SecWiki周刊（第13期）
2014/05/26-2014/06/01
安全资讯
互联网新闻研究中心：《美国全球监听行动纪录》
http://yepeng.blog.51cto.com/3101105/1418480
http://yepeng.blog.51cto.com/3101105/1418480
一周海外安全回顾（5.19-5.25）
http://www.freebuf.com/news/others/35568.html
http://www.freebuf.com/news/others/35568.html
FireEye Announces Network Threat Prevention Platform with IPS
http://www.fireeye.com/blog/corporate/2014/05/fireeye-announces-the-general-availability-of-network-threat-prevention-platform-with-ips.html
http://www.fireeye.com/blog/corporate/2014/05/fireeye-announces-the-general-availability-of-network-threat-prevention-platform-with-ips.html
华为高管陈黎芳：中欧应携手应对网络安全挑战
http://www.daxigua.com/archives/299
http://www.daxigua.com/archives/299
安全技术
Mandiant报告：揭秘一支中国网络间谍部队
http://www.valleytalk.org/wp-content/uploads/2014/05/Mandiant%E6%8A%A5%E5%91%8A%EF%BC%9A%E6%8F%AD%E7%A7%98%E4%B8%80%E6%94%AF%E4%B8%AD%E5%9B%BD%E7%BD%91%E7%BB%9C%E9%97%B4%E8%B0%8D%E9%83%A8%E9%98%9F.pdf
http://www.valleytalk.org/wp-content/uploads/2014/05/Mandiant%E6%8A%A5%E5%91%8A%EF%BC%9A%E6%8F%AD%E7%A7%98%E4%B8%80%E6%94%AF%E4%B8%AD%E5%9B%BD%E7%BD%91%E7%BB%9C%E9%97%B4%E8%B0%8D%E9%83%A8%E9%98%9F.pdf
电子取证之Linux PCI分析
http://www.freebuf.com/articles/system/35490.html
http://www.freebuf.com/articles/system/35490.html
Bootstrap Markdown:Markdown 编辑器
http://toopay.github.io/bootstrap-markdown/
http://toopay.github.io/bootstrap-markdown/
Acunetix Online Vulnerability Scanner
https://ovs.acunetix.com/#/
https://ovs.acunetix.com/#/
Malicious Redirections to Porn Websites
http://blog.sucuri.net/2014/05/website-infections-malicious-redirect-to-porn-website-target-wordpress-and-joomla-users.html
http://blog.sucuri.net/2014/05/website-infections-malicious-redirect-to-porn-website-target-wordpress-and-joomla-users.html
Analysis of Over 2,000 Computer Science Professors at Top Universities
http://jeffhuang.com/computer_science_professors.html
http://jeffhuang.com/computer_science_professors.html
WAPTF: web application penetration testing framework
https://www.owasp.org/index.php/OWASP_Bywaf_Project
https://www.owasp.org/index.php/OWASP_Bywaf_Project
NGLER EK AND ANOTHER CRYPTOWALL SAMPLE
http://www.malware-traffic-analysis.net/2014/05/28/index.html
http://www.malware-traffic-analysis.net/2014/05/28/index.html
基于snmp的反射攻击的理论及其实现
http://drops.wooyun.org/tips/2106
http://drops.wooyun.org/tips/2106
Flash跨域数据劫持漏洞
http://www.pnigos.com/?p=310
http://www.pnigos.com/?p=310
记我配置Nginx代理的遭遇
http://huoding.com/2014/05/27/352
http://huoding.com/2014/05/27/352
五月，渗透师不得不知的微软更新
http://www.freebuf.com/articles/system/35211.html
http://www.freebuf.com/articles/system/35211.html
[更新]Elasticsearch 代码执行漏洞利用检测工具
http://blog.csdn.net/hujkay/article/details/27071919
http://blog.csdn.net/hujkay/article/details/27071919
浙江大学译美国白宫”大数据“白皮书
http://vdisk.weibo.com/s/GgQB3axicQgj/1401278850
http://vdisk.weibo.com/s/GgQB3axicQgj/1401278850
利用insert，update和delete注入获取数据
http://drops.wooyun.org/tips/2078
http://drops.wooyun.org/tips/2078
vbs利用webdav漏洞攻击ie
http://blog.sina.com.cn/s/blog_85e506df0101koov.html
http://blog.sina.com.cn/s/blog_85e506df0101koov.html
Analyzing a Malicious iFrame – Following the Eval Trail
http://blog.sucuri.net/2014/05/analyzing-a-malicious-iframe-following-the-eval-trail.html
http://blog.sucuri.net/2014/05/analyzing-a-malicious-iframe-following-the-eval-trail.html
A History of Malware: Part Three, 1993-1999
http://resources.infosecinstitute.com/history-malware-part-three-1993-1999/
http://resources.infosecinstitute.com/history-malware-part-three-1993-1999/
[投稿]渗透测试中的密码扫描与破解技巧
http://www.91ri.org/9174.html
http://www.91ri.org/9174.html
Lua Web Application Security Vulnerabilities
http://seclists.org/fulldisclosure/2014/May/128
http://seclists.org/fulldisclosure/2014/May/128
Fake WeChat – New Trojan-Banker
https://www.securelist.com/en/blog/8223/Fake_WeChat_New_Trojan_Banker
https://www.securelist.com/en/blog/8223/Fake_WeChat_New_Trojan_Banker
internet trends 2014-05281４
http://vdisk.weibo.com/s/vGm_e96IHuUo
http://vdisk.weibo.com/s/vGm_e96IHuUo
TCP 的那些事儿（上）
http://coolshell.cn/articles/11564.html
http://coolshell.cn/articles/11564.html
SegmentFault • 每周精选
http://weekly.segmentfault.com/2014/2014-05-28.html
http://weekly.segmentfault.com/2014/2014-05-28.html
TCP 的那些事儿（下）
http://coolshell.cn/articles/11609.html
http://coolshell.cn/articles/11609.html
MITMer:Automated man-in-the-middle attack tool
https://github.com/husam212/MITMer
https://github.com/husam212/MITMer
基于AWS云平台的高可用应用设计 v1.0
http://share.csdn.net/slides/4324
http://share.csdn.net/slides/4324
-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com本期原文地址: SecWiki周刊(第13期)
