SecWiki周刊（第55期）
2015/03/16-2015/03/22
安全资讯
USENIX 2015 Calls for Papers
https://www.usenix.org/conferences/calls-for-papers
https://www.usenix.org/conferences/calls-for-papers
Use OpenPGP encryption in Yahoo mail
https://github.com/yahoo/end-to-end
https://github.com/yahoo/end-to-end
IDF黑客沙龙之GeekPwn极棒公开课
http://www.huodongxing.com/go/31thsalon
http://www.huodongxing.com/go/31thsalon
OpenSSL 1.0.2a修复14个安全漏洞
http://www.solidot.org/story?sid=43388
http://www.solidot.org/story?sid=43388
安全技术
Codegate CTF 2015 Dodocrackme2 Write Up
http://loccs.sjtu.edu.cn/~evermars/blog/2015/03/17/dodocrackme2_writeup/
http://loccs.sjtu.edu.cn/~evermars/blog/2015/03/17/dodocrackme2_writeup/
SQLMAP进阶使用
http://drops.wooyun.org/tips/5254
http://drops.wooyun.org/tips/5254
自己动手开发Drozer插件之AutoAttack
http://appscan.360.cn/blog/?p=45
http://appscan.360.cn/blog/?p=45
常用的开源中文分词工具
http://www.scholat.com/vpost.html?pid=4477
http://www.scholat.com/vpost.html?pid=4477
Equation Group硬盘固件后门修改模块浅析
http://blog.vulnhunt.com/index.php/2015/03/20/equation-group-firmware-backdoor-analysis/
http://blog.vulnhunt.com/index.php/2015/03/20/equation-group-firmware-backdoor-analysis/
Cracking a Wi-Fi WPA2 Password, Thanks to Amazon
http://resources.infosecinstitute.com/cracking-a-wi-fi-wpa2-password-thanks-to-amazon/
http://resources.infosecinstitute.com/cracking-a-wi-fi-wpa2-password-thanks-to-amazon/
使用 Grafana＋collectd＋InfluxDB 打造现代监控系统
http://www.vpsee.com/2015/03/a-modern-monitoring-system-built-with-grafana-collected-influxdb/
http://www.vpsee.com/2015/03/a-modern-monitoring-system-built-with-grafana-collected-influxdb/
DIGITS:Deep GPU Training System
https://github.com/NVIDIA/DIGITS
https://github.com/NVIDIA/DIGITS
Tango:Honeypot Intelligence with Splunk
https://github.com/aplura/Tango
https://github.com/aplura/Tango
ciscorouter:Tool for scanning Cisco router products over SSH
https://github.com/ajohnston9/ciscorouter
https://github.com/ajohnston9/ciscorouter
腾讯万台规模的Docker应用实践
http://www.infoq.com/cn/articles/tencent-millions-scale-docker-application-practice
http://www.infoq.com/cn/articles/tencent-millions-scale-docker-application-practice
Flawfinder:Finds vulnerabilities in C/C++ source code
http://sourceforge.net/projects/flawfinder/
http://sourceforge.net/projects/flawfinder/
SANS Investigative Forensic Toolkit (SIFT) Workstation Version 3
http://digital-forensics.sans.org/community/downloads
http://digital-forensics.sans.org/community/downloads
Combining Scikit-Learn and NTLK
http://glowingpython.blogspot.com/2013/07/combining-scikit-learn-and-ntlk.html
http://glowingpython.blogspot.com/2013/07/combining-scikit-learn-and-ntlk.html
security conference resource
https://github.com/secdr/awesome/blob/master/paper/security-conference.md
https://github.com/secdr/awesome/blob/master/paper/security-conference.md
CVE-2014-3153笔记
http://thecjw.0ginr.com/blog/archives/564
http://thecjw.0ginr.com/blog/archives/564
what-happens-when-input-google
https://github.com/skyline75489/what-happens-when-zh_CN
https://github.com/skyline75489/what-happens-when-zh_CN
The Andromeda/Gamarue botnet is on the rise again
https://blog.gdatasoftware.com/blog/article/the-andromedagamarue-botnet-is-on-the-rise-again.html
https://blog.gdatasoftware.com/blog/article/the-andromedagamarue-botnet-is-on-the-rise-again.html
Pragyan CTF 2015 Android
https://ctf-team.vulnhub.com/pragyan-ctf-2015-android/
https://ctf-team.vulnhub.com/pragyan-ctf-2015-android/
Distributed password cracking over Amazon EMR
http://hyperiongray.tumblr.com/post/59610761576/distributed-password-cracking-over-amazon-emr
http://hyperiongray.tumblr.com/post/59610761576/distributed-password-cracking-over-amazon-emr
Topic Modelling
http://nbviewer.ipython.org/github/sgsinclair/alta/blob/master/ipynb/TopicModelling.ipynb#Topic-Modelling
http://nbviewer.ipython.org/github/sgsinclair/alta/blob/master/ipynb/TopicModelling.ipynb#Topic-Modelling
从一次应急响应看Linux文件安全
http://phpsec.sinaapp.com/?p=116
http://phpsec.sinaapp.com/?p=116
三月机器学习在线班第二课笔记
http://ask.julyedu.com/article/32
http://ask.julyedu.com/article/32
Hands-on with machine learning
https://github.com/cjdd3b/nicar2015/tree/master/machine-learning
https://github.com/cjdd3b/nicar2015/tree/master/machine-learning
Hijacking SSH to Inject Port Forwards
http://0xthem.blogspot.com/
http://0xthem.blogspot.com/
《安全参考》HACKCTO-201503-27
http://pan.baidu.com/s/1c0ESL0k
http://pan.baidu.com/s/1c0ESL0k
金融行业平台常见安全漏洞与防御
http://www.freebuf.com/news/special/61082.html
http://www.freebuf.com/news/special/61082.html
BSides Vancouver 2015 Sushi
https://ctf-team.vulnhub.com/bsides-vancouver-2015-sushi/
https://ctf-team.vulnhub.com/bsides-vancouver-2015-sushi/
The Art of Literary Text Analysis
http://nbviewer.ipython.org/github/sgsinclair/alta/blob/master/ipynb/ArtOfLiteraryTextAnalysis.ipynb
http://nbviewer.ipython.org/github/sgsinclair/alta/blob/master/ipynb/ArtOfLiteraryTextAnalysis.ipynb
支持向量机在 R 语言中的实现和使用
http://blog.jobbole.com/84714/
http://blog.jobbole.com/84714/
windows pentest经验
http://blog.csdn.net/cnbird2008/article/details/44514095
http://blog.csdn.net/cnbird2008/article/details/44514095
IBM X-Force Threat Intelligence Quarterly 2015 Q1
http://public.dhe.ibm.com/common/ssi/ecm/wg/en/wgl03073usen/WGL03073USEN.PDF
http://public.dhe.ibm.com/common/ssi/ecm/wg/en/wgl03073usen/WGL03073USEN.PDF
Android DropBox SDK漏洞（CVE-2014-8889）分析
http://drops.wooyun.org/papers/5232
http://drops.wooyun.org/papers/5232
PyEnchant:a spellchecking library for Python
http://pythonhosted.org/pyenchant/
http://pythonhosted.org/pyenchant/
5 Steps to Building a Malware Analysis Toolkit Using Free Tools
https://zeltser.com/build-malware-analysis-toolkit/
https://zeltser.com/build-malware-analysis-toolkit/
-----微信ID：SecWiki-----
SecWiki，13年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com本期原文地址: SecWiki周刊(第55期)
