7月13日-每日安全知识热点

技术类:

mozilla网络安全服务的uaf漏洞,可以导致远程代码执行

http://www.securityfocus.com/bid/84275

介绍x64dbg在真实逆向世界中的使用

http://x64dbg.com/blog/2016/07/09/introducing-contemporary-reverse-engineering-technique-to-real-world-use.html

Pokémon GO(口袋妖怪)游戏很流行,恶意捆绑软件也伴随而来,这款游戏中国区也即将解锁

https://blogs.mcafee.com/mcafee-labs/trojanized-pokemon-go-android-app-found-wild/

Sega(世嘉) Saturn CD:在20年后终于被破解了

https://www.youtube.com/watch?v=jOyfZex7B3E&sns=tw

Crowbar:开源的暴力破解工具,支持openvpn,rdp,ssh,vnc

https://github.com/galkan/crowbar

明白ip地址的概念

https://web.archive.org/web/20080405225344/http://www.3com.com/other/pdfs/infra/corpinfo/en_US/501302.pdf

linux安全新手教程

http://www.linuxtopia.org/LinuxSecurity/index.html

通过x86 shellcode派生一个远程访问终端

http://scottgriffy.com/blogs/rat-in-the-shellcode.html

Office 的‘Protected View’ 绕过可以引发大的影响,赶紧打补丁

https://blogs.mcafee.com/mcafee-labs/patch-now-simple-office-protected-view-bypass-could-have-big-impact/?utm_source=twitter&utm_campaign=Labs#sf30813818

MS16-086:JScript 和 VBScript 引擎漏洞可以让远程用户执行任意代码

https://technet.microsoft.com/library/security/ms16-086

Invoke-MS16-032.ps1:MS16-032 bug修复

https://github.com/FuzzySecurity/PowerShell-Suite/blob/master/Invoke-MS16-032.ps1

MS16-032二次登陆处理可以导致提权POC

https://packetstormsecurity.com/files/137881

新的apt rootkit针对欧洲的能源公司,可以拒绝让物理/系统的安全软件运行

https://sentinelone.com/blogs/sfg-furtims-parent/

拥有一个打印机,拥有一个网络

http://blog.vectranetworks.com/blog/microsoft-windows-printer-wateringhole-attack

MS16-090:如果你的MS终端服务运行不信任的用户,赶紧打补丁

https://technet.microsoft.com/library/security/MS16-090

微软7月第二周的周二补丁概述

https://isc.sans.edu/diary/21249

DebugView++:一个开源的win32的OutputDebugString

https://github.com/djeedjay/DebugViewPP

针对 LuminosityLink木马的分析

http://researchcenter.paloaltonetworks.com/2016/07/unit42-investigating-the-luminositylink-remote-access-trojan-configuration/

'mettle'介绍 – 新的 POSIX meterpreter – first architectures and stagers

https://github.com/rapid7/metasploit-framework/pull/7068

通过docker部署ELK

https://www.exoscale.ch/syslog/2016/07/11/elk-docker/

一步一步教你构建ruby GEM

http://www.railscarma.com/blog/technical-articles/step-step-guide-building-first-ruby-gem/

资讯类:

由于恶意软件台湾银行ATM可疑的提款行为

http://www.reuters.com/article/us-taiwan-banks-theft-idUSKCN0ZS19E

老的office漏洞一直用于在许多的攻击中

http://snip.ly/nn971?utm_content=buffer3e041&utm_medium=social&utm_source=twitter.com&utm_campaign=buffer#http://feedproxy.google.com/~r/Securityweek/~3/fcR1gQZz1GE/old-office-flaw-still-exploited-many-attacks

麻省理工大学的匿名网络号称比TOR网络更安全

https://www.engadget.com/2016/07/11/mit-anonymity-network-more-secure-than-tor/