[分享]国外最新安全推文整理（第15期）-外文翻译-看雪-安全社区|安全招聘|kanxue.com

[分享]国外最新安全推文整理（第15期）

发表于: 2017-10-2 16:55 4995

[分享]国外最新安全推文整理（第15期）

BDomne

2017-10-2 16:55

4995

有些可能需要VPN访问，安全性方面自己多留意。

How PayloadRestrictions.dll (aka EMET on Windows 10) is loaded into a process

5bdK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6V1k6i4u0G2K9$3!0Q4x3V1k6H3j5i4W2D9L8$3q4V1M7X3g2K6N6s2u0A6j5%4c8A6L8$3&6K6

Virtual Machine Control Structure

795K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6x3L8%4u0V1e0X3!0@1k6i4N6G2M7Y4c8Z5P5g2)9J5c8X3y4H3N6g2)9J5k6r3W2F1N6r3g2J5L8X3q4D9M7H3`.`.

Analysis and exploitation of CVE-2017-8759 along with further refinements

305K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6F1j5$3y4Y4M7X3!0#2M7q4)9J5c8V1y4h3c8g2)9J5k6o6t1H3x3e0N6Q4x3X3b7^5y4K6f1&6

X41 Browser Security White Paper

50bK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6^5y4o6q4K6k6h3y4Q4x3V1k6T1M7X3!0%4M7$3g2J5i4K6u0V1M7$3g2U0N6i4u0A6N6s2W2Q4x3X3c8%4K9r3W2@1k6i4m8S2M7r3g2J5i4K6u0V1x3U0l9I4y4H3`.`.

Cure53 Browser Security White Paper

045K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6U0N6i4u0W2y4e0y4Q4x3V1k6T1M7X3!0%4M7$3g2J5i4K6u0V1M7$3g2U0i4K6u0V1N6$3S2A6N6r3g2H3j5i4m8W2M7R3`.`.

The cheat sheet about Java Deserialization vulnerabilities

f1bK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6s2M7Y4u0J5c8r3!0Y4i4K6u0r3d9X3q4$3j5g2)9J5k6p5c8W2M7$3g2J5K9h3q4D9K9i4A6S2N6r3W2G2L8W2)9J5k6p5y4Z5k6h3q4@1i4K6u0V1f1$3S2W2k6i4b7`.

Stealing Signatures and Making One Invalid Signature at a Time

ffaK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6K6k6h3y4J5k6i4c8K6M7i4g2A6M7Y4u0W2L8q4)9J5c8W2y4A6k6#2c8Z5K9h3g2X3

Leverages the ETS2 to develop self-driving algorithms

e4eK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6E0j5i4u0K6K9s2q4Q4x3V1k6W2N6i4u0G2M7r3W2D9L8%4b7`.

Slides from Hitcon on the Smb exploits

1f8K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6y4K9h3y4J5L8%4y4G2k6Y4c8Q4x3V1k6y4f1#2u0o6i4K6u0V1f1$3g2U0N6i4u0A6N6s2W2Q4x3X3c8d9k6i4y4W2j5i4u0U0K9q4)9J5c8Y4c8J5k6h3g2Q4x3V1k6E0j5i4y4@1k6i4u0Q4x3V1k6H3M7X3g2K6k6h3&6@1j5i4c8A6L8$3&6K6i4K6u0r3x3U0l9I4y4#2)9#2k6U0l9^5i4K6g2X3d9r3W2@1j5$3!0F1b7$3!0E0L8i4g2F1K9i4c8&6

The State of Kernel-Mode RCE Defense, slides

569K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4K9i4c8Z5N6h3u0Q4x3X3g2U0L8$3#2Q4x3V1k6y4K9h3y4J5L8%4y4G2k6Y4c8Q4x3V1k6y4f1#2u0o6i4K6u0V1f1$3g2U0N6i4u0A6N6s2W2Q4x3X3c8d9k6i4y4W2j5i4u0U0K9q4)9J5c8Y4c8J5k6h3g2Q4x3V1k6E0j5i4y4@1k6i4u0Q4x3V1k6H3M7X3g2K6k6h3&6@1j5i4c8A6L8$3&6K6i4K6u0r3x3U0l9I4y4#2)9#2k6U0l9%4i4K6g2X3b7X3!0#2L8Y4c8&6b7%4u0S2k6Y4b7`.

