安全工具 Security Tools oledump最新版本发布 https://blog.didierstevens.com/2020/07/19/update-oledump-py-version-0-0-51/ 恶意软件 Malware 警惕新型nginx后门，目前全杀毒软件免杀 https://ti.dbappsecurity.com.cn/informationDetail?id=947&from=timeline 安全研究 Security Research 不可删除的广告软件 https://www.anquanke.com/post/id/211055 基于HTTP的Python脚本木马程序安全分析 https://medium.com/bugbountywriteup/python-http-based-trojan-for-remote-system-forensics-and-privilege-transfer-ae128891b4de 解密 D-Link DIR3060 设备的加密固件 https://0x00sec.org/t/breaking-the-d-link-dir3060-firmware-encryption-static-analysis-of-the-decryption-routine-part-2-2/22260 三星 Android 系统支持的自定义图片格式 Qmage 及远程攻击面分析 https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-1-introduction-to-qmage.html 路径遍历综合指南 https://www.hackingarticles.in/comprehensive-guide-on-path-traversal/ [ExpDev] Vulnserver — Part 4 https://medium.com/@bigb0ss/expdev-vulnserver-part-4-a5529731f0f1 安全报告 Security Report 被低估的混乱军团 -WellMess(APT-C-42)组织网络渗透和供应链攻击行动揭秘 https://mp.weixin.qq.com/s/WmzryWNNJVV7mXABQ1Yu8g