12月2日每日安全热点 - 法国制药分销平台泄漏1.7+TB数据

360安全客 安全资讯 33383 4

安全工具 Security Tools
SSRFIRE – 自动SSRF探测器
https://github.com/micha3lb3n/SSRFire
TScan – web扫描工具
https://github.com/dyboy2017/TScan
ShellcodeLoader
https://github.com/knownsec/shellcodeloader
安全研究 Security Research
WAPDropper Android恶意软件研究
https://research.checkpoint.com/2020/enter-wapdropper-subscribe-users-to-premium-services-by-telecom-companies/
细说Saltstack SALT命令注入
https://www.thezdi.com/blog/2020/11/24/detailing-saltstack-salt-command-injection-vulnerabilities
Egregor RaaS利用Cobalt Strike和Rclone
https://labs.sentinelone.com/egregor-raas-continues-the-chaos-with-cobalt-strike-and-rclone/
.Net 反序列化原理学习
https://paper.seebug.org/1418/
如何实现一款 shellcodeLoader
https://paper.seebug.org/1413/
CVE-2015-1641及利用样本分析
https://www.anquanke.com/post/id/224196
恶意软件 Malware
DarkIRC恶意软件利用WebLogic漏洞
https://www.bleepingcomputer.com/news/security/critical-oracle-weblogic-flaw-actively-exploited-by-darkirc-malware/
安全事件 Security Incident
法国制药分销平台泄漏1.7+TB数据
https://cybernews.com/security/french-pharmaceuticals-distribution-platform-leaking-1-7-tb-confidential-data/
（完）