23
1月
MyKings: 一个大规模多重僵尸网络
Large Scale Monero Cryptocurrency Mining Operation using XMRig
Lazarus Campaign Targeting Cryptocurrencies Reveals Remote Controller Tool, an Evolved RATANKBA, and More
Analyzing CrossRAT› a cross-platform implant, utilized in a global cyber-espionage campaign
tools CrossRAT样本(infect3d)
RTF files for Hancitor utilize exploit for CVE-2017-11882
Quickpost: SteamStealers via Github
Oracle VirtualBox Multiple Guest to Host Escape Vulnerabilities
Google Chrome Skia Sampler Address Calculation Vulnerability (CVE-2017-5063)
macOS 10.13 (17A365) - Kernel Memory Disclosure due to Lack of Bounds Checking in 'AppleIntelCapriController::getDisplayPipeCapability'(CVE-2017-13878)
Anti-debug with VirtualAlloc's write watch
ANDROID平台挖矿木马研究报告
ESET's Guide to Deobfuscating and Devirtualizing FinFisher
Linux Vulnerabilities, Windows Exploits -- Escalating Privileges with WSL
Stack Based Buffer Overflows on x86 (Windows) – Part I
Stack Based Buffer Overflows on x86 (Windows) – Part II
Stack Based Buffer Overflows on x64 (Windows) – Part III
Weird Machines, Exploitability, and provable non-exploitability(Understanding the nature of “exploits”)
Investigate Unauthorised Logon Attempts using LogonTracer
对邪恶某组的一次“友情测试”
对邪恶某组的一次“友情测试”【大结局】
区块链技术安全讨论
2017年度安卓系统安全性生态环境研究
2017中国网站安全形势分析报告
Hacker101 is a free class for web security.
滴滴安全大会PPT(ky8y)
Full Account Takeover through CORS with connection Sockets
tools google chrome v8 poc(CVE-2017-5070&CVE-2017-15399&CVE-2017-15428&CVE-2017-XXXX(duplicate with chromium worker))
tools Monitoring-Systems-Cheat-Sheet：A cheat sheet for pentesters and researchers about exploitation well-known monitoring systems.
tools rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities.
tools ncatool is a tool to view information about, decrypt, and extract Nintendo Content Archives.