SecWiki周刊(第184期)
2017/09/04-2017/09/10
安全资讯
[漏洞分析]  
S2-052 Remote Code Execution attack when using the Struts REST plugin  点击率 1784 
https://cwiki.apache.org/confluence/display/WW/S2-052
[漏洞分析]  
瑞典数据通信公司Westermo多个工业级路由器存在高危漏洞  点击率 1218 
https://www.easyaq.com/news/1238028561.shtml
[新闻]  
新三板网络安全公司2017年上半年业绩快报  点击率 1199 
https://mp.weixin.qq.com/s/gfiE46nj_74KInzmVNACrQ
[新闻]  
美国征信巨头Equifax遭黑客入侵,1.43亿公民身份数据泄漏  点击率 1183 
http://www.4hou.com/info/news/7594.html
[观点]  
CARTA:Gartner的持续自适应风险与信任评估战略方法简介  点击率 1181 
http://yepeng.blog.51cto.com/3101105/1962560
[人物]  
[人物志] KDD Cup 2017双料冠军燕鹏  点击率 1176 
https://mp.weixin.qq.com/s/-wAr-tWqvS2NLfwxKcnEQQ
[漏洞分析]  
微软内核漏洞致反病毒软件形同虚设,所有Windows版本受影响  点击率 1145 
https://www.easyaq.com/news/1589499437.shtml
[其它]  
国信用机构Equifax遭黑客入侵泄露1.43亿用户信息  点击率 1139 
https://nosec.org/my/threats/1551
[Web安全]  
影子经纪人每月披露两批NSA网络武器,要价近400万美元  点击率 1127 
https://www.easyaq.com/news/1718673897.shtml
[新闻]  
俄罗斯曾在Facebook投入10万美元的政治广告影响2016美国大选  点击率 1086 
https://www.easyaq.com/news/62412640.shtml
[其它]  
维基解密泄露第23批CIA文件:“盔甲护身”(Protego)导弹控制系统  点击率 1064 
https://www.easyaq.com/news/1366007751.shtml
[移动安全]  
多个主流安卓手机芯片厂商的Bootloader存在漏洞  点击率 1024 
https://www.easyaq.com/news/1036467692.shtml
[观点]  
安全创业公司靠什么产品赢得市场  点击率 1005 
https://mp.weixin.qq.com/s/Y2TO8FcY8cXyyrh-nlgxVA
[爆库]  
Taringa:阿根廷“微博” 2800万用户数据遭泄  点击率 994 
https://mp.weixin.qq.com/s/nTpDikcWX3HHYqoZuicKQw
[设备安全]  
美国第二轮GridEx-IV网络战演习:重点关注基础设施保护,首次纳入金融与电信行业  点击率 984 
https://www.easyaq.com/news/278224224.shtml
[设备安全]  
渗透美国和欧洲电网后,俄罗斯黑客组织“蜻蜓”埋伏以待  点击率 982 
https://www.easyaq.com/news/1182894136.shtml
[设备安全]  
2.6万台MongoDB数据库被劫持 用户惨遭调戏  点击率 875 
https://www.easyaq.com/news/405021770.shtml
安全技术
[Web安全]  
S2-052复现过程(附POC利用) heatlevel  点击率 3561 
https://bbs.ichunqiu.com/thread-26789-1-1.html
[Web安全]  
s2-053漏洞重现(附exp)  点击率 2561 
http://www.lsablog.com/network_security/penetration/s2-053-bug-repeat/
[文档]  
KCon 2017 PPT 下载  点击率 2517 
https://github.com/knownsec/KCon/tree/master/2017
[工具]  
nmap使用指南(终极版)  点击率 2150 
http://www.myh0st.cn/index.php/archives/39/
[Web安全]  
渗透测试学习笔记之案例四   点击率 2147 
http://avfisher.win/archives/784
[移动安全]  
Android脱壳圣战---360加固宝加固分析和脱壳教程解析  点击率 1902 
https://mp.weixin.qq.com/s/xSe2Zrv9Ev4qRaN99YmnRA
[Web安全]  
cobaltstrike3.8 破解版  点击率 1712 
https://evi1cg.me/archives/CobaltStrike_3_8_Cracked-html.html
[Web安全]  
web测试方法工具篇  点击率 1631 
http://mp.weixin.qq.com/s/iBlBbPjVne_MON6RU2O1yg
[其它]  
如何从日志文件溯源出攻击手法?  点击率 1576 
http://www.4hou.com/penetration/7571.html
[恶意分析]  
分析一个电信劫持跳转下载情色APP的案例  点击率 1521 
https://www.92ez.com/?action=show&id=23453
[Web安全]  
无弹窗渗透测试实验   点击率 1515 
https://xianzhi.aliyun.com/forum/read/2061.html
[Web安全]  
影子经纪人 9月 Tools  点击率 1473 
https://mega.nz/#F!MzwyjSLQ!RNkf1nDdR1lRQkzTVqB5qA!8jgBnC7S
[Web安全]  
cmsPoc: CMS渗透测试框架  点击率 1437 
https://github.com/CHYbeta/cmsPoc
[移动安全]  
记一次apk检测   点击率 1435 
http://5alt.me/2017/09/%E8%AE%B0%E4%B8%80%E6%AC%A1apk%E6%A3%80%E6%B5%8B/
[Web安全]  
基于Termux打造Android手机渗透神器(2017-7-22更新)  点击率 1416 
http://blackwolfsec.cc/2016/12/10/termux/
