安全工具 Security Tools Infection Monkey – 自动化渗透测试工具 https://github.com/guardicore/monkey 安全研究 Security Research CVE-2020-14882：Weblogic Console 权限绕过深入解析 https://cert.360.cn/report/detail?id=a95c049c576af8d0e56ae14fad6813f4 Linux Rootkits 系列文章 – 如何为 Linux 编写 Rootkit https://xcellerator.github.io/posts/linux_rootkits_01/ CVE-2020-14871：Solaris溢出漏洞分析 https://www.fireeye.com/blog/threat-research/2020/11/critical-buffer-overflow-vulnerability-in-solaris-can-allow-remote-takeover.html 深入研究Windows计划任务及其运行过程 https://nasbench.medium.com/a-deep-dive-into-windows-scheduled-tasks-and-the-processes-running-them-218d1eed4cce Windows虚拟技术武器化 https://vxug.fakedoma.in/papers/VXUG/Exclusive/WeaponizingWindowsVirtualization.pdf 使用/proc/maps在Android App中检测动态加载 https://sayfer.io/blog/dynamic-loading-in-android-applications-with-proc-maps/ 使用SWD在STM32上读写固件 https://cybergibbons.com/hardware-hacking/reading-and-writing-firmware-on-an-stm32-using-swd/ 安全事件 Security Incident Maze勒索软件宣布关闭业务 https://www.bleepingcomputer.com/news/security/maze-ransomware-shuts-down-operations-denies-creating-cartel/ 金条交易商JM Bullion遭遇数据泄露 https://securityaffairs.co/wordpress/110290/cyber-crime/jm-bullion-hacked.html