SecWiki周刊（第148期）
2016/12/26-2017/01/01
安全资讯
[漏洞分析]  Top 50 vendors having highest number of cve security vulnerabilities in 2016
http://www.cvedetails.com/top-50-vendors.php?year=2016
[事件]  国外地下市场出售70W+中国apple账号
http://www.mottoin.com/94716.html
[取证分析]  Firefox 52借鉴Tor浏览器引入防指纹跟踪功能
http://www.solidot.org/story?sid=50921
[取证分析]  黑客Only_guest 亲身讲述的三个“非主流诈骗”故事
https://mp.weixin.qq.com/s?__biz=MzA4ODUxNjIwMg==&mid=2654323968&idx=1&sn=934d68372f2d3a12960df469d87a9503&chksm=8be99605bc9e1f1346ec144f38a166e2652fbb6a2fa967bb22b90a7fa8d4cae61a4d9c90214f
[会议]  挑战中寻找机遇：FreeBuf2017互联网安全创新大会（FIT）次日素描
http://www.freebuf.com/news/topnews/124099.html
[新闻]  网络安全威胁12月月报
http://blog.nsfocus.net/network-security-threat-monthly-201612/
[观点]  一个应用区块链技术的安全解决方案
http://www.aqniu.com/tools-tech/21936.html
[观点]  安全人员的一点思考和想法
https://zhuanlan.zhihu.com/p/24009563?refer=secant
[法规]   国务院关于印发 “十三五”国家信息化规划的通知
http://www.gov.cn/zhengce/content/2016-12/27/content_5153411.htm
安全技术
[Web安全]  PhpMailer存在远程代码执行漏洞，含分析，测试成功
https://nosec.org/?token=h4oslg7y30
[工具]  安全行业从业人员自研开源扫描器合集
https://github.com/We5ter/Scanners-Box
[编程技术]  QQSpider: QQ空间爬虫（日志、说说、个人信息）
https://github.com/LiuXingMing/QQSpider
[视频]  Live-Streams – 33C3 Streaming 33C3会议直播
http://streaming.media.ccc.de/33c3
[取证分析]  Kali下安装Shadowsocks与利用ss和ProxyChains实现任意应用代理
http://www.freebuf.com/sectool/123931.html
[Web安全]  Web应用防火墙竞品分析
http://mp.weixin.qq.com/s/5ed8Cr_4GFdQZ7bW3u3wBw
[编程技术]  rootkit制作基础知识，hook技术
https://d0hnuts.com/2016/12/21/basics-of-making-a-rootkit-from-syscall-to-hook/
[文档]  2016年高校网络信息安全学术年会 报告PPT下载
http://sec.edu-info.edu.cn/311
[编程技术]  QQ-Groups-Spider: QQ Groups Spider（QQ 群爬虫）
https://github.com/caspartse/QQ-Groups-Spider
[运维安全]  DAVScan: Fingerprints servers, finds exploits, scans WebDAV
https://github.com/Graph-X/davscan
[其它]  未完成的事 - 逆推乌云路人甲真实ID
http://www.thinkings.org//2016/12/25/wooyun-anonymous-reverse.html
[Web安全]  使用Docker构建渗透测试容器（安全相关Docker Image收集）
http://www.mottoin.com/94831.html
[取证分析]  网络欺骗：防御者的“诡计”
http://www.arkteam.net/wp-content/uploads/2016/12/%E7%BD%91%E7%BB%9C%E6%AC%BA%E9%AA%97%EF%BC%9A%E9%98%B2%E5%BE%A1%E8%80%85%E7%9A%84%E2%80%9C%E8%AF%A1%E8%AE%A1%E2%80%9D.pdf
[漏洞分析]  PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln
http://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html
[Web安全]  DefectDojo：安全程序和漏洞管理工具
http://www.mottoin.com/94864.html
[工具]  Fern Wifi Cracker ：无线安全审计工具
http://www.mottoin.com/94611.html
[恶意分析]  Mirai 总结—从源码到反汇编
http://paper.seebug.org/papers/Archive/Mirai%E6%9C%A8%E9%A9%AC%E6%80%BB%E7%BB%93%E2%80%94%E4%BB%8E%E6%BA%90%E7%A0%81%E5%88%B0%E5%8F%8D%E6%B1%87%E7%BC%96.pdf
[文档]  开源软件源代码安全漏洞分析报告 ——区块链专题
http://lab.cert.org.cn/download/2016%E5%B9%B4%E5%BC%80%E6%BA%90%E9%A1%B9%E7%9B%AE%E7%AC%AC%E4%B8%89%E5%AD%A3%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90%E6%8A%A5%E5%91%8A.pdf
[取证分析]  手机号卡iccid编码规则及归属地查询
https://mp.weixin.qq.com/s?__biz=MzI2MTE0NTE3Mw==&mid=2651104051&idx=1&sn=e00e07e8d39f75c66ce3c06af1b42650&chksm=f1aed409c6d95d1f4d489c2c4c9563c67858ae10f17382de553ce3ee4f5f4ddd4aae2cbeb95b&scene=0&key=2f8f48339517a1a9c14df31916e5fab1885b3a755ead26f117862e75c0d103356243749e63a81f985295178772e71d6c94
[运维安全]  DBShield: Database firewall written in Go 数据库透明代理防护系统
