[ Language ]  Ruby Hacking Guide : http://ruby-hacking-guide.github.io/

[ Linux ]  Android "Root" via dirtyc0w privilege escalation exploit https://gist.github.com/Arinerron/0e99d69d70a778ca13a0087fa6fdfd80 https://t.co/jJDlw383GY

[ macOS ]  My ppt "Fuzzing and Exploit OSX Vulnerabilities for Fun and Profit" on Pacsec2016 http://www.slideshare.net/PacSecJP/moony-li-pacsec18?qid=15552f01-6655-4555-9894-597d62fd803c&v=&b=&from_search=4 Github https://t.co/rUX8bzhCAd

[ Malware ]  CloudFanta Malware Steals Banking Information Via Cloud Storage Apps http://securityaffairs.co/wordpress/52750/malware/cloudfanta-malware.html

[ Malware ]  Inside the Gootkit C&C server https://securelist.com/blog/research/76433/inside-the-gootkit-cc-server/ https://t.co/3MJiBq0hrw

[ Malware ]  A nine-year-old vulnerability is uncovered in Linux systems. A look at other recent threats that affected the OS: http://bit.ly/2eqfZc4

[ MalwareAnalysis ]  Sandbox Analyz.io yet another malware sandbox https://sandbox.anlyz.io https://t.co/D6mSEEMraZ

[ OpenSourceProject ]  GNU tar extract pathname bypass : https://sintonen.fi/advisories/tar-extract-pathname-bypass.proper.txt

[ Others ]  Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems - https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/ctrlchannels-oakland-2015.pdf - https://www.youtube.com/watch?v=fwUaN5ik8zE

[ Others ]  [New Phrack Paper] Attacking JavaScript Engines: A case study of JavaScriptCore and CVE-2016-4622 http://www.phrack.org/papers/attacking_javascript_engines.html by @ 5aelo

[ Rootkit ]  NumChecker A System Approach for Kernel Rootkit Detection and Identification https://www.blackhat.com/docs/asia-16/materials/asia-16-Guo-NumChecker-A-System-Approach-For-Kernel-Rootkit-Detection-And-Identification.pdf - https://www.youtube.com/watch?v=TgMsMwsfoQ0

[ Tools ]  Check our ROP tool used in our private PS4 jailbreak: https://github.com/chaitin/pro

[ Tools ]  rop-chainer : static program analysis tool that generates return-oriented exploits for ELF binaries : https://github.com/wizh/rop-chainer

[ Tools ]  A new tool uses Capstone inside: RePEconstruct to auto unpack Windows binary & rebuild the Import Address Table. https://t.co/2cDP0GZujL

[ Virtualization ]  [CVE-2016-5328/5329] Multiple VMWare Fusion kernel infoleaks (1 in the OS X Host and 1 in the OS X Guest) - https://marcograss.github.io/security/vmware/cve/2016/10/27/cve-2016-5328-5329-vmware-fusion-infoleaks.html

[ Web Security ]  Joomla exploit, drops PHP shell too https://github.com/XiphosResearch/exploits/tree/master/Joomraa (cc @ danielcid @ showthread )

[ Windows ]  Windows atom tables can be abused for code injection attacks - http://bit.ly/2efdPGC #atombombing

[ Windows ]  Example: Turn Msbuild.exe into a keylogger. https://gist.github.com/subTee/c51ea995dfaf919fd4bd36b3f7252486

[ Windows ]  Check details how I exploit a win32k vulnerability for EoP in Pwn2Own 2016. https://twitter.com/zer0mem/status/791522523003228160

[ Windows ]  [BlogPost] Command Line Camouflage - ODBCCONF.EXE http://subt0x10.blogspot.com/2016/10/command-line-camouflage-odbcconfexe.html cc @ NickTyrer

[ Windows ]  Windows Device Guard Code Integrity Policy Reference http://www.exploit-monday.com/2016/10/code-integrity-policy-reference.html