漏洞 Vulnerability ThinkPHP6.0任意文件创建Getshell https://www.freebuf.com/vuls/247227.html 通达OA11.6 preauth RCE 0day分析 https://drivertom.blogspot.com/2020/08/oa116-preauth-rce-0day.htmls Apache shiro 权限绕过漏洞汇总 https://mp.weixin.qq.com/s/E4eEReDhqEFPWN6AN-N10A 安全工具 Security Tools BloodHound 使用指南 https://mp.weixin.qq.com/s?__biz=MzIxNTQxMjQyNg==&mid=2247485206&idx=1&sn=090d35aef8c3ed6b2735310680e72298&scene=21 BurpSuite复用目标站点的js代码插件 https://github.com/thinkoaa/JSFlash/ 安全资讯 Security Information 影像IT巨头柯尼卡美能达遭新型勒索软件攻击 https://netsecurity.51cto.com/art/202008/624130.htm 大发棋牌安全情报 https://www.anquanke.com/post/id/214343 安全研究 Security Research 浅谈哥斯拉内存Shell技术 https://mp.weixin.qq.com/s/D0ACXtPsj91chP4zmGpUjQ Jenkins的后门实现（密码窃取,命令执行） https://mp.weixin.qq.com/s/C002y-fBZVFv-dQztdC6Bg Mimikatz源码免杀 https://www.moonsec.com/archives/2903 工控安全分析闲谈 https://www.anquanke.com/post/id/214983 2020HW值守部分关注点 https://www.freebuf.com/sectool/247518.html