SecWiki周刊（第122期)

2016/06/27-2016/07/03

安全资讯

[事件] 6月安全大事件第二期
https://zhuanlan.zhihu.com/p/21457176

[事件] Global Terrorism Database Leaked! Reveals 2.2 Million Suspected Terrorists
http://thehackernews.com/2016/06/world-check-terrorism-database.html

安全技术

[恶意分析] 人面狮行动——中东地区的定向攻击活动
http://drops.wooyun.org/news/17387

[运维安全] 浅析HTTPS中间人攻击与证书校验
http://drops.wooyun.org/tips/17078

[编程技术] ChatBotCourse: 自己动手做聊天机器人教程
https://github.com/warmheartli/ChatBotCourse

[移动安全] 如何获取安卓iOS上的微信聊天记录、通过Metasploit控制安卓
http://www.freebuf.com/articles/terminal/107801.html

[Web安全] Uber渗透案例：我们是如何发现你是谁，你在哪，你要打车去哪！
http://drops.wooyun.org/tips/17228

[Web安全] ActiveScan3Plus: Modified version of ActiveScan++ Burp Suite extension
https://github.com/silentsignal/ActiveScan3Plus

[文档] 华盟网6.25线下沙龙PPT及视频分享#解压密码twm2
http://pan.baidu.com/share/link?shareid=2236356038&uk=1985516394

[恶意分析] H-WORM：简单而活跃的远控木马
http://drops.wooyun.org/papers/17374

[移动安全] 梆梆脱壳方法
http://drops.wooyun.org/mobile/17101

[Web安全] 新型XSS总结两则
http://drops.wooyun.org/web/17312

[Web安全] 渗透技巧——Use AutoIt script to create a keylogger
http://drops.wooyun.org/tips/17211

[运维安全] Cloakify Toolset - Data Exfiltration In Plain Sight
https://github.com/trycatchhcf/cloakify

[设备安全] Exploring and exploiting Lenovo firmware secrets
http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

[Web安全] pyfiscan: Free web-application vulnerability and version scanner
https://github.com/fgeek/pyfiscan

[Web安全] wafbypasser:WAF Bypasser module
https://github.com/owtf/wafbypasser

[Web安全] PHP文件包含到远程代码执行
http://ecma.io/?p=364

[漏洞分析] Published Router vulnerabilities and associated information.
https://github.com/darkarnium/secpub

-----微信ID：SecWiki-----
SecWiki，13年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com