SecWiki周刊（第93期)

2015/12/07-2015/12/13

安全资讯

[其它] 2015年网络安全大事记
http://www.aqniu.com/neo-points/12333.html

[恶意分析] 数据为本，洞悉安全
http://yepeng.blog.51cto.com/3101105/1722160

安全技术

[漏洞分析] JBoss JMXInvokerServlet 漏洞批量检测
https://github.com/az0ne/jboss_autoexploit

[Web安全] 偶遇BASH攻击，险入僵尸网络
http://lewisec.sinaapp.com/2015/12/01/bash-botnet/

[设备安全] 工控网络协议模糊测试：用peach对modbus协议进行模糊测试
http://www.freebuf.com/articles/security-management/88249.html

[漏洞分析] IDA Pro 6.8 + All Decompilers Full Leak
http://www.52pojie.cn/thread-442702-1-1.html

[恶意分析] Cybercrime in the Deep Web:暗网深度解析
http://drops.wooyun.org/news/10913

[运维安全] Tutorial: How to reverse unknown protocols using Netzob
http://blog.amossys.fr/How_to_reverse_unknown_protocols_using_Netzob.html

[无线安全] 狗汪汪玩转无线电 -- GPS Hacking (上）
http://drops.wooyun.org/tips/11155

[文档] ZeroNights Conference materials
http://2015.zeronights.org/materials.html

[其它] 0day DLL Hijacking vulnerabilities in Microsoft Office
http://www.greyhathacker.net/docs/OfficeDLLhijacking.zip

[工具] The Swift Programming Language(source code)
https://github.com/apple/swift

[Web安全] SPartan: Sharepoint pentest Tool
https://github.com/sensepost/SPartan

[漏洞分析] SHURIKEN: Exploit throwing framework
https://github.com/samuraictf/shuriken-framework

[数据挖掘] TensorFlow tutorials and code examples for beginners
https://github.com/aymericdamien/TensorFlow-Examples

[取证分析] Analysis of Telegram Crypto
http://cs.au.dk/~jakjak/master-thesis.pdf

[恶意分析] Seven Years of a South American Threat Actor
https://citizenlab.org/2015/12/packrat-report/

-----微信ID：SecWiki-----
SecWiki，13年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com