today.md

每日安全资讯（2022-04-18）

• CXSECURITY Database RSS Feed - CXSecurity.com
  • Delta Controls enteliTOUCH 3.40.3935 Cookie User Password Disclosure
  • WordPress Elementor 3.6.2 Remote Code Execution
  • Delta Controls enteliTOUCH 3.40.3935 Cross Site Scripting
  • Siemens A8000 CP-8050/CP-8031 SICAM WEB Missing File Download / Missing Authentication
  • Backdoor.Win32.MotivFTP.12 / Authentication Bypass
  • Telegram Android v8.4.4 - Denial of Service
• Sploitus.com Exploits RSS Feed
  • Exploit for Improper Initialization in Linux Linux Kernel exploit
  • Exploit for CVE-2022-1329 exploit
  • Exploit for Deserialization of Untrusted Data in Apache Log4J exploit
• Security Boulevard
  • OWASP® Global AppSec US 2021 Virtual – Jim Manico’s ‘Keynote: Request Forgery On The Web – SSRF, CSRF And Clickjacking’
  • Robert M. Lee’s & Jeff Haas’ Little Bobby Comic – ‘WEEK 377’
  • OWASP® Global AppSec US 2021 Virtual – Adam Shostack’s ‘Keynote: 25 Years in AppSec: Looking Back, Looking Forward’
• WeiyiGeek Blog
  • 自媒体文章/BiliBili/test
• ArthurChiao's Blog
  • Cracking Kubernetes RBAC Authorization Model
• Didier Stevens
  • Update: 1768.py Version 0.0.13
• Reverse Engineering
  • Reverse engineering Flutter apps
  • Spock SLAF is a Shared Library for Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks.
• HAHWUL
  • [Cullinan #32] Add SSE and Kiterunner!
• 博客园 - 郑瀚Andrew.Hann
  • 绿色有机农场商业可行性分析 - 郑瀚Andrew.Hann
• KitPloit - PenTest & Hacking Tools
  • linWinPwn - A Bash Script That Automates A Number Of Active Directory Enumeration And Vulnerability Checks
  • OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library
• 奇客Solidot–传递最新科技情报
  • Richard Stallman 谈论自由软件运动的现状
  • 社交网络让我们变蠢？
• 黑海洋 - WIKI
  • 宝塔Linux面板 V7.5.1 免授权永久企业版脚本
  • 宝塔Linux工具箱BTPanel_Tools 2021.12.22
  • 宝塔Linux面板_v7.7.0_解锁付费插件教程分享
  • 全网直播视频下载器SPXZQv1.1.903.382吾爱破解专版
  • 万能TXT文件批量处理小工具
• ImperialViolet
  • The several canons of CBOR
• SANS Internet Storm Center, InfoCON: green
  • Video: Office Protects You From Malicious ISO Files, (Sun, Apr 17th)
• KitPloit - PenTest Tools!
  • linWinPwn - A Bash Script That Automates A Number Of Active Directory Enumeration And Vulnerability Checks
  • OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library
• Security Affairs
  • Enemybot, a new DDoS botnet appears in the threat landscape
  • Stolen OAuth tokens used to download data from dozens of organizations, GitHub warns
  • Security Affairs newsletter Round 361 by Pierluigi Paganini
• Computer Forensics
  • Leveldb File Forensics
• TorrentFreak
  • Delayed Megaupload Lawsuits Get Assigned to Ninjavideo Judge
• 微步在线研究响应中心
  • 安全威胁情报周报（4.11~4.17）
• netsecstudents: Subreddit for students studying Network Security and its related subjects
  • Free Network+ Training Assistance for the folks who need it
• /r/netsec - Information Security News & Discussion
  • THCon CTF Writeup - SHA-1 exploitation, PHP LFI and RCE
  • Semgrep rules for smart contracts based on DeFi exploits
  • Spock SLAF is a Shared Library for Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks.
  • Packets Remystified: Broadcast Brujería
• 情报分析师
  • 重磅图文432页|《美国武器系统手册》
  • 人力情报技术：警察面谈和审讯中的暗示性
  • 20款适用于网络安全专家的免费取证调查工具
• 云鼎实验室
  • 每周云安全资讯-2022年第16周
• 数世咨询
  • 数世咨询《API安全研究报告2022》正式发布 附下载
  • SentinelOne 6.17亿美元收购身份安全供应商Attivo Networks
• Your Hacking Tutorial by Zempirians
  • Setting up remote access and a kill switch for my desktop.
  • Wifipumpkin3 no Internet on clients side.
  • Buffer Overflow with SUID help
  • Radio frequency