热点概要：LeakedSource似乎已经离线、iOS 10.2的开源越狱、利用白名单模块xss绕过Cisco: WebEx1.0.5实现任意命令执行、CVE-2017-3730：OpenSSL 1.1.0客户端远程拒绝服务(PoC)

国内热词(以下内容部分摘自http://www.solidot.org/)：

---

新春快乐

苹果在中国起诉高通 

意大利天才Luca放出iOS10.2开源越狱

资讯类：

---

Mariusz Mlynski通过Chrome Rewards计划获得32000美刀奖励

https://threatpost.com/high-severity-chrome-vulnerabilities-earn-researcher-32k-in-rewards/123363/

LeakedSource似乎已经离线，目前不清楚是详细情况尚不清楚

http://www.zdnet.com/article/breach-site-leakedsource-raided-by-feds/

Gmail由于安全性考虑不允许附件中添加js文件

http://securityaffairs.co/wordpress/55695/security/javascript-gmail.html

技术类：

---

iOS 10.2的开源越狱

https://github.com/kpwn/yalu102

字符串格式化漏洞利用

https://borgandrew.blogspot.in/2017/01/h1-margin-bottom-0.html

利用白名单模块xss绕过Cisco: WebEx1.0.5实现任意命令执行

https://bugs.chromium.org/p/project-zero/issues/detail?id=1100

CVE-2017-3730：OpenSSL 1.1.0客户端远程拒绝服务(PoC)

https://guidovranken.wordpress.com/2017/01/26/cve-2017-3730-openssl-1-1-0-remote-client-denial-of-service-affects-servers-as-well-poc/

https://github.com/guidovranken/CVE-2017-3730

从裸片上逆向HCF4056 BCD-to-7 解码器和驱动器

http://www.halfbakedmaker.org/blog/hcf4056-reveng

摆脱受限制的网络

https://www.optiv.com/blog/escape-and-evasion-egressing-restricted-networks

PowerOPS框架使用和配置

http://www.blackhillsinfosec.com/?p=5633

USV: 2016(CTF Challenge)writeup 

http://www.hackingarticles.in/hack-usv-vm-ctf-challenge/

深度分析android恶意软件rootnik 

https://blog.fortinet.com/2017/01/24/deep-analysis-of-android-rootnik-malware-using-advanced-anti-debug-and-anti-hook-part-i-debugging-in-the-scope-of-native-layer

http://blog.fortinet.com/2017/01/26/deep-analysis-of-android-rootnik-malware-using-advanced-anti-debug-and-anti-hook-part-ii-analysis-of-the-scope-of-java

逃避内存扫描

https://github.com/Microwave89/rtsectiontest

OpenSSH 6.8 < 6.9 – 'PTY' Privilege Escalation

https://www.exploit-db.com/exploits/41173/

Linux/x86_64 – execve /bin/sh Shellcode (22 bytes)

https://www.exploit-db.com/exploits/41174/

UTF-8非最短形式及编码安全问题

http://www.91ri.org/16617.html

命令行小挑战

https://cmdchallenge.com/

了解常见架构的SSD

https://www.elttam.com.au/blog/playing-with-canaries/