README_202102.md

数据--所有

数据--年度

202102 信息源与信息类型占比

微信公众号 推荐

nickname_english	weixin_no	title	url
网络安全观	SecurityInsights	美国国家安全局发布零信任安全模型指南	https://mp.weixin.qq.com/s/UsClBKw4Fglcn8ludJtRKQ
白日放歌须纵9	Day_Dreamer_BR	从“产品模式”到“运营模式”	https://mp.weixin.qq.com/s/mIbwVj3oVEnippj5YGkNTA
网安思考	gh_e53abd003964	美军网络空间作战理论体系初探	https://mp.weixin.qq.com/s/Im-bacvc_1GGvLPtRspicw
逐日实验室	gh_093e54310392	红蓝对抗之邮件伪造	https://mp.weixin.qq.com/s/tOOBZ1aC6SsjslCM70WKBQ
张三丰的疯言疯语	zsfnotes	漏洞管理的“新药”	https://mp.weixin.qq.com/s/5Y-3r1KuJgCbNrWUGoKq0w
安全研究GoSSIP	GoSSIPSJTU	NDSS 2021 参会小记—2月22日论文报告	https://mp.weixin.qq.com/s/LI49ioKYMksguQMqKH1Rcw
虎符智库	TT_Thinktank	“十四五”时期网络安全的五大转变	https://mp.weixin.qq.com/s/ONUYz1z4Z-6ueFwTZk8TZA
我的安全学习笔记	gh_3b8ed48b5c15	安利一款还不错的开源工具—Nuclei	https://mp.weixin.qq.com/s/C_-FRZMqF4ifzlx-ij4iIQ
DevSecOps联盟	idevsecops	软件安全能力成熟度评估实践	https://mp.weixin.qq.com/s/_s5m8WxlwnoI4-Ea8SJfCA
思想花火	ttfirework	做信息安全BP的一些感悟	https://mp.weixin.qq.com/s/qygwMIGX3PhbnKuPwQqfUQ
小迪随笔	i-little-monster	苹果隐私十年史：变与不变（1）突变与营销	https://mp.weixin.qq.com/s/qqQ1BgFshie288wZEWGaEw
小强说	xiaoqiangcall	浅析Course of Action应对措施	https://mp.weixin.qq.com/s/ikHga0fGa0euwGYohv534g
全栈网络空间安全	cyber_securlty	甲方安全体系建设历程的思考	https://mp.weixin.qq.com/s/YTNWqXkcqTbjhdcIGpxE6w
网络安全应急技术国家工程实验室	NELCERT	FreakOut分析报告	https://mp.weixin.qq.com/s/jQ6npq2C8PprnDQMXTtP0g
安全牛	aqniu-wx	百位董事长/CEO/总裁：预见2021网络安全细分领域发展	https://mp.weixin.qq.com/s/XBGy2xG3-GYL7023lAjCyg
腾讯安全应急响应中心	tsrc_team	基于威胁情报周期模型的APT木马剖析	https://mp.weixin.qq.com/s/CYxGbdRGDfXGY8wupnGbrw
