2月2日安全热点Smominru僵尸网络/Adobe0day漏洞

资讯类

WannaMine — 通过NSA EternalBlue漏洞传播的新型蠕虫

http://securityaffairs.co/wordpress/68518/malware/wannamine-nsa-eternalblue.html

Droidclub僵尸网络

趋势科技网络安全解决方案团队发现了一个新的僵尸网络，通过Chrome扩展程序提供，影响到超过50万用户。

https://blog.trendmicro.com/trendlabs-security-intelligence/malicious-chrome-extensions-found-chrome-web-store-form-droidclub-botnet/

恶意软件样本试图利用Meltdown和Specter漏洞

https://www.bleepingcomputer.com/news/security/we-may-soon-see-malware-leveraging-the-meltdown-and-spectre-vulnerabilities/

Smominru僵尸网络感染了超过500,000台Windows机器

https://www.bleepingcomputer.com/news/security/smominru-botnet-infected-over-500-000-windows-machines/

Adobe新的0day在野漏洞

https://www.bleepingcomputer.com/news/security/new-adobe-flash-zero-day-spotted-in-the-wild/

技术类

如何在JSON端点上利用CSRF漏洞

https://blog.appsecco.com/exploiting-csrf-on-json-endpoints-with-flash-and-redirects-681d4ad6b31b

一个瞄准数据库服务器的挖矿僵尸网络

http://blog.netlab.360.com/ddg-a-mining-botnet-aiming-at-database-server/

JStillery：Advanced JS Deobfuscation via Partial Evaluation

https://paper.seebug.org/524/

2017年网络诈骗趋势研究报告

https://www.anquanke.com/post/id/96973

Vulnserver – KSTET利用

http://ewilded.blogspot.com/2018/01/vulnserver-my-kstet-exploit-delivering.html

如何通过使用ABI过滤器和APK分割器缩小APK包

https://proandroiddev.com/reducing-apk-size-by-using-abi-filters-and-apk-split-74a68a885f4e

在Windows 10上运行最新的x64 Mimikatz

https://astr0baby.wordpress.com/2018/01/30/running-latest-x64-mimikatz-on-windows-10

基于IOCTLBF框架编写的驱动漏洞挖掘工具KDRIVER FUZZER

https://whereisk0shl.top/post/2018-01-30

冷门知识 — NoSQL注入知多少

https://www.anquanke.com/post/id/97211

SSH僵尸主机挖矿木马预警

http://www.aqniu.com/threat-alert/31390.html

VER-OBSERVER 一个可以探测框架及依赖版本的命令行工具

http://blog.neargle.com/2018/01/29/ver-observer-a-tool-about-version-detection/

Autosploit——自动化利用远程主机工具

https://github.com/NullArray/AutoSploit

一款从EK中删除恶意软件的工具

https://github.com/nao-sec/mal_getter

iOS 11越狱工具

https://github.com/Coalfire-Research/iOS-11.1.2-15B202-Jailbreak

超全的 Linux 机器的渗透测试命令备忘表

http://www.91ri.org/17575.html