19
10月

Tittle: 2017.10.21

0 作者:admin

IoT_reaper : 一个正在快速扩张的新 IoT 僵尸网络

a new Middle Eastern campaign(C2 infrastructure, new attack methods, four types of malware (including Android malware), a system for management of stolen victim data and some detail of the actors)

Scanned image from MX-2600N malspam pretending to come from your own company delivers Locky ransomware using Word DDE exploit

The First PS4 Kernel Exploit: Adieu

PoC/Fix for Google chrome V8 Scope State Use-After-Free Vulnerability (CVE-2017-5098)

The Bug Or Feature Debate Is Back Yet Again: DDEAUTO Root Cause Analysis

Office DDEAUTO attacks

Disable DDEAUTO for Outlook, Word, OneNote, and Excel versions 2010, 2013, 2016

Extract Non-Exportable Certificates and Evade Anti-Virus with Mimikatz and Powersploit

Persistence through .bashrc and .bash_profile entries

Validating Machine Learning Detection of Mobile Malware

VB2017 paper: Walking in your enemy's shadow: when fourth-party collection becomes attribution hell

A 14-day Journey through Embedded Open Type Font Fuzzing

AI Now 2017 Report

How i found an SSRF in Yahoo! Guesthouse (Recon Wins)

tools awesome-yara:A curated list of awesome YARA rules, tools, and people.

tools The ESP-RFID-Thief is a port of the Tastic RFID Thief to the ESP12S chip with the addition of a web interface and various new features. Repository includes files for both the hardware and software.

tools pcap2curl:Read a packet capture, extract HTTP requests and turn them into cURL commands for replay.

tools (Unofficial) Python API for crt.sh

tools Censysio Python wrapper


评论


当前没有评论,快来评论吧!





来说点什么吧