腾讯玄武实验室安全动态推送
Tencent Xuanwu Lab Security Daily News
-
[ Industry News ] Oracle to Block JAR Files Signed with MD5 Starting with April 2017 // About time. https://www.bleepingcomputer.com/news/security/oracle-to-block-jar-files-signed-with-md5-starting-with-april-2017/
"从 2017 年 4 月开始，Oracle 将所有使用 MD5 签名的 JAR 文件视为不安全的并将阻止其运行： https://t.co/PWzXlHbbbb"
-
[ Linux ] Linux Gafgyt.B!tr Exploits Netcore Vulnerability http://blog.fortinet.com/2017/01/20/linux-gafgyt-b-tr-exploits-netcore-vulnerability
"Linux Gafgyt.B!tr Exploits Netcore Vulnerability ： https://t.co/NQISHzpgF1"
-
[ Linux ] Linux IR Cheatsheet : https://jordanpotti.com/wp-content/uploads/2017/01/linux-cheat-sheet.pdf (pdf) , Log Review Cheat Sheet : https://jordanpotti.com/wp-content/uploads/2017/01/Log_Review.pdf (pdf) cc @ ok_bye_now
"Linux 入侵发现备忘册︰ https://t.co/qVKeZQbYvq ，日志审计备忘册︰ https://t.co/Y5J7iQ62P2 "
-
[ Popular Software ] Hijacking Whatsapp accounts using Whatsapp Web https://blog.mawalabs.de/security/2017/01/18/hijack-whatsapp-accounts-using-whatsapp-web/
"利用 Whatsapp Web 客户端劫持 Whatsapp 账户： https://t.co/tZPAMyk53i"
-
[ ReverseEngineering ] List of reverse engineering resources https://github.com/tylerhalfpop/awesome-reversing #reverseengineering https://t.co/cIRJUGp7EZ
"逆向工程资源集： https://t.co/61go16FfGH "
-
[ SecurityProduct ] Bypassing Anti-viruses w transfer Backdoor Payloads by DNS traffic : https://www.linkedin.com/pulse/bypassing-anti-viruses-transfer-backdoor-payloads-dns-mohammadbagher ,Github :… https://twitter.com/i/web/status/822742744351248384
"在 DNS 中传输后门 Payload 躲避杀软检测︰ https://t.co/lYnplOfGFM Github： https://t.co/V1zXcZbX0v"
-
[ Tools ] asm2c tool to convert 386-era TASM code to C https://github.com/frranck/asm2c used to convert old 8-players Bomberman clone… https://t.co/mtcGWFN41i
"asm2c -- 可将 DOS/PMODEW 386 TASM 汇编代码转换为 C 代码的工具： https://t.co/xFwN8kwbZ8 "
-
[ Tools ] @ hasherezade The Pin Tool that I used in the video (at: https://youtu.be/QmiSsmnp54w?t=710) is here: https://github.com/hasherezade/MyPinTools/tree/master/SectionsTracer
"MyPinTools -- 一个可以记录 API 被调用位置的工具 ︰ https://t.co/4R5vKPG2aV"
-
[ Virtualization ] Docker for Automating Honeypots or Malware Sandboxes https://dadario.com.br/docker-for-automating-honeypots-or-malware-sandboxes/
"docker diff 在蜜罐和恶意软件沙箱中的应用： https://t.co/nGrilf18Rb "
-
Xuanwu Spider via Flanker的二进制天空[ Android ] 装了这个主题包，就被拿system shell?： https://zhuanlan.zhihu.com/p/24983092?refer=c_34192763