2016/12/26 資安晨摘

資安新聞：

1.2016年Exploit Kits漏洞TOP 10分析 by FreeBuf_dawner


PT姿勢：

1.Unrestricted File Upload Testing by Aptive


漏洞分析：

1.分享插件AddThis導致的DOM XSS by zhchbin

2.OpenSSH: agent protocol permits loading arbitrary libraries by jannh

3.OpenSSH: LPE via forwarded unix domain sockets if privsep is disabled by jannh


概念教學：

1.Threat model for firmware security by hardenedlinux


工具：

1.Scanners-Box by We5ter

2.rext by j91321

3.惡意程序分析利器PowerShellArsenal by FreeBuf_zusheng