国家网络威胁情报共享开放平台	CNTIC2017	2020年勒索软件分析	https://mp.weixin.qq.com/s/yrtU2_VxEt94DWF4eQWujA
FreeBuf	freebuf	邮件钓鱼入门到入土	https://mp.weixin.qq.com/s/hhBs3wryDCum1DrD6CxeRw
锦行信息安全	jeeseensec	技术分享 , 锦行杯比赛 Writeup	https://mp.weixin.qq.com/s/mYCDsbERsgph5zu-4-lyKQ
网络空间安全军民融合创新中心	jmrh1226	2020年全球国防网络空间情况综述（武器技术篇-下）	https://mp.weixin.qq.com/s/kd6YahJcqB2NWq3IP2XztQ
百度安全实验室	BaiduX_lab	基于DTLS协议的反射攻击深度分析	https://mp.weixin.qq.com/s/Ye_AuMDLQotv3M5rv9OmOA
安全学术圈	secquan	AVATAR：通过修复静态分析冲突的模式来修复语义错误	https://mp.weixin.qq.com/s/w9SjsI3WVmghVVQGwtkyUQ
赵武的自留地	gh_86033a4f818d	让网络空间测绘技术不再那么飘忽不定	https://mp.weixin.qq.com/s/lr39F9kNOfHlMimgymzVwg
ChaMd5安全团队	chamd5sec	2021HWS冬令营线上赛固件安全-WriteUp	https://mp.weixin.qq.com/s/fwbFMHuVdX-FNa7dB5mw0Q
微步在线研究响应中心	gh_c108d4d389bf	Metasploit 的 payload 特征	https://mp.weixin.qq.com/s/C8jHikFag_CulJIcq0filg
字节跳动安全中心	TouTiaoSec	安卓Native层共享库fuzzing技术思路及实践	https://mp.weixin.qq.com/s/eqYj385SGCUo5errVx2CZg
潇湘信安	xxxasec	记一次理财杀猪盘渗透测试案例	https://mp.weixin.qq.com/s/utqGvCTEFS3hQ_GttWHVNw
鸟哥谈云安全	cnbirdsecintel	云安全架构连载之一-Azure整体架构及安全亮点详解	https://mp.weixin.qq.com/s/QNBlsBJaWNXsZLEuNRQcvQ
看雪学院	ikanxue	python编译后的pyd爆破	https://mp.weixin.qq.com/s/JvQ38Isf1xXcGOe5wDgXWw
威胁棱镜	THREAT_PRISM	基于复杂图的 DDoS 攻击团伙发现与跟踪	https://mp.weixin.qq.com/s/xz3XDHVg2jzMc6Sv-o8YTw
vivo千镜安全实验室	gh_54ff3f871510	智能终端隐私防跟踪技术实践	https://mp.weixin.qq.com/s/II5q4tYyZ3JUD4vHy1Fx6A
FCC30+	Fcc_198905	2020网络金融黑产研究报告	https://mp.weixin.qq.com/s/B_pREKw4SJQjpbVbQLl33w

