[ Android ]  In The Wild: Google Can’t Close the Door on Android Malware | Check Point Blog http://ow.ly/4n3wFH

[ Android ]  First weaponized #Towelroot exploits used in #Android #ransomware attacks https://threatpost.com/android-ransomware-attacks-using-towelroot-hacking-team-exploits/117655/ via @ threatpost

[ Attack ]  Personal info of 93.4 million Mexicans exposed on AWS through unpassworded MongoDB https://www.databreaches.net/personal-info-of-93-4-million-mexicans-exposed-on-amazon/ https://t.co/YYFfwgnsUP

[ Attack ]  Two bytes to $951M : http://baesystemsai.blogspot.in/2016/04/two-bytes-to-951m.html https://t.co/YUh2Y7iyU1

[ Browser ]  Exploiting Internet Explorer’s MS15-106, Part I: VBScript Filter Type Confusion Vulnerability (CVE-2015-6055) http://hubs.ly/H02MtX10

[ Detect ]  Building a Home Lab to Become a Malware Hunter - A Beginner’s Guide https://www.alienvault.com/blogs/security-essentials/building-a-home-lab-to-become-a-malware-hunter-a-beginners-guide

[ iOS ]  C & C++ for OS - Filter Bypass & Persistent Vulnerability http://goo.gl/fb/77FOwC #FullDisclosure

[ IoTDevice ]  New blog post: AirPort Hacking Update http://embeddedideation.com/2016/04/24/airport-hacking-update/

[ Linux ]  Unlock up to an additional 4GB of system RAM : https://github.com/graphitemaster/moreram

[ Linux ]  Article on ELF shared-library injection #forensics analysis in #Linux and #FreeBSD http://backtrace.io/blog/blog/2016/04/22/elf-shared-library-injection-forensics/

[ Linux ]  Semaphores in the Linux kernel (Part 3) : https://github.com/0xAX/linux-insides/blob/master/SyncPrim/sync-3.md //linux-insides* series cont'd cc: @ 0xAX

[ Linux ]  Randomized symbol order in libc in OpenBSD, randomized at boot time https://twitter.com/revskills/status/724625808103493632

[ Mac OS X ]  'KextViewr' (view loaded kernel extensions) updated to version 1.1.0: https://objective-see.com/products/kextviewr.html minor ui & search improvements, bug fixes, etc

[ MachineLearning ]  Leaf - Machine Learning for Hackers : http://autumnai.com/leaf/book/leaf.html

[ Malware ]  Ransomware-as-a-service + Malicious Insiders = Deadly Threat http://blog.imperva.com/2016/04/ransomware-as-a-service-malicious-insiders-deadly-threat.html

[ Malware ]  The 7ev3n-HONE$T ransomware encrypts and renames your files to R5A http://ow.ly/4n2VJ3

[ Malware ]  MazarBOT Android Malware Distributed via SMS Spoofing Campaign http://feedproxy.google.com/~r/tripwire-state-of-security/~3/E878OeL0DDw/

[ Malware ]  Yeabests[dot]cc malware uses a hidden WMI subscription to constantly re-infect Internet Explorer/Chrome shortcuts http://blog.zemana.com/2016/04/yeabestscc-fileless-browser-hijacker_24.html

[ NetworkDevice ]  routersploit : The Router Exploitation Framework : https://github.com/reverse-shell/routersploit

[ Others ]  Adapting AngularJS Payloads to Exploit Real World Applications http://blog.portswigger.net/2016/04/adapting-angularjs-payloads-to-exploit.html

[ Others ]  Hacking Mattermost: From Unauthenticated to System Admin http://haxx.ml/post/142844845111/hacking-mattermost-from-unauthenticated-to-system

[ Others ]  New post - Windows 10 Mobile artifacts (SMS/MMS/Calls/Contacts/Pics/Vids). TLDR = It hasn't changed that much. See http://cheeky4n6monkey.blogspot.com/2016/04/an-initial-peep-at-windows-10-mobile.html

[ Others ]  Compiler Construction : http://c9x.me/compile/bib/wirthcc.pdf (pdf)

[ Tools ]  I've built The Oprah Proxy, a Python script which will fetch credentials and list proxies for #Opera #VPN #proxy https://github.com/spaze/oprah-proxy

[ Tools ]  Poor man's ProTip: X's -tst option prevents keystroke injection via XTest http://gareus.org/oss/genxkey Snooping remains http://www.staff.uni-mainz.de/pommeren/DSVorlesung/Material/Xsecurity

[ Web Security ]  Drag Drop XSS in Google ;) http://c0rni3sm.blogspot.com/2016/04/drag-drop-xss-in-google.html #bugbounty

[ Web Security ]  原本丢掉的跨站漏洞 - JavaScript 特性利用 http://linux.im/2016/04/22/javascript_characteristic_utilization_xss.html

[ Windows ]  W32pServiceTable from windows 10 build 14316: http://redplait.blogspot.com/2016/04/w32pservicetable-from-windows-10-build.html

[ Windows ]  Group Policy Hijacking and LDAP Relay. New English docs. Please RT. http://intercepter-ng.blogspot.ru/2016/04/group-policy-hijacking-and-ldap-relay.html #mitm #security #networks #windows #ntlm