3月17日-每日安全知识热点

1、如何将你的老的树梅派打造成自动备份服务器

https://opensource.com/life/16/3/turn-your-old-raspberry-pi-automatic-backup-server

2、AceDeceiver: 第一个利用apple drm设计漏洞的ios木马影响任意IOS设备,样本下载地址https://paloaltonetworks.app.box.com/s/9glj43hyba08iql88e6d2sy36tvm5vk5

http://researchcenter.paloaltonetworks.com/2016/03/acedeceiver-first-ios-trojan-exploiting-apple-drm-design-flaws-to-infect-any-ios-device/

3、QNX安全架构

https://labs.mwrinfosecurity.com/assets/BlogFiles/mwri-qnx-security-whitepaper-2016-03-14.pdf

4、FreeBSD 内核 amd64_set_ldt 堆溢出漏洞

http://seclists.org/fulldisclosure/2016/Mar/56

5、恶意广告攻击瞄准英国

https://blog.malwarebytes.org/malvertising-2/2016/03/a-look-into-malvertising-attacks-targeting-the-uk/

6、Jump List取证

http://www.4n6k.com/2016/03/jump-list-forensics-appid-master-list.html

7、sipbrute:通过字典攻击用来破解VOIP SIP注册hash的脚本

https://github.com/packetassailant/sipbrute

8、TR-069蜜罐:支持RomPager嵌入式web服务器模拟,可以用来测试“厄运饼干”(http://mis.fortunecook.ie/)漏洞

https://github.com/omererdem/honeything

9、jQuery.Phishing

https://github.com/jackmasa/jQuery.Phishing

10、Xen安全公告171 (CVE-2016-3157) – I/O port access privilege escalation in x86-64 Linux

http://permalink.gmane.org/gmane.comp.security.oss.general/19157

11、使用全球威胁情报改善内部安全分析边界

https://blog.cyveillance.com/using-global-threat-intelligence-improve-security-analysis-inside-perimeter/

12、Troopers 16会议Heidelberg的议题 Crypto code: the 9 circles of testing

https://aumasson.jp/data/talks/cryptocode_troopers16.pdf

https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

13、uBlock Origin浏览器插件用来保护你免受恶意广告的侵害

https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm

14、介绍使用windbg来debugging windows内核

http://www.contextis.com/resources/blog/introduction-debugging-windows-kernel-windbg/

15、物联网安全检查清单

http://www.darkreading.com/iot/iot-security-checklist-get-ahead-of-the-curve/a/d-id/1324513

16、在windows 8.1和windows 10上恢复bitlocker私钥

https://tribalchicken.com.au/technical/recovering-bitlocker-keys-on-windows-8-1-and-10/

17、从android ART到Dex可以能吗?是的,可以。

http://reyammer.blogspot.tw/2016/03/from-android-art-binary-only-to-dex-yes.html