Time Travel Debugging in WinDbg Preview

da0K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6T1L8r3!0Y4M7#2)9J5k6h3#2K6k6r3&6Q4x3X3g2E0K9h3y4J5L8%4y4G2k6Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6%4K9h3&6V1j5X3N6Q4x3V1j5J5x3o6p5%4i4K6u0r3x3o6W2Q4x3V1j5J5y4g2)9J5c8Y4c8A6L8h3g2Q4x3X3c8@1M7X3q4$3k6h3I4Q4x3X3c8V1k6h3u0#2k6$3N6A6L8X3N6Q4x3X3c8A6L8W2)9J5k6s2N6A6L8X3c8T1k6#2)9J5k6s2m8J5k6i4k6A6k6i4N6Q4x3V1j5`.

REVEN-Axion, the Time-Traveling machine

c94K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0D9L8$3N6Q4x3X3g2@1k6i4c8J5j5h3&6W2i4K6u0W2j5$3!0E0i4K6u0r3k6r3!0%4L8X3I4G2j5h3c8K6i4K6u0r3x3U0l9I4y4K6l9$3x3e0S2Q4y4h3k6J5k6h3y4G2L8U0p5%4i4K6g2X3f1V1g2h3c8f1&6Q4x3X3g2H3k6r3j5`.

Time-Traveling RE on DirtyCOW with REVEN-Axion

3a1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0D9L8$3N6Q4x3X3g2@1k6i4c8J5j5h3&6W2i4K6u0W2j5$3!0E0i4K6u0r3x3U0l9I4y4#2)9J5c8U0l9&6i4K6u0r3k6r3W2J5N6s2W2U0x3s2N6Q4x3X3b7I4i4K6u0W2K9s2c8E0L8l9`.`.

Hyper-V sockets internals

6bfK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6V1M7X3W2$3k6g2)9J5k6h3N6G2L8$3N6D9k6g2)9J5k6h3y4G2L8g2)9J5c8X3k6A6L8r3g2Q4x3V1k6V1i4K6u0r3x3p5t1^5g2@1g2B7d9i4S2d9L8X3y4p5f1W2y4f1c8V1y4K9c8@1k6p5g2W2c8k6x3X3c8*7b7g2)9J5c8Y4k6A6k6i4M7`.

Wandering through the Shady Corners of VMware Workstation/Fusion

940K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6U0L8$3#2K6k6h3y4#2M7X3W2K6i4K6u0W2j5$3!0E0i4K6u0r3j5X3I4G2k6#2)9J5c8Y4m8G2M7%4c8K6i4K6u0r3N6X3#2%4j5i4u0W2i4K6g2X3N6X3N6H3N6g2)9#2k6Y4y4Z5j5h3c8W2M7W2)9#2k6Y4k6#2L8r3&6W2M7X3q4T1K9h3I4A6N6r3W2W2M7#2)9J5c8R3`.`.

The Great DOM Fuzz-off of 2017

479K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6Y4L8$3!0Y4L8r3g2H3M7X3!0B7k6h3y4@1P5X3g2J5L8#2)9J5k6h3u0D9L8$3N6K6M7r3!0@1i4K6u0W2j5$3!0E0i4K6u0r3x3U0l9I4y4#2)9J5c8U0l9&6i4K6u0r3N6r3S2W2i4K6u0V1k6%4u0W2j5i4c8Q4x3X3c8V1L8$3#2Q4x3X3c8X3N6i4A6*7i4K6u0V1L8$3k6X3i4K6u0V1L8$3k6Q4x3X3b7J5x3o6p5%4i4K6u0W2K9s2c8E0L8l9`.`.

Fuzzing the MSXML6 library with WinAFL

44cK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6K6P5h3#2W2L8$3&6H3i4K6u0W2k6$3W2@1K9s2g2T1i4K6u0W2K9h3!0Q4x3V1j5J5x3o6p5%4i4K6u0r3x3o6W2Q4x3V1j5I4y4#2)9J5c8X3k6#2P5Y4A6A6L8X3N6Q4x3X3c8%4K9h3&6S2k6X3I4Q4x3X3g2Z5N6r3#2D9

