
腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Android ] Details of Elevation of privilege vulnerability in libziparchive (CVE-2016-6762) http://ele7enxxh.com/Details-Of-Elevation-Of-Privilege-Vulnerability-In-Libziparchive-CVE-2016-6762.html https://github.com/ele7enxxh/poc-exp/tree/master/CVE-2016-6762
"libziparchive 提权漏洞细节 (CVE-2016-6762) : https://t.co/Cbks1VOIwe https://t.co/3GhnyRbLIZ "
-
[ Mobile ] Escalating Local Privileges Using Mobile Partner https://osandamalith.com/2014/10/20/escalating-local-privileges-using-mobile-partner/ (from my friend @ OsandaMalith )
"利用华为 Mobile Partner 进行提权: https://t.co/CTL31uMlKg "
-
[ Popular Software ] Detecting privilege escalation inside of containers using KVM : https://coreos.com/blog/rkt-detect-privilege-escalation.html https://t.co/oxLpAWeYup
"rkt 现可自动检测容器中的提权攻击︰ https://t.co/2Z9OsnzWss https://t.co/oxLpAWeYup"
-
[ Popular Software ] PayPal 2Fa Bypass : http://tayyabqadir.com/2016/12/17/paypal-2fa-bypass-by-tayyab-qadir/
"绕过 PayPal 双因素认证︰ https://t.co/7tgoe8gxzi"
-
[ Tools ] New Blog Post - A New Tool to Detect Known Malware from Memory Images – impfuzzy for Volatility – ^ST http://blog.jpcert.or.jp/2016/12/a-new-tool-to-d-d6bc.html
"impfuzzy for Volatility -- 一个可从内存映像中检测已知恶意软件的工具 https://t.co/pgJGCYxYMU"
-
[ Tools ] whitewidow : SQL Vulnerability Scanner : https://github.com/WhitewidowScanner/whitewidow https://t.co/eX6tyxM7tU
"whitewidow -- 一个 SQL 漏洞扫描器︰ https://t.co/oMCs1t5Z66 https://t.co/eX6tyxM7tU"
-
[ Tools ] Wifi-Dumper : An Open source tool to dump the wifi profiles and clear text passwords : https://github.com/Viralmaniar/Wifi-Dumper cc… https://twitter.com/i/web/status/810450377468497920
"Wifi-Dumper -- 一个 dump wifi 配置文件和明文密码的开源工具 ︰ https://t.co/SEzpgx8fMM "
-
[ Tools ] PowerShellArsenal – PowerShell For Reverse Engineering http://www.darknet.org.uk/2016/12/powershellarsenal-powershell-reverse-engineering/
"PowerShellArsenal -- 基于 PowerShell 的逆向分析工具: https://t.co/XnpS7xT1hc"