1月8日技术类安全热点

一个硬件安全工程师眼中的Meltdown

https://media.weibo.cn/article?id=2309404193352517074988

Meltdown variant 3a的PoC（在用户态dump出ARM系统寄存器）
https://github.com/lgeek/spec_poc_arm

In-Spectre-Meltdown：检测Meltdown & Spectre漏洞的工具
https://github.com/Viralmaniar/In-Spectre-Meltdown

shimit：实现Golden SAML攻击的工具
https://github.com/cyberark/shimit

IPFS—http的终极杀手

https://weibo.com/ttarticle/p/show?id=2309404179043187580696

文件上传漏洞扫描及利用工具
https://github.com/almandin/fuxploider

Setting up a DNS Firewall on steroids

https://navytitanium.github.io/DNSMasterChef/

Very vulnerable ARM application (CTF风格的利用教程)

https://github.com/bkerler/exploit_me

Realmode Assembly – Writing bootable stuff – Part 6

https://0x00sec.org/t/realmode-assembly-writing-bootable-stuff-part-6/4915

Emotet Grinch又回归了

https://blog.minerva-labs.com/the-emotet-grinch-is-back

恶意软件反编译和脱壳

https://0x00sec.org/t/malware-decompiling-and-unpacking-loda-keylogger/4896

视频：https://www.youtube.com/watch?v=DwC6VKN0CvM

样本下载：https://www.hybrid-analysis.com/sample/9300e6bbdb4bd12e1a1f58a5a50759811d39437e3cbe2769164d5d04e199656c