【知识】6月19日 - 每日安全知识热点

热点概要：Shadow Brokers泄漏的分析与Windows10中基于虚拟化的安全缓解措施、针对Linux内核中double fetch漏洞的研究、RMI, Marshalling, RMI Class Loading、通过php模块rootkit验证PHP解释器不在安全、详细分析Longhorn木马和Black Lambert监控后门、远程遥控 IPTables 进行端口复用

---

英BAE系统被指将大规模监控软件Evident售往中东

http://securityaffairs.co/wordpress/60201/digital-id/bae-evisend-surveillance-software.html

技术类：

---

Shadow Brokers泄漏的分析与Windows10中基于虚拟化的安全缓解措施

https://blogs.technet.microsoft.com/mmpc/2017/06/16/analysis-of-the-shadow-brokers-release-and-mitigation-with-windows-10-virtualization-based-security/

针对Linux内核中double fetch漏洞的研究

https://www.inforsec.org/wp/?p=2049

被忽视的攻击面：Python package 钓鱼

http://paper.seebug.org/326/

针对工业控制系统的新型攻击武器 Industroyer 深度剖析

http://paper.seebug.org/328/

浏览器地址栏之困

https://github.com/xisigr/paper/blob/master/NSC2017%E7%AC%AC%E4%BA%94%E5%B1%8A%E4%B8%AD%E5%9B%BD%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8%E5%A4%A7%E4%BC%9A/%E6%B5%8F%E8%A7%88%E5%99%A8%E5%9C%B0%E5%9D%80%E6%A0%8F%E4%B9%8B%E5%9B%B0.pdf

RMI, Marshalling, RMI Class Loading

https://threathunter.org/topic/5945141c4ea5b2f5516e2031

远程遥控 IPTables 进行端口复用

https://threathunter.org/topic/594545184ea5b2f5516e2033

记一次安卓系统源码编译刷机过程

http://bbs.pediy.com/thread-218513.htm

CTF2017 第8题 loudy Crackme 破解过程（迟来的成功）

http://bbs.pediy.com/thread-218564.htm

AWS元数据服务的SSRF漏洞

https://blog.christophetd.fr/abusing-aws-metadata-service-using-ssrf-vulnerabilities/

AQUATONE：子域名发掘的神器

http://michenriksen.com/blog/aquatone-tool-for-domain-flyovers/

defcon ctf 2017 divided writeup

https://www.securifera.com/blog/2017/06/18/defcon-ctf-2017-divided-writeup/

一个基于浏览器的GUI的LLDB调试器

https://github.com/ant4g0nist/vegvisir

NDSS 2017视频合集

https://www.youtube.com/playlist?list=PLfUWWM-POgQsZ9YCXLaCHIvn_H6-F4esJ

我如何偷走你的云储币(Siacoin)

https://mtlynch.io/stole-siacoins/

关于加密数据库是不安全的paper

http://eprint.iacr.org/2017/468.pdf

通过php模块rootkit验证PHP解释器不在安全

https://blog.paradoxis.nl/your-interpreter-isnt-safe-anymore-the-php-module-rootkit-c7ca6a1a9af5

杀软内核漏洞的一些PoC

https://github.com/bee13oy/AV_Kernel_Vulns

ManageEngine 代码执行漏洞

https://blogs.securiteam.com/index.php/archives/3228

一个开源的php module rootkit

http://pentestit.com/open-source-php-module-rootkit/

CVE-2017-9233漏洞解析

https://libexpat.github.io/doc/cve-2017-9233/

详细分析Longhorn木马和Black Lambert监控后门

http://adelmas.com/blog/longhorn.php