11月26每日安全热点 - F-Secure披露DataPower Gateway拒绝服务漏洞

360安全客 安全资讯 62015 4

漏洞 Vulnerability
VMWare 虚拟环境逃逸漏洞通告
https://www.anquanke.com/post/id/223628
F-Secure披露IBM DataPower Gateway多个拒绝服务漏洞
https://labs.f-secure.com/advisories/ibm-datapower-denial-of-service/
安全研究 Security Research
2020 BalsnCTF web 部分题解
https://www.anquanke.com/post/id/222675
GEEKPWN2020-baby_kernel的另一种解法
https://www.anquanke.com/post/id/222619
安全事件 Security Incident
spotify在泄露事件之后重置了一些用户的密码
https://blog.malwarebytes.com/reports/2020/11/spotify-resets-some-user-logins-after-hacker-database-found-floating-online/
安全工具 Security Tools
D810:IDA Pro的可扩展的反混淆插件
https://eshard.com/posts/d810_blog_post_1/
NetworkSniffer:iOS APP流量记录工具
https://github.com/evilpenguin/NetworkSniffer
SharpEDRChecker:一个EDR检测工具
https://github.com/PwnDexter/SharpEDRChecker
UAFuzz – 二进制级定向fuzz UAF漏洞的工具
https://www.kitploit.com/2020/11/uafuzz-binary-level-directed-fuzzing.html
Wsb-Detect – 用于检测您是否在Windows沙箱中运行的工具
https://www.kitploit.com/2020/11/wsb-detect-tool-to-detect-if-you-are.html
RedShell – 通过proxychains执行命令并自动将记录在Cobalt Strike team server上
https://www.kitploit.com/2020/11/redshell-interactive-command-prompt.html
（完）