4月8日-每日安全知识热点

1、对TeslaCrypt 4.0的简介

https://blog.cylance.com/cylance-quick-brief-teslacrypt-4.0

2、滥用浏览器xss filter实现信息窃取攻击

http://www.mbsd.jp/blog/20160407.html

3、反向工程数字信号

https://www.fleark.de/keyfob.pdf

4、收集客户端信息的php+js脚本

https://github.com/Redtoor/GetDataReport

5、MS13-082 : .net框架远程代码执行漏洞

https://technet.microsoft.com/en-us/library/security/ms13-082.aspx

6、快讯! Adobe的另一个#Flash零日漏洞在流传

http://blog.talosintel.com/2016/04/adobe-0-day.html

7、metasploit学习资源集合

http://resources.metasploit.com/

8、安全python编码

https://www.owasp.org/images/c/cb/OWASP_Romania_Branca.pdf

9、利用apple图形驱动绕过KASLR

http://blog.talosintel.com/2016/04/apple-gfx-deep-dive.html

10、如何使用FileAudit检测恶意欺诈软件

http://www.isdecisions.com/blog/it-security/how-to-detect-ransomware-with-fileaudit/

11、rkt 1.3.0:容器debugging,开发和集成

https://coreos.com/blog/rkt-v130-tighter-security-easier-integration.html

12、详尽解释恶意欺诈软件的Sinkholes如何工作

http://www.freeforensics.org/2016/04/a-deeper-explanation-of-how-ransomware_5.html

13、冷启动攻击(cold-boot) DDR3内存

http://www.dfrws.org/2016eu/proceedings/DFRWS-EU-2016-7.pdf

14、TROOPERS #TR16 的一些议题下载

https://www.insinuator.net/2016/04/tsd-2016-follow-up/

15、Forwarding-Loop攻击CDN

https://www.internetsociety.org/sites/default/files/blogs-media/forwarding-loop-attacks-content-delivery-networks.pdf

16、使用低成本的RTL-SDR做局部放电检测

http://strathprints.strath.ac.uk/56089/

17、当前地下交易价目表(邮箱/护照/黑客工具等),DELL出的黑市报告https://www.secureworks.com/resources/wp-underground-hacking-markets-report

http://news.softpedia.com/news/dell-mines-the-hacking-underground-for-a-list-of-current-prices-502643.shtml