7月15日-每日安全知识热点

新鲜资讯，权威技术文章早抵达。今日热点中您感兴趣的内容请及时联系我们，360安全播报将免费为您翻译整理。

技术类：

https://www.fireeye.com/blog/threat-research/2016/07/exploit_kits_quickly.html

exploitkit快速从开源中学习调整Exploit

https://hackerone.com/reports/143717

通过 /rt/users/passwordless-signup 改变任意用户的Uber密码，这个漏洞厂商奖励了10000美金

https://isc.sans.edu/diary/The+Power+of+Web+Shells/21257

预览一款强大的webshell工具RC-SHELL

https://blog.avira.com/locky-goes-offline/

Locky欺诈勒索软件的离线模式设计

https://blog.threattrack.com/closer-look-cerber-office-365-attack/

分析Cerber office 365恶意欺诈勒索软件

https://www.aldeid.com/wiki/SharifCTF-2016/android-app

SharifCTF-2016/android-app writeup

https://www.aldeid.com/wiki/DefCamp-CTF-2015/entry-language

DefCamp-CTF-2015/entry-language writeup

https://www.endgame.com/blog/rop-dying-and-your-exploit-mitigations-are-life-support

ROP已死，你的Exploit缓解将继续永生

https://medium.com/@karthikb351/airtel-is-sniffing-and-censoring-cloudflares-traffic-in-india-and-they-don-t-even-know-it-90935f7f6d98#.p3uytvr9u

Airtel嗅探和插入印度政府的cloudflare流量，cloudflare甚至不知道

https://blog.didierstevens.com/2016/07/14/practice-ntds-dit-file-part-3-password-cracking-with-hashcat-wordlist/

实践练习通过hashcat破解 ntds.dit的密码

https://github.com/pwnsdx/BadCode

BadCode的目标是指出坏的安全实践针对第三方的开源项目

https://github.com/jonmetz/AndroFuzz

针对android的fuzzing

https://medium.com/@mnakamura1337/reverse-engineering-visual-novels-101-d0bc3bf7ab8#.gjon7nms3

逆向工程视觉小说101

http://marc.info/?l=oss-security&m=146853062403622&w=2

OpenBSD发现多个bug

https://labs.opendns.com/2016/07/13/wildfire-ransomware-gaining-momentum/

WildFire恶意欺诈软件开始活动

资讯类：

http://securityaffairs.co/wordpress/49354/cyber-crime/xdedic-marketplace-tor.html

xDedic暗网市场又在TOR网络出现

http://www.csoonline.com/article/3095403/security/juniper-patches-high-risk-flaws-in-junos-os.html?utm_source=dlvr.it&utm_medium=twitter#tk.rss_all

Juniper 发布高风险补丁修补Junos系统

http://news.softpedia.com/news/cuteransomware-uses-google-docs-as-c-c-server-506340.shtml?utm_content=buffera710f&utm_medium=social&utm_source=linkedin.com&utm_campaign=buffer

cuteransomware恶意欺诈勒索软件使用google doc服务作为CC

http://www.cbsnews.com/news/chinese-businessman-sentenced-in-us-hacking-case/

中国商人孙冰在美国尝试入侵的波音，被判刑

数据泄露：

https://guccifer2.wordpress.com/2016/07/14/new-dnc-docs/

guccifer2继续放出DNC服务器的资料

前段时间暗网卖的R2Games，yahoo,twitter的泄露数据，已经都放出来了。