Xiang Li | 李想

概述 在本文中，我们报告了MaginotDNS，这是针对同时充当递归解析器和转发器（称为CDNS）的DNS服务器的强大缓存投毒攻击。

Overview In this paper, we report MaginotDNS, a powerful cache poisoning attack against DNS servers that simultaneously act as recursive resolvers and forwarders (termed as CDNS).

Overview Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack.

Overview Temporal CDN-Convex Lens: A CDN-Assisted Practical Pulsing DDoS Attack.

In Black Hat USA 2023, Professor Zhou Li presented our work: “The Maginot Line: Attacking the Boundary of DNS Caching Protection”.

Overview In this paper, we present a novel framework, HostingChecker (DareShark), for detecting domain takeovers.

Overview In this paper, we present a novel framework, HostingChecker (DareShark), for detecting domain takeovers.

在黑帽大会2023（亚洲）上, 我分享了研究工作：“Phoenix Domain Attack: Vulnerable Links in Domain Name Delegation and Revocation”。

In Black Hat Asia 2023, I presented our work: “Phoenix Domain Attack: Vulnerable Links in Domain Name Delegation and Revocation”.

Overview In this paper, we propose Phoenix Domain, a general and novel attack that allows adversaries to maintain the revoked malicious domain continuously resolvable at scale, which enables an old, mitigated attack, Ghost Domain.

Overview In this paper, we propose Phoenix Domain, a general and novel attack that allows adversaries to maintain the revoked malicious domain continuously resolvable at scale, which enables an old, mitigated attack, Ghost Domain.

Overview In this demo with real EVs and public charging piles, we show a new approach, the Charging Pile Ransom Attack (CPRA), that can remotely ransom EVs through the charging connector between EVs and charging piles.

Overview In this demo with real EVs and public charging piles, we show a new approach, the Charging Pile Ransom Attack (CPRA), that can remotely ransom EVs through the charging connector between EVs and charging piles.

In the 2023 30th Annual Network and Distributed System Security Symposium, I presented one paper “Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation” and one demo/poster “Demo: Ransom Vehicle through Charging Pile” to the aud…

在2023年第30届网络与分布式系统安全会议上，我分享了我们关于DNS最新的研究工作（Ghost Domain Reloaded: Vulnerable Links in Domain Name Delegation and Revocation）以及诸葛老师组的展板（Demo: Ransom Vehicle through Charging Pile）。

在 OARC 40 & NANOG 87 Workshop（线上线下结合），我分享了明明最新的研究工作：域名接管。

In OARC 40 & NANOG 87 Workshop (hybrid in-person and online workshop), I presented a novel hosting-based domain takeover detection framework DareShark to the audiences.

在12月13日，受邀参加第20届BlueHat 2023。

On December 13, I was invited to attend the 20th BlueHat 2023.

在2022年第五届ICANN的DNS研讨会（IDS 2022）中，我分享了NDSS ‘23论文不死域名，反响热烈。

In the 5th ICANN DNS Symposium (IDS 2022), I presented my NDSS ‘23 paper Phoenix Domain to the audiences.

在2022年11月7日至11日，到现场参加了CCS 2022大会，认识了很多小伙伴！

During November 7-11, 2022, I attended ACM CCS 2022 in person and knew and met many friends.

在 OARC 39 & 47th CENTR Technical Workshop（线上线下结合），我分享了最新的研究工作不死域名。

In OARC 39 & 47th CENTR Technical Workshop (hybrid in-person and online workshop), I presented a novel Ghost Domain attack named Phoenix Domain to the audiences.

在2022年7月25日，受邀参加 MSRC’s Researcher Celebration at Black Hat 2022。

On July 25, I was invited to MSRC’s Researcher Celebration at Black Hat 2022.

In @Pentester Academy TV, I presented the IPv6 network scanner XMap with @DamianGoh13.

在@Pentester Academy TV，与@DamianGoh13一道，我展示了XMap 扫描器工具。

概述 在IPv4网络空间中，网络扫描技术具备着巨大的应用前景，可以被用来完成大规模的测量研究工作，诸如多种协议部署的测量、僵尸网络行为的追踪、潜在网络漏洞的发现。

Overview We introduce a novel IPv6 network scanning technique and develop a fast network scanner XMap to evaluate it, harvesting 52M devices.

在2021年第51届IEEE/IFIP国际可靠系统和网络会议上（线上举办），我分享了论文：Fast IPv6 Network Periphery Discovery and Security Implications。

In the 2021 51st Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN 2021, virtually), I presented paper “Fast IPv6 Network Periphery Discovery and Security Implications” to the audiences.

在2021年第四届ICANN的DNS线上研讨会中，我介绍了实验室晓峰师兄所提出了的一种新型DNS缓存污染攻击。

In the 4th ICANN DNS Symposium (IDS 2021, virtually) , I presented a novel DNS cache poisoning attack (introduced by Xiaofeng Zheng from our lab) to the audiences.

在2021年西湖论剑·网络安全大会：首届国产优秀网络安全工具主题展中，我们展示了XMap 扫描器工具。

In the 2021 West Lake Cybersecurity Conference, I presented the IPv6 network scanner XMap to the audiences.

作为清华大学网络科学与网络空间研究院的成员之一，在清华大学与东南大学 的学术交流活动中，我分享了我们在IPv6安全领域最新的研究成果。

As one of the delegates from Tsinghua University, I presented our latest research on the IPv6 network security at the THU and SEU academic communication meeting.

注意：请查看GITHUB以获取最新介绍。

NOTE: THIS IS A PRIMARY README.