SecWiki周刊（第155期)

SecWiki周刊（第155期）

2017/02/13-2017/02/19

安全资讯

[移动安全] samsung-hypervisor-bypassing-hacking-samsung-knox
https://www.xda-developers.com/samsung-hypervisor-bypassing-hacking-samsung-knox/

[恶意分析] ASLR遭破解：这可能是最难修复的大规模漏洞
http://mp.weixin.qq.com/s/L5bXLxftG5LgT2393Y0uYQ

[其它] 苹果36技术引海量刷单：中国iOS手游10亿美元坏账
http://finance.qq.com/a/20170216/015566.htm

[设备安全] ENISA报告：ICS-SCADA防护建议
http://www.aqniu.com/industry/22866.html

[恶意分析] [APT]梅姨勒姑脱欧忙，一女能顶三个郎
http://mp.weixin.qq.com/s/1tCLq3LGTQOPLKmeDVRCgg

[Web安全] NSRC：情人节如何表达心意？
http://mp.weixin.qq.com/s/eEp5SB4A8L8aBdZzmVtY0g

[事件] BIND DNS软件远程DOS漏洞更新修复
http://www.mottoin.com/96060.html

[会议] NJSD Global的初心：全球性的技术视野，高性价比的交流平台 | 大会出品人说
http://www.mottoin.com/96118.html

[恶意分析] The OpenVPN Audit Begins February 15th 2017
https://uwnthesis.wordpress.com/2017/02/17/the-openvpn-audit-begins-february-15th-2017/

[新闻] RSA 2017旧金山拉开帷幕：首日概况抢先看
http://mp.weixin.qq.com/s?__biz=MzI4MjA1MzkyNA==&mid=2655294932&idx=1&sn=3078d3464883d08dfd5d3a7aa73de2ac&scene=0#wechat_redirect

[新闻] RSAC 2017关注五大热门议题
http://www.aqniu.com/industry/22838.html

[新闻] 英国在过去的三个月内188个主要网络被攻击
http://www.mottoin.com/96066.html

[新闻] RSA 2017大会亮点产品一瞥
http://www.freebuf.com/fevents/127076.html

[新闻] 关机后你的手机号就是别人的了！
http://mp.weixin.qq.com/s?__biz=MjM5OTk2MTMxOQ==&mid=2727827969&idx=1&sn=11e01e3112000b1510c5f60ce4adb9f3&scene=0#wechat_redirect

[观点] 一个资深安全从业者对《网络产品和服务安全审查办法》的思考
http://www.aqniu.com/news-views/22835.html

[观点] yuange 谈职场发展
http://weibo.com/ttarticle/p/show?id=2309404073510573105782

安全技术

[工具] Web安全扫描器Netsparker 4.8.0.13139破解版
http://www.mottoin.com/95973.html

[其它] Google: Peering into the Aquarium [PDF]
https://www.documentcloud.org/documents/3461560-Google-Aquarium-Clean.html

[移动安全] 深入理解Android卷1,卷2,Wifi卷 PDF版
https://pan.baidu.com/s/1bpDvOKJ#list/path=%2F

[观点] 安全开发与安全运营难道不可调和吗？从攻击角度来看或有协作的通道
http://toutiao.secjia.com/secure-development-and-secure-operations

[Web安全] 百度安全实验室 | 支付安全不能说的那些事
http://mp.weixin.qq.com/s?__biz=MzA3NTQ3ODI0NA==&mid=2247483691&idx=1&sn=ccaccec6a2c5990e2fb77bf0fc624ffc&chksm=9f6ea4a0a8192db6ca893080d2e5e7ab9de57c3fe725c04540712dd4587ed7d6e499a65f50e3&mpshare=1&scene=1&srcid=0216XJxvarfkflPFiJiLx5iw#rd

[漏洞分析] 2017 CODEGATE CTF PNGParser writeup
http://repwn.com/archives/19/

[Web安全] SQLite-lab：基于SQLite设计的SQL注入实践靶场
http://www.mottoin.com/96144.html

[Web安全] Who Ran Leakedsource.com
https://krebsonsecurity.com/2017/02/who-ran-leakedsource-com/

