happer

scu，头秃师，永恒的Bug制造者，上推特看看喜欢的人和事，友好人士

[happer @wuliiic]

@wuyiertu 那肯定是大猛1辣

[0xor0ne @0xor0ne]

Overview of GLIBC heap exploitation techniques
Excellent writeup by @0xricksanchez

https://t.co/W68gcn9fAR

#glibc #exploit #cybersecurity

[Shubham Sharma @Shubham_pen]

Top 6 Load Balancing Algorithms Every Developer Should Know
Credit: @bytebytego

#cybersecurity #pentesting #informationsecurity #hacking #DataSecurity #CyberSec #bugbountytips #Linux #websecurity #cybersecurityawareness

[Tw93 @HiTw93]

#工程师学习 假如你想入门 Web 前端开发，可以试试微软推出的这个「Web Development for Beginners」，很适合初学者，提供的全面的 12 周课程，通过简单项目的方式学习前端基础知识，累计 24 个课时包括课前和课后测验、详细的书面指导、解决方案、作业等。
🤖 https://t.co/CTcwn7JZxv

[0xor0ne @0xor0ne]

Type confusion bugs, container_of() macros, Linux kernel
Very cool research!

Blog post: https://t.co/tg0qaJpGmd
Paper: https://t.co/FJuDl4NAEJ
GitHub: https://t.co/P8swSsTajI

#Linux #kernel #vulnerability

[Alex Xu @alexxubyte]

How does Chrome work?

The diagram below shows the architecture of a modern browser. It is based on our understanding of “Inside look at modern web browser” published by the chrome team.

There are in general 4 processes: browser process, renderer process, GPU process, and plugin process.

🔹 Browser process controls address bar, bookmarks, back and forward buttons, etc.
🔹 Renderer process controls anything inside of the tab where a website is displayed.
🔹 GPU process handles GPU tasks.
🔹 Plugin process controls the plugins used by the websites.

The browser process coordinates with other processes.

When Chrome runs on powerful hardware, it may split each service in the browser process into different threads, as the diagram below shows. This is called Servicification.

Now let’s go through the steps when we enter a URL in Chrome.

Step 1: The user enters a URL into the browser. This is handled by the UI thread.

Step 2: When the user hits enter, the UI thread initiates a network call to get the site content.

Steps 3-4: The network thread goes through appropriate network protocols and retrieves the content.

Step 5: When the network thread receives responses, it looks at the first few bytes of the stream. If it is an HTML file, it is passed to the renderer process by the browser process.

Steps 6-9: An IPC is sent from the browser process to the renderer process to commit the navigation. A data pipe is established between the network thread and the renderer process so that the renderer can receive data. Once the browser process hears confirmation that the commit has happened in the renderer process, the navigation is complete and the document loading phase begins.

🔹 Over to you: Why does Chrome assign each tab a renderer process?

Reference:
developer .chrome .com/blog/inside-browser-part1/

–
Subscribe to our weekly newsletter to get a Free System Design PDF (158 pages): https://t.co/uc5M7CdXXC

[0xor0ne @0xor0ne]

Excellent guide for learning the basics of Make (and Makefiles)

https://t.co/nt5RXZj2OZ

#make #makefile #infosec #cybersecurity

[Luke Stephens (hakluke) @hakluke]

SSRF vulnerabilities and where to find them 🪲🔍👇

https://t.co/2IjsVtLqWx

[🇸🇦 Murtada Bin Abdullah (Rood) @0x_rood]

TOP 10 SSRF parameters

?dest={target}
?redirect={target}
?uri={target}
?path={target}
?continue={target}
?url={target}
?window={target}
?next={target}
?data={target}
?site={target}

#bugbountytips #BugBounty

[0xor0ne @0xor0ne]

(1/2)
Excellent series by @LordNoteworthy explaining how virtualization on x86 works

Intro to Virtualization: https://t.co/kuDRlu1fnm
VMWare and Full Virtualization using Binary Translation: https://t.co/OlqHuul7df

#virtualization #hacking #infotech #infosec #learning

[BINSEC Team @ Université Paris-Saclay, CEA, List @BinsecTool]

Are fuzzers guided enough❓
▶️ Do they keep enough seeds, as not all interesting inputs improve branch coverage?
▶️ How to provide finer-grained guidance without changing all fuzzers?

Our @acm_tosem paper on finer-grained fuzzing is now at https://t.co/G0WqiUmA4u

A thread ⬇️

[沉默的未知 @hylwr]

这个工具可以用chatGPT直接翻译整本书，并输出成epub格式 https://t.co/9S098Q730D

[酱紫表 @pengchujin]

我看过中文讲解 DNS 最透彻的文章，推荐下。@isukkaw的博客内容非常丰富精彩，认真看能收获学习到很多。https://t.co/yDOWC7hRzL

[happer @wuliiic]

mark 准备学习一哈

[Akemi Homua @RealAkemiHomura]

LLVM Pass系列的第二篇终于写完了，好累...上午写了一一段时间晚上回家又写了一段时间，也不知道写了多久
https://t.co/gARixiq0Ri

[happer @wuliiic]

@jamella_hoshino 这波是我连考试资格都没有

[luolei @luoleiorg]

今儿学习 Anki 相关，搜到一篇《可能是让你受益匪浅的英语进阶指南》，作者是程序员，从「认知、单词、听力、阅读、口语」 几个章节，文档化地介绍英语学习相关的经验，索引了不少线上资源（里面不少 Youtube 资源值得推荐）。 适合互联网从业者（偏程序员）进阶用。https://t.co/22QECkl2LT

[ahhhhfs @abskoop]

Software-Engineering-at-Google

一位用户翻译的：谷歌的软件工程 中文版

保留英文同时加上中文翻译

该书主要讲解 Google 技术团队

在「软件工程」领域的实践

👉 https://t.co/Y1qzHNH8EL

[ahhhhfs @abskoop]

剑指 Offer：LeetBook《图解算法数据结构》配套代码仓

帮助学者在算法学习的道路上扬��起航

👉 https://t.co/3ypIwxqSFK

[happer @wuliiic]

完全体会不到后入的快感...