【知识】4月23日 - 每日安全知识热点

热点概要：苹果文件系统的逆向分析、注册表和COM对象对windows的影响、春秋杯逆向第一题writeup、对SMB Backdoor Ring 0 Shellcode的深入分析、对FlexiSpy的移动间谍软件程序的分析

国内热词(以下内容部分摘自http://www.solidot.org/)：

---

北京要求共享单车安装卫星定位

资讯类：

---

泄漏的NSA黑客工具被用来破坏数以万计的存在漏洞的pc

http://thehackernews.com/2017/04/windows-hacking-tools.html

技术类：

---

Trueseeing :一款针对Android应用的漏洞扫描工具

https://pypi.python.org/pypi/trueseeing

苹果文件系统的逆向分析

https://blog.cugu.eu/post/apfs/

Western Digital My Cloud 认证的bypass

https://www.securify.nl/advisory/SFY20170404/authentication_bypass_vulnerability_in_western_digital_my_cloud_allows_escalation_to_admin_privileges.html

对SMB Backdoor Ring 0 Shellcode的深入分析

https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html

对FlexiSpy的移动间谍软件程序的分析

http://www.cybermerchantsofdeath.com/blog/2017/04/23/FlexiSpy.html

春秋杯逆向第一题writeup

https://weiyiling.cn/one/ichunqiu_ctr_re1_writeup

防火墙-路由器学习

http://www.cnblogs.com/iamstudy/articles/firewall_route_study_1.html 

http://www.cnblogs.com/iamstudy/articles/firewall_route_study_2.html

Microsoft Office系列的持久化渗透

https://labs.mwrinfosecurity.com/blog/add-in-opportunities-for-office-persistence/

注册表和COM对象对windows的影响

https://www.slideshare.net/enigma0x3/windows-operating-system-archaeology

Foxit阅读器远程代码执行

http://www.zerodayinitiative.com/advisories/ZDI-17-310/

Acunetix AcuSensor采用新的安全技术

https://dustri.org/b/playing-with-the-acusensor.html

Hadoop安全问题介绍以及安全加固

http://mp.weixin.qq.com/s?timestamp=1492941490&src=3&ver=1&signature=gXTd4gOEFruFmxjExuIHmZr-SFRNNw0S2suLk6tw9X-UwuhK1W3CRF-7yYo2ICpf7rXG*kF*B772lZYrEj46*V1bUQHCSmE0oIF9SaouPKDqN788aUdvtKzT6xnM16VahG1WrAH*33ugAroAJ71hDWEArkWjHijyBLCUqY3wJvQ=