漏洞 Vulnerability Windows 10在打开特定路径时会导致BSOD崩溃 https://www.bleepingcomputer.com/news/security/windows-10-bug-causes-a-bsod-crash-when-opening-a-certain-path/ CVE-2020-6418 V8漏洞分析笔记 https://xz.aliyun.com/t/9014 恶意软件 Malware 利用Ghidra 逆向移动应用程序 https://medium.com/bugbountywriteup/how-to-use-ghidra-to-reverse-engineer-mobile-application-c2c89dc5b9aa SolarWinds供应链攻击持续跟踪进展 https://mp.weixin.qq.com/s/CR6Iy3nTejR9Tfm4QCJxNw MSBuild 后门技术分析 https://www.a12d404.net/ranting/2021/01/17/msbuild-backdoor.html 安全研究 Security Research 我是如何窃取数以百万计的Google帐户中的数据 https://blog.usejournal.com/how-i-stole-the-data-in-millions-of-peoples-google-accounts-aa1b72dcc075 对Fuzzing 的一些理解和基本知识 https://h0mbre.github.io/Fuzzing-Like-A-Caveman-5/ XNU 内核堆安全特性解读 https://mp.weixin.qq.com/s/LOf_W9QRDds_yHO1aVSg9Q HTB: RopeTwo ——Writeup https://0xdf.gitlab.io/2021/01/16/htb-ropetwo.html VirtualBox 6.1 虚拟机逃逸——Part1 https://secret.club/2021/01/14/vbox-escape.html Android渗透测试：WebView攻击 https://www.hackingarticles.in/android-penetration-testing-webview-attacks/ TOR路由协议的统计和组合分析 https://dustri.org/b/paper-review-statistical-and-combinatorial-analysis-of-the-tor-routing-protocol.html 当前代码遗留的一些问题 https://mariusbancila.ro/blog/2021/01/15/modernizing-legacy-code/ 安全工具 Security Tools feroxbuster：网站资源暴力枚举工具 https://github.com/epi052/feroxbuster