安全工具 Security Tools SSRFIRE – 自动SSRF探测器 https://github.com/micha3lb3n/SSRFire TScan – web扫描工具 https://github.com/dyboy2017/TScan ShellcodeLoader https://github.com/knownsec/shellcodeloader 安全研究 Security Research WAPDropper Android恶意软件研究 https://research.checkpoint.com/2020/enter-wapdropper-subscribe-users-to-premium-services-by-telecom-companies/ 细说Saltstack SALT命令注入 https://www.thezdi.com/blog/2020/11/24/detailing-saltstack-salt-command-injection-vulnerabilities Egregor RaaS利用Cobalt Strike和Rclone https://labs.sentinelone.com/egregor-raas-continues-the-chaos-with-cobalt-strike-and-rclone/ .Net 反序列化原理学习 https://paper.seebug.org/1418/ 如何实现一款 shellcodeLoader https://paper.seebug.org/1413/ CVE-2015-1641及利用样本分析 https://www.anquanke.com/post/id/224196 恶意软件 Malware DarkIRC恶意软件利用WebLogic漏洞 https://www.bleepingcomputer.com/news/security/critical-oracle-weblogic-flaw-actively-exploited-by-darkirc-malware/ 安全事件 Security Incident 法国制药分销平台泄漏1.7+TB数据 https://cybernews.com/security/french-pharmaceuticals-distribution-platform-leaking-1-7-tb-confidential-data/