腾讯玄武实验室安全动态推送(Tencent Xuanwu Lab Security Daily News)

腾讯玄武实验室安全动态推送

Tencent Xuanwu Lab Security Daily News

2016/06/20

Peter Pi @heisecode

[ Android ] Upload some Android/Mac/iOS POCs, not well written but can take a look https://github.com/heisecode/Bug_POCs https://twitter.com/heisecode/status/743564423881601024

" 研究员 heisecode 公开了几个 iOS/Android 相关的漏洞 PoC： https://t.co/SEyuMcOmNF https://t.co/nc1kc48CrT"
Jacob Rossi @jacobrossi

[ Browser ] Making HTTPS fast in Microsoft Edge. The road to 0-RTT with TLS 1.3, TCP Fast Open, TLS False Start, and HTTP/2 https://blogs.windows.com/msedgedev/2016/06/15/building-a-faster-and-more-secure-web-with-tcp-fast-open-tls-false-start-and-tls-1-3/

" 通过 TCP Fast Open、TLS False Start 以及 TLS 1.3，实现更快更安全地 Web 浏览体验： https://t.co/9UVJzp9v6Y "
Ange @angealbertini

[ Linux ] Linux file system hierarchy (free PDF poster) https://www.blackmoreops.com/2015/06/18/linux-file-system-hierarchy-v2-0/ https://t.co/ACYjQlkxQV

"Linux 文件系统目录结构（一张图展示）： https://t.co/6DkLGHZG5q https://t.co/ACYjQlkxQV"
Maarten @maartenvhb

[ MachineLearning ] Good read on crafting adversarial input to defeat neural network-based malware classifiers. http://bit.ly/1OwQZLo

" 构造畸形输入，对抗基于神经网络的恶意软件分类器，Paper： https://t.co/8hktGYwXUn"
Arrigo Triulzi @cynicalsecurity

[ Others ] PoC||GTFO 0x12 is now available on the neighbourly EU mirror https://www.alchemistowl.org/pocorgtfo/ #IPv6 #SSL /cc @ travisgoodspeed

"PoC||GTFO 杂志第 12 期出版： https://t.co/qD2iVPJ0x6 "
Keystone Engine @keystone_engine

[ Tools ] AssemblyBo, a fun Telegram bot to encode/decode assembly using Keystone & @ capstone_engine! https://github.com/mbikovitsky/AssemblyBot https://t.co/dwGurcDDrq

"AssemblyBo - 基于 Keystone 和 Capstone 的一个汇编、反汇编机器人： https://t.co/j4hA42kZx9 https://t.co/dwGurcDDrq"
Binni Shah @binitamshah

[ Virtualization ] Monitoring & Controlling Kernel-mode Events by HyperPlatform : http://tandasat.github.io/HyperPlatform/recon2016/REcon2016_presentation.pdf (pdf) https://t.co/dzZBsqmeVX

" 通过 HyperPlatform 虚拟化工具监控和控制内核态事件，来自 RECon 2016 会议︰ https://t.co/lmDgMO1Jwz https://t.co/dzZBsqmeVX"
Nicolas Krassas @Dinosn

[ Web Security ] The Genesis of an XSS Worm - Part I http://brutelogic.com.br/blog/genesis-xss-worm-part-i/

"XSS 蠕虫的成因，Part 1： https://t.co/sQnfONANeC"
Cyberwarfare @CyberWarfaRRe

[ Windows ] Recovering BitLocker Keys on Windows 8.1 and 10 | Advanced Threats,Intelligence Technolog http://www.rightrelevance.com/search/articles/hero?article=5ecc62ca305b5f79d374bf729af29ef7581fb554&query=cyberwarfare&taccount=cyberwarfarre https://t.co/uLpRvaNpbt

" 在 Windows 8.1 和 Windows 10 上还原 BitLocker 密钥： https://t.co/UkCI3zqXWL https://t.co/uLpRvaNpbt"

2016/06/20