[设备安全] 智能网联汽车信息安全建设最佳实践
https://4ce565.lt.yunpan.cn/lk/c5nGYvsuSKxUQ

[工具] 【原创工具】勒索软件终结者
http://www.freebuf.com/sectool/126342.html

[移动安全] ISC 2016安全训练营－安卓app逆向与安全防护
https://github.com/feicong/android-app-sec

[Web安全] 2016年度中国IDC分类排行榜
http://mp.weixin.qq.com/s/iBVHSsWLHDhILpfF1EfWOw

[Web安全] 我的WafBypass之道系列(sql,upload,misc)
http://www.thinkings.org/2017/02/13/my-waf-bypass-series-article.html

[取证分析] DEFT Linux 2017.1 数字取证工具箱
http://www.oschina.net/news/81906/deft-linux-2017-1

[Web安全] TensorFlow练习20: 使用深度学习破解字符验证码
http://blog.topspeedsnail.com/archives/10858

[运维安全] 我的ELK搭建笔记（Windows 日志收集）
http://mp.weixin.qq.com/s?__biz=MzI5ODE0ODA5MQ==&mid=2652277948&idx=1&sn=96ceb072aeda6cb94d64d9feff98393a&scene=0#wechat_redirect

[移动安全] 安卓系统里最好用的VPN工具汇总
http://www.freebuf.com/sectool/126572.html

[编程技术] 彻底解决python编码之殇
http://thief.one/2017/02/16/%E8%A7%A3%E5%86%B3Python2-x%E7%BC%96%E7%A0%81%E4%B9%8B%E6%AE%87/

[Web安全] mongoaudit: MongoDB 审计与测试工具
https://github.com/stampery/mongoaudit

[文档] RECON Brussels 2017 slide download
https://recon.cx/2017/brussels/slides/

[Web安全] wafpassproject: 各种WAF 测试与 Bypass用例
https://github.com/wafpassproject/wafpass

[Web安全] DedeCMS V5.7SP1正式版GetShell漏洞分析
http://www.cnbraid.com/2017/dedecms-csrf-override-shell.html

[运维安全] 企业安全建设之搭建开源SIEM平台（上）
http://mp.weixin.qq.com/s?__biz=MzIwOTc0MDU3NA==&mid=2247483820&idx=1&sn=ea6aa48ec8b41cd07c930af4c0999b66&chksm=976e77dda019fecb78484076b7ac500c271e7ac64f96b8cb07700056eefdb36922935f8cdbc0&mpshare=1&scene=23&srcid=0216tzd9ZAOQ00IPPlNRi1o8#rd

[数据挖掘] Samples of Security Related Data
http://www.secrepo.com

[工具] 十个最佳TOR替代品
http://www.mottoin.com/95977.html

[其它] 密码管理器的攻防博弈
http://www.freebuf.com/articles/database/126494.html

[Web安全] 通过DIVA了解APP安全问题
http://www.mottoin.com/95379.html

[数据挖掘] 数据至上的人工智能时代，最好的公开数据集
https://mp.weixin.qq.com/s?__biz=MzA3MzI4MjgzMw==&mid=2650723201&idx=4&sn=129442fb2c4eec7a7fdbc1c99463e123

[运维安全] 使用 NGINX 流控和 fail2ban 防止 CC 攻击
https://hacpai.com/article/1486914848288

[工具] Tater：一个基于powershell的windows提权工具
http://www.mottoin.com/95972.html

[数据挖掘] 外卖O2O的用户画像实践
http://tech.meituan.com/waimai-ups.html

[运维安全] 基于Redis的分布式锁到底安全吗（上）？
http://mp.weixin.qq.com/s/JTsJCDuasgIJ0j95K8Ay8w

[移动安全] 开发者福利：史上最全Android 开发和安全系列工具
https://mp.weixin.qq.com/s?__biz=MzIwMTI4Nzk5Ng==&mid=2650219700&idx=1&sn=b0391c11e9ac599fffb8ada6860c2cb0&chksm=8ef3b4e7b9843df1ea4868fe41dc5059e9d5ee25a3778adc5794361dc0425076dd32ab23b1fc&mpshare=1&scene=1&srcid=02150dtv7LaWmbcINZZc1gYT&key=640f69b

