From da87c50932939b420f3d1ff9ae55c873c1b089a6 Mon Sep 17 00:00:00 2001 From: ubuntu-master <204118693@qq.com> Date: Sun, 21 Sep 2025 12:00:02 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- results/2025-09-21.md | 49 ++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 48 insertions(+), 1 deletion(-) diff --git a/results/2025-09-21.md b/results/2025-09-21.md index c5caebb..dd953cb 100644 --- a/results/2025-09-21.md +++ b/results/2025-09-21.md @@ -3,7 +3,7 @@ > 本文由AI自动生成，基于对安全相关仓库、CVE和最新安全研究成果的自动化分析。 > -> 更新时间：2025-09-21 08:09:31 +> 更新时间：2025-09-21 11:00:32 @@ -12,25 +12,54 @@ ### 🔍 漏洞分析 * [注入frida-gadget绕过Frida检测](https://mp.weixin.qq.com/s?__biz=MzkxNjMwNDUxNg==&mid=2247488825&idx=1&sn=5f915ed79a40d97745660f0e05e56b6c) +* [高危漏洞预警Gotac Statistical Database System身份认证绕过漏洞CVE-2025-10452](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612401&idx=4&sn=fb053ee49c758b3d73c0041ed667615a) +* [浅谈SRC漏洞挖掘中容易出洞的几种姿势](https://mp.weixin.qq.com/s?__biz=Mzk0Mzc1MTI2Nw==&mid=2247496866&idx=1&sn=7e264d1dab049fb1e373562432452353) +* [中孚荣膺CNNVD“2025年度基础软硬件漏洞报送优秀企业”，以技术实力护航网络安全生态](https://mp.weixin.qq.com/s?__biz=MzAxMjE1MDY0NA==&mid=2247512172&idx=1&sn=486c4484dcace4f3f0e1ed895ccd4bf2) + +### 🔬 安全研究 + +* [系列报告现代战争中便携式防空导弹作战应用研究](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247496143&idx=2&sn=d7ad724e6b1f8318365d13d13eeb7be4) +* [华为发布面向智能世界2035十大技术趋势](https://mp.weixin.qq.com/s?__biz=MzkyOTMwMDQ5MQ==&mid=2247520537&idx=1&sn=ca64b2589596b7235558df9ea0bc7b98) +* [30分钟搞定正向代理！Neo-reGeorg+Proxifier从原理到内网访问落地](https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515411&idx=1&sn=66ecee3fdf21efd5c5e9d3d63afa77f1) +* [实战ProcessMonitor进行恶意文件分析](https://mp.weixin.qq.com/s?__biz=MzkxNzY5MTg1Ng==&mid=2247492432&idx=1&sn=798f82bdbeb2dc48ff5d31ff458bf55f) ### 🎯 威胁情报 * [欧洲多个机场遭网络攻击：德国、英国等地受波及 大量航班延误或取消](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247498981&idx=3&sn=58e8cc4fb7303d0c8a7d9a40ec4bc283) +* [云计算下智能船舶通信网络入侵攻击特征提取](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627514&idx=2&sn=1df8a9e34f9586bff08a5d09b1694615) +* [当病毒学会了调用GPT-4，黑客的攻击方式有多离谱？你的AI安全防线可能不堪一击！](https://mp.weixin.qq.com/s?__biz=Mzk1NzM4NzMyMw==&mid=2247485078&idx=1&sn=9ddc10df95aba1b002adb2b02ec2f52e) +* [比传统攻击更阴险！发生在云端的“隐形窃取”，你的防火墙在它面前就是个摆设。](https://mp.weixin.qq.com/s?__biz=MzA4NTY4MjAyMQ==&mid=2447901384&idx=1&sn=806c1e1bdd47992d50fe62b2ca9d053a) +* [朝鲜黑客组织Kimsuky利用ChatGPT伪造军人证件实施新