SecWiki周刊（第134期)

SecWiki周刊（第134期）

2016/09/19-2016/09/25

安全资讯

[文档] 网安创企获投列表[所有安全公司投资记录]
https://share.weiyun.com/e1be74f1616fb831e56c2950fab797ff

[文档] 国内上市安全企业研报1
http://mp.weixin.qq.com/s?__biz=MzI3NTE3MjMxOQ==&mid=2649415906&idx=3&sn=ad6a2fbf985299619dbb0de5d7e07a3b&scene=2

[爆库] 维基解密再次爆出猛料，民主党卖官，媒体操控选民数据
http://mp.weixin.qq.com/s?__biz=MjM5OTA3NjQ4MQ==&mid=2650097166&idx=1&sn=b5ead732ba615a7fc86475e0b74fd540

[新闻] CIA投资过的14个超尖端企业
http://mp.weixin.qq.com/s?__biz=MzI3NTE3MjMxOQ==&mid=2649415927&idx=1&sn=4c644b5a6f6e5bcd1b18f09fba61a424&chksm=f3169e47c46117516b936b92d82856630015eb44fea5824bd2d3937010642b284b9c439a0cf7&scene=0#rd

[新闻] DARPA如何定义网络作战空间
http://www.freebuf.com/articles/others-articles/114692.html

[新闻] 沈昌祥：培养急需的网络安全人才要特事特办
http://www.china.com.cn/txt/2016-09/21/content_39345477.htm

[事件] 第三届国家网络安全宣传周开幕 19名网络安全先进典型受表彰
http://www.cidf.net/2016-09/19/c_1119585933.htm

[爆库] 660万明文密码泄露，知名广告公司Clixsence被黑客端了个底朝天
http://www.freebuf.com/news/114670.html

[爆库] 雅虎承认发生大规模数据泄露 2亿账户信息被盗
http://c.m.163.com/news/a/C1JDTV94002580S6.html?spss=newsapp&spsw=1

[会议] 2016·SSC安全峰会顺利举办【现场干货抢先看】
http://mp.weixin.qq.com/s?__biz=MjM5MTI2NDQzNg==&mid=2654523543&idx=1&sn=917e81c6056957811a9a08d54d47f226&chksm=bd744b4c8a03c25af6038b65e21753dd1c06fa69801bd7bdd063e64fff92d62f5dc75b9d4528&scene=0#rd

[恶意分析] SWIFT Confirms Banks Still Being Targeted, Announces Mitigation Tool
https://threatpost.com/swift-confirms-banks-still-being-targeted-announces-mitigation-tool/120776/

安全技术

[Web安全] Windows域横向渗透
http://www.mottoin.com/89413.html

[其它] 浅谈风控领域中的用户画像
http://mp.weixin.qq.com/s?__biz=MzAxNTk5ODcxOQ==&mid=2247484589&idx=1&sn=56a095bcc307f77d2a00b76a121ac872&scene=1&srcid=0920CSLeXWr545QnJA3MxetK#rd

[漏洞分析] Detecting analysts before installing the malware
https://www.brokenbrowser.com/detecting-apps-mimetype-malware/

[设备安全] Unlocking my Lenovo laptop, part 3
http://www.zmatt.net/unlocking-my-lenovo-laptop-part-3/

[移动安全] VoIP Checklist for Penetration Testers
https://pentestlab.wordpress.com/2016/09/18/voip-checklist-for-penetration-testers/

[无线安全] Android平台渗透测试套件--zANTI2.5
http://blog.csdn.net/qq_29277155/article/details/52589166

[编程技术] zxcvbn: 注册时密码强度检测库「支持各种语言」
https://github.com/dropbox/zxcvbn

[Web安全] Burpsuite实战指南
https://t0data.gitbooks.io/burpsuite/content/

[移动安全] ProxyDroid：Android全局代理应用
http://www.mottoin.com/89774.html

[恶意分析] Powershell Empire + CVE-2016-0189 = Profit
https://www.cgsec.co.uk/powershell-empire-cve-2016-0189-profit/

[恶意分析] laureline-firmware: Firmware for the Laureline GPS NTP Server
https://github.com/mtharp/laureline-firmware

[设备安全] 腾讯科恩实验室最新研究成果：对特斯拉的无物理接触远程攻击
http://keenlab.tencent.com/zh/2016/09/19/Keen-Security-Lab-of-Tencent-Car-Hacking-Research-Remote-Attack-to-Tesla-Cars/?from=timeline&isappinstalled=0

[Web安全] uRAT: Opensource modular Remote Administration Tool
https://github.com/UbbeLoL/uRAT

[恶意分析] webshell通信检测
http://bug.cool/2016/webshell%E9%80%9A%E4%BF%A1%E6%A3%80%E6%B5%8B/

[比赛] CSAW Quals 2016 Pwn 500 - Mom's Spaghetti
http://ctfhacker.com/pwn/2016/09/19/csaw-moms-spaghetti.html

[Web安全] Windows提权基础
http://www.mottoin.com/89355.html

[运维安全] 思科的认知安全Cognitive Threat Analytics
https://wx.xiaomiquan.com/mobile/topic.php?topic=0394e12149fd7b5a0acecf5d6ab60718&secret=wqjmv4wii1gj5do27s40ivv1m92r1dax

[Web安全] 漏洞组合拳 – 攻击分布式节点
http://rickgray.me/2016/09/22/attacking-distributed-nodes-by-message-queue-injection.html

