1月18日每日安全热点 - 如何窃取百万Google帐户数据

360安全客 安全资讯 9091 4

漏洞 Vulnerability
Windows 10在打开特定路径时会导致BSOD崩溃
https://www.bleepingcomputer.com/news/security/windows-10-bug-causes-a-bsod-crash-when-opening-a-certain-path/
CVE-2020-6418 V8漏洞分析笔记
https://xz.aliyun.com/t/9014
恶意软件 Malware
利用Ghidra 逆向移动应用程序
https://medium.com/bugbountywriteup/how-to-use-ghidra-to-reverse-engineer-mobile-application-c2c89dc5b9aa
SolarWinds供应链攻击持续跟踪进展
https://mp.weixin.qq.com/s/CR6Iy3nTejR9Tfm4QCJxNw
MSBuild 后门技术分析
https://www.a12d404.net/ranting/2021/01/17/msbuild-backdoor.html
安全研究 Security Research
我是如何窃取数以百万计的Google帐户中的数据
https://blog.usejournal.com/how-i-stole-the-data-in-millions-of-peoples-google-accounts-aa1b72dcc075
对Fuzzing 的一些理解和基本知识
https://h0mbre.github.io/Fuzzing-Like-A-Caveman-5/#
XNU 内核堆安全特性解读
https://mp.weixin.qq.com/s/LOf_W9QRDds_yHO1aVSg9Q
HTB: RopeTwo ——Writeup
https://0xdf.gitlab.io/2021/01/16/htb-ropetwo.html
VirtualBox 6.1 虚拟机逃逸——Part1
https://secret.club/2021/01/14/vbox-escape.html
Android渗透测试：WebView攻击
https://www.hackingarticles.in/android-penetration-testing-webview-attacks/
TOR路由协议的统计和组合分析
https://dustri.org/b/paper-review-statistical-and-combinatorial-analysis-of-the-tor-routing-protocol.html
当前代码遗留的一些问题
https://mariusbancila.ro/blog/2021/01/15/modernizing-legacy-code/
安全工具 Security Tools
feroxbuster：网站资源暴力枚举工具
https://github.com/epi052/feroxbuster
（完）