专注Web及移动安全[红日安全89期] – 作者:Setup

渗透测试，web安全动态

-安全文章

-安全漏洞

-Web安全

-代码审计

标签：安全动态 Web安全 渗透测试 安全工具 代码审计 视频分享

安全动态

[Security_week] Linux应急响应之工具篇

https://mp.weixin.qq.com/s/YFHLCVHVIB7hDeCVZaunbg

[Security_week] 企业安全建设的体系思考与落地实践

https://mp.weixin.qq.com/s/h0J81LX7GUqSGAsSxksHnw

[Security_week] 记一次应急中发现的诡异事件

https://mp.weixin.qq.com/s/XanFgX9Py_q8WaD14VC9Fw

[Security_week] 堡垒机哲学史：从哪里来？到哪里去？是什么？

https://mp.weixin.qq.com/s/rDmTdJ05cVE_jJiqKhywnw

[Security_week] ApacheTomca远程执行代码（CVE-2019-0232）漏洞浅析和复现

https://mp.weixin.qq.com/s/7lO7t6iReGxx6CWksI8D2Q

[Security_week] PHP_XXE攻击与防御安全实践

https://mp.weixin.qq.com/s/VldRAHtNwu1NFBLgppIAVg

[Security_week] CVE-2019-2729：Oracle WebLogic 反序列化漏洞预警

https://mp.weixin.qq.com/s/ArZqB_s-d8ZExeRMFnd4sQ

[Security_week] 专属| Linux曝出拒绝服务漏洞

https://mp.weixin.qq.com/s/fO4ufsjw7PMSkUFNPUqNOQ

[Security_week] MySQL日志安全分析技巧

https://mp.weixin.qq.com/s/uT6_2H2cV32ghvxnFxw2Fw

[Security_week] MSSQL日志安全分析技巧

https://mp.weixin.qq.com/s/_IlvfpuixxJoETLryWGZ-Q

[Security_week] 企业网络安全之移动应用安全

https://mp.weixin.qq.com/s/MzOdoseBR_gfDxUnK3NNew

[Security_week] 制定网络安全事件应急响应预案

https://mp.weixin.qq.com/s/WlDvwUhpdjH5mJ5HMT_Lqw

[Security_week] 企业网络安全之代码审计

https://mp.weixin.qq.com/s/_7YCZBJOfE2DkNkTLK8tbQ

[Security_week] 落实网络安全事件应急预案

https://mp.weixin.qq.com/s/Rldc4Ym2fFvFv6KlJz4Ssg

[Security_week] 企业网络安全之办公网络安全

https://mp.weixin.qq.com/s/9L3pIZ2fJy63e0_U2ZueQA

[Security_week] 企业网络安全之安全管理体系

https://mp.weixin.qq.com/s/65iO12z8YkfHPrjKACprDA

[Security_week] 信息安全漏洞周报（2019年第23期）

https://mp.weixin.qq.com/s/_U7RGAirn6Dz8BodzOVZkA

Web安全

[Web_Security] 由 CSRF 引起的 XSS 漏洞小结

https://mp.weixin.qq.com/s/EF2mUDgSWHtGnVVjuXT1_A

[Web_Security] 一篇文章由浅入深了解MSSQL注入

https://mp.weixin.qq.com/s/01j8URfEvkfAk2W_HJcluw

[Web_Security] Webshell免杀套路

https://mp.weixin.qq.com/s/xhI6hOjN7eTyAiQIPud1Yg

[Web_Security] 记一次真实的邮件钓鱼演练

https://mp.weixin.qq.com/s/K1ydmJhVnuYC3016d-QT3w

[Web_Security] Dns注入

https://mp.weixin.qq.com/s/CftVKtffPcf7bgvO0eV17Q

[Web_Security] 打死也不写远程函数执行高危漏洞

https://mp.weixin.qq.com/s/ID50AVv7ECDlUTnVoSV3bw

[Web_Security] SRC逻辑漏洞挖掘浅谈

https://mp.weixin.qq.com/s/wp7kE8p5ugEQVmAHFMBa_g

[Web_Security] XSS绕过实战练习

https://mp.weixin.qq.com/s/4m1p1NyOhT0nlStyeYsXlw

[Web_Security] XSS绕过姿势

https://mp.weixin.qq.com/s/aHOjd21G1mseofQV4yrxbQ

渗透测试

[Penetration_test] 基于 MSF 发现内网存活主机第二季

https://mp.weixin.qq.com/s/fJ2vwjkycFAJgeLLQB2qmw

[Penetration_test] 基于 MSF 发现内网存活主机第四季

https://mp.weixin.qq.com/s/7t1fncvVor4YSnjstVEmJw

[Penetration_test] 基于 MSF 发现内网存活主机第五季

https://mp.weixin.qq.com/s/nZAqFMU3S1b2_zcWI23gtA

[Penetration_test] 记一次渗透过程中用sqlmap写shell

https://mp.weixin.qq.com/s/qmp23H7wliazjjlpzuZ6_A

[Penetration_test] 零基础漏洞挖掘

https://mp.weixin.qq.com/s/OnPbtwb_JDf0DAP_b6Z1wQ

安全工具

[Security_tools] Legion 一款网络渗透工具

https://mp.weixin.qq.com/s/1mS0EtjoZwFLFyQgi1k3Qg

[Security_tools] 深入了解SQLMAP API

https://mp.weixin.qq.com/s/eOqURmczSBYInm2SPTx4QA

[Security_tools] 使用Py编写一个子域名爆破工具

https://mp.weixin.qq.com/s/mjwHDIoxHs2V7pNMV9R7fg

代码审计

[Code_audit] 审计某系统从解密到GetShell

https://mp.weixin.qq.com/s/yHTJF3evRj_CZwfSe-GFdQ

视频分享

[Video_share] 深度解析隐私数据保护及应急响应

https://www.bugbank.cn/live/view.html?id=112048

[Video_share] 步步为营之游走于内网

https://www.bugbank.cn/live/view.html?id=112196

来源：freebuf.com 2019-07-18 11:29:25 by: Setup