1pMXIF8:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/xNFW3dDkJEM" height="1" width="1"/>Wayne Huanghttp://www.armorize.comnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1316007250060#c3300789455320480956tag:blogger.com,1999:blog-1441759431140700676.post-89808238002838663672011-09-11T02:56:59.884+08:002011-09-11T02:56:59.884+08:00這是找人文還是罵人文?<br /><br />拜讀了後覺得這個管理者相當有趣啊，似乎挺獨裁的但是就是不知有沒有Steve Jobs的本領。不過我確定的是Steve Jobs不需要寫這種東西找人，大家就搶著加入了。因為人家有成績嘛....<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=XRA40zx4rwo:wWiD5bcf2VY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=XRA40zx4rwo:wWiD5bcf2VY:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=XRA40zx4rwo:wWiD5bcf2VY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=XRA40zx4rwo:wWiD5bcf2VY:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/XRA40zx4rwo" height="1" width="1"/>Guestnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1315681019884#c8980823800283866367tag:blogger.com,1999:blog-1441759431140700676.post-31261920658442348822011-09-09T10:12:57.391+08:002011-09-09T10:12:57.391+08:00請問無資訊安全經驗可嗎?<br />有一年ERP程式修改經驗。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Ap6_3hVMzSI:9Fn8udoloSQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Ap6_3hVMzSI:9Fn8udoloSQ:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Ap6_3hVMzSI:9Fn8udoloSQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=Ap6_3hVMzSI:9Fn8udoloSQ:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/Ap6_3hVMzSI" height="1" width="1"/>Independentqqppnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/09/blog-post.html?showComment=1315534377391#c3126192065844234882tag:blogger.com,1999:blog-1441759431140700676.post-6978150525060569642011-09-05T13:45:45.345+08:002011-09-05T13:45:45.345+08:00@新晨 那是我自己寫的一隻小程式，錄製 demo 方便，網路上的工具很多，都比較強，可以看這裡：http://technet.microsoft.com/zh-tw/library/dd125466.aspx<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Hrj4ljmyPeo:FRUZoXwEgw8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Hrj4ljmyPeo:FRUZoXwEgw8:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Hrj4ljmyPeo:FRUZoXwEgw8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=Hrj4ljmyPeo:FRUZoXwEgw8:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/Hrj4ljmyPeo" height="1" width="1"/>Wayne Huanghttp://www.armorize.comnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/08/willysycom-oscommerce.html?showComment=1315201545345#c697815052506056964tag:blogger.com,1999:blog-1441759431140700676.post-1733502195515245662011-09-05T12:36:09.975+08:002011-09-05T12:36:09.975+08:00test<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=JZfZdOmdrtk:j3VpDOLk4Ek:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=JZfZdOmdrtk:j3VpDOLk4Ek:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=JZfZdOmdrtk:j3VpDOLk4Ek:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=JZfZdOmdrtk:j3VpDOLk4Ek:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/JZfZdOmdrtk" height="1" width="1"/>Wayne Huanghttp://www.armorize.comnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/08/k985ytv.html?showComment=1315197369975#c173350219551524566tag:blogger.com,1999:blog-1441759431140700676.post-31904027799130243132011-08-22T23:32:30.742+08:002011-08-22T23:32:30.742+08:00可以請教阿瑪:<br />MONITOR DRIVE的程式,市面上有類似的的可以使用嗎?<br /><br />因為那個似乎是阿瑪自行開發的.<br />但是功能很實用,所以想問問看!感謝阿瑪回復搂!<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=-m6kLOXIhhs:jj9STIS1wJs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=-m6kLOXIhhs:jj9STIS1wJs:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=-m6kLOXIhhs:jj9STIS1wJs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=-m6kLOXIhhs:jj9STIS1wJs:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/-m6kLOXIhhs" height="1" width="1"/>新晨http://www.blogger.com/profile/13411774495202697742noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/08/willysycom-oscommerce.html?showComment=1314027150742#c3190402779913024313tag:blogger.com,1999:blog-1441759431140700676.post-28777539431623645552011-08-22T12:13:24.466+08:002011-08-22T12:13:24.466+08:00這是一篇好文章,分析的很詳細.<br />每次看阿碼的文章,對資安認知有很大的幫助.<br />謝謝!