SecWiki周刊（第391期)

2021/08/23-2021/08/29

安全技术

[Web安全] learning-codeql: CodeQL Java 全网最全的中文学习资料
https://github.com/SummerSec/learning-codeql

[Web安全] BloodHound：Six Degrees of Domain Admin
https://github.com/BloodHoundAD/BloodHound

[漏洞分析] 车机硬件分析与固件提取
https://mp.weixin.qq.com/s/IIqg3ePO6MNY-pxcpGYv1w

[Web安全] 漫谈PHP反汇编器/反编译器
https://mp.weixin.qq.com/s/bmdSyZem46aukj_hvLhu0w

[漏洞分析] Electron的openExternal可控利用点分析
https://www.anquanke.com/post/id/251224

[漏洞分析] 面向开源软件的自动化漏洞数据采集与处理技术研究
https://mp.weixin.qq.com/s/P9zQI7I2obCpov_LMIeKIw

[Web安全] HybridTestFramewrok: End to End testing of Web, API and Security
https://github.com/dipjyotimetia/HybridTestFramewrok#setup--tools

[编程技术] seed-emulator: A Python framework for creating emulation of the Internet.
https://github.com/seed-labs/seed-emulator

[漏洞分析] 通过漏洞预测改进漏洞修复决策
https://mp.weixin.qq.com/s/LOBnwPsYMNfLg9nkeeMi-w

[Web安全] The Hacker Recipes 黑客实操笔记
https://www.thehacker.recipes/

[恶意分析] 海量恶意样本下高性能 Yara 检测方案
https://mp.weixin.qq.com/s/vtmrhjXzL3gj8m_1uwgtmw

[恶意分析] 过往可能低估了反射放大 DDoS 的风险
https://mp.weixin.qq.com/s/feav2bcigQScbze4C5psSw

[Web安全] 浅谈云上攻防——对象存储服务访问策略评估机制研究
https://mp.weixin.qq.com/s/ncWGrMsIAvh9HEK1QC5IGQ

[杂志] SecWiki周刊（第390期)
https://www.sec-wiki.com/weekly/390

[Web安全] MSSQL数据库注入全方位利用
https://www.anquanke.com/post/id/248896

[数据挖掘] 面向开放域的无监督实体对齐
https://mp.weixin.qq.com/s/gH1VNCUVT5Hd5lGaGvEO2w

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com