5
3月

Tittle: 2018.3.6

0 作者:admin

Sure, I’ll take that! New ComboJack Malware Alters Clipboards to Steal Cryptocurrency

JPCERT/CC:Malware “TSCookie”

Analysis of Hangul file attack(koren)

North Korea's foreign currency earning & financial hacking activity on the cyber area

LTEInspector: A Systematic Approach for Adversarial Testing of 4G LTE

NoSQL injection leading to administrator account takeover in Rocket.Chat (0.57.3, 0.58.3 and below)

VMAttack: Deobfuscating Virtualization-Based Packed Binaries

PostgreSQL 远程代码执行漏洞分析及利用—【CVE-2018-1058】

Security research using QL: finding a remote code execution vulnerability in Spring Data REST (CVE-2017-8046)

区块链安全-DAO攻击事件解析

通过“震网三代”和Siemens PLC 0day漏洞,实现对工控系统的入侵实验

How Hackers Bypassed an Adobe Flash Protection Mechanism

Turning your web traffic into a Super Computer

敏信审计系列之dorado5开发框架

从零开始瞎玩llvm:利用llvm保护程序免受内存修改器的攻击

From Assemply to JS and back

Following the trace of WMI Backdoors & other nastiness

javascript injection with selenium, puppeteer, and marionette in chrome and firefox(2017)

Hacking around HTA files

Azure AD and ADFS best practices: Defending against password spray attacks

从无到有通过ISO27001认证-建设篇

从无到有通过ISO27001认证-审核篇

Node.js 调试指南

SecWiki周刊(2018/02/26-2018/03/04)

Wire Security Review – Phase 2 – iOS Client for Wire Swiss GmbH(Final Report)

Wire Security Review – Phase 2 – Android Client for Wire Swiss GmbH(Final Report)

Wire Security Review – Phase 2 – Web, Calling for Wire Swiss GmbH(Final Report)

tools 安卓证书锁定解除的工具

tools Unstripped iOS Kernels with All Symbols

tools UnjailMe:A sandbox escape based on the proof-of-concept (CVE-2018-4087)

tools winnti-detector:Network detector for Winnti malware

tools winnti-suricata-lua:Suricata rules to detect Winnti communication

tools winnti-nmap-script:Nmap Script to scan for Winnti infections

tools SysmonTools:Utilities for Sysmon

tools Droid-Application-Fuzz-Framework:Android application fuzzing framework with fuzzers and crash monitor.

tools S3Scanner:Scan for open S3 buckets and dump

tools DNS-Monitor:记录和展示我自己电脑上所有的DNS请求行为


评论


当前没有评论,快来评论吧!





来说点什么吧