SecWiki周刊（第296期）
2019/10/28-2019/11/03
安全技术
[翻译] 看我如何利用PHP的0day黑掉Pornhub并获得2W美刀奖励
https://mp.weixin.qq.com/s/pvc0xrBK6wP-lJMOPONr2w
https://mp.weixin.qq.com/s/pvc0xrBK6wP-lJMOPONr2w
详细分析Solr的CVE-2019-0193以及velocity模板注入新洞
https://mp.weixin.qq.com/s/gl35WFkxhAbuw7BNQa1FiQ
https://mp.weixin.qq.com/s/gl35WFkxhAbuw7BNQa1FiQ
Apache Solr Velocity模版注入远程命令执行漏洞预警
https://www.securityinfo.cn/2019/10/31/%E3%80%90%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E3%80%91Apache%20Solr%20Velocity%E6%A8%A1%E7%89%88%E6%B3%A8%E5%85%A5%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E9%A2%84%E8%AD%A6/#more
https://www.securityinfo.cn/2019/10/31/%E3%80%90%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E3%80%91Apache%20Solr%20Velocity%E6%A8%A1%E7%89%88%E6%B3%A8%E5%85%A5%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E9%A2%84%E8%AD%A6/#more
2018-2020青年安全圈-活跃技术博主/博客
https://github.com/404notf0und/Security-Data-Analysis-and-Visualization
https://github.com/404notf0und/Security-Data-Analysis-and-Visualization
物联网安全标准化白皮书（2019版）
https://www.tc260.org.cn/upload/2019-10-29/1572340054453026854.pdf
https://www.tc260.org.cn/upload/2019-10-29/1572340054453026854.pdf
从零开始学威胁狩猎：手把手教你用 Jupyter Notebook 分析安全事件（二）
https://www.4hou.com/system/21107.html
https://www.4hou.com/system/21107.html
注入技术系列：一个批量验证DLL劫持的工具
https://mp.weixin.qq.com/s/qaKCG1RkBOnr3SkG9Oc1pA
https://mp.weixin.qq.com/s/qaKCG1RkBOnr3SkG9Oc1pA
人工智能安全标准化白皮书（2019版）
https://www.tc260.org.cn/front/postDetail.html?id=20191031151659
https://www.tc260.org.cn/front/postDetail.html?id=20191031151659
伯克利课程：深度强化学习 (2019)
https://www.bilibili.com/video/av69455099/
https://www.bilibili.com/video/av69455099/
SecWiki周刊（第295期)
https://www.sec-wiki.com/weekly/295
https://www.sec-wiki.com/weekly/295
深入了解子域名挖掘tricks
https://xz.aliyun.com/t/6617
https://xz.aliyun.com/t/6617
PHP-fpm 远程代码执行漏洞(CVE-2019-11043)分析
https://lorexxar.cn/2019/10/25/php-fpm-rce/
https://lorexxar.cn/2019/10/25/php-fpm-rce/
大型互联网公司数据安全实践
https://mp.weixin.qq.com/s/DtGLFwcwNMCZseOKOAOC9Q
https://mp.weixin.qq.com/s/DtGLFwcwNMCZseOKOAOC9Q
一种快速、不区分格式的检测恶意Web内容的深度学习方法
https://mp.weixin.qq.com/s/OAiBXoti1AV-iFmZkpRIFA
https://mp.weixin.qq.com/s/OAiBXoti1AV-iFmZkpRIFA
CyGraph: Graph-Based Analytics and Visualization for Cybersecurity
https://csis.gmu.edu/noel/pubs/2016_Cognitive_Computing_chapter.pdf
https://csis.gmu.edu/noel/pubs/2016_Cognitive_Computing_chapter.pdf
Destroying x86_64 instruction decoders with differential fuzzing
https://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/
https://blog.trailofbits.com/2019/10/31/destroying-x86_64-instruction-decoders-with-differential-fuzzing/
-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com本期原文地址: SecWiki周刊(第296期)
