SecWiki周刊（第153期）
2017/01/30-2017/02/05
安全资讯
[其它]  世界上最大的黑客&网络安全导航网站
http://link-base.org/
[Web安全]  Chrome中“自动填充”安全性研究
http://mp.weixin.qq.com/s/ybeVF8caasBJ7xyzLyajbw
[漏洞分析]  Zimperium Announces Its Exploit Acquisition Program for N-Days
https://blog.zimperium.com/zimperium-announces-its-exploit-acquisition-program-for-n-days/
[运维安全]  Gitlab从删库到恢复：丢失6小时生产数据，操作员应该被开除？
https://mp.weixin.qq.com/s?__biz=MzA4Nzg5Nzc5OA==&mid=2651663996&idx=1&sn=7c1eb9a34993ea50a943c73caa8bf4cb&chksm=8bcbedd5bcbc64c34f506c843d56180c65a64d36c1d9f5361d5f0e8445f8ebff57ff94db82da
[设备安全]  法庭文件揭秘：美国联邦调查局是如何监听汽车15年的
https://mp.weixin.qq.com/s?__biz=MjM5NjA0NjgyMA==&mid=2651062785&idx=1&sn=e3a037b1ce21925145fb07eff6597e55&chksm=bd1f908a8a68199c0a1c4df8fb431dc26cff629abca0d76ea92f0ca19b842b2ab539bdcd4e1c
[取证分析]  推荐安全且匿名的邮箱 ProtonMail
http://mp.weixin.qq.com/s/DTgMZPGKL7BpUQ2l0L3CHg
[其它]  美国陆军战争学院-网络空间战略行动指南
https://info.publicintelligence.net/USArmy-StrategicCO.pdf
[其它]  The Growing Symbiosis of Insiders and the Dark Web
http://secure.redowl.com/rs/145-MYR-237/images/RedOwl_Intsights_Report.pdf
[法规]  《网络产品和服务安全审查办法（征求意见稿）》公开征求意见
http://www.cac.gov.cn/2017-02/04/c_1120407082.htm?from=timeline&isappinstalled=0
[新闻]  美国国防部DARPA想要创建安全数据共享技术
http://www.freebuf.com/news/125672.html
安全技术
[漏洞分析]  Spring Boot RCE
https://deadpool.sh/2017/RCE-Springs/
[漏洞分析]  From Mimikatz to Kekeo, Passing by New Microsoft Security Technologies
https://onedrive.live.com/view.aspx?resid=A352EBC5934F0254!3316&ithint=file%2cpptx&app=PowerPoint
[Web安全]  CVE-2017-5521: Bypassing Authentication on NETGEAR Routers
https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2017-5521--Bypassing-Authentication-on-NETGEAR-Routers/
[Web安全]  余弦: 一种新型蠕虫－花瓣CORSBOT蠕虫
http://evilcos.me/?p=590
[Web安全]  OWASP Security Shepherd WEB和APP安全测试训练平台
https://github.com/OWASP/SecurityShepherd
[数据挖掘]  携程是如何把大数据用于实时风控的
https://zhuanlan.zhihu.com/p/24795411
[无线安全]  如何利用 LTE／4G 伪基站＋GSM 中间人攻击攻破所有短信验证
https://zhuanlan.zhihu.com/p/24811129
[Web安全]  .DS_Store文件泄漏利用脚本
https://github.com/lijiejie/ds_store_exp
[Web安全]  针对埃及公民的大规模网络钓鱼活动
https://citizenlab.org/2017/02/nilephish-report/
[漏洞分析]  企业应该如何应对上报的安全漏洞报告
http://www.freebuf.com/articles/security-management/125606.html
[设备安全]  打印机漏洞利用框架
https://github.com/RUB-NDS/PRET
[恶意分析]  Improving Credential Abuse Threat Mitigation
https://blogs.akamai.com/2017/01/improving-credential-abuse-threat-mitigation.html?from=timeline
[漏洞分析]  2016年CNVD漏洞数据统计：高危漏洞占比持续递增
http://www.freebuf.com/vuls/125951.html
[其它]  Hadoop | 渗透即安全加固
http://mp.weixin.qq.com/s?__biz=MjM5OTk4MDE2MA==&mid=2655113997&idx=3&sn=33a30fdd1588f002f6b77328eae41669&chksm=bc864ee28bf1c7f4bdf563962530982a164e7d03f87900b63752933ef8d8968ef8673b619488&mpshare=1&scene=23&srcid=0204WerAGHcnkl19ZUDV40Cr%23rd
[运维安全]  互联网企业安全高级指南读书笔记之一
http://www.lewisec.com/2017/02/04/%E4%BA%92%E8%81%94%E7%BD%91%E4%BC%81%E4%B8%9A%E5%AE%89%E5%85%A8%E9%AB%98%E7%BA%A7%E6%8C%87%E5%8D%97%E8%AF%BB%E4%B9%A6%E7%AC%94%E8%AE%B0%E4%B9%8B%E4%B8%80/
[运维安全]  StreamAlert: 实时数据分析和告警1
https://medium.com/airbnb-engineering/streamalert-real-time-data-analysis-and-alerting-e8619e3e5043#.ya7h0gb2n
[数据挖掘]  BigDataAudit: security vulns detector for Hadoop and Spark 大数据安全检测工具
https://github.com/kotobukki/BigDataAudit
