2017-10-17 11:10:37
阅读：1670次
点赞(0)
收藏
来源： 安全客
作者：童话
热点概要：ShadowBrokers再一次回归，只要10万欧元（500 ZEC）就可以获得十月度的漏洞利用工具、Basics of Tracking WMI Activity、BlackBerry Workspaces服务器远程代码执行漏洞分析、Passionfruit：iOS应用黑盒评估工具、Exploiting on CVE-2016-6787、利用内存破坏实现python沙盒逃逸
国内热词（以下内容部分来自：http://www.solidot.org/）
KRACK 攻击能解密 Android 设备传输的数据，OpenBSD 提前释出补丁
世人不再嘲笑朝鲜的网络战力量
WPA2 协议漏洞让 Wi-Fi 流量能被攻击者监听
资讯类：
ShadowBrokers再一次回归，只要10万欧元（500 ZEC）就可以获得十月度的漏洞利用工具
https://steemit.com/shadowbrokers/@theshadowbrokers/october-price-adjustment
技术类：
Basics of Tracking WMI Activity
https://www.darkoperator.com/blog/2017/10/14/basics-of-tracking-wmi-activity
利用内存破坏实现Python沙盒逃逸
https://mp.weixin.qq.com/s/s9fAskmp4Bb42OYsiQJFaw
BlackBerry Workspaces服务器远程代码执行漏洞分析
https://blog.gdssecurity.com/labs/2017/10/16/remote-code-execution-in-blackberry-workspaces-server.html
ROCA: Vulnerable RSA generation (CVE-2017-15361)
https://crocs.fi.muni.cz/public/papers/rsa_ccs17
BlackOasis APT和利用0day的新目标攻击
https://securelist.com/blackoasis-apt-and-new-targeted-attacks-leveraging-zero-day-exploit/82732/
https://exchange.xforce.ibmcloud.com/collection/9ffcf4ce159e932cfe597695c1f44fe8?from=timeline
Vulnerability Patched in Democratic Donor Database
https://jlospinoso.github.io/responsible%20disclosure/abrade/hacking/2017/10/16/ngpvan-email-subscription.html
Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2
https://papers.mathyvanhoef.com/ccs2017.pdf
Call for WPA3 - what's wrong with WPA2 security and how to fix it
https://github.com/d33tah/call-for-wpa3/blob/master/README.md?t=1
Passionfruit：iOS应用黑盒评估工具
https://github.com/chaitin/passionfruit
windows Kernel pool memory disclosure in nt!RtlpCopyLegacyContextX86
https://bugs.chromium.org/p/project-zero/issues/detail?id=1311
Exploiting on CVE-2016-6787
https://hardenedlinux.github.io/system-security/2017/10/16/Exploiting-on-CVE-2016-6787.html
本文由 安全客 原创发布，如需转载请注明来源及本文地址。
本文地址：http://bobao.360.cn/learning/detail/4553.html