6月3日-每日安全知识热点

如何破解LTE加密

https://www.sstic.org/media/SSTIC2016/SSTIC-actes/how_to_not_break_lte_crypto/SSTIC2016-Article-how_to_not_break_lte_crypto-michau_devine.pdf

Siklu EtherHaul隐藏的ROOT账号

http://iancaling.tumblr.com/post/145309944453/siklu-etherhaul-hidden-root-account

WhatsApp SS7 attack 演示视频

https://www.youtube.com/watch?v=fDJ-88e_06A

sisron木马的DGA算法

https://johannesbader.ch/2016/06/the-dga-of-sisron/

在wifi AP中发现频道的windows平台最好的工具

http://www.nirsoft.net/utils/wifi_channel_monitor.html

scada系统中的恶意活动

https://www.fireeye.com/blog/threat-research/2016/06/irongate_ics_malware.html

SSTIC 2016 – Huge (Stage 2)  writeup

http://blog.remijullian.fr/?p=720

分析一个针对dropbox的钓鱼

http://garwarner.blogspot.tw/2016/06/deconstructing-dropbox-phish.html

在线PE文件分析工具

https://manalyzer.org/

WP Mobile Detector插件漏洞已经被用于攻击

https://blog.sucuri.net/2016/06/wp-mobile-detector-vulnerability-being-exploited-in-the-wild.html

windows内核中的指针滥用

http://yurichev.com/blog/ptrs3/

【安全预警】Struts2昨日再曝两枚高危漏洞!

http://xhack.cn/archives/301.html

Analysis of stack disclosure vulnerabilities in FreeBSD compatibility layers

https://cturt.github.io/compat-info-leaks.html

Liferay的OpenID组件xxe漏洞

http://www.securityfocus.com/archive/1/538557

PHP 5.4.34 unserialize UAF exploit

http://blog.knownsec.com/2016/06/php-5-4-34-unserialize-uaf-exploit/

ubuntu基础安全辅导

https://wiki.ubuntu.com/BasicSecurity