腾讯玄武实验室安全动态推送(Tencent Xuanwu Lab Security Daily News)

腾讯玄武实验室安全动态推送

Tencent Xuanwu Lab Security Daily News

2017/02/19

Objective-See @objective_see

[ MalwareAnalysis ] new blog: "From Italy With Love?" ...finding HackingTeam's ?? code in the Xagent/Komplex.B ?? malware: https://t.co/zl19rVceqw

"APT28 使用的 OSX 恶意软件分析： https://t.co/zl19rVceqw"
雪碧0xroot @cn0Xroot

[ Mobile ] Mobile Network Security Experiments With USRP [PDF] #USRP #SDR https://brage.bibsys.no/xmlui/bitstream/id/451272/15719_FULLTEXT.pdf https://t.co/m0hvDJ6M7b

"利用 USRP 进行手机网络安全实践： https://t.co/nMd5vQkG1p"
雪碧0xroot @cn0Xroot

[ Mobile ] Mobile Phone Network Security Internet Security [1] VU #SDR #MobileNetWorks https://secenv.seclab.tuwien.ac.at/secenv/static/inetsec1/11_mobileNetworks.pdf https://t.co/8REfc822d2

"手机网络安全性： https://t.co/qDFnhH2qfj "
Insinuator @Insinuator

[ Others ] New blog post: Exploitation of IMS in absence of confidentiality and integrity protection https://insinuator.net/2017/02/exploitation-of-ims-in-absence-of-confidentiality-and-integrity-protection/

"Exploitation of IMS in absence of confidentiality and integrity protection： https://t.co/pd2ChreRIY"
dalmoz @dalmoz_

[ Rootkit ] Farely thorough tutorial BIOS-based rootkits https://n0where.net/bios-based-rootkits/

"基于 BIOS 的 rootkit 教程： https://t.co/kIG1VOwjFy"
Frank Denis @jedisct1

[ Sandbox ] Sandbox evasion techniques - part 1 https://www.vmray.com/blog/sandbox-evasion-techniques-part-1/

"沙盒逃逸技术 part 1： https://t.co/iMqLunoKUM part 2： https://www.vmray.com/blog/sandbox-evasion-techniques-part-2/ part 3： https://www.vmray.com/blog/sandbox-evasion-techniques-part-3/"
Binni Shah @binitamshah

[ Sandbox ] Breaking the Sandbox : https://www.exploit-db.com/docs/34591.pdf (pdf)

"沙盒检测与逃逸的各种技术汇总︰ https://t.co/MYV5ZsZpE1 "
Artem I. Baranov @artem_i_baranov

[ Tools ] New version of Sysinternals Suite is out (AccessChk, Autoruns, BgInfo, LiveKd, ProcExp/Mon, Sysmon updated) https://t.co/4lhN1rO5E7

" Sysinternal 工具包更新： https://t.co/4lhN1rO5E7"
Nicolas Krassas @Dinosn

[ Tools ] Mercure - Python open-source phishing framework https://github.com/synhack/mercure/

"Mercure -- 基于 Python 的开源钓鱼框架： https://t.co/LreSsufRli"
Binni Shah @binitamshah

[ Tools ] Botpress : an open-source bot creation tool written in JavaScript : https://github.com/botpress/botpress

"Botpress -- JavaScript 编写的开源 bot 创建工具︰ https://t.co/xXFjB4V7N0"
Enno Rey @Enno_Insinuator

[ WirelessSecurity ] Easy 4G/LTE IMSI Catchers for Non-Programmers https://arxiv.org/pdf/1702.04434.pdf [PDF] https://t.co/hUpDGXXd5W

"Easy 4G/LTE IMSI Catchers for Non-Programmers： https://t.co/ugRih7fadP "

2017/02/19