漏洞 Vulnerability VMWare 虚拟环境逃逸漏洞通告 https://www.anquanke.com/post/id/223628 F-Secure披露IBM DataPower Gateway多个拒绝服务漏洞 https://labs.f-secure.com/advisories/ibm-datapower-denial-of-service/ 安全研究 Security Research 2020 BalsnCTF web 部分题解 https://www.anquanke.com/post/id/222675 GEEKPWN2020-baby_kernel的另一种解法 https://www.anquanke.com/post/id/222619 安全事件 Security Incident spotify在泄露事件之后重置了一些用户的密码 https://blog.malwarebytes.com/reports/2020/11/spotify-resets-some-user-logins-after-hacker-database-found-floating-online/ 安全工具 Security Tools D810:IDA Pro的可扩展的反混淆插件 https://eshard.com/posts/d810_blog_post_1/ NetworkSniffer:iOS APP流量记录工具 https://github.com/evilpenguin/NetworkSniffer SharpEDRChecker:一个EDR检测工具 https://github.com/PwnDexter/SharpEDRChecker UAFuzz – 二进制级定向fuzz UAF漏洞的工具 https://www.kitploit.com/2020/11/uafuzz-binary-level-directed-fuzzing.html Wsb-Detect – 用于检测您是否在Windows沙箱中运行的工具 https://www.kitploit.com/2020/11/wsb-detect-tool-to-detect-if-you-are.html RedShell – 通过proxychains执行命令并自动将记录在Cobalt Strike team server上 https://www.kitploit.com/2020/11/redshell-interactive-command-prompt.html