【移动安全】记一次APP双向认证抓包 https://www.secpulse.com/archives/117194.html

开源情报之美国关键基础设施全方位调研 https://mp.weixin.qq.com/s/m9oOiQiCeY7V_2jEDBSL5w

打破UEFI固件验证码安全模式 https://blog.reversinglabs.com/blog/breaking-uefi-firmware-authent...

OpenWRT项目论坛被攻击，论坛用户信息被窃取 https://www.zdnet.com/article/openwrt-reports-data-breach...

CVE-2020-1456： SHAREPOINT 2019 XSS漏洞复现 https://slashcrypto.org/2021/01/15/CVE-2020...

CVE-2021-3113：Netsia-SEBA认证绕过漏洞分析 https://www.pentest.com.tr/exploits/Netsia-SEBA-...

CVE-2020-5144：SonicWallVPN权限提升漏洞分析 https://cymptom.com/cve-2020-5144-sonicwall-glo...

CVE-2020-26233：GIT 命令行工具远程代码执行漏洞分析 https://blog.blazeinfosec.com/attack-of-the-clo...

Shazam地理位置漏洞,单击链接即可窃取用户的准确位置 https://ash-king.co.uk/blog/Shazlocate-abusing-CVE-20...

分而治之：一种绕过NextGen AV的技术 https://theevilbit.github.io/posts/divide_and_conquer/

FiberHome HG6245D路由器多个漏洞分析 https://pierrekim.github.io/blog/2021-01-12-fiberhome-o...

ShadowMove：套接字劫持技术，巧妙的隐藏与C2的连接 https://adepts.of0x.cc/shadowmove-hijack-socket/