腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Others ] My new bog "Android Banking Malware Masquerading as Email App Targets German Banks". https://blog.fortinet.com/2016/11/18/android-banking-malware-masquerading-as-email-app-targets-german-banks
"最近 Android 银行恶意软件锁定德国银行，将自己伪装为邮件应用程序： https://t.co/tCmSS3Uxmk"
-
[ Others ] SkyLined (@ berendjanwever ) makes mitigation bypasses look easy. https://twitter.com/berendjanwever/status/799560199388459008
"Tetris heap spraying: spraying the heap on a budget： http://blog.skylined.nl/20161118001.html"
-
[ Others ] Joomla plugin K2 RCE via CSRF or WCI https://goo.gl/fb/cEYkbP #FullDisclosure
"Joomla 插件 K2 存在远程代码执行漏洞： https://t.co/tEiEZBPYl9 "
-
[ Tools ] SIET - CISCO Smart Install Exploitation Tool. https://github.com/Sab0tag3d/SIET/ Release from #ZeroNights 2016
"SIET - CISCO Smart Install Exploitation Tool： https://t.co/1YPKmRGI34 "
-
Xuanwu Spider via 安全小飞侠的窝[ Browser ] 一个价值7500刀的CHROME UXSS（CVE-2016-1631）分析与利用： http://avfisher.win/archives/619
-
Xuanwu Spider via
welivesecurity
[ Attack ] 英国移动运营商多达 600 万客户信息遭泄露： http://www.welivesecurity.com/2016/11/18/three-mobile-network-experiences-data-breach/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+eset%2Fblog+%28ESET+Blog%3A+We+Live+Security%29
-
Xuanwu Spider via
安全客
[ Others ] 【电影】棱镜门纪录片：斯诺登（1080P、中文字幕）：http://bobao.360.cn/news/detail/3765.html
-
Xuanwu Spider via
FreeBuf
[ Others ] 新手指南：DVWA-1.9全级别教程之File Upload： http://www.freebuf.com/articles/web/119467.html
-
Xuanwu Spider via
GitHub
[ Others ] The Social-Engineer Toolkit ： https://github.com/trustedsec/social-engineer-toolkit