[ Android ]  I wrote up some thoughts on what I view as the limitations of Android N's new device encryption: https://t.co/MSma9g8gPP

[ Attack ]  Practical Phishing Automation with PhishLulz : http://www.slideshare.net/micheleorru2/practical-phishing-automation-with-phishlulz-kiwicon-x (Slides) cc @ antisnatchor

[ Industry News ]  We expand our Android #0day acquisitions (RCE or LPE) from the usual Samsung/Google/Sony to other devices: Huawei, Lenovo, Xiaomi, Oppo, HTC

[ IoTDevice ]  Get started with Zigbee security analysis and setting up a vulnerable Zigbee lab with this blog post - http://blog.attify.com/2016/11/23/zigbee-security-exploitation-iot-devices/

[ Linux ]  Linux Kernel 2.6.32-642 / 3.16.0-4 'inode' Integer Overflow PoC https://cxsecurity.com/issue/WLB-2016110205

[ Linux ]  Wget < 1.18 Access List Bypass / Race Condition Vuln. Exploit : https://legalhackers.com/advisories/Wget-Exploit-ACL-bypass-RaceCond-CVE-2016-7098.html

[ Linux ]  Possible Integer Overflow in Kernel Linux - IPV4 - ip_tunnel.c http://bit.ly/2fbF4X6 http://bit.ly/2fvfDP3 #kernel #linux #infosec

[ Malware ]  Gatak #malware "In 62% of incidents, lateral movement across the victim’s network occurs within 2hrs of infection,” https://t.co/Br2UhOjL6t

[ Others ]  Command Injection/Elevation – Environment Variables Revisited https://breakingmalware.com/vulnerabilities/command-injection-and-elevation-environment-variables-revisited/

[ Others ]  KASLRfinder writeup: Windows 10 KASLR recovery with TSX http://blog.frizk.net/2016/11/windows-10-kaslr-recovery-with-tsx.html

[ Others ]  Derandomizing latest Windows 10 Kernel (CVE-2016-7255 exploit): https://github.com/IOActive/I-know-where-your-page-lives ,Slides : https://github.com/IOActive/I-know-where-your-page-lives/blob/master/I%20Know%20Where%20Your%20Page%20Lives%20-%20De-Randomizing%20the%20Latest%20Windows%2010%20Kernel.pdf cc @ kiqueNissim

[ Tools ]  FRIEND - Flexible Register/Instruction Extender aNd Documentation : https://github.com/alexhude/FRIEND cc @ getorix https://t.co/bbozelo4Xy

[ Tools ]  unlinker - A program for extracting functions from a PE file for later reuse https://github.com/jonwil/unlinker

[ Tools ]  xAnalyzer Reviewed by @ yunietps http://x64dbg.com/blog/2016/11/24/xanalyzer-reviewed.html #x64dbg #blog #infosec