恶意软件 Malware 金眼狗组织水坑活动:针对Telegram用户的定向攻击 https://mp.weixin.qq.com/s/b-0Gv_l-nnks-RnSdXBFBw 安全研究 Security Research 当Frida来“敲”门 https://www.freebuf.com/articles/mobile/252882.html 一次文件上传对Token的绕过 https://mp.weixin.qq.com/s/MSS_pBu-5Dbo7iLLitMBkA 安全工具 Security Tools ShowStopper – Anti-Debug测试工具 https://www.kitploit.com/2020/11/showstopper-anti-debug-tricks.html Hetty – 用于安全研究的HTTP工具集 https://www.kitploit.com/2020/11/hetty-http-toolkit-for-security-research.html JSMon – JavaScript Change Monitor for BugBounty http://feedproxy.google.com/~r/PentestTools/~3/lgYTGY_97wo/jsmon-javascript-change-monitor-for.html 安全资讯 Security Information 特朗普竞选团队的网站泄露了选民数据 https://www.bleepingcomputer.com/news/security/trump-lawsuit-site-to-report-rejected-votes-leaked-voter-data/ Pwn2Own Tokyo结束，6个设备上的23个漏洞总共获得136500美元奖金 https://www.zerodayinitiative.com/blog/2020/11/8/pwn2own-tokyo-live-from-toronto-day-three-results-and-master-of-pwn 三连冠传奇！360多个“全球首破”斩获81.25万美金，三度称霸天府杯，再夺最具价值产品破解一等奖！ https://mp.weixin.qq.com/s/g1pN3DXb20harsD1K2OjlQ