腾讯玄武实验室安全动态推送(Tencent Xuanwu Lab Security Daily News)

腾讯玄武实验室安全动态推送

Tencent Xuanwu Lab Security Daily News

2017/02/26

PhysicalDrive0 @PhysicalDrive0

[ Browser ] Microsoft Edge and Internet Explorer 'HandleColumnBreakOnColumnSpanningElement' Type Confusion CVE-2017-0037 PoC https://www.exploit-db.com/exploits/41454/

"Microsoft Edge 及 IE'HandleColumnBreakOnColumnSpanningElement' 类型混淆漏洞（CVE-2017-0037） PoC： https://t.co/tjr2ZQKUJ3"
Abdulrhman Alqabandi @Qab

[ Browser ] FireFox RCE by chaining small bugs - Write up - http://leucosite.com/FireFox-RCE/

"组合四个小 bug 实现 FireFox RCE： https://t.co/1kyC6eIwxg"
Binni Shah @binitamshah

[ Others ] Empire Domain Fronting : https://www.xorrior.com/Empire-Domain-Fronting/ cc @ xorrior https://t.co/GwdHEWi1G7

"Empire Domain Fronting︰ https://t.co/U8CglQOHTO"
Binni Shah @binitamshah

[ Others ] Server-Side Template Injection : http://blog.portswigger.net/2015/08/server-side-template-injection.html

"服务器端模板注入教程︰ https://t.co/g5QV3GU8on"
The Hacker's Tools ☣ @KitPloit

[ Tools ] crackle - Crack Bluetooth Smart (BLE) Encryption https://goo.gl/KwYQOL #Analysis #Bluetooth #Capture https://t.co/JnI7WaQsG4

"crackle -- BLE 加密破解工具： https://t.co/UtLXu2YAH7 "
cocoahuke @cocoahuke

[ Tools ] iosdumpkernelfix - This tool will help to fix the Mach-O header of iOS kernel which dump from the memory. https://t.co/YT11vQOsx4

"iosdumpkernelfix -- 修复 dump 出的 ios 内核在 IDA 中无法加载函数符号信息的工具： https://t.co/YT11vQOsx4"
Binni Shah @binitamshah

[ Tools ] A curated list of Terminal frameworks, plugins and resources for CLI lovers : https://github.com/k4m4/terminals-are-sexy

"terminals-are-sexy -- 命令行爱好者的终端框架与插件等资源列表︰ https://t.co/J5lYMgahuB"

2017/02/26