SecWiki周刊（第73期)

SecWiki周刊（第73期）

2015/07/20-2015/07/26

安全资讯

[文档] 暗网研究资料bt
http://pan.baidu.com/s/1bnjTsdD

[文档] U.S. decides against publicly blaming China for data hack
https://www.washingtonpost.com/world/national-security/us-avoids-blaming-china-in-data-theft-seen-as-fair-game-in-espionage/2015/07/21/03779096-2eee-11e5-8353-1215475949f4_story.html

[运维安全] Gartner：2015年SIEM（安全信息与事件管理）市场分析
http://yepeng.blog.51cto.com/3101105/1677258

[取证分析] 从国家安全法出台看防护预警体系
http://www.aqniu.com/security-reports/8930.html

[取证分析] Caspida：公司产品分析
http://www.sec-un.org/chop-chop-caspidasplunk-just-190-million-purchase-of-security-startup.html

[设备安全] Hackers Remotely Kill a Jeep on the Highway
http://www.wired.com/2015/07/hackers-remotely-kill-jeep-highway/

安全技术

[Web安全] 在远程系统上执行程序的技术整理
http://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=207464484&idx=1&sn=040d0d9eeed1e31eaac369f08722c72a&scene=5#rd

[编程技术] SQLMAP源码分析Part1:流程篇
http://drops.wooyun.org/tips/7301

[取证分析] WireShark黑客发现之旅
http://drops.wooyun.org/tips/7300

[会议] 2015 DEF CON 演示实验室工具抢先看(上)
http://mp.weixin.qq.com/s?__biz=MjM5NDM1OTM0Mg==&mid=207449906&idx=1&sn=f115a177eb7813746cbf1d5e850bcf67&scene=5#rd

[Web安全] MySQL注入技巧
http://drops.wooyun.org/tips/7299

[数据挖掘] Complete Public Reddit Comments Corpus
https://archive.org/details/2015_reddit_comments_corpus

[取证分析] Working Together to Filter Automated Data-Center Traffic
http://googleonlinesecurity.blogspot.com/2015/07/working-together-to-filter-automated.html

[恶意分析] Using Data Science Techniques to Detect Malicious Behavior
http://www.slideshare.net/EndgameInc/2015-slideshare-philfinal

[Web安全] 创造tips的秘籍——PHP回调后门
http://drops.wooyun.org/tips/7279

[文档] PHPCON 2015大会 PDF
http://pan.baidu.com/s/1mg5pwE0

[数据挖掘] Kaggle competition tips and summaries
http://yanirseroussi.com/2014/04/05/kaggle-competition-summaries/

[文档] recon 2015 slide
http://nuzzel.com/sharedstory/07222015/recon/index_of_2015slides

[Web安全] time-based-username-enumeration
https://blog.nvisium.com/2015/06/time-based-username-enumeration.html

[设备安全] 智能路由器安全特性分析
http://security.tencent.com/index.php/blog/msg/91

[文档] Asia Pacific & Japan 2015 RSA Conference
http://www.rsaconference.com/events/ap15/downloads-and-media?keywords=&track=&type=presentations

[恶意分析] Hacking Team inspired Anti-VM Trick spot in the Wild
http://joe4security.blogspot.ch/2015/07/hacking-team-inspired-anti-vm-trick.html

[Web安全] 分享一些无特征PHP一句话
http://weibo.com/p/1001603866364363341283

[漏洞分析] Windows 10 Sharpens Browser Security With Microsoft Edge
http://blog.trendmicro.com/trendlabs-security-intelligence/windows-10-sharpens-browser-security-with-microsoft-edge/

[Web安全] 如何实现一个基于代理的web扫描器
https://github.com/netxfly/passive_scan

[数据挖掘] Must Watch Data Science Videos from SciPy Conference 2015
http://www.analyticsvidhya.com/blog/2015/07/data-science-videos-scipy-2015/

[恶意分析] Hacking Team: a zero-day market case study
http://tsyrklevich.net/2015/07/22/hacking-team-0day-market/

[漏洞分析] OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability
https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html

[漏洞分析] Exploit开发系列教程-Heap
http://drops.wooyun.org/tips/7275

[文档] 2015上半年度金融行业互联网安全报告
http://static.freebuf.com/2015/07/2015-financial-industry-security-report.pdf

[恶意分析] Examining Malware with Python
https://www.endgame.com/blog/examining-malware-python

[数据挖掘] 大型集群上的快速和通用数据处理架构
http://vdisk.weibo.com/s/ud4_-g3jNNb4u

[数据挖掘] Deep Learning Courses
https://developer.nvidia.com/deep-learning-courses

[Web安全] 使用 mitmproxy 监控 HTTP 请求
http://liuxiang.logdown.com/posts/192057-use-mitmproxy-to-monitor-http-requests

[Web安全] 關於 HITCON CTF 的那些事
https://speakerdeck.com/p8361/guan-yu-hitcon-ctf-de-na-xie-shi-zhi-web-gou-ru-he-zai-xian-e-de-ctf-shi-jie-zhong-cun-huo

[数据挖掘] 机器学习算法分类
http://www.sec-un.org/machine-learning-algorithm-for-classification.html

[Web安全] Ruby Security Field Guide
http://trailofbits.github.io/rubysec/

[漏洞分析] ZCR Shellcoder Generator
https://github.com/Ali-Razmjoo/ZCR-Shellcoder

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第73期)