Fuzzing mimikatz with WinAFL&Heatmaps

c15K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2K6k6h3y4Q4x3X3c8U0L8$3&6K6N6h3I4@1i4K6u0W2j5$3!0E0i4K6u0r3k6h3&6Q4x3V1k6T1L8r3!0Y4i4K6u0r3x3U0l9I4y4#2)9J5c8U0l9&6i4K6u0r3K9r3q4U0K9#2)9J5k6s2c8Z5k6g2)9J5k6r3S2S2j5$3E0W2M7W2)9J5k6r3k6#2P5Y4A6A6L8X3N6Q4x3X3c8E0K9h3#2A6K9$3q4@1P5W2)9J5k6r3!0F1i4K6u0V1N6$3W2F1k6r3!0%4M7#2)9J5k6s2N6A6N6r3S2Q4x3X3c8%4K9h3&6S2k6X3I4Q4x3X3c8Z5k6h3q4@1L8h3q4H3M7#2)9J5k6o6m8V1j5i4W2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6h3S2@1L8h3H3`.

Abusing Delay Load DLLs for Remote Code Injection

ff6K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3S2S2N6s2u0A6L8%4c8Q4x3X3g2Y4K9i4c8Z5N6h3u0Q4x3X3g2A6L8#2)9J5c8X3u0D9L8$3N6Q4x3V1j5J5x3o6p5%4i4K6u0r3x3o6W2Q4x3V1j5I4z5g2)9J5c8X3q4T1N6i4y4A6L8X3N6Q4x3X3c8V1k6h3I4S2P5g2)9J5k6r3I4G2j5h3c8Q4x3X3c8V1L8r3I4Q4x3V1j5`.

Lateral Movement using Excel.Application and DCOM

9f6K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6W2L8X3W2Y4L8h3p5H3P5o6y4Q4x3X3g2F1k6i4c8Q4x3V1j5J5x3o6p5%4i4K6u0r3x3o6W2Q4x3V1j5I4x3g2)9J5c8X3I4S2N6r3g2J5j5h3I4Q4x3X3c8E0L8%4k6W2L8h3g2F1N6q4)9J5k6s2g2K6K9h3&6Y4i4K6u0V1k6i4S2U0k6h3I4Q4x3X3c8S2M7s2m8D9K9h3y4S2N6r3W2G2L8W2)9J5k6r3q4F1k6q4)9J5k6r3c8U0L8$3#2Q4x3V1j5`.

Analyzing Malicious Documents Cheat Sheet

900K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6*7k6h3I4@1M7$3g2J5i4K6u0W2j5$3!0E0i4K6u0r3j5h3&6S2L8s2W2*7K9h3&6Y4i4K6u0V1L8h3q4D9K9h3y4A6L8%4g2K6i4K6u0V1k6r3!0U0N6h3#2W2L8Y4c8K6i4K6u0r3

A Modern Hypervisor as a Basis for a Sandbox

b03K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6K6k6h3y4#2M7X3g2D9K9i4y4@1i4K6u0W2j5$3!0E0i4K6u0r3j5g2)9J5k6r3#2G2k6r3g2J5L8W2)9J5k6r3S2&6M7r3g2J5N6X3W2K6L8%4u0Q4x3X3c8S2M7#2)9J5k6r3q4Q4x3X3c8T1j5i4y4A6M7#2)9J5k6r3k6G2M7W2)9J5k6r3q4Q4x3X3c8K6j5h3&6V1j5X3!0^5i4K6u0r3z5o6p5&6x3o6u0Q4x3V1j5`.

Exploit Kit Landscape Map

a28K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3g2^5k6h3y4#2N6r3g2E0j5h3I4%4j5i4u0W2i4K6u0W2j5$3!0E0i4K6u0r3i4K6y4r3M7r3q4Y4k6g2)9#2k6X3W2V1i4K6y4p5x3K6t1H3

MISP Galaxy Clusters

1f3K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2E0K9i4y4H3i4K6u0W2M7$3!0X3N6s2N6S2M7X3g2Q4x3V1k6Y4j5h3I4S2P5s2W2Q4x3X3g2H3k6r3j5`.

Rootkit analysis Use case on HideDRV

8caK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4y4W2K9$3!0A6j5g2)9J5k6h3k6J5i4K6u0r3j5X3I4G2k6#2)9J5c8Y4N6H3i4K6u0V1j5$3!0F1N6r3g2F1N6q4)9J5c8Y4g2H3L8r3!0S2k6s2y4Q4x3V1j5J5x3o6p5$3i4K6u0r3x3e0m8Q4x3V1k6d9L8$3!0@1K9$3W2@1i4K6u0V1j5h3&6S2L8s2W2K6K9i4y4Q4x3X3c8g2M7$3g2Q4x3X3c8U0j5i4y4W2i4K6u0V1L8$3&6Q4x3X3c8t1d9f1c8q4c8q4u0h3i4K6u0V1N6U0q4Q4x3X3f1$3i4K6u0W2M7r3c8X3

