惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

云风的 BLOG
云风的 BLOG
V
Visual Studio Blog
人人都是产品经理
人人都是产品经理
The GitHub Blog
The GitHub Blog
月光博客
月光博客
T
Tailwind CSS Blog
小众软件
小众软件
Y
Y Combinator Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
P
Proofpoint News Feed
B
Blog RSS Feed
博客园 - 司徒正美
A
About on SuperTechFans
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
博客园 - 聂微东
Microsoft Security Blog
Microsoft Security Blog
Recent Announcements
Recent Announcements
博客园 - Franky
U
Unit 42
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Microsoft Azure Blog
Microsoft Azure Blog
T
The Blog of Author Tim Ferriss
GbyAI
GbyAI
Apple Machine Learning Research
Apple Machine Learning Research

Black Hills Information Security, Inc.

Bad Habits: An ANTISOC Operation Same Problem, Different Angles: When Red Team and Blue Team Actually Talk to Each Other How to Identify and Exploit New Vulnerabilities Swapper – A Pure Regex Match/Replace Burp Extension A Practical Guide to BloodHound Data Collection Network Engineering Basics Signed, Trusted, and Abused: Proxy Execution via WebView2 Getting Started In Pentesting – Advice From The BHIS Pentest Lead Cloud Security: Tips and Resources for Securing the Cloud Lessons From A Chatbot Incident How to Lead Effective Tabletops Understanding GRC: How to Navigate Risks and Compliance Standards The “P” in PAM is for Persistence: Linux Persistence Technique Malware Analysis: How to Analyze and Understand Malware OSINT: How to Find, Use, and Control Open-Source Intelligence What to Do with Your First Home Lab When the SOC Goes to Deadwood: A Night to Remember Social Engineering and Microsoft SSPR: The Road to Pwnage is Paved with Good Intentions Common Cyber Threats Finding the Right Penetration Testing Company Deceptive-Auditing: An Active Directory Honeypots Tool The Curious Case of the Comburglar How to Set Smart Goals (That Actually Work For You) Inside the BHIS SOC: A Conversation with Hayden Covington Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation Why You Got Hacked – 2025 Super Edition Abusing Delegation with Impacket (Part 2): Constrained Delegation Abusing Delegation with Impacket (Part 1): Unconstrained Delegation GoSpoof – Turning Attacks into Intel Model Context Protocol (MCP)
‘Twas the Week Before Hackmas
BHIS · 2019-12-19 · via Black Hills Information Security, Inc.

‘Twas the week before Hackmas
And all through their houses
Not a tester was working
Nor moving their mouses

The findings were listed in reports with care
In hopes that bugfixes would soon be there
The hackers were nestled all snug in their chairs
While bitstreams of 0day flowed through twisted pairs

And Heather on her treadmill desk, and John on a plane,
Had just muted the testers so they could try to stay sane,
When out on the Twitter there arose such a storm
That even the interns were stirred from their dorms

Away to the internet, we flew screaming “WOWZERS”,
Ate up all the bandwidth (with our non-BHIS browsers)
The moon on the breast of the new-fallen snow,
Went totally unnoticed by the hackers below

When what to my wondering eyes did a path beat,
But a felony libelslander and eight clueless retweets
With McAfee’s arrival (he has altcoins to sell)
I knew in a moment that this would not go well

More rapid than Oracle vulns the spectators came
And the internet raged, and shouted, and shamed:
“No disclosure, no research, no Google vuln dev!”
“Yes to export control and online conference reg!”

To the top of the feed! to the blogs big and small!
Now yell away! yell away! yell away all!
As the arguments heated and no-one knew why,
I took just a moment, to look at the sky

And up on the housetop the snowflakes they flew,
Lit by festive lights and the blinky ones too –
And then, in the blinkenlights, I saw just how pretty
The world could be, in this little city

As I blinked once or twice and turned back around,
I realized my phone wasn’t making a sound.
It was silent and dark, something big was afoot,
The internet was gone, completely kaput!

A feed full of tweets flung into the black,
May never result in (not so) clever come-backs.
My eyes – how they twinkled! my dimples, how merry!
As the router’s lights blinked just as red as a cherry

My mouth curled upward, becoming a smile
As the snow just kept falling, all of the while
Not a sysadmin now would leave their cozy home
(Unless they were out in the snow just to roam)

The internet was over, at least for the night
And out with it went our crazed Twitter fight
We were back to being what we were all along:
A whole bunch of hackers, for right or for wrong

As I turned out the lights and went off to bed,
I felt – just for once – I had nothing to dread
Soon we would all return to our work,
But for now, there was nowhere for malware to lurk

So laying one finger on a power strip switch,
My home office was silenced, the darkness like pitch.
With every bit settled, secure for a while,
I whistled to bed, with an ear-to-ear smile.

I made sure to exclaim, though no-one was in sight –
Happy Hackmas to all, and to all a good night!