360CERT - 每日安全简报 (2019-10-13)

<<Previous Next>>

漏洞 Vulnerability

cve-2019-17059: CyberoamSSL VPN的RCE漏洞

https://thebestvpn.com/cyberoam-preauth-rce/

安全研究 Security Research

CVE-2019-9535 Iterm2命令执行的不完整复现

https://mp.weixin.qq.com/s/4KcpS4eNGQ8bL6DTM4K0aQ

从 Masscan, Zmap 源码分析到开发实践

https://paper.seebug.org/1052/

绕过像PRO这样的xss过滤器（xss高级方法）

https://medium.com/@Master_SEC/bypass-uppercase-filters-like-a-pro-xss-advanced-methods-daf7a82673ce

通过参数污染绕过IDOR

https://medium.com/@0xgaurang/case-study-bypassing-idor-via-parameter-pollution-78f7b3f9f59d

Lxd权限提升

https://www.hackingarticles.in/lxd-privilege-escalation/

红蓝对抗——加密Webshell“冰蝎”攻防

https://www.anquanke.com/post/id/187874

安全工具 Security Tools

0kee发布邮箱爆破工具CatchMail

https://github.com/0Kee-Team/CatchMail

Traxss-在Python3下的自动XSS漏洞扫描程序

https://www.kitploit.com/2019/10/traxss-automated-xss-vulnerability.html

DECAF-动态可执行代码分析框架

https://www.kitploit.com/2019/10/decaf-short-for-dynamic-executable-code.html

<<Previous Next>>