SecWiki周刊（第99期)

SecWiki周刊（第99期）

2016/01/18-2016/01/24

安全资讯

[运维安全] 安全狗发布《2015年中国互联网服务器安全报告》
http://mp.weixin.qq.com/s?__biz=MjM5NTc2NDM4MQ==&mid=401545568&idx=1&sn=6a745d0882801da869b3c706d7e2565f&scene=23&srcid=0119aALf3csAEJEJqY0uKO47#rd

安全技术

[数据挖掘] 张志华-统计机器学习
http://study.163.com/course/introduction.htm?courseId=1692004

[其它] headless-chromium-in-c-with-cefglue
http://joelverhagen.com/blog/2013/12/headless-chromium-in-c-with-cefglue/

[会议] NDSS 2016 Programme
https://www.internetsociety.org/events/ndss-symposium-2016/ndss-2016-programme

[恶意分析] MD5碰撞的演化之路
http://www.freebuf.com/articles/93780.html

[视频] BSides Columbus 2016 Videos
https://www.irongeek.com/i.php?page=videos/bsidescolumbus2016/mainlist

[运维安全] My Experience With the Great Firewall of China
http://blog.zorinaq.com/?e=81

[会议] awesome-sec-talks: A collected list of awesome security talks
https://github.com/PaulSec/awesome-sec-talks

[运维安全] 如何扫描统计全国Telnet默认口令
http://www.freebuf.com/articles/terminal/93851.html

[恶意分析] 2015年网络安全威胁的回顾与展望
http://www.antiy.com/response/2015_Antiy_Annual_Security_Report.html

[Web安全] know-your-tools-cve-2015-2342-ioc-and-metasploit
https://www.graytier.com/blog/know-your-tools-cve-2015-2342-ioc-and-metasploit/

[数据挖掘] Probabilistic Graphical Models for Fraud Detection
http://blog.applied.ai/probabilistic-graphical-models-for-fraud-detection-part-1/

[Web安全] 特性还是漏洞？滥用 SQLite 分词器
http://blog.chaitin.cn/abusing_fts3_tokenizer/

[漏洞分析] IE漏洞攻防编年简史
http://blog.topsec.com.cn/ad_lab/ie%e6%bc%8f%e6%b4%9e%e6%94%bb%e9%98%b2%e7%bc%96%e5%b9%b4%e7%ae%80%e5%8f%b2/

[Web安全] Yahoo Mail stored XSS
https://klikki.fi/adv/yahoo.html

[Web安全] 域渗透——Pass The Ticket
http://drops.wooyun.org/tips/12159

[文档] Adversarial Tactics, Techniques, and Common Knowledge
https://attack.mitre.org/wiki/Main_Page

[Web安全] 当xss点出现在js的if判断中（if-reflection-point）
https://respectxss.blogspot.de/2016/01/if-reflection-point.html

[漏洞分析] Hacking Team流量攻击之EXE攻击分析
http://www.freebuf.com/articles/system/93394.html

[移动安全] Autopwn every Android device on your network using BetterCap
http://www.evilsocket.net/2016/01/18/autopwn-every-android-device-on-your-network-using-bettercap-the-and-addjavascriptinterface-vulnerability/

[恶意分析] 解密BBOSS组织：全球超十二万站点的地下掌控者
http://www.freebuf.com/articles/system/93491.html

[其它] 写给大家看的中文排版指南
http://zhuanlan.zhihu.com/uicircle/20506092

[数据挖掘] Text Classification and Sentiment Analysis
https://ataspinar.wordpress.com/2015/11/16/text-classification-and-sentiment-analysis/

[漏洞分析] CVE-2015-5090 – Adobe Reader/Acrobat Pro Privilege Escalation
http://warchest.fusionx.com/cve-2015-5090-adobe-readeracrobat-pro-privilege-escalation/

-----微信ID：SecWiki-----
SecWiki，13年来一直专注安全技术资讯分析！
SecWiki：https://www.sec-wiki.com

本期原文地址: SecWiki周刊(第99期)