<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=qxXTOPHhGPk:gMvpV4FlFbM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=qxXTOPHhGPk:gMvpV4FlFbM:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=qxXTOPHhGPk:gMvpV4FlFbM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=qxXTOPHhGPk:gMvpV4FlFbM:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/qxXTOPHhGPk" height="1" width="1"/>Anonymousnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/08/willysycom-oscommerce.html?showComment=1313986404466#c2877753943162364555tag:blogger.com,1999:blog-1441759431140700676.post-26948057302338441052011-08-12T15:24:37.206+08:002011-08-12T15:24:37.206+08:00分拆解釋詳細,個人對此非專業,<br />只能瞭解大概, 也感覺是上專業的一課 ~<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=J8NP-6PlY2Y:PWq4FKfnf-I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=J8NP-6PlY2Y:PWq4FKfnf-I:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=J8NP-6PlY2Y:PWq4FKfnf-I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=J8NP-6PlY2Y:PWq4FKfnf-I:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/J8NP-6PlY2Y" height="1" width="1"/>Anonymousnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/07/openxorg-dyndns-personal-shield-pro.html?showComment=1313133877206#c2694805730233844105tag:blogger.com,1999:blog-1441759431140700676.post-22024970120206051432011-06-05T11:32:11.575+08:002011-06-05T11:32:11.575+08:00Sony was hacked again. I think this is a good chance for Armorize to promote your product (Code Secure?). :P<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=aQm8jJASTNs:SAcN0DQgh3s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=aQm8jJASTNs:SAcN0DQgh3s:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=aQm8jJASTNs:SAcN0DQgh3s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=aQm8jJASTNs:SAcN0DQgh3s:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/aQm8jJASTNs" height="1" width="1"/>woodynoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/05/blog-post.html?showComment=1307244731575#c2202497012020605143tag:blogger.com,1999:blog-1441759431140700676.post-50339349254811161672011-05-11T14:41:29.419+08:002011-05-11T14:41:29.419+08:001. <br />exploit pack是一個工具組，裡面包含了好幾組exploit code(攻擊碼)<br />透過exploit pack的幫忙，攻擊者可以同時打好幾個漏洞(一組攻擊碼對應一個漏洞)<br /><br />就像在本次事件中，我們觀察到g01pack有針對以下漏洞進行攻擊: CVE-2010-1423、CVE-2010-1885、CVE-2009-0927、CVE-2006-0003<br /><br />2. <br />一般來說加殼的目的有以下幾點:<br />a. 讓pe檔(exe檔，即一般執行檔)的size變小<br />b. 反逆向工程，讓逆向工程較不容易進行<br />c. 躲避以特徵碼比對為主的防毒軟體偵測<br /><br />3. <br />混碼方面，為了規避偵測，常見的方法是利用一些字串的控制(比如substr、replace)，自己定義的function name(比如oiahc替換eval)，甚至自己定義一些加密演算法等等<br /><br />至於本篇文章中所提到的&quot;變形&quot;，是因為我們在分析這個案例時，發現攻擊碼本身不像我們先前的，這次的攻擊碼主要的差異有以下幾點:<br />a. 在攻擊碼中安插一些無意義的字元，造成分析上的困難，比如mayForce=12153;mayForce+=212;，但是該變數根本未拿來使用<br />b. 一些function name也不像之前我們分析其他案例時，有幾個特徵可以判斷是攻擊哪一個漏洞(比如: MDAC、IEPEER)，取而代之的是看起來沒有意義的名字<br />c. 沒有使用到一些常見的攻擊碼特徵，比如大量類似字串的重覆、URL encode、HEX encode等等<br />透過以上三個特性，會造成一些透過特徵比對的技術較難有效偵測<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Azk4B5HclFc:uHK0OrDYvrU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Azk4B5HclFc:uHK0OrDYvrU:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=Azk4B5HclFc:uHK0OrDYvrU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=Azk4B5HclFc:uHK0OrDYvrU:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/Azk4B5HclFc" height="1" width="1"/>Colahttp://www.blogger.com/profile/03976107571726560330noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/05/goalcom.html?showComment=1305096089419#c5033934925481116167tag:blogger.com,1999:blog-1441759431140700676.post-51307626608460242162011-05-11T00:26:44.505+08:002011-05-11T00:26:44.505+08:00感謝你的分享<br />小弟想請問筆者幾個問題<br />1.什麼是 exploit pack<br />2.upx加殼的目的是? 修改哪些header?<br />3.除了混碼之外，攻擊碼本身就使用了有別於以往的方式來規避偵測<br />請問筆者常見規避方法有哪些,可以舉簡單例子嗎<br /><br />麻煩指導 謝謝<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=ZdRVp6AX5bk:mx7fru97WvE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=ZdRVp6AX5bk:mx7fru97WvE:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=ZdRVp6AX5bk:mx7fru97WvE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=ZdRVp6AX5bk:mx7fru97WvE:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/ZdRVp6AX5bk" height="1" width="1"/>Anonymousnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/05/goalcom.html?showComment=1305044804505#c5130762660846024216tag:blogger.com,1999:blog-1441759431140700676.post-74555906040118168152011-04-29T10:36:30.889+08:002011-04-29T10:36:30.889+08:00問題是短網址服務商不會知道它是惡意連結。可以考慮用 Fiddler 來觀察，但是，會需要&quot;瀏覽&quot;該連結。最好還是需要培養正確的上網安全觀念，以及建立良好的上網環境(瀏覽器+附加元件)。