360CERT - 每日安全简报 (2020-11-09)

<<Previous Next>>

恶意软件 Malware

金眼狗组织水坑活动:针对Telegram用户的定向攻击

https://mp.weixin.qq.com/s/b-0Gv_l-nnks-RnSdXBFBw

安全研究 Security Research

当Frida来“敲”门

https://www.freebuf.com/articles/mobile/252882.html

一次文件上传对Token的绕过

https://mp.weixin.qq.com/s/MSS_pBu-5Dbo7iLLitMBkA

安全工具 Security Tools

ShowStopper - Anti-Debug测试工具

https://www.kitploit.com/2020/11/showstopper-anti-debug-tricks.html

Hetty - 用于安全研究的HTTP工具集

https://www.kitploit.com/2020/11/hetty-http-toolkit-for-security-research.html

JSMon - JavaScript Change Monitor for BugBounty

http://feedproxy.google.com/~r/PentestTools/~3/lgYTGY_97wo/jsmon-javascript-change-monitor-for.html

安全资讯 Security Information

特朗普竞选团队的网站泄露了选民数据

https://www.bleepingcomputer.com/news/security/trump-lawsuit-site-to-report-rejected-votes-leaked-voter-data/

Pwn2Own Tokyo结束，6个设备上的23个漏洞总共获得136500美元奖金

https://www.zerodayinitiative.com/blog/2020/11/8/pwn2own-tokyo-live-from-toronto-day-three-results-and-master-of-pwn

三连冠传奇！360多个“全球首破”斩获81.25万美金，三度称霸天府杯，再夺最具价值产品破解一等奖！

https://mp.weixin.qq.com/s/g1pN3DXb20harsD1K2OjlQ

<<Previous Next>>