1月11日-每日安全知识热点

1.Nvidia如何突破chrome Incognito模式

https://charliehorse55.wordpress.com/2016/01/09/how-nvidia-breaks-chrome-incognito/

2.Lobotomy介绍第二部分

http://rotlogix.com/2016/01/09/introduction-to-lobotomy-part-two/

3.使用betterCap实现双向ICMP重定向攻击

http://www.evilsocket.net/2016/01/10/bettercap-and-the-first-real-icmp-redirect-attack/

4.恶意使用HTML VIBRATE api

https://shkspr.mobi/blog/2014/01/malicious-use-of-the-html5-vibrate-api/

5.u8plus智能手表快速拆卸和UART

http://www.sodnpoo.com/posts.xml/u8plus_smart_watch_quick_teardown_and_uart.xml

6.OSX Installer认证工具

https://www.sektioneins.de/en/blog/16-01-08-osx_verify.html

7.重温32c3会议经典议题:第一部分

https://www.insinuator.net/2016/01/32c3-recap-part1/

8.32c3 CTF:libdroid逆向工程

http://blog.squareroots.de/en/2016/01/32c3-ctf-android-reverse-engineering-libdroid/

9.Javascript Deobfuscator:javascript反混淆工具更新

http://www.kahusecurity.com/2016/javascript-deobfuscator-updated-2/

10.zeroaccess 3 分析

http://kryptoslogic.blogspot.com/2016/01/zeroaccess-3-analysis.html

11.反向工程Intel DRAM地址和利用

http://arxiv.org/pdf/1511.08756v2.pdf

12.下村努的1995年的邮件揭示米特尼克的TCP会话劫持攻击

http://gulker.com/ra/hack/tsattack.html

13.Rejetto HTTP File Server (HFS) 2.3.x 老漏洞新利用,利用的是vbs下载nc,然后绑定cmdshell。

https://www.exploit-db.com/exploits/39161/

14.劫持verizon fios账号

http://randywestergren.com/hijacking-verizon-fios-accounts/

15.审计和利用Apple IPC

http://thecyberwire.com/events/docs/IanBeer_JSS_Slides.pdf

16.DNS Tunnelling取证

https://www.vthreat.com/2015/12/04/dns-tunnelling-forensics/

17.编程测试 DRAM的 "rowhammer" 问题

https://github.com/IAIK/rowhammerjs/tree/master/native