私人github账号 推荐

github_id	title	url	p_url	p_profile	p_loc	p_company	p_repositories	p_projects	p_stars	p_followers	p_following	repo_lang	repo_star	repo_forks
r4j0x00	上周推送的 sudo 溢出漏洞的 Exploit	https://github.com/r4j0x00/exploits/tree/master/CVE-2021-3156	https://github.com/r4j0x00	I make exploits	None	None	14	0	0	0	0	Python,JavaScript,C++	228	68
ossf	Security Scorecards - 开源组件安全健康度衡量工具	https://github.com/ossf/scorecard	None	None	None	None	0	0	0	0	0	Go,Python	153	21
maddiestone	Project Zero Maddie Stone 对 2020 年野外漏洞利用情况的综述	https://github.com/maddiestone/ConPresentations/blob/master/Enigma2021.StateOf0day.pdf	http://twitter.com/maddiestone		None	None	4	0	0	0	0	Python	949	122
kean	有开发者开源的一款 macOS、iOS 日志可视化和日志共享工具	https://github.com/kean/Pulse	http://kean.blog	Software Engineer. Prev @mailru. Moscovite. Likes porridge with 🍓	New York	None	28	0	0	0	0	Objective-C,Swift	0	0
jonasstrehle	supercookie: Browser fingerprinting via favicon!	https://github.com/jonasstrehle/supercookie	https://jonas.strehles.info	20yo , Friedrichshafen	Germany	Working from home	1	0	0	0	0	HTML	1300	64
jimtangshfx	MilenageTest - 验证 3G/4G/5G 鉴权验证过程是否正确的工具	https://github.com/jimtangshfx/MilenageTest	None	Jim Tang	TX,US	None	5	0	0	0	0	Python,Shell,HTML,C++	28	11
golang	Go 语言社区计划在 1.17 版本增加对 Go Fuzz 测试的支持	golang/go#44551	None	None	None	None	0	0	0	0	0	Go,Python,TypeScript,HTML	0	0
ffffffff0x	f8x: 红/蓝队环境自动化部署工具	https://github.com/ffffffff0x/f8x	None	None	None	None	0	0	0	0	0	Shell,Java,HTML	0	0
diversenok	基于 Windows Native API 与电源管理组件交互	https://github.com/diversenok/Powercfg	http://diversenok.github.io	Windows security researcher & system programmer. Student.	Russia / The Netherlands	None	19	0	0	0	0	Pascal,C	4300	746
darvincisec	AntiDebugandMemoryDump - Anti-Debug and Anti-Memory Dump for Android	https://github.com/darvincisec/AntiDebugandMemoryDump	https://darvincitech.wordpress.com	Security Researcher	Singapore	None	13	0	0	0	0	C,Java,Smali	135	36
SySS-Research	WireBug - 用于 VoIP 协议渗透测试的工具	https://github.com/SySS-Research/WireBug	None	None	None	None	0	0	0	0	0	C,Shell,Java,Python,C++,Lua,Verilog,C#	0	0
NiuTrans	中文综述文章列表（自然语言处理&机器学习）	https://github.com/NiuTrans/CNSurvey	None	None	None	None	0	0	0	0	0	TeX,C++	1800	623
BishopFox	GadgetProbe - Java 反序列化漏洞 Gadget Probe 工具	https://github.com/BishopFox/GadgetProbe	None	None	None	None	0	0	0	0	0	C,Shell,Java,Objective-C++,Python,JavaScript,Perl,Go	1300	190
AltraMayor	gatekeeper: First open-source DDoS protection system	https://github.com/AltraMayor/gatekeeper	https://lnkd.in/dvGQusq		Boston, MA	Digirati	8	0	0	0	0	C	1400	105
0xdea	INFILTRATE20 会议研究员 0xdea 关于 Solaris 操作系统多个漏洞研究的分享	https://github.com/0xdea/raptor_infiltrate20	https://0xdeadbeef.info/	You cant argue with a root shell.	Italy	None	14	0	0	0	0	Python,C,JavaScript,Assembly	648	155

medium 推荐

title	url
威胁情报自学指南 Part 1	http://medium.com/katies-five-cents/a-cyber-threat-intelligence-self-study-plan-part-1-968b5a8daf9a
Windows API IsDebuggerPresent 的实现分析	http://medium.com/ax1al/isdebuggerpresent-internals-7be4ea642d33
Facebook Messenger Desktop App Arbitrary File Read	http://medium.com/@renwa/facebook-messenger-desktop-app-arbitrary-file-read-db2374550f6d
How I was able to Turn a XSS into a Account Takeover	http://pullerjsecu.medium.com/how-i-was-able-to-turn-a-xss-into-a-account-takeover-ae0c478640e7
Detecting the Leverage of INF-SCT Fetch & Execute Techniques	http://0xbandar.medium.com/detecting-the-leverage-of-inf-sct-fetch-execute-techniques-beca55e24d50?source=social.tw

medium 推荐

title	url
A Cyber Threat Intelligence Self-Study Plan: Part 1	https://medium.com/katies-five-cents/a-cyber-threat-intelligence-self-study-plan-part-1-968b5a8daf9a

知乎 推荐

title	url
恶意代码检测的本质性思考	https://zhuanlan.zhihu.com/p/352004681

论坛 推荐

title	url
JAVA安全基础（二）-- 反射机制	https://xz.aliyun.com/t/9117
DA14531芯片固件逆向系列（2）- 操作系统底层机制分析	https://xz.aliyun.com/t/9186
菜菜鸡的初体验之内网渗透	https://xz.aliyun.com/t/9190
一次内网挖矿病毒的应急响应	https://xz.aliyun.com/t/9180
BlackHat2020 议题 「When TLS Hacks You」 复现	https://xz.aliyun.com/t/9177

日更新程序

python update_daily.py