腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Attrack ] BlackEnergy has been linked to attacks in Ukraine since 2014: http://bit.ly/1TEhaxv
"自 2014 年起， BlackEnergy 恶意软件就与乌克兰的攻击有关: https://t.co/yaZ806oK7f"
-
[ Defend ] Intel's SGX Memory Encryption Engine https://drive.google.com/file/d/0Bzm_4XrWnl5zOXdTcUlEMmdZem8 #realworldcrypto https://t.co/NPKTIcKAlU
"Intel 的 SGX MEE(内存加密引擎)， 来自 RWC（Real World Cryptography） 2016 会议： https://t.co/NPKTIcKAlU https://t.co/FpYlHx6phw "
-
[ Defend ] Intel® Software Guard Extensions (SGX): A Researcher’s Primer https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2015/january/intel-software-guard-extensions-sgx-a-researchers-primer/
"Intel SGX（软件防护扩展）入门: https://t.co/fYoiY2Z8P9 "
-
[ Forensics ] Computer Forensics, Malware Analysis & Digital Investigations: Understanding a Hyper-V server when ... | @ scoopit http://sco.lt/6a6rJp
"在取证分析时如何处理 Hyper-V Server https://t.co/uR7AwTQPwW "
-
[ Hardware ] GSM-scanner : Spectrum monitoring system for GSM providers : https://github.com/yosriayed/GSM-scanner
"GSM-scanner: 为 GSM 提供商准备的频谱监控系统: https://t.co/gPIVscEMLT"
-
[ Mac OS X ] I would love if anyone with an OS X 10.9.5 Installer could check if our hashes match. https://github.com/sektioneins/osx_verify
"osx_verify - OSX Installer Verifier https://t.co/44F5HACDfQ"
-
[ Malware ] ZeroAccess 3 Analysis : http://kryptoslogic.blogspot.in/2016/01/zeroaccess-3-analysis.html
"恶意软件 ZeroAccess 3 的分析: https://t.co/ZTFbK8g9Ze"
-
[ Malware ] #MalwareMustDie #BLOG MMD-0049-2016 - A case of java trojan (downloader/RCE) for minerd hack http://blog.malwaremustdie.org/2016/01/mmd-0049-2016-case-of-java-trojan.html https://t.co/S7Hs6Qgu9n
"一个 Java 木马案例分析，来自 MalwareMustDie Blog: https://t.co/S7Hs6Qgu9n https://t.co/ax80QcAQAy "
-
[ Others ] Manual analysis of carrier files & advanced detection with ECAT : https://community.rsa.com/docs/DOC-40268
"载体样本的手动分析与 ECAT 的高级检测: https://t.co/0D6uufN4ci"
-
[ Others ] PythonForWindows - a codebase aimed to make interaction with Windows and native execution easier.https://github.com/hakril/PythonForWindows
"PythonForWindows - 使 Python 与 Windows 的交互以及 Native 代码执行更方便 https://t.co/w7OQ6072zW "
-
[ Pentest ] Xploit : Open source exploit framework made in C# : https://github.com/shargon/Xploit
"Xploit: 开源 Exploit 框架， C# 语言编写: https://t.co/uyze4nS1eT"
-
[ Popular Software ] TrueCrypt 7.1a / 7.2 DLL Hijacking - Intelligent Exploit http://www.intelligentexploit.com/view-details.html?id=23004
"TrueCrypt 7.1a/7.2 DLL 劫持漏洞 https://t.co/g0oP21JQFh"
-
[ Popular Software ] ZDI-16-007: McAfee Application Control Kernel Driver Memory Corruption Privilege Escalation Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-16-007/
"McAfee 应用控制组件驱动程序存在内存破坏提权漏洞，来自 ZDI 漏洞公告: https://t.co/KdH9pejzFW"
-
[ Tools ] Winpayloads : Undetectable Windows Payload Generation : https://github.com/Charliedean/Winpayloads
"Winpayloads: 免杀 Windows Payload 生成器: https://t.co/HEU2UUroVg"
-
[ Tools ] LoadDll Better version of RunDll with GUI - This program allows you to load DLLs on Windows https://github.com/edix/LoadDll/blob/master/README.md https://t.co/nHfbZzLz75
"LoadDll - Windows 上加载 DLL 的工具(带 GUI)： https://t.co/dLZXgsbs7n https://t.co/nHfbZzLz75"
