- A+
report
Open Crypto Audit Project TrueCrypt LINK
Android Security 2014 Year in Review LINK
web:
The story of a pentester recruitment LINK
Scriptless attacks via CSS LINK
hacking wordpress LINK
Critical vulnerabilities in JSON Web Token libraries LINK
Website Malware – The SWF iFrame Injector Evolves LINK
二进制：
SQLite prepared statement use-after-free – [A local PHP exploit] LINK
Research Spotlight: FreeSentry Mitigating use-after-free Vulnerabilities LINK
advanced pdf tricks LINK
Finding Holes LINK
移动:
Pawn Storm: Malware on iOS devices? LINK
Instrumenting Android Applications with Frida LINK
A timeline of mobile botnets LINK
other
Using the docker command to root the host LINK
PS: 利用docker特性获取权限
How to own any windows network with group policy hijacking attacks LINK
PS: 内网相关，这家实验室的都是干货。
THE SAD STATE OF SMTP ENCRYPTION LINK
PS: 加密
Recovering deleted records from an SQLite database (updated) LINK
PS: 从sqlite中恢复数据
poweliks command line confusion LINK
Detection, analysis and display of attacks using Honeypots LINK
PS: 基于蜜罐的数据分析
Optical Delusions: A Study of Malicious QR Codes in the Wild LINK
PS: 恶意二维码
Enough With the Salts: Updates on Secure Password Schemes LINK
PS: 加密
会议
SyScan 2015
Hacking With Pictures LINK
Modern Binary Exploitation LINK
PS:大量二进制干货