AntiForensics techniques: Process hiding in Kernel Mode

0bdK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6%4N6%4N6Q4x3X3g2U0k6i4u0@1i4K6u0V1k6r3g2$3L8%4c8W2j5h3#2Q4x3X3g2X3M7W2)9J5c8Y4m8#2j5X3I4A6j5$3q4@1K9h3!0F1M7#2)9J5c8X3g2F1i4K6u0r3j5h3&6@1K9h3k6G2M7X3g2F1M7$3W2U0M7#2)9J5k6s2c8W2j5$3S2F1K9i4q4#2k6i4y4Q4x3X3c8H3M7X3!0U0k6i4y4K6i4K6u0V1K9r3W2V1K9h3&6Y4i4K6u0V1K9h3&6Q4x3X3c8C8k6i4u0F1k6h3I4Q4x3X3c8E0L8$3c8W2i4K6u0r3

Enumerating process, thread, and image load notification callback routines in Windows

3ccK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6i4c8J5K9i4m8D9k6h3k6S2N6h3I4@1i4K6u0W2K9h3!0Q4x3V1j5J5x3o6p5%4i4K6u0r3x3o6W2Q4x3V1k6W2L8Y4g2E0k6i4u0S2N6r3W2F1k6#2)9J5k6s2m8J5L8$3y4W2M7%4y4Q4x3X3c8@1K9s2u0W2j5h3c8Q4x3X3c8S2L8X3c8Q4x3X3c8A6L8h3q4Y4k6g2)9J5k6h3S2@1L8h3H3`.

CS224n: Natural Language Processing with Deep Learning

d96K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6W2j5W2)9J5k6i4y4@1j5h3&6X3L8%4u0V1i4K6u0W2k6h3c8#2i4K6u0r3j5$3I4S2M7%4y4Q4x3V1k6U0M7K6t1J5y4r3&6Q4x3V1k6K6P5h3I4D9j5h3u0#2M7#2)9J5k6h3S2@1L8h3H3`.

CS20SI: Tensorflow for Deep Learning Research

38bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6W2j5W2)9J5k6i4y4@1j5h3&6X3L8%4u0V1i4K6u0W2k6h3c8#2i4K6u0r3j5$3I4S2M7%4y4Q4x3V1k6U0M7K6t1H3M7$3W2Q4x3V1k6K6P5h3I4D9j5h3u0#2M7#2)9J5k6h3S2@1L8h3H3`.

Binary data visualizations

07dK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6J5k6i4k6W2M7Y4y4W2k6h3&6Y4K9h3&6W2k6i4u0A6L8X3N6Q4x3X3g2K6N6r3q4U0K9$3g2^5j5$3S2S2L8X3N6W2i4K6u0W2j5$3!0E0i4K6u0r3M7i4g2W2M7%4c8A6L8$3&6K6i4K6u0r3y4U0l9H3x3#2)9J5c8Y4k6A6M7%4g2S2L8r3W2*7K9h3&6Y4i4K6u0V1k6h3I4X3i4K6u0V1j5X3W2F1j5i4u0A6k6i4x3`.

Open source, iOS and macOS kernel

d2eK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6G2M7r3g2F1M7$3!0#2M7X3y4W2i4K6u0W2j5i4m8H3L8r3g2Q4x3X3g2U0L8$3#2Q4x3V1j5`.

Hacking Conference Archive

474K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6A6L8X3k6G2j5$3!0F1i4K6u0W2L8%4u0Y4i4K6u0r3j5$3!0F1M7#2)9J5c8R3`.`.

Intro to Analyze NFC Payment Methods & Contactless Cards

2f4K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6K6j5h3I4E0k6#2)9J5k6h3&6W2N6q4)9J5c8U0t1H3x3e0N6Q4x3V1j5H3z5g2)9J5c8U0p5J5i4K6u0r3K9h3&6@1M7X3!0Q4x3X3c8@1L8#2)9J5k6r3q4F1j5h3I4&6P5X3g2Q4x3X3c8F1k6X3y4Q4x3X3c8U0L8$3&6@1j5h3y4@1L8r3g2K6M7#2)9J5k6r3y4S2M7X3c8K6i4K6u0r3

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课

收藏・3

免费・0

支持