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=YElqs2rT8us:rAFl-Dc_U78:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=YElqs2rT8us:rAFl-Dc_U78:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=YElqs2rT8us:rAFl-Dc_U78:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=YElqs2rT8us:rAFl-Dc_U78:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/YElqs2rT8us" height="1" width="1"/>Crane_Kuhttp://www.blogger.com/profile/00147754162769411489noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/04/surfing-secure-for-url-shortening.html?showComment=1304044590889#c7455590604011816815tag:blogger.com,1999:blog-1441759431140700676.post-25530483023745080622011-04-19T12:41:21.158+08:002011-04-19T12:41:21.158+08:00短網址真的很可怕，有時候遇到不信任的人丟給我都會先wget檢查一下，阿碼有其他更好的偵測方式嗎？我覺得提供短網址服務商應該要提供過濾機制，讓惡意連結無法通過。<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=OFhLPEBfWTQ:mpPNVwpJZEo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=OFhLPEBfWTQ:mpPNVwpJZEo:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=OFhLPEBfWTQ:mpPNVwpJZEo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=OFhLPEBfWTQ:mpPNVwpJZEo:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/OFhLPEBfWTQ" height="1" width="1"/>blackbinghttp://blog.blackbing.netnoreply@blogger.comhttp://armorize-cht.blogspot.com/2011/04/surfing-secure-for-url-shortening.html?showComment=1303188081158#c2553048302374508062tag:blogger.com,1999:blog-1441759431140700676.post-66612069671396591802011-02-28T21:02:55.360+08:002011-02-28T21:02:55.360+08:00應該整合個 FB 的「讚」吧！！！<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=lLoHijlJ2p8:FFHHoWCBndI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=lLoHijlJ2p8:FFHHoWCBndI:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=lLoHijlJ2p8:FFHHoWCBndI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=lLoHijlJ2p8:FFHHoWCBndI:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/lLoHijlJ2p8" height="1" width="1"/>Ryanhttp://www.blogger.com/profile/09014037574791724137noreply@blogger.comhttp://armorize-cht.blogspot.com/2011/02/surfing-secure-for-httpsssl.html?showComment=1298898175360#c6661206967139659180tag:blogger.com,1999:blog-1441759431140700676.post-12697425600831640392011-02-02T20:40:02.079+08:002011-02-02T20:40:02.079+08:00http://www.bleepingcomputer.com/virus-removal/remove-hdd-plus<br /><br />上面的網頁說Malwarebytes&#39; Anti-Malware可以清除<br />Malwarebytes&#39; Anti-Malware有多國語系 可免費使用<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=wh6NgAD8BQ0:PiwtX7YG7u4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=wh6NgAD8BQ0:PiwtX7YG7u4:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=wh6NgAD8BQ0:PiwtX7YG7u4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=wh6NgAD8BQ0:PiwtX7YG7u4:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/wh6NgAD8BQ0" height="1" width="1"/>FreeXDnoreply@blogger.comhttp://armorize-cht.blogspot.com/2010/12/hdd-plusopenx.html?showComment=1296650402079#c1269742560083164039tag:blogger.com,1999:blog-1441759431140700676.post-25711969894117256382010-12-28T07:21:32.987+08:002010-12-28T07:21:32.987+08:00請問中了HDD PLUS怎麼解決??<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=xOU-_CXN57Q:lCRkk5UG_jY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=xOU-_CXN57Q:lCRkk5UG_jY:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=xOU-_CXN57Q:lCRkk5UG_jY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=xOU-_CXN57Q:lCRkk5UG_jY:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/xOU-_CXN57Q" height="1" width="1"/>Anonymousnoreply@blogger.comhttp://armorize-cht.blogspot.com/2010/12/google%E5%8F%8Amicrosoft%E7%9A%84%E5%85%A9%E5%A4%A7%E5%BB%A3%E5%91%8A%E5%B9%B3%E5%8F%B0%E9%81%AD%E6%8E%9B%E9%A6%AC%E5%88%A9%E7%94%A8%E6%95%A3%E6%92%AD%E6%83%A1%E6%84%8F%E8%BB%9F%E4%BB%B6.html?showComment=1293492092987#c2571196989411725638tag:blogger.com,1999:blog-1441759431140700676.post-36491060523678702472010-12-26T21:59:47.577+08:002010-12-26T21:59:47.577+08:00請問中了HDD PLUS怎麼解決..<div class="feedflare"> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=NY0IiNiHUGk:sSc3skYDxUQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=NY0IiNiHUGk:sSc3skYDxUQ:63t7Ie-LG7Y"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?d=63t7Ie-LG7Y" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?a=NY0IiNiHUGk:sSc3skYDxUQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/blogspot/armorize_cht_comments?i=NY0IiNiHUGk:sSc3skYDxUQ:V_sGLiPBpWU" border="0"></img></a> </div><img src="http://feeds.feedburner.com/~r/blogspot/armorize_cht_comments/~4/NY0IiNiHUGk" height="1" width="1"/>Anonymousnoreply@blogger.comhttp://armorize-cht.blogspot.com/2010/12/hdd-plusopenx.html?showComment=1293371987577#c3649106052367870247