17
10月

Tittle: 2017.10.18

0 作者:admin

Apple: Multiple Race Conditions in PCIe Message Ring protocol leading to OOB Write and OOB Read(CVE-2017-7115)

Unauthorized Coin Mining in the Browser

最新CVE-2017-11826漏洞利用样本分析

Taiwan Heist: Lazarus Tools and Ransomware

ATM malware is being sold on Darknet market

Linux Kernel AF_PACKET Use-After-Free

How we found exploitable zero-days in the open-source GlassFish server with the Security Graph Language

flatCore CMS 1.4.6: Remote Code Execution and Easteregg

epson vulnerability: easymp projector takeover (cve-2017-12860 / cve-2017-12861)

The Wolf of Name Street:Hijacking Domains Through Their Nameservers

Attacking White-Box AES Constructions

Stealing sensitive browser data with the W3C Ambient Light Sensor API

dangerous pickles — malicious python serialization

tools macSubstrate is a platform tool for interprocess code injection on macOS, with the similar function to Cydia Substrate on iOS.

tools WindowsSpyBlocker is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems

tools IDA EA:A set of exploitation and reversing aids for IDA

tools CBM:Car Backdoor Maker

tools CyberScan is an open source penetration testing tool that can analyse packets , decoding , scanning ports, pinging and geolocation of an IP including (latitude, longitude , region , country ...)

tools SIEMonster:Open Source Security Incident and Event Management

tools dbt (data build tool) is a command line tool that enables data analysts and engineers to transform data in their warehouse more effectively.

tools AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.


评论


当前没有评论,快来评论吧!





来说点什么吧