12月30日-每日安全知识热点

1.Empire 1.4发行

http://www.harmj0y.net/blog/empire/empire-1-4/

2.紧急flash 0day[CVE-2015-8651]补丁

http://securityaffairs.co/wordpress/43131/cyber-crime/adobe-flash-zero-day.html

3.快速windows内核debug通过使用虚拟机

http://securityblog.gr/3092/faster-windows-kernel-debugging-with-virtual-machines/

4.CGEN for IDA Pro

http://yifan.lu/2015/12/29/cgen-for-ida-pro/

5.大范围安全去中心化信任

https://zerobyte.io/files/talks/2015-12-27-collective-authorities-32c3.pdf

6.pappy-proxy:用于web安全测试的交互式代理

https://github.com/roglew/pappy-proxy

7.IE沙箱拖拽安全策略解析英文版

http://en.wooyun.io/2015/12/28/35.html

8.一个隐藏的内部威胁:视觉黑客(冒充临时工,捕获随处安放的敏感文件和不锁屏曝光的敏感文件)

http://www.darkreading.com/vulnerabilities—threats/a-hidden-insider-threat-visual-hackers-/a/d-id/1323602

9.Check Point 威胁警告: Outlook OLE 漏洞

http://blog.checkpoint.com/2015/12/29/check-point-threat-alert-outlook-ole-vulnerability/

10.Meterpreter: 交互式Ruby Shell

http://null-byte.wonderhowto.com/how-to/meterpreter-interactive-ruby-shell-a-quick-introduction-0167324/

11.Apple SMC (系统管理控制器) API fuzzer

https://github.com/theopolis/smc-fuzzer

12.Oz(将LINUX桌面程序运行在隔离的沙箱中) 技术细节

https://github.com/subgraph/oz/wiki/Oz-Technical-Details

13.来自32C3的视频Beyond Anti Evil Maid

http://fempeg.cch.c3voc.de/congress/2015/h264-hd/32c3-7343-en-de-Beyond_Anti_Evil_Maid_hd.mp4

14.来自32C3的视频Tor洋葱头服务: 比你想象的还有用

http://fempeg.cch.c3voc.de/congress/2015/h264-hd/32c3-7322-en-de-Tor_onion_services_more_useful_than_you_think_hd.mp4

15.来自32C3的视频The Perl Jam 2 (32c3)

http://download.nus.edu.sg/mirror/ccc/congress/2015/h264-hd-web/32c3-7130-en-The_Perl_Jam_2.mp4

16.来自32C3的视频Rowhammer.js: Root privileges for web apps?

http://download.nus.edu.sg/mirror/ccc/congress/2015/h264-hd/32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_hd.mp4