SecWiki周刊（第89期)

2015/11/09-2015/11/15

安全资讯

安全技术

[工具] TensorFlow: Large-scale machine learning on heterogeneous systems
https://github.com/tensorflow/tensorflow

[Web安全] Jenkins漏洞探测、用户抓取爆破
https://github.com/blackye/Jenkins

[编程技术] Python安全编码指南
http://drops.wooyun.org/tips/10383

[漏洞分析] 二进制漏洞人员的五个技能方向
http://weibo.com/p/1001603907896629983260

[比赛] 第六季极客大挑战writeup
http://blog.sycsec.com/?p=725

[书籍] Violent Python中文版全本
http://pan.baidu.com/s/1qW5VdDE

[Web安全] 域渗透—Local Administrator Password Solution
http://drops.wooyun.org/tips/10496

[编程技术] 使用graphviz绘制流程图（2015版）
http://icodeit.org/2015/11/using-graphviz-drawing

[会议] Black Hat EU-15 day two
http://pan.baidu.com/s/1eQExtSm

[设备安全] 使用FINS协议攻击欧姆龙（Omron）PLC的物理（I/O）输出
http://plcscan.org/blog/2015/11/attacks-omron-plc-coils-output/

[Web安全] XSS to RCE in Atlassian Hipchat
http://maustin.net/2015/11/12/hipchat_rce.html

[数据挖掘] 行走在网格之间：微博用户关系模型
http://www.wbrecom.com/?p=605

[移动安全] POC2015 & RUXCON2015 盘古团队议题
http://blog.pangu.io/poc2015-ruxcon2015/

[其它] All-Natural, Organic, Free Range, Sustainable, Whitelisting Evasion - Regsvcs
http://subt0x10.blogspot.jp/2015/11/all-natural-organic-free-range.html

[设备安全] Hacking Smartwatches - the TomTom Runner, part 1
http://grangeia.io/2015/11/09/hacking-tomtom-runner-pt1/

[文档] Black Hat EU-15 Day 1
http://pan.baidu.com/s/1dDt07ux

[运维安全] Shadow Daemon:a web application firewall
https://github.com/zecure/shadowd_ui

[漏洞分析] android-vts:Android Vulnerability Test Suite
https://github.com/nowsecure/android-vts

[Web安全] PowerCat - A PowerShell version of NetCat
https://github.com/secabstraction/PowerCat

-----微信ID：SecWiki-----
SecWiki，12年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com