安全工具 Security Tools Flux-Keylogger-具有Web面板的现代Javascript键盘记录器 https://www.kitploit.com/2020/04/flux-keylogger-modern-javascript.html pypykatz-用纯Python实现的Mimikatz https://github.com/skelsec/pypykatz 安全资讯 Security Information 黑客在黑客论坛上出售了2.67亿Facebook记录 https://www.hackread.com/hacker-forum-sell-267-million-facebook-records/ 流行的Webkinz世界在线儿童游戏遭黑客攻击，2300万用户信息泄露 https://securityaffairs.co/wordpress/101886/data-breach/webkinz-data-breach.html 安全研究 Security Research 打造对抗仿真实验室 https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/ CVE-2020-8835: LINUX内核特权通过不适当的EBPF程序验证升级 https://www.thezdi.com/blog/2020/4/8/cve-2020-8835-linux-kernel-privilege-escalation-via-improper-ebpf-program-verification 远控免杀从入门到实践之白名单（113个）总结篇 https://www.freebuf.com/articles/system/232074.html 滥用HTTP路径正常化和缓存中毒窃取Rocket League帐户 https://samcurry.net/abusing-http-path-normalization-and-cache-poisoning-to-steal-rocket-league-accounts/ 恶意软件 Malware 勒索软件:双重勒索 https://research.checkpoint.com/2020/ransomware-evolved-double-extortion/ 安全报告 Security Report 我多年来发现的Google Maps API 安全漏洞 https://medium.com/bugbountywriteup/google-maps-api-not-the-key-bugs-that-i-found-over-the-years-781840fc82aa