SecWiki周刊(第354期)
2020/12/07-2020/12/13
安全资讯
[其它]  2020网络安全大事记 - 监管判例篇
https://mp.weixin.qq.com/s/60-O9GGYPNZZW6KVvY_c8w
安全技术
[其它]  中国网络安全公司资本关系图谱 V2.0
https://mp.weixin.qq.com/s/cv8z0791TLrVG2HYKY1pdg
[观点]  FireEye红队工具失窃事件分析和思考
https://mp.weixin.qq.com/s/fkH9TZKOcWb_Ttvl-VlA4w
[观点]  从FireEye的泄露看红队的差距
https://mp.weixin.qq.com/s/K2W-hgCUFOzgxrhF6U1s1A
[编程技术]  中间件内存马注入&冰蝎连接
https://mp.weixin.qq.com/s/eI-50-_W89eN8tsKi-5j4g
[运维安全]  数据安全怎么做——静态敏感数据治理
https://mp.weixin.qq.com/s/AejcWwJWxZWHf9dDRfVWPA
[取证分析]  FireEye RedTeam 被黑了
https://mp.weixin.qq.com/s/WupcVZATcNkKE93XcgJ4qg
[杂志]  SecWiki周刊(第353期)
https://www.sec-wiki.com/weekly/353
[Web安全]  记一次St2-045的绕过
https://www.sec-in.com/article/550
[设备安全]  针对以色列水利/水务基础设施的网络攻击回顾
https://mp.weixin.qq.com/s/XvPf_irbpZF6B0-fnn1OBA
[运维安全]  玩转容器安全三 - Harbor私有镜像仓库
https://blog.csdn.net/bloodzero_new/article/details/111055044
[Web安全]  月饼计划之XSS
https://www.sec-in.com/article/585
[取证分析]  30行代码搞定Monero活跃节点探测
https://mp.weixin.qq.com/s/omsTd3q5tOkknfK35tXGXg
[数据挖掘]  基于AI的暗网流量检测识别效果专题研究
http://cyberopportunity.cn/?p=1280
[Web安全]  黑吃黑Getshell到提权实战案例
https://mp.weixin.qq.com/s/Hr-ybKz2CbG4yyTpww23rA
[漏洞分析]  Spring全家桶各类RCE漏洞浅析
https://mp.weixin.qq.com/s/gfCtSJoefYLjJpaksbKLrQ
[恶意分析]  FireEye红队工具失窃事件跟进分析
https://mp.weixin.qq.com/s/X-bBV44nMQvDlnl6f4eX7Q
[漏洞分析]  SharePoint Rce 系列分析(一)
https://mp.weixin.qq.com/s/FfHc8TFUs_4H8JHWbYv3FQ
[Web安全]  红队中易被攻击的一些重点系统漏洞整理
https://github.com/r0eXpeR/redteam_vul
[Web安全]  红蓝对抗之Linux内网渗透
https://security.tencent.com/index.php/blog/msg/174
[漏洞分析]  serverless functions攻防初探
https://www.cdxy.me/?p=836
[恶意分析]  邮件攻防--宏免杀姿势1
http://wolvez.club/2020/12/10/mailsec01/
[Web安全]  BypassAv小技巧
https://www.sec-in.com/article/733
[Web安全]  从 CVE-2020-17144 看实战环境的漏洞武器化
https://mp.weixin.qq.com/s/nVtE-OFoO076x6T0147AMw
[Web安全]  实战-站库分离拿下WebShell
https://xz.aliyun.com/t/8584
[漏洞分析]  Kerberos Bronze Bit Attack (CVE-2020-17049) Scenarios to Potentially Compromise
https://www.hub.trimarcsecurity.com/post/leveraging-the-kerberos-bronze-bit-attack-cve-2020-17049-scenarios-to-compromise-active-directory
[Web安全]  SQL注入渗透PostgreSQL(bypass tricks)
https://xz.aliyun.com/t/8621
[Web安全]  从mimikatz学Windows本地hash抓取
https://xz.aliyun.com/t/8601
[移动安全]  逆向智能门锁漏洞分析PART(二)
https://mp.weixin.qq.com/s/IutPFguZmNvPZd5XrlK6Mg
[法规]  各国数据隐私与保护情况
https://mp.weixin.qq.com/s/B061CcZsJKavNEj_ggkRLQ
[移动安全]  逆向智能门锁漏洞分析PART(一)
https://mp.weixin.qq.com/s/pIeV3uNfRzAYggxRSo7P_g
-----微信ID:SecWiki-----
SecWiki,9年来一直专注安全技术资讯分析!
SecWiki:https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第354期)