热点概要：Tor启动Bug赏金计划、暗网著名黑市HANSA和Aiphabay被查查封、PandwaRF vs PandwaRF Rogue: 暴力破解攻击、如何分析CTF中逆向和Pwn题目、REcon 2017 议题PPT下载、WPScan 2.9.3 released!、BrowserBackdoor

资讯类：

Tor启动Bug赏金计划

http://thehackernews.com/2017/07/tor-bug-bounty-program.html 

暗网著名黑市HANSA和Aiphabay被查查封

http://thehackernews.com/2017/07/alphabay-hansa-darkweb-markets-seized.html 

技术类：

PandwaRF vs PandwaRF Rogue: 暴力破解攻击

https://www.youtube.com/watch?v=zKXKO7Zsa4Y 

如何分析CTF中逆向和Pwn题目

https://github.com/jaybosamiya/security-notes 

看我如何用假私钥欺骗赛门铁克

https://blog.hboeck.de/archives/888-How-I-tricked-Symantec-with-a-Fake-Private-Key.html 

使用CSP Auditor构建内容安全策略配置 

http://gosecure.net/2017/07/20/building-a-content-security-policy-configuration-with-csp-auditor/ 

Android O中的Seccomp过滤器

https://android-developers.googleblog.com/2017/07/seccomp-filter-in-android-o.html 

REcon 2017 议题PPT下载

https://recon.cx/2017/montreal/slides/ 

Some Ways To Create An Interactive Shell On Windows

http://reverse-tcp.xyz/2017/05/27/Some-Ways-To-Create-An-Interactive-Shell-On-Windows/

Breaking backwards compatibility: a 5 year old bug deep within Window

http://www.triplefault.io/2017/07/breaking-backwards-compatibility-5-year.html 

Windows 10上的Device Guard

https://tyranidslair.blogspot.co.uk/2017/07/device-guard-on-windows-10-s_20.html 

CVE to Exploit – CVE-2017-[0037 and 0059]

https://redr2e.com/cve-to-exploit-cve-2017-0037-and-0059/ 

WPScan 2.9.3 released!

https://github.com/wpscanteam/wpscan/releases/tag/2.9.3 

 MobSF：Mobile Security Framework

https://github.com/MobSF/Mobile-Security-Framework-MobSF

Debugging with GDB

https://azeria-labs.com/debugging-with-gdb-introduction/

GoodSAM – CSRF/Stored XSS Chain Full Disclosure

https://blog.jameshemmings.co.uk/2017/07/17/goodsam-csrfxss-chain-full-disclosure/

BrowserBackdoor

https://github.com/IMcPwn/browser-backdoo

Info Gathering via User Browser: Kunai

https://n0where.net/info-gathering-via-user-browser/

Windows security hole – the “Orpheus’ Lyre” attack explained

https://nakedsecurity.sophos.com/2017/07/19/windows-security-hole-the-orpheus-lyre-attack-explained/