SecWiki周刊（第15期）
2014/06/09-2014/06/15
安全资讯
Black Hat USA 2014
https://www.blackhat.com/us-14/training/
https://www.blackhat.com/us-14/training/
思科斥资数百万秘密购买竞争对手Juniper的网络产品
http://www.solidot.org/story?sid=39922
http://www.solidot.org/story?sid=39922
HITCON X 10周年開跑了
http://blog.xecure-lab.com/2014/06/hitcon-x-10.html
http://blog.xecure-lab.com/2014/06/hitcon-x-10.html
一周安全动态（2014年06月05日-2014年06月12日）
http://www.dbappsecurity.com.cn/safe/s2014/1406_13_01.html
http://www.dbappsecurity.com.cn/safe/s2014/1406_13_01.html
安全技术
nmap脚本使用总结
http://drops.wooyun.org/tips/2188
http://drops.wooyun.org/tips/2188
Discuz! X3.1后台拿shell
http://www.unhonker.com/bug/1596.html
http://www.unhonker.com/bug/1596.html
TekDefense:URL/Domain, IP Address, and Md5 Hash OSINT tool
http://www.tekdefense.com/automater/
http://www.tekdefense.com/automater/
Yii Go 中文视频教程
http://blog.yiiblog.info/index.php/post/view?id=420
http://blog.yiiblog.info/index.php/post/view?id=420
SecWiki:安全从业者的晨报
http://blog.ourren.com/2014/06/15/secwiki_morning_news.html
http://blog.ourren.com/2014/06/15/secwiki_morning_news.html
metasploit 渗透测试笔记(基础篇)
http://drops.wooyun.org/tips/2143
http://drops.wooyun.org/tips/2143
Mysql安全配置
http://drops.wooyun.org/tips/2245
http://drops.wooyun.org/tips/2245
Illuminating The Etumbot APT Backdoor
http://www.arbornetworks.com/asert/2014/06/illuminating-the-etumbot-apt-backdoor/
http://www.arbornetworks.com/asert/2014/06/illuminating-the-etumbot-apt-backdoor/
metasploit 渗透测试笔记(meterpreter篇)
http://drops.wooyun.org/tips/2227
http://drops.wooyun.org/tips/2227
使用PPTP配置Linux上的VPN服务器
http://www.nigesb.com/setup-your-own-vpn-with-pptp.html
http://www.nigesb.com/setup-your-own-vpn-with-pptp.html
Discuz!x上传文件名泄露漏洞
http://hi.baidu.com/hi_heige/item/6667a931110ed50bcfb9fe36
http://hi.baidu.com/hi_heige/item/6667a931110ed50bcfb9fe36
Defcon Shitsco程序分析–信息泄露
http://www.91ri.org/9286.html
http://www.91ri.org/9286.html
2014年cncert网络安全年会
http://yun.baidu.com/s/1kTHVsSf#dir
http://yun.baidu.com/s/1kTHVsSf#dir
XSS 前端防火墙 —— 可疑模块拦截 FEX 做最专业的前端
http://fex.baidu.com/blog/2014/06/xss-frontend-firewall-2/
http://fex.baidu.com/blog/2014/06/xss-frontend-firewall-2/
wpbf:Wordpress Brute Force Tool
http://atarantini.github.io/wpbf/
http://atarantini.github.io/wpbf/
Yii Framework视频教程 Yii Go系列
http://www.youku.com/playlist_show/id_18434742.html
http://www.youku.com/playlist_show/id_18434742.html
Recon-ng: creating a dynamic resource script for subdomain discovery
http://www.securityaegis.com/recon-ng-creating-a-dynamic-resource-script-for-subdomain-discovery/
http://www.securityaegis.com/recon-ng-creating-a-dynamic-resource-script-for-subdomain-discovery/
un1c0rn project
http://un1c0rn.net/?module=hosts&action=list
http://un1c0rn.net/?module=hosts&action=list
a boring xss dissection
https://zyan.scripts.mit.edu/blog/a-boring-xss-dissection/
https://zyan.scripts.mit.edu/blog/a-boring-xss-dissection/
Hacking with Unicode | WooYun知识库
http://drops.wooyun.org/papers/2192
http://drops.wooyun.org/papers/2192
扎克伯格谈Facebook创业过程-第1课-Facebook的产品研发
http://v.youku.com/v_show/id_XMjg5MzQ4NjIw.html
http://v.youku.com/v_show/id_XMjg5MzQ4NjIw.html
美团Android自动化之旅—生成渠道包
http://tech.meituan.com/mt-apk-packaging.html
http://tech.meituan.com/mt-apk-packaging.html
Social network frauds
http://www.securelist.com/en/analysis/204792338/Social_network_frauds
http://www.securelist.com/en/analysis/204792338/Social_network_frauds
Prolexic Attack Report:DDoS Attacks Against Global Markets
http://www.prolexic.com/kcresources/white-paper/global-market/index.html
http://www.prolexic.com/kcresources/white-paper/global-market/index.html
Shellter:dynamic shellcode injection tool
https://www.shellterproject.com/shellter-v1-0-released/
https://www.shellterproject.com/shellter-v1-0-released/
《安全参考》HACKCTO-201405-17
http://pan.baidu.com/s/11XgsQ
http://pan.baidu.com/s/11XgsQ
The first mobile encryptor Trojan
http://www.securelist.com/en/blog/8225/The_first_mobile_encryptor_Trojan
http://www.securelist.com/en/blog/8225/The_first_mobile_encryptor_Trojan
一键提交资讯到SecWiki
http://v.qq.com/page/t/f/y/t0130a1idfy.html
http://v.qq.com/page/t/f/y/t0130a1idfy.html
How I discovered CCS Injection Vulnerability (CVE-2014-0224)
http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection-en/index.html
http://ccsinjection.lepidum.co.jp/blog/2014-06-05/CCS-Injection-en/index.html
闲谈：乌云上那些 web-based 的 QQ 漏洞
http://zhuanlan.zhihu.com/wooyun/19775419
http://zhuanlan.zhihu.com/wooyun/19775419
Openssl多个安全补丁简易分析危害及修复方案
http://drops.wooyun.org/papers/2185
http://drops.wooyun.org/papers/2185
Pompem:Find exploit tool
https://github.com/rfunix/Pompem
https://github.com/rfunix/Pompem
nmap脚本使用总结
http://drops.wooyun.org/tips/2188
http://drops.wooyun.org/tips/2188
《The Swift Programming Language》中文版
http://www.swiftguide.cn/
http://www.swiftguide.cn/
Flash+Upload Csrf 攻击技术
http://hi.baidu.com/hi_heige/item/0ee51644597d410ac016133e
http://hi.baidu.com/hi_heige/item/0ee51644597d410ac016133e
-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com本期原文地址: SecWiki周刊(第15期)
