9
5月

Tittle: 2018.5.10

0 作者:admin

javascript coinhive in excel

APT-C-06组织在全球范围内首例使用“双杀”0day漏洞(CVE-2018-8174)发起的APT攻击分析及溯源

CVE-2018–10561 Dasan GPON exploit weaponized in Omni and Muhstik botnets

Clearing the MuddyWater - Analysis of new MuddyWater Samples

Maikspy Spyware Poses as Adult Game, Targets Windows and Android Users

Evasive Malware hits French Corporations

wiper malware:attacking from inside

AZORult stealer

SilverTerrier Update: Increasingly Sophisticated Nigerian Cybercriminals Take Bigger Part of $3B BEC-Related Losses

DarkHotel APT团伙新近活动的样本分析

伪造微软等企业签名 恶性病毒偷比特币+挖矿

被污染的百度下载,被捆绑的Putty,为什么受伤的总是程序员?!

Remote Code Execution Vulnerability on LG Smartphones

(TBK Vision) DVR Login Bypass ( CVE-2018-9995 )

Spurious#DB exceptions with the "POP SS" instruction (CVE-2018-8897)

WildFly10 Manager Application Deployer Code Execution( CVE-2018-10683)

Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attack

Windows内核漏洞分析:CVE-2018-0744

CVE-2017-14322 登录认证绕过分析

对 UAF 漏洞 CVE-2016-0167 的分析和利用

baseStriker: Office 365 Security Fails To Secure 100 Million Email Users

a new process injection-“Ctrl-Inject” that leverages the mechanism of handling Ctrl signals in console applications.

NBNS Spoofing

大脸猫讲逆向之 iOS上PDFExpert阅读器的内购功能破解

iOS 11.4 to Disable USB Port After 7 Days: What It Means for Mobile Forensics

Security and Privacy Analyses of Internet of Things Toys

the introduction of OAT, VDEX, DEX and ART in LIEF

4iQ Identity Breach Report 2018-The Tsunami of Breached Identities Continues

2017中国企业邮箱安全性研究报告

第三届唯品会PPT(ycs9)

Hacking a Massive Steam Scamming and Phishing Operation for Fun and Profit

a poc of CVE-2018-4150(iOS 11.2.6)

tools HeapViewer: An IDA Pro plugin to examine the glibc heap, focused on exploit development

tools atomic-red-team:Small and highly portable detection tests based on MITRE's ATT&CK.

tools google-ctf:This repository lists most of the challenges used in the Google CTF 2017.

tools javascript-malware-collection:Collection of almost 40.000 javascript malware samples

tools whonow:A "malicious" DNS server for executing DNS Rebinding attacks on the fly


评论


当前没有评论,快来评论吧!





来说点什么吧