[设备安全] 工业互联网联盟发布工业物联网安全框架
http://www.aqniu.com/industry/19811.html

[漏洞分析] Introducing Ponce: One-click symbolic execution
http://research.trust.salesforce.com/Introducing-Ponce-One-click-symbolic-execution/

[恶意分析] 攻防对抗之杀软穿透驱动揭秘
http://blog.topsec.com.cn/ad_lab/%e6%94%bb%e9%98%b2%e5%af%b9%e6%8a%97%e4%b9%8b%e6%9d%80%e8%bd%af%e7%a9%bf%e9%80%8f%e9%a9%b1%e5%8a%a8%e6%8f%ad%e7%a7%98/

[Web安全] 绕过CDN查找网站真实IP
http://xiaix.me/rao-guo-cdncha-zhao-wang-zhan-zhen-shi-ip/

[Web安全] 记一下PythonWeb代码审计应该注意的地方
http://blog.neargle.com/2016/07/25/log-of-simple-code-review-about-python-base-webapp/

[比赛] Cyber Grand Challenge及DEFCON 24 CTF決賽介紹
http://maskray.me/blog/2016-09-24-cgc-defcon-ctf-presentation

[恶意分析] 解惑｜威胁情报指南
http://www.aqniu.com/learn/19675.html

[运维安全] HTTPS 工作原理和 TCP 握手机制
http://mp.weixin.qq.com/s?__biz=MjM5OTA1MDUyMA==&mid=2655436924&idx=3&sn=39e6fd286ef7bf3723a73d387b8e951b&chksm=bd730c0b8a04851d707f3ef5df9c7833cb091e08cf8ed6a091e59d70483594628de995408a1e&scene=1&srcid=0924jEKKNkkTukxJtMk2UCLW#rd

[Web安全] 通过non-interactive shell转发请求到内网
http://www.mottoin.com/89743.html

[Web安全] libpywebhack: Web hacking asstistance toolkit
https://github.com/beched/libpywebhack

[运维安全] DDOS攻击简介
http://ohroot.com/2016/09/18/ddos-introduction/

[Web安全] Babadook：无连接的powershell持续性反弹后门
http://www.mottoin.com/89554.html

[编程技术] 哪些 Python 库让你相见恨晚？
https://www.zhihu.com/question/24590883#answer-44650916

[Web安全] 解读《McAfee Labs季度威胁报告》
http://www.mottoin.com/89512.html

[数据挖掘] 2016年10个重要的可视化发展
http://mp.weixin.qq.com/s?__biz=MjM5MTQzNzU2NA==&mid=2651644787&idx=1&sn=106ff761c0b222adc8fbc0d8eea16526&chksm=bd4dc4e08a3a4df6815bc850f9637ad8f1d5fe7fa38cd5ced950e9b2607fa541ebef7cf21406&scene=0#rd

[Web安全] Flask源码学习之意外在Debugger上发现通用XSS
http://blog.neargle.com/2016/09/21/flask-src-review-get-a-xss-from-debuger/

[Web安全] Rails动态模板路径的风险
http://www.mottoin.com/89466.html

[Web安全] 如何用Cross-Site Scripting和MITM绕过NoScript安全套件
http://www.mottoin.com/89396.html

[移动安全] APP漏洞自动化扫描专业评测报告（下篇）
http://www.freebuf.com/articles/terminal/114453.html

[运维安全] 美团数据库运维自动化系统构建之路
http://tech.meituan.com/the-construction-of-database-automation-system.html

[数据挖掘] TensorFlow深度学习，一篇文章就够了
http://www.52cs.org/?p=1157

[设备安全] Veil-Evasion：基于Python的免杀Payload生成工具
http://www.mottoin.com/89616.html

[Web安全] 价值1w6美刀的Facebooe页面接管漏洞
http://www.mottoin.com/89391.html

[Web安全] 全球近80万FTP服务器账号可被未授权访问
http://www.freebuf.com/articles/system/114884.html

[运维安全] 通过PowerShell访问Windows Api
http://www.mottoin.com/89568.html

[Web安全] redis利用姿势收集
http://www.webshell.cc/5154.html

[设备安全] smod: MODBUS Penetration Testing Framework
https://github.com/enddo/smod

[Web安全] Safari's URL redirection XSS
http://www.mbsd.jp/blog/20160921_2.html

[无线安全] 树莓派打造无线电扫描仪
http://mp.weixin.qq.com/s?__biz=MjM5NTc2MDYxMw==&mid=2458279754&idx=1&sn=7141dc9240c7d0b7f66a53286fd41fde&scene=1&srcid=0923h6MZ6E4DGmTJR3DcOlEc#rd

[工具] PowerUpSQL:攻击SQL SERVER的Powershell脚本框架
http://www.mottoin.com/89457.html

[Web安全] Abusing WebVTT and CORS for fun and profit
http://blog.k3170makan.com/2016/09/abusing-webvtt-and-cors-for-fun-and.html

[Web安全] TheFatRat: generate backdoor for Remote Access
https://github.com/Screetsec/TheFatRat

[漏洞分析] MSSQL Agent Jobs for Command Execution
https://www.optiv.com/blog/mssql-agent-jobs-for-command-execution

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第134期)

SecWiki周刊（第134期）

最新公告

友情链接

SecWiki公众号

安全学术圈