Secwiki weekly (issue 309)

Safety information

[regulations] review of network security policies and regulations in 2019 https://www.anquanke.com/post/id/197556

Safety technology

[Web security] 23 ways to collect and organize files for download https://mp.weixin.qq.com/s/bmA73FSjVPqpiaacz-btAQ

[web security] att & CK red team evaluation real-world shooting range vulnstackhttps://mp.weixin.qq.com/s/vmuqdsbzzxh6698r8ihoyw

[web security] java code audit Introduction (1) https://www.anquanke.com/post/id/197641

[vulnerability analysis] code injection in workflow leading to SharePoint rce (cve-2020-0646) https://www.mdsec.co.uk/2020/01/code-injection-in-workflow-leading-to-sharepoint-rce-cve-2020-0646/

[data mining] industrial knowledge map: experience and challenges https://mp.weixin.qq.com/s/4fdpik3eteng-ri tgm0a

[web security] record the continuous penetration test of forgery bypass of a signature verification mechanism https://xz.aliyun.com/t/7143

[vulnerability analysis] remote cloud execution (RCE): vulnerability analysis in azure Cloud Architecture (Part 1) https://www.anquanke.com/post/id/197713

[data mining] redefining "detection" and "analysis" from the perspective of products https://mp.weixin.qq.com/s/oq3t1fskahedfwznpcixsw

[vulnerability analysis] some exploration on the authentication mechanism of Zimbra mail service https://mp.weixin.qq.com/s/u-p6 ﹐ srzby1bbejqclmf-a

[malicious analysis] emergency response checklist: emergency response guide https://github.com/thelsa/emergency-response-checklist

[magazine] sec wiki weekly (issue 308) https://www.sec-wiki.com/weekly/308

[malicious analysis] dailyioc: IOC from articles, tweets for archives https://github.com/strangealintel/dailyioc

[tools] iotshark - monitoring and analyzing IOT trafficttps://github.com/sahilmgandhi/iotshark

[data mining] the third plan in the final of the first Chinese nl2sql challenge + code https://github.com/beader/tianchi_nl2sql

[forensic analysis] decrypt WhatsApp encrypted media fileshttps://github.com/ddz/whatsapp-media-decrypt

Original address of this issue: secwiki weekly (issue 309)