专注Web及移动安全[红日安全102期] – 作者:Setup

专注Web及移动安全[红日安全102期]

渗透测试，web安全动态

---

-安全文章

-安全漏洞

-Web安全

-代码审计

---

标签：安全动态 Web安全 渗透测试 安全工具 代码审计

安全动态

[Security_week] ThinkCMF框架上的任意内容包含漏洞

https://mp.weixin.qq.com/s/F73gx1VpsOwZc055vYwSQQ

[Security_week] 发现一个只收 0day 和通用漏洞的平台

https://mp.weixin.qq.com/s/nTEl88K3XkwSazX3PfhDag

[Security_week] CVE-2019-14287 linux sudo root 权限绕过漏洞复现

https://mp.weixin.qq.com/s/bb6Hd3JdYiLilqdP_-INtA

[Security_week] Joomla 3.4.6-RCE漏洞复现

https://mp.weixin.qq.com/s/WE0myqIsmUnYdgn2AZAkwQ

[Security_week] CVE-2019-2890：WebLogic 反序列化漏洞预警

https://mp.weixin.qq.com/s/yt4SEcrk1nGoBUZgvtJp8A

[Security_week] 泛微e-cology OA SQL注入漏洞预警

https://mp.weixin.qq.com/s/yR05kn9DyiftlR7eCK1xhQ

[Security_week] 网络安全指南相关汇总

https://mp.weixin.qq.com/s/ayKZ32j_BFC51EbJhOW04A

[Security_week] Linux | 搭建Web服务器

https://mp.weixin.qq.com/s/X6u3SBhZ7A54-uczToD9Kw

[Security_week] 公安机关“净网2019”网络安全相关典型案例

https://mp.weixin.qq.com/s/w4NDq0FsZmIxdpX3LBWVTQ

[Security_week] 网络安全之漏洞挖掘相关汇总

https://mp.weixin.qq.com/s/d31M0QgIjL6DNZNKl9BMvw

[Security_week] Linux | 构建文件共享服务器

https://mp.weixin.qq.com/s/wf0TYx7q6oju_2JnPwl8ZQ

[Security_week] 网络安全之信息收集相关汇总

https://mp.weixin.qq.com/s/DRM6Quk-Fm5kvdeX5kbmAw

[Security_week] Linux | 保护Web服务器

https://mp.weixin.qq.com/s/221I34rYBJk612BiJe3_mQ

[Security_week] 信息安全漏洞周报（2019年第40期）

https://mp.weixin.qq.com/s/xjLf1B0ablGf6ec2kFka9w

---

---

Web安全

[Web_Security] 巧转webshell

https://mp.weixin.qq.com/s/i-MSZhFsvOL94vZnlZFKww

[Web_Security] 一处反序列化任意文件写入的漏洞分析

https://mp.weixin.qq.com/s/4bOmS**EzUa-OemYrxo3jw

[Web_Security] 我对SQL注入的认知

https://mp.weixin.qq.com/s/bY8gcI-M7vwsXSDrK78zRg

[Web_Security] 线下赛AWD常规防御思路之web篇

https://mp.weixin.qq.com/s/zzyPj_-Ieep3aS-_0magqA

[Web_Security] APP 如何进行HTTPS双向认证抓包

https://mp.weixin.qq.com/s/VXhmp8rO3cS7M3Ex9c5yqA

[Web_Security] Shiro反序列化漏洞分析

https://mp.weixin.qq.com/s/CL08Q3BqEjZacTa4dRtV2g

[Web_Security] FCKeditor文件上传漏洞及利用

https://mp.weixin.qq.com/s/xkQu0g9kYNsGFhmQ01wJdg

[Web_Security] 当英雄联盟钓鱼网站遇到脚本黑客

https://mp.weixin.qq.com/s/_EolgQp3olzYmVOSMbhkyA

---

---

渗透测试

[Penetration_test] 利用Lcx内网转发

https://mp.weixin.qq.com/s/l1_Ez5JiOJ_UpOmWkNlPZg

[Penetration_test] phpStudy远程RCE漏洞复现以及沦陷主机入侵溯源分析

https://mp.weixin.qq.com/s/G4ynxZwris7ia6ZdjHbnkg

[Penetration_test] 从宽字节注入认识PDO的原理和正确使用

https://mp.weixin.qq.com/s/Zbt6bMzRSIfDXbTzkEfQ7A

[Penetration_test] vulnhub靶场系列-bulldog

https://mp.weixin.qq.com/s/KI2rbGbaQAmUYpmB0SgxZA

[Penetration_test] 从linux网站搭建到日志服务审计渗透溯源

https://mp.weixin.qq.com/s/R4QbRSZ2JHP4-lWN-FnEcQ

[Penetration_test] 记一次对钓鱼网站的多次渗透

https://mp.weixin.qq.com/s/RRIEvNnRK6qfhbw5Xswutg

[Penetration_test] PC客户端(CS架构)如何实现抓包

https://mp.weixin.qq.com/s/ba4xCjPX2006lLpQH1xOPA

[Penetration_test] 国内开源靶场VulnStack发布

https://mp.weixin.qq.com/s/EFOA7yr8k8OEqDDdsWDfUQ

[Penetration_test] 记一次渗透某XX站

https://mp.weixin.qq.com/s/WbOwcpTeNO42VfY5QwLNzw

[Penetration_test] 渗透某骗子网站，X毛都没有，骗我九十九

https://mp.weixin.qq.com/s/C3CYSLnS5Wt_54AgxN1uCQ

---

---

安全工具

[Security_tools] Enumdb 一款数据库暴力破解和后期开发工具

https://mp.weixin.qq.com/s/wWU7sO-QJKK2HruYSHxO9g

[Security_tools] OWASP ZAP 一款扫描工具

https://mp.weixin.qq.com/s/-wp-FVF–6xsUOeaZAiK_g

[Security_tools] Truegaze：一款针对AndroidiOS应用源码的静态分析工具

https://mp.weixin.qq.com/s/LT1Je7tO1NfgoouQFjQvMA

[Security_tools] 最全勒索解密工具等你来拿

https://mp.weixin.qq.com/s/z7h1KDCjQ4SAFlRWCeQ0gA

---

---

代码审计

[Code_audit] 小白代码审计开山篇

https://mp.weixin.qq.com/s/50vzFVfvsAOIJjw-6y9wpA

来源：freebuf.com 2019-10-24 10:40:04 by: Setup