[取证分析] 【RSA2017专题】盘点RSA 2017展台上的那些威胁情报产品
http://www.freebuf.com/news/127067.html

[编程技术] Python多线程鸡年不鸡肋
http://thief.one/2017/02/17/Python%E5%A4%9A%E7%BA%BF%E7%A8%8B%E9%B8%A1%E5%B9%B4%E4%B8%8D%E9%B8%A1%E8%82%8B/

[漏洞分析] The AnC attack 漏洞利用新技术
https://www.vusec.net/projects/anc/

[其它] 黑苹果安装教程
http://thief.one/2017/02/13/%E8%81%94%E6%83%B3Z470%E9%BB%91%E8%8B%B9%E6%9E%9C%E6%95%99%E7%A8%8B/

[Web安全] 跨浏览器指纹追踪技术：毫无障碍的查看你的浏览记录
http://www.4hou.com/info/news/3380.html

[移动安全] pbtk: A toolset for reverse engineering and fuzzing Protobuf-based apps
https://github.com/marin-m/pbtk

[Web安全] 使用BurpSuite攻击JavaScript Web服务代理
http://www.mottoin.com/96195.html

[数据挖掘] CrimeBreak系列@犯罪预测
http://mp.weixin.qq.com/s?__biz=MzIzMzE2OTQyNA==&mid=2648946472&idx=1&sn=3d8bc747b64afda9a7c554b8a30659a0&scene=0#wechat_redirect

[Web安全] whichCDN: 网站 CDN 服务商识别工具
https://github.com/Nitr4x/whichCDN

[其它] HTA-T09-How-to-Go-from-Responding-to-Hunting-with-Sysinternals-Sysmon
https://onedrive.live.com/view.aspx?resid=D026B4699190F1E6!2843&ithint=file%2cpptx&app=PowerPoint&authkey=!AMvCRTKB_V1J5ow

[运维安全] 企业安全建设之搭建开源SIEM平台（中）
https://mp.weixin.qq.com/s?__biz=MzIwOTc0MDU3NA==&mid=2247483824&idx=1&sn=f694a9cc6558301b32d1326dad678e6e&chksm=976e77c1a019fed7495d4753bd5fb591d56f867d64665f5c22da835774f228c1a2144aee6b10&scene=0&key=1020c6e683cdee29c74f4ca518e1f394b655c8bf71153fed

[恶意分析] “无文件”恶意程序攻击技术还原
http://www.4hou.com/technology/3331.html

[Web安全] Jenkins-LDAP (CVE-2016-9299) 反序列化漏洞分析
https://www.iswin.org/2017/01/25/Jenkins-LDAP-Deserializable-Vulnerablity-CVE-2016-9299-Analysis/

[恶意分析] Introducing Malboxes: a Tool to Build Malware Analysis Virtual Machines
http://gosecure.net/2017/02/16/introducing-malboxes-a-tool-to-build-malware-analysis-virtual-machines/

[恶意分析] Mac上首次出现word宏恶意软件，可窃取用户敏感数据
http://www.4hou.com/info/news/3364.html

[运维安全] 在Linux中使用C语言实现控制流保护（CFG）
http://bobao.360.cn/learning/detail/3497.html

[Web安全] A simple way for detection the remote user's antivirus-原理：检测网页
https://vah13.github.io/AVDetection/

[Web安全] Pentester Lab课程通关流程详解
http://www.freebuf.com/articles/rookie/126735.html

[恶意分析] Banking Trojans: Ursnif Global Distribution Networks Identified
http://researchcenter.paloaltonetworks.com/2017/02/unit42-banking-trojans-ursnif-global-distribution-networks-identified/

[Web安全] 中小企业网络安全建设指引
https://security.tencent.com/index.php/blog/msg/113

[恶意分析] New Xagent Mac Malware Linked with the APT28
https://labs.bitdefender.com/2017/02/new-xagent-mac-malware-linked-with-the-apt28/

[恶意分析] A look into the Russian-speaking ransomware ecosystem
https://securelist.com/analysis/publications/77544/a-look-into-the-russian-speaking-ransomware-ecosystem/