[运维安全]  
Hunting Pastebin with PasteHunter   点击率 1317 
https://techanarchy.net/2017/09/hunting-pastebin-with-pastehunter/
[恶意分析]  
利用sklearn检测webshell  点击率 1301 
http://www.polaris-lab.com/index.php/archives/372/
[运维安全]  
谈谈端口探测的经验与原理  点击率 1242 
http://www.freebuf.com/articles/network/146087.html
[漏洞分析]  
Struts2远程代码执行漏洞CVE-2017-9805 Struts2.5至2.5.12受影响  点击率 1234 
https://bbs.ichunqiu.com/thread-26778-1-1.html?from=sec
[恶意分析]  
利用Python实现DGA域名检测  点击率 1232 
http://www.freebuf.com/articles/web/145981.html
[Web安全]  
ThinkerPHP后台远程任意代码执行漏洞  点击率 1205 
https://xianzhi.aliyun.com/forum/read/2084.html
[移动安全]  
看我如何打造Android渗透测试环境  点击率 1200 
http://www.4hou.com/technology/7573.html
[书籍]  
[书籍] Deep Learning with Python   点击率 1190 
https://github.com/fchollet/deep-learning-with-python-notebooks
[编程技术]  
TSpider: Yet Another Web Spider 动态Web爬虫  点击率 1172 
https://github.com/Twi1ight/TSpider
[移动安全]  
Android启动过程的分析  点击率 1166 
http://www.4hou.com/mobile/7373.html
[工具]  
malwareinfosec/EKFiddle: A framework to study Exploit Kits  点击率 1131 
https://github.com/malwareinfosec/EKFiddle
[设备安全]  
D-Link 路由器信息泄露和远程命令执行漏洞分析及全球数据分析报告  点击率 1125 
https://paper.seebug.org/385/
[漏洞分析]  
Pwned In Translation From Subtitles to RCE  点击率 1124 
https://hitcon.org/2017/CMT/slide-files/d2_s2_r1.pdf
[运维安全]  
passmaker: 可以自定义规则的密码字典生成器  点击率 1112 
https://github.com/bit4woo/passmaker
[Web安全]  
蜜罐与内网安全从0到1(二)  点击率 1108 
https://sosly.me/index.php/2017/09/05/jymiguan2/
[杂志]  
SecWiki周刊(第183期)  点击率 1101 
https://www.sec-wiki.com/weekly/183
[Web安全]  
Using Alternate Data Streams to Bypass User Account Controls  点击率 1069 
https://www.redcanary.com/blog/using-alternate-data-streams-bypass-user-account-controls/
[Web安全]  
实战演练:看我是如何将LFI变为RFI的  点击率 1065 
https://xianzhi.aliyun.com/forum/read/2060.html
[工具]  
jgamblin/nmaptable: Transform NMap Scans to an D3.js HTML Table  点击率 1047 
https://github.com/jgamblin/nmaptable/
[Web安全]  
数字签名攻击报告:正在摧毁软件身份“信用体系”的安全危机  点击率 1044 
http://www.freebuf.com/articles/network/146274.html
[运维安全]  
基于SDN的蜜网技术概述  点击率 1043 
https://mp.weixin.qq.com/s/qvuVACmGekyyPYORRITVfQ
[其它]  
云安全规划策略  点击率 1039 
http://www.freebuf.com/column/146950.html
[Web安全]  
Rare ASP.NET request validation bypass using request encoding  点击率 1032 
https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/rare-asp.net-request-validation-bypass-using-request-encoding/
[Web安全]  
asp代码审计  点击率 991 
https://bbs.ichunqiu.com/thread-26815-1-1.html?from=sec
[其它]  
Windows10子系统Bash环境安装  点击率 987 
https://bbs.ichunqiu.com/thread-26614-1-1.html?from=sec
[无线安全]  
禁用Wi-Fi是否可以阻止Android手机发送无线帧?  点击率 976 
http://www.4hou.com/wireless/7545.html
[编程技术]  
A Yara rule generator for finding related samples and hunting  点击率 973 
https://github.com/AlienVault-OTX/yabin
[漏洞分析]  
ShellCode执行代码iptables -P INPUT ACCEPT  点击率 972 
http://www.91ri.org/17267.html
[Web安全]  
URL Spoofing with Modern Browser  点击率 965 
https://www.math1as.com/index.php/archives/505/
[设备安全]  
Firmware exploitation with JEB part 3: Reversing the SmartRG’s sr505n  点击率 940 
