
12
10月
Privilege escalation with kill(-1, SIGKILL) in XNU kernel of macOS High Sierra
PDF Phishing Leads to Nanocore RAT, Targets French Nationals
新型IoT机顶盒恶意软件Rowdy网络分析报告
Disassembler and Runtime Analysis
Outlook Home Page – Another Ruler Vector(CVE-2017-11774 shell Outlook via the home page)
New Office 0day (CVE-2017-11826)样本
Who Watch BIOS Watchers?-about known bypasses of Intel Boot Guard + new UEFITool with IBB validation
Remote Code Execution on a Travel Router
Detecting BadBIOS, Evil Maids, Bootkits, and Other Firmware Malware
How to Uninstall Carrier/OEM Bloatware Without Root Access
The State of Kernel Self-Protection
IP Accounting and Access Lists with systemd
深度学习在安全领域的paper
A curated list of awesome adversarial machine learning resources
Bypassing CSRF tokens with Python’s CGIHTTPServer to exploit SQL injections
Typecho SSRF Analysis and Exploit
Yahoo Bug Bounty: Exploiting OAuth Misconfiguration To Takeover Flickr Accounts
tools gifoeb:exploit for ImageMagick's uninitialized memory disclosure in gif coder(CVE-2017-15277)
tools AppleTrace:Trace tool for iOS/macOS (similar to systrace for Android)
tools DependencyCheck OWASP出品,一款检查Java相关库缺陷的工具,用于查找依赖库中已存在的公开漏洞,支持Maven,gradle,jenkins,ant等打包方式
tools ThreatHunter-Playbook:A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.
tools Autorize - Automatic authorization enforcement detection extension for burp suite
tools OnePlus OPDeviceManager application source code
tools clrinject:Injects C# EXE or DLL Assembly into every CLR runtime and AppDomain of another process.
tools Pause-Process:PowerShell script which allows pausing\unpausing Win32/64 exes
tools The Gluon API specification is an effort to improve speed, flexibility, and accessibility of deep learning technology for all developers, regardless of their deep learning framework of choice.