
腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Browser ] Firefox 处理 Vorbis 音频数据时存在越界内存写入漏洞(CVE-2018-5146、CVE-2018-5147): https://www.mozilla.org/en-US/security/advisories/mfsa2018-08/
-
[ Challenges ] Pwn2Own 2018 大赛结束,Richard Zhu 拿下本次的 Master of Pwn ;ZDI 发文对本次比赛做了简单总结回顾: https://www.zerodayinitiative.com/blog/2018/3/15/pwn2own-2018-day-two-results-and-master-of-pwn
-
[ Forensics ] 数字取证调查中如何获取网络连接的时间戳: https://blog.illusivenetworks.com/tech/why-and-how-to-extract-network-connection-timestamps-for-dfir-investigations
-
[ Industry News ] 有研究人员发现多款流行 Andriod 手机上预装了恶意软件: https://thehackernews.com/2018/03/android-botnet-malware.html
-
-
[ Others ] Stack pivoting exploit(picture): https://twitter.com/binitamshah/status/974663841127661568/photo/1
-
[ Tools ] ida-evm - Ethereum 虚拟机(EVM)的 IDA 处理器模块: https://github.com/trailofbits/ida-evm
-
[ Tools ] PowerShellEditorServices - PowerShell 编辑器功能加强模块: https://github.com/PowerShell/PowerShellEditorServices
-
[ Web Security ] 如何预防 XSS 漏洞: http://www.friendsglobal.com/xss/preventing-xss-in-your-application/
-
[ Windows ] Defending Microsoft environments at scale,大规模 Microsoft 环境的防御方案: https://drive.google.com/file/d/1QXjmlPRvfiRBnqzNpsTQo5bn0xKQoNc4/view