https://www.pnfsoftware.com/blog/firmware-exploitation-with-jeb-part-3-reversing-the-smartrgs-sr505n/
[Web安全]  
Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration  点击率 938 
https://github.com/SafeBreach-Labs/pacdoor
[Web安全]  
Modern Web Application Penetration Testing , Hash Length Extension Attacks  点击率 937 
https://isc.sans.edu/forums/diary/Modern+Web+Application+Penetration+Testing+Hash+Length+Extension+Attacks/22792/
[Web安全]  
Abusing JavaScript frameworks to bypass XSS mitigations  点击率 936 
http://blog.portswigger.net/2017/09/abusing-javascript-frameworks-to-bypass.html
[工具]  
frida-scripts: A collection of Frida.re scripts reverse Apps  点击率 933 
https://github.com/0xdea/frida-scripts/
[Web安全]  
从WordPress SQLi谈PHP格式化字符串问题  点击率 928 
https://paper.seebug.org/386/
[设备安全]  
联网生产类系统安全巡检报告 (电力行业)  点击率 922 
https://mp.weixin.qq.com/s/jdqB8I6T33x3LlKpUXljJw
[Web安全]  
fastjson 调试利用记录   点击率 919 
http://5alt.me/2017/09/fastjson%E8%B0%83%E8%AF%95%E5%88%A9%E7%94%A8%E8%AE%B0%E5%BD%95/
[其它]  
BROADPWN: Remote control of ANDROID and IOS via BUG in BROADCOM's WI-FI  点击率 916 
https://blog.exodusintel.com/2017/07/26/broadpwn/
[设备安全]  
Firmware exploitation with JEB part 2  点击率 899 
https://www.pnfsoftware.com/blog/firmware-exploitation-with-jeb-part-2/
[其它]  
研究人员找到禁用Intel ME组件的方法(乡村故事版)  点击率 896 
http://www.freebuf.com/news/146032.html
[其它]  
Who Is Marcus Hutchins?  点击率 890 
https://krebsonsecurity.com/2017/09/who-is-marcus-hutchins/
[Web安全]  
Detecting Chrome Headless  点击率 889 
https://antoinevastel.github.io/bot%20detection/2017/08/05/detect-chrome-headless.html
[Web安全]  
Exploiting Python Deserialization Vulnerabilities  点击率 884 
https://crowdshield.com/blog.php?name=exploiting-python-deserialization-vulnerabilities
[Web安全]  
Uber Bug Bounty: Gaining Access To An Internal Chat System  点击率 881 
http://blog.mish.re/index.php/2017/09/06/uber-bug-bounty-gaining-access-to-an-internal-chat-system/
[运维安全]  
DomainFrontingLists: 使用不同 CDN 服务的网站列表样例  点击率 877 
https://github.com/vysec/DomainFrontingLists
[编程技术]  
slate: Beautiful static documentation for your API 项目文档编写助手  点击率 859 
https://github.com/lord/slate
[其它]  
Beyond Domain Admins – Domain Controller & AD Administration  点击率 837 
http://link.crwd.fr/2bsU#https://adsecurity.org/?p=3700
[其它]  
Automated Red Team Infrastructure Deployment with Terraform - Part 1  点击率 827 
https://rastamouse.me/2017/08/automated-red-team-infrastructure-deployment-with-terraform---part-1/
[恶意分析]  
Hunting AdwindRAT with SSL Heuristics  点击率 825 
http://www.netresec.com/?page=Blog&month=2017-09&post=Hunting-AdwindRAT-with-SSL-Heuristics
[恶意分析]  
Malware source code database  点击率 816 
https://github.com/mwsrc
[恶意分析]  
Kronos银行木马的前世今生  点击率 807 
http://www.4hou.com/technology/7527.html
[设备安全]  
Firmware exploitation with JEB part 2  点击率 802 
https://www.pnfsoftware.com/blog/firmware-exploitation-with-jeb-part-1/
-----微信ID:SecWiki-----
SecWiki,5年来一直专注安全技术资讯分析!
SecWiki:https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第184期)