安全报告 Security Report Torchwood远控木马“鱼目混珠”，终被识破打回原形 https://mp.weixin.qq.com/s/Lumkd4vz1yJVhTUbMVRyuA 安全研究 Security Research Java 反序列化工具 gadgetinspector 初窥 https://paper.seebug.org/1034/ 从之前的站点泄漏LastPass凭据 https://cxsecurity.com/issue/WLB-2019090116 Microsoft Exchange – 权限提升 https://pentestlab.blog/2019/09/16/microsoft-exchange-privilege-escalation/ ORACLE WEBLOGIC补丁分析 https://www.thezdi.com/blog/2019/9/16/patch-analysis-examining-a-missing-dot-dot-in-oracle-weblogic 英特尔芯片中的另一个侧信道 https://www.schneier.com/blog/archives/2019/09/another_side_ch.html Jenkins RCE漏洞分析汇总 https://xz.aliyun.com/t/6361 区块链之智能合约入门 https://xz.aliyun.com/t/6354 服务端模板注入 https://0x00sec.org/t/explaining-server-side-template-injections/16297 安全资讯 Security Information 研究人员在十几个小型SOHO路由器和NAS设备中发现了许多漏洞 https://securityaffairs.co/wordpress/91375/iot/soho-sohopelessly-broken-2.html