[移动安全] Android系列工具
http://sec-redclub.com/index.php/archives/439/

[设备安全] Analyzing Exposed Cyber Assets in the United States
http://blog.trendmicro.com/trendlabs-security-intelligence/whats-shodan-analyzing-exposed-cyber-assets-united-states/

[移动安全] 安天移动安全&中国电信云堤联合报告《Dark Mobile Bank之钓鱼篇》
http://blog.avlsec.com/2017/02/4445/dark-mobile-bank/

[Web安全] Penetration Testing Tools Cheat Sheet
https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/

[其它] attacking-windows-nvidia-driverWiki
https://googleprojectzero.blogspot.com/2017/02/attacking-windows-nvidia-driver.html

[论文] 写学术论文的策略（含拖延症处方）
https://www.douban.com/note/584364368/

[Web安全] 2017 Security Blogger Awards 安全博客奖项列表
https://devops.com/2017-social-security-blogger-awards-open-voting/

[Web安全] Static analysis tools for PHP (PHP静态分析工具列表)
https://github.com/exakat/php-static-analysis-tools

[Web安全] ENISA Threat Landscape 2016 report: cyber-threats becoming top priority
https://www.enisa.europa.eu/publications/enisa-threat-landscape-report-2016

[文档] 2016中国高级持续性威胁研究报告
https://ti.360.com/upload/report/file/28-2016APT-201702120743.pdf

[其它] 超声波追踪技术可以暴露Tor用户的真实信息（去匿名化，含视频）
http://www.freebuf.com/articles/wireless/125138.html

[运维安全] 监控体系建设（一）：监控体系分层与整合
https://mp.weixin.qq.com/s?__biz=MzI2MjA5MjUwMQ==&mid=2650019694&idx=1&sn=9fbc32a260cc0ce60db10a8abe722dfe&chksm=f250d4d4c5275dc282d702c9c6ff733e86a93124e135506d1d68631387fa06f6d6d9b32d837e&scene=0&key=afc264f9418f0a941d88b3af5213d88a8ac208a7f1488ca2

[Web安全] SMTP over XXE − how to send emails using Java's XML parser
https://shiftordie.de/blog/2017/02/18/smtp-over-xxe/

[Web安全] 内网渗透中获取域管权限
http://www.mottoin.com/96262.html

[Web安全] Exec OS Command Via MSSQL
https://evi1cg.me/archives/Exec_OS_Command_Via_MSSQL.html

[杂志] SecWiki周刊（第154期)
https://www.sec-wiki.com/weekly/154

[恶意分析] 反检测技术之反病毒检测
http://paper.seebug.org/222/

[Web安全] Blocking-resistant communication through domain fronting
https://www.bamsoftware.com/papers/fronting/

[文档] The Private Sector and Active Defense against Cyber Threats.
chrome-extension://ikhdkkncnoglghljlkmcimlnlhkeamad/pdf-viewer/web/viewer.html?file=https%3A%2F%2Fcchs.gwu.edu%2Fsites%2Fcchs.gwu.edu%2Ffiles%2Fdownloads%2FCCHS-ActiveDefenseReportFINAL.pdf

[运维安全] 情报的场景与进阶
http://mp.weixin.qq.com/s?__biz=MzA3MTEwNDE1NA==&mid=2649431926&idx=1&sn=c604fc7b04268c0e729afefcbd4329f2&scene=0#wechat_redirect

[运维安全] 智能安全运行：人员配备指南
http://mp.weixin.qq.com/s?__biz=MzI4NzU2NjU4NQ==&mid=2247484015&idx=1&sn=1fd9104ae2a4d73b6cf196c6f131457a&scene=0#wechat_redirect

[Web安全] Web客户端追踪（上）—Cookie追踪
http://www.arkteam.net/?p=1550

[文档] 第39次《中国互联网络发展状况统计报告》
http://cnnic.cn/hlwfzyj/hlwxzbg/hlwtjbg/201701/P020170123364672657408.pdf

[恶意分析] 这款可能来自伊朗的Mac恶意程序，已经在针对美国国防工业了
http://www.freebuf.com/articles/system/126605.html

[其它] IoT_Attack_Surface_Areas
https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project#tab=IoT_Attack_Surface_Areas

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第155期)

SecWiki周刊（第155期）

最新公告

友情链接

SecWiki公众号

安全学术圈