3月17日-每日安全知识热点

http://p0.qhimg.com/t01708f0a8089bfa0da.jpg

1、如何将你的老的树梅派打造成自动备份服务器

https://opensource.com/life/16/3/turn-your-old-raspberry-pi-automatic-backup-server


2、AceDeceiver: 第一个利用apple drm设计漏洞的ios木马影响任意IOS设备,样本下载地址https://paloaltonetworks.app.box.com/s/9glj43hyba08iql88e6d2sy36tvm5vk5

http://researchcenter.paloaltonetworks.com/2016/03/acedeceiver-first-ios-trojan-exploiting-apple-drm-design-flaws-to-infect-any-ios-device/


3、QNX安全架构

https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-qnx-security-whitepaper-2016-03-14.pdf


4、FreeBSD 内核 amd64_set_ldt 堆溢出漏洞

http://seclists.org/fulldisclosure/2016/Mar/56


5、恶意广告攻击瞄准英国

https://blog.malwarebytes.org/malvertising-2/2016/03/a-look-into-malvertising-attacks-targeting-the-uk/


6、Jump List取证

http://www.4n6k.com/2016/03/jump-list-forensics-appid-master-list.html


7、sipbrute:通过字典攻击用来破解VOIP SIP注册hash的脚本

https://github.com/packetassailant/sipbrute


8、TR-069蜜罐:支持RomPager嵌入式web服务器模拟,可以用来测试“厄运饼干”(http://mis.fortunecook.ie/)漏洞

https://github.com/omererdem/honeything


9、jQuery.Phishing

https://github.com/jackmasa/jQuery.Phishing


10、Xen安全公告171 (CVE-2016-3157) – I/O port access privilege escalation in x86-64 Linux

http://permalink.gmane.org/gmane.comp.security.oss.general/19157


11、使用全球威胁情报改善内部安全分析边界

https://blog.cyveillance.com/using-global-threat-intelligence-improve-security-analysis-inside-perimeter/


12、Troopers 16会议Heidelberg的议题 Crypto code: the 9 circles of testing

https://aumasson.jp/data/talks/cryptocode_troopers16.pdf

https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/


13、uBlock Origin浏览器插件用来保护你免受恶意广告的侵害

https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm


14、介绍使用windbg来debugging windows内核

http://www.contextis.com/resources/blog/introduction-debugging-windows-kernel-windbg/


15、物联网安全检查清单

http://www.darkreading.com/iot/iot-security-checklist-get-ahead-of-the-curve/a/d-id/1324513


16、在windows 8.1和windows 10上恢复bitlocker私钥

https://tribalchicken.com.au/technical/recovering-bitlocker-keys-on-windows-8-1-and-10/


17、从android ART到Dex可以能吗?是的,可以。

http://reyammer.blogspot.tw/2016/03/from-android-art-binary-only-to-dex-yes.html

免责声明:文章内容不代表本站立场,本站不对其内容的真实性、完整性、准确性给予任何担保、暗示和承诺,仅供读者参考,文章版权归原作者所有。如本文内容影响到您的合法权益(内容、图片等),请及时联系本站,我们会及时删除处理。查看原文

为您推荐