2017/3/19 資安晨摘

資安新聞：
1.Telepresence Robots Patched Against Data Leaks

2.Samsung Leaking Customer Information


惡意軟體分析：
1.Acronym: M is for Malware

2.针对银行钓鱼事件的分析


PT姿勢：
1.reGeorg+Proxifier使用

2.PCI DSS Penetration Testing Guidance

3.mysql-unsha1 - Authenticate against a MySQL server without knowing the cleartext password

4.免杀的艺术：PE文件后门的植入（二）

5.Rails SQL injection cheat sheet


防禦姿勢：
1.Preventing cross-site attacks using same-site cookies


Mobile安全：
1.Teardown of a Recent Variant of Android/Ztorg (Part 1)

2.Teardown of Android/Ztorg (Part 2)

3.Building Threat Models for the Mobile Ecosystem


硬體安全：
1.HackRF 入门 -- GPS欺骗、GSM嗅探

2.Analyzing and Deobfuscating FlokiBot Banking Trojan

3.USaBUSe Linux updates

4.USB Pratirodh XML External Entity Injection Vulnerability


學習資源：
1.CanSecWest 2017


CTF：
1.VolgaCTF 2017 Teaser - Octaves & Notes writeup


工具：
1.sslsplit - Transparent SSL/TLS interception