腾讯玄武实验室安全动态推送(Tencent Xuanwu Lab Security Daily News)

腾讯玄武实验室安全动态推送

Tencent Xuanwu Lab Security Daily News

2016/10/30

XDA Developers @xdadevelopers

[ Android ] Root is now available for the Google Pixel and Pixel XL: Here's what we've discovered http://www.xda-developers.com/root-is-now-available-for-the-google-pixel-and-pixel-xl/ https://t.co/Yrp6iOtj39

" Google Pixel 和 Pixel XL 智能机的 Root 工具出现了： https://t.co/zrx20h1xQu https://t.co/Yrp6iOtj39"
securxcess @securxcess

[ Attack ] Bug Bounty Hunter Launches Accidental DDoS Attack on 911 Systems via iOS Bug http://ow.ly/smfW305EgOW

" 18 岁的 Desai 在 Twitter 上分享了自己的 iOS Exploit 链接，导致很多点开链接的用户自动地开始拨打 911 急救电话，之后他被逮捕了： https://t.co/n71Jws1Zsv"
Marc Smeets @mramsmeets

[ Pentest ] Here's the PoC code for popping calc and Cobalt Strike code via Windows netsh helper DLLs. Have fun :)… https://t.co/wrcsv8WyUu

" 从 Windows netsh 加载外部的 DLL，利用这个特性加载 Cobalt Strike： https://github.com/outflankbv/NetshHelperBeacon "
Alex Matrosov @matrosov

[ Rootkit ] Our @ h2hconference slides "UEFI Firmware Rootkits: Myths and Reality" @ vxradius https://github.com/REhints/Publications/blob/master/Conferences/H2HC%202016/H2HC_2016.pdf New stuff coming soon at @ ZeroNights

" UEFI 固件 Rootkit 的神话与现实： https://t.co/fv0b5hpWI5 "
b33f @FuzzySec

[ Tools ] Invoke-Capstone.ps1, #PowerShell wrapper for Capstone Engine v3 (cc @ capstone_engine) - https://github.com/FuzzySecurity/PowerShell-Suite/blob/master/Invoke-Capstone.ps1 https://t.co/sMQBceXClf

" Invoke-Capstone.ps1 - PowerShell 为 Capstone 反汇编引擎写的 Wrapper： https://t.co/XgHi2Ub1yl https://t.co/sMQBceXClf"

2016/10/30