SecWiki周刊（第330期）
2020/06/22-2020/06/28
安全技术
APT的思考: PowerShell命令混淆高级对抗
https://mp.weixin.qq.com/s/Sg0LK8emSWP1m-yds4VGrQ
https://mp.weixin.qq.com/s/Sg0LK8emSWP1m-yds4VGrQ
sqlmap绕过csrf检测进行注入
https://blog.blankshell.com/2020/06/25/sqlmap%e7%bb%95%e8%bf%87csrf%e6%a3%80%e6%b5%8b%e8%bf%9b%e8%a1%8c%e6%b3%a8%e5%85%a5/
https://blog.blankshell.com/2020/06/25/sqlmap%e7%bb%95%e8%bf%87csrf%e6%a3%80%e6%b5%8b%e8%bf%9b%e8%a1%8c%e6%b3%a8%e5%85%a5/
python cms审计记录
https://github.com/MisakiKata/python_code_audit/blob/master/%E5%AE%9E%E6%88%98%E6%93%8D%E4%BD%9C.md
https://github.com/MisakiKata/python_code_audit/blob/master/%E5%AE%9E%E6%88%98%E6%93%8D%E4%BD%9C.md
hihttps: 一款完整源码的高性能Web应用防火墙
https://github.com/qq4108863/hihttps
https://github.com/qq4108863/hihttps
知识图谱之知识表示篇（一）
https://zhuanlan.zhihu.com/p/148785892
https://zhuanlan.zhihu.com/p/148785892
Tomcat基于Servlet的无文件webshell的相关技术研究
https://mp.weixin.qq.com/s/gYGrdDtIldzrE7NHSxTDYQ
https://mp.weixin.qq.com/s/gYGrdDtIldzrE7NHSxTDYQ
从0到1学会搭建小型企业拓扑到由外向内的渗透测试
https://www.anquanke.com/post/id/208992
https://www.anquanke.com/post/id/208992
循序渐进分析CVE-2020-1066
https://mp.weixin.qq.com/s/TU5Obmd76QdhfQ-40UxUBQ
https://mp.weixin.qq.com/s/TU5Obmd76QdhfQ-40UxUBQ
Mining DNS MX Records for Fun and Profit
https://medium.com/@jason_trost/mining-dns-mx-records-for-fun-and-profit-7a069da9ee2d
https://medium.com/@jason_trost/mining-dns-mx-records-for-fun-and-profit-7a069da9ee2d
手工打造基于ATT&CK矩阵的EDR系统
https://www.freebuf.com/articles/system/239107.html
https://www.freebuf.com/articles/system/239107.html
Linux Pam后门总结拓展
https://xz.aliyun.com/t/7902
https://xz.aliyun.com/t/7902
PWDB - New generation of Password Mass-Analysis
https://github.com/FlameOfIgnis/Pwdb-Public
https://github.com/FlameOfIgnis/Pwdb-Public
解释器类型的Pwn题目总结
https://www.anquanke.com/post/id/208940
https://www.anquanke.com/post/id/208940
图解利用虚函数过GS保护
https://www.freebuf.com/vuls/238736.html
https://www.freebuf.com/vuls/238736.html
FOFA搜索结果提取技术分析
https://www.freebuf.com/sectool/238018.html
https://www.freebuf.com/sectool/238018.html
Recovering Credentials from a Process inside a Docker Container
https://blog.pentesteracademy.com/recovering-credentials-from-a-docker-container-process-using-docker-checkpoint-and-gdb-ea22e8898d2b
https://blog.pentesteracademy.com/recovering-credentials-from-a-docker-container-process-using-docker-checkpoint-and-gdb-ea22e8898d2b
Powershell免杀的探索
https://xz.aliyun.com/t/7903
https://xz.aliyun.com/t/7903
SPIDER: Enabling Fast Patch Propagation in Related Software Repositories
https://securitygossip.com/blog/2020/05/26/spider-enabling-fast-patch-propagation-in-related-software-repositories/
https://securitygossip.com/blog/2020/05/26/spider-enabling-fast-patch-propagation-in-related-software-repositories/
Java 安全-RMI-学习总结
https://paper.seebug.org/1251/
https://paper.seebug.org/1251/
自动化测试工具APPium初探
https://mp.weixin.qq.com/s/wwlqd_kO7vfpP6vTPrW_6Q
https://mp.weixin.qq.com/s/wwlqd_kO7vfpP6vTPrW_6Q
Java代码审计之Struts2-001
https://xz.aliyun.com/t/7915
https://xz.aliyun.com/t/7915
Rovnix Bootkit 恶意软件相关活动分析
https://paper.seebug.org/1253/
https://paper.seebug.org/1253/
Java Deserialization Exploitation With Customized Ysoserial Payloads
https://rhinosecuritylabs.com/research/java-deserializationusing-ysoserial/
https://rhinosecuritylabs.com/research/java-deserializationusing-ysoserial/
Zloader的DGA算法解析
https://www.freebuf.com/articles/others-articles/238700.html
https://www.freebuf.com/articles/others-articles/238700.html
Using SQL Injection to perform SSRF/XSPA attacks
https://ibreak.software/2020/06/using-sql-injection-to-perform-ssrf-xspa-attacks/
https://ibreak.software/2020/06/using-sql-injection-to-perform-ssrf-xspa-attacks/
基于异常的猎杀行动——自保护触发自杀
https://www.anquanke.com/post/id/209035
https://www.anquanke.com/post/id/209035
Active Directory Exploitation Cheat Sheet
https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet
https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet
SecWiki周刊（第329期)
https://www.sec-wiki.com/weekly/329
https://www.sec-wiki.com/weekly/329
MLDetectVuln: AI算法解决大规模二进制程序函数相似性分析
https://github.com/Anemone95/MLDetectVuln
https://github.com/Anemone95/MLDetectVuln
-----微信ID：SecWiki-----
SecWiki，13年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com本期原文地址: SecWiki周刊(第330期)
