漏洞 Vulnerability CVE-2019-3396 Confluence Velocity SSTI漏洞浅析 https://xz.aliyun.com/t/8135 Struts2 S2-059 漏洞分析 https://www.anquanke.com/post/id/214843 shiro < 1.6.0的认证绕过漏洞分析(CVE-2020-13933) https://www.anquanke.com/post/id/214964 安全工具 Security Tools 无状态子域名爆破工具 https://github.com/knownsec/ksubdomain 安全资讯 Security Information MITRE发布今年Top25安全问题 https://www.bleepingcomputer.com/news/security/mitre-shares-this-years-top-25-most-dangerous-software-bugs/ Google修复了可被利用发送钓鱼邮件的安全问题 https://www.bleepingcomputer.com/news/security/google-fixes-gmail-bug-allowing-attackers-to-send-spoofed-emails/ 安全研究 Security Research Go二进制文件逆向分析从基础到进阶——综述 https://www.anquanke.com/post/id/214940 智能合约中的那些后门漏洞 https://paper.seebug.org/1300/ 域用户的密码永不过期属性在渗透中运用 https://mp.weixin.qq.com/s/e-oJZAPBswObNDvGctAHwg 以OpenRASP为基础-展开来港港RASP的类加载 https://xz.aliyun.com/t/8148 利用 ZoomEye 追踪多种 Redteam C&C 后渗透攻击框架 https://www.anquanke.com/post/id/214897