[Web安全]  揭开XSSI攻击的神秘面纱
http://mp.weixin.qq.com/s?__biz=MzAxNzMwOTQ0NA%3D%3D&mid=2653354832&idx=3&sn=a51b1cd27064b6fe12f6b3ff2fbc3b5e&chksm=8035d13bb742582df0d4f14a39692488098f3d8325db66090ec54a9bb801f5dc92f5292b480c
[工具]   lightweight multi-architecture CPU emulator framework
https://alexaltea.github.io/unicorn.js/
[恶意分析]  Finding the RAT's Nest
https://blog.opendns.com/2017/01/18/finding-the-rats-nest/
[运维安全]  从隐匿的地下中文网络社区来看互联网安全
https://mp.weixin.qq.com/s?__biz=MzIzMTAzNzUxMQ==&mid=2652877671&idx=1&sn=4661adf17daf8d012a334ad83f1de421&chksm=f3415c4fc436d55971db5463d2c6bf3dbb6325d9e9422000eecc2b4e3e7cd3e0bb87e5c60fee
[编程技术]  美团点评Docker容器管理平台
http://tech.meituan.com/mt-docker-practice.html
[运维安全]  DLP数据泄露防护系统测试样本
https://dlptest.com/sample-data/
[Web安全]  美国的个人信息搜索引擎(基于公开合法数据)
http://radaris.com/
[杂志]  SecWiki周刊（第152期)
https://www.sec-wiki.com/weekly/152
[运维安全]  网络威胁情报价值
https://mp.weixin.qq.com/s?__biz=MzI4NzU2NjU4NQ==&mid=2247483752&idx=1&sn=5a1ca11c51b5be07b1efd2d9f106bb94&chksm=ebcafefedcbd77e85f88d3b446564cc922d7e25d8d207ef5e2605232c3c6601a8eb11458897d
[Web安全]  basicRAT - A Python Remote Access Trojanki
https://github.com/vesche/basicRAT
[移动安全]  Deep Analysis of Android Rootnik Malware Part I
https://blog.fortinet.com/2017/01/26/deep-analysis-of-android-rootnik-malware-using-advanced-anti-debug-and-anti-hook-part-i-debugging-in-the-scope-of-native-layer
[Web安全]  'Deep Thoughts' on Subdomain Takeover Vulnerabilities
http://blog.rubidus.com/2017/02/03/deep-thoughts-on-subdomain-takeovers/
[恶意分析]  Cypher – Pythonic ransomware proof of concept
https://github.com/NullArray/Cypher
[恶意分析]  KopiLuwak: A New JavaScript Payload from Turla
https://securelist.com/blog/research/77429/kopiluwak-a-new-javascript-payload-from-turla/
[恶意分析]  Collections of Malware source code 已泄露的恶意程序源码集合
https://github.com/gasgas4/Leaked_Malware_SourceCode
[编程技术]  一个云管理平台的架构与功能设计经验谈
https://mp.weixin.qq.com/s?__biz=MjM5MDE0Mjc4MA==&mid=2650995342&idx=1&sn=0bec6c61c65bcc0885bf370a184e1ede&chksm=bdbf02dd8ac88bcbd218e67c44ad6fdb23c31841470b206a82991a89ab617daaf63f85821144
[恶意分析]  Advanced Techniques for Detecting RAT Screen Control
http://blog.mindedsecurity.com/2016/02/rat-wars-20-advanced-techniques-for.html
[恶意分析]  APT Targets Russia and Belarus with ZeroT and PlugX
https://www.proofpoint.com/us/threat-insight/post/APT-targets-russia-belarus-zerot-plugx
[漏洞分析]  从CVE-2016-7644回到CVE-2016-4669
http://turingh.github.io/2017/01/15/CVE-2016-7644-%E4%B8%89%E8%B0%88Mach-IPC/
[设备安全]  认知计算、区块链IoT、物联网安全…看懂的人将控制未来
https://mp.weixin.qq.com/s?__biz=MjM5MTM5ODQyMA==&mid=2651195423&idx=1&sn=59a0b358b16e402ffe62372c7ac539c8&chksm=bd4487648a330e72de3140294bed1a3dc2d3a84474701cbed2e2d3d47ad6827e8901a3708334e
[其它]  浅谈区块链（上）：区块链探究
http://www.arkteam.net/?p=1524
[Web安全]  XPath注入详解
http://www.mottoin.com/95785.html
[数据挖掘]  AI技术大爆发背景下，开源深度学习框架的发展趋势如何？
https://mp.weixin.qq.com/s?__biz=MjM5MDE0Mjc4MA==&mid=2650995340&idx=1&sn=e4340848bd36288964b366092e1b6c80&chksm=bdbf02df8ac88bc9660fbe99ab80c2dd30774f6eb9aa90cad81e206a5f84c406798db1a7ee26
[Web安全]  实用工具：免费Zend 5.2 5.3 5.4解密工具
http://www.cnseay.com/4498/
[移动安全]  构建GSM 基站
https://n0where.net/build-gsm-base-station/
-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第153期)