SecWiki周刊（第21期)

2014/07/21-2014/07/27

安全资讯

安全技术

[Web安全] 《安全参考》HACKCTO-201407-19
http://pan.baidu.com/s/1c0eoN8c

[数据挖掘] Toward Scalable Systems for Big Data Analytics: A Technology Tutorial
http://ieeexplore.ieee.org/xpl/articleDetails.jsp?reload=true&arnumber=6842585

[漏洞分析] 简单修改了cve-2011-3402的内核提权ShellCode
http://debugwar.com/archives/313/change_shellcode_cve-2011-3402

[数据挖掘] Machine Learning Surveys
http://www.mlsurveys.com/

[Web安全] 2014年澳大利亚信息安全挑战 CySCA CTF 官方write up Crypto篇
http://drops.wooyun.org/tips/2618

[Web安全] playweb:基于分布式网络安全扫描系统实现
http://yaseng.me/yaseng-graduation-thesis-playweb.html

[Web安全] 内网渗透之-域渗透基础
http://www.91ri.org/10154.html

[运维安全] 配置ModSecurity防火墙与OWASP规则
http://drops.wooyun.org/tips/2614

[Web安全] TSRC挑战赛： PHP防御绕过挑战实录
http://security.tencent.com/index.php/blog/msg/58

[Web安全] TSRC挑战赛： PHP场景中getshell防御思路分享
http://security.tencent.com/index.php/blog/msg/57

[其它] Academic Universe:A Platform for Exploring Linked Academic Objects
http://soscholar.com/universe/

[Web安全] 无声杯 xss 挑战赛 writeup
http://drops.wooyun.org/tips/2671

[漏洞分析] Advanced Exploitation of VirtualBox 3D Acceleration VM Escape Vulnerability
http://www.vupen.com/blog/20140725.Advanced_Exploitation_VirtualBox_VM_Escape.php

[恶意分析] chopshop:Protocol Analysis/Decoder Framework
https://github.com/MITRECND/chopshop

[恶意分析] 后现代艺术：解构主义APT
http://0x.557.im/swan/201407/23_73.html

[编程技术] 借助开源项目，学习软件开发
https://github.com/zhuangbiaowei/learn-with-open-source

[Web安全] Python教程网络安全篇
http://drops.wooyun.org/tips/2568

[漏洞分析] Threat Research, Analysis, and Mitigation
http://www.fireeye.com/blog/

[恶意分析] Samples from the conflict in Syria
http://syrianmalware.com/

[运维安全] 我是如何”黑掉”91Ri的
http://www.91ri.org/10085.html

[漏洞分析] x64_dbg:An open-source x64/x32 debugger for windows
http://x64dbg.com/#start

[Web安全] 如何建立高效的安全测试
http://www.freebuf.com/video/38608.html

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com