SecWiki周刊（第125期)

2016/07/18-2016/07/24

安全资讯

[人物] Kickass Torrents站长因购买正版音乐被定位
http://www.solidot.org/story?sid=49023

[运维安全] 2016年全球数据泄露成本调研
http://www.aqniu.com/industry/17871.html

[事件] WikiLeaks 公开30万封土耳其政府邮件
http://www.solidot.org/story?sid=49011

安全技术

[数据挖掘] 乌云知识库drops全站博文
http://pan.baidu.com/s/1o7WQT4m

[漏洞分析] CVE-2015-3864 Metasploit Module
https://asciinema.org/a/8jlbdq006wsnkqewvcaf05wva

[编程技术] CuteMarkEd – 朴素 Markdown 本地编辑器
http://cloose.github.io/CuteMarkEd/

[漏洞分析] Diaphora, a Free and Open Source program diffing tool
https://github.com/joxeankoret/diaphora

[Web安全] Redis Getshell自动化实践之cron
http://www.cdxy.me/vuln/redis-getshell-cron/

[数据挖掘] ChineseWordSegmentation:无需语料库的中文分词
https://github.com/Moonshile/ChineseWordSegmentation

[Web安全] WebShell: Web端WebShell管理器
https://github.com/guillotines/WebShell

[Web安全] scanner: 网站漏洞扫描平台
https://github.com/yinzhixin/scanner

[恶意分析] 知名商业软件“喂养”病毒产业链：“Toxik”病毒追踪
http://www.freebuf.com/articles/system/109112.html

[漏洞分析] Zulu: The Zulu fuzzer
https://github.com/nccgroup/Zulu

[Web安全] Redis Getshell自动化实践之SSH key
http://www.cdxy.me/vuln/redis-getshell-ssh-key/

[漏洞分析] Introduction to Windows shellcode development – Part 3 – Security Café
https://securitycafe.ro/2016/02/15/introduction-to-windows-shellcode-development-part-3/

[运维安全] redis的导入导出需要特别注意的地方
http://sery.blog.51cto.com/10037/1828014

[移动安全] APKiD: Android Application Identifier for Packers, Protectors, Obfuscators
https://github.com/rednaga/APKiD

[漏洞分析] Introduction to Windows shellcode development – Part 1 – Security Café
https://securitycafe.ro/2015/10/30/introduction-to-windows-shellcode-development-part1/

[漏洞分析] Introduction to Windows shellcode development – Part 2 – Security Café
https://securitycafe.ro/2015/12/14/introduction-to-windows-shellcode-development-part-2/

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com