https://nim4.github.io/DBShield/
[Web安全]  Mathematica突破支付宝AR红包方法
http://www.kylen314.com/archives/7364
[无线安全]  Fansmitter利用声波入侵物理隔离系统
http://www.arkteam.net/?p=1450
[Web安全]  Hacking-ElasticSearch: Elasticsearch使用安全注意事项
https://2016.zeronights.ru/wp-content/uploads/2016/12/Hacking-ElasticSearch.pdf
[编程技术]  layui: 经典模块化前端框架(后端程序猿前端库)
http://www.layui.com/
[编程技术]  如何用汇编语言制作一个病毒
https://cranklin.wordpress.com/2016/12/26/how-to-create-a-virus-using-the-assembly-language/
[移动安全]  移动平台流量黑产研究——色情播放器类恶意软件产业链
http://blogs.360.cn/blog/porn_player_underground_industry/
[Web安全]  Docker的漏洞测试环境
https://github.com/MyKings/docker-vulnerability-environment
[Web安全]  Why do XSS strings often start with ">?
http://security.stackexchange.com/questions/146590/why-do-xss-strings-often-start-with
[Web安全]  如何在Kali Linux下编译Windows Exploit
http://www.mottoin.com/94732.html
[恶意分析]  My Favorite Threat Intel Tweets of 2016 威胁情报名人堂
http://www.cyintanalysis.com/my-favorite-threat-intel-tweets-of-2016/
[Web安全]   three Zero-Day Vulnerabilities in web programming language PHP 7
http://blog.checkpoint.com/2016/12/27/check-point-discovers-three-zero-day-vulnerabilities-web-programming-language-php-7/
[Web安全]  Pentesting Windows environments: remote delivery of PowerShell payloads
https://akondrat.blogspot.jp/2016/12/pentesting-windows-environments-remote.html
[Web安全]  mitmproxy: release v1.0.0 - 圣诞节版本
https://corte.si/posts/code/mitmproxy/announce_1_0/index.html
[Web安全]  各种脚本语言不同版本一句话开启 HTTP 服务器的总结
http://www.mottoin.com/94895.html
[Web安全]  How to bypass csp nonces with dom xss
http://sirdarckcat.blogspot.jp/2016/12/how-to-bypass-csp-nonces-with-dom-xss.html
[Web安全]  Hack With XSLT(拓展样式表转换语言)
http://evi1cg.me/archives/Hack_With_XSLT.html
[其它]  (U) Review of the Unauthorized Disclosures of Former National Security Agency Co
https://info.publicintelligence.net/US-HPSCI-SnowdenReport.pdf
[设备安全]  IoTNotes: Internet of Things Notes in Chinese(IoT 笔记)
https://github.com/ideaTouch/IoTNotes
[设备安全]  分享一些支持企业安全工作的免费工具
http://www.freebuf.com/sectool/123851.html
[其它]  Encryption Working Group Year-End Report
https://info.publicintelligence.net/US-HouseEncryptionWorkingGroup-2016.pdf
[Web安全]  利用JavaScript进行后台文件上传getshell
http://ecma.io/?p=574
[其它]  Pastebin dump
http://psbdmp.com/dumps
[漏洞分析]  作者在Sebug提交的漏洞详情和POC
https://github.com/ganliuzhuo/Sebug
[Web安全]  3 Critical Zero-Day Flaws Found in PHP 7 — One Remains Unpatched!
http://thehackernews.com/2016/12/php-7-update.html
[移动安全]  黑云压城城欲摧 – 2016年iOS公开可利用漏洞总结
http://drops.wiki/index.php/2016/12/27/2016-ios-summary/
[设备安全]  DIY USB Killer
http://jerrygamblin.com/2016/12/29/diy-usb-killer/
[杂志]  SecWiki周刊（第147期)
https://www.sec-wiki.com/weekly/147
[工具]  commix: Automated All-in-One OS command injection and exploitation tool.
https://github.com/commixproject/commix
[Web安全]  Powershell-Github-Shell：利用Github来做控制端的Powershell版本的Shell
http://www.mottoin.com/94685.html
[Web安全]  PHPMailer < 5.2.18 - Remote Code Execution (Python)
https://www.exploit-db.com/exploits/40974/?rss
[Web安全]  115 Browser 7.2.5 RCE Vulnerability
http://linux.im/2016/12/26/115Browser-725-rce-vuln.html
-----微信ID：SecWiki-----
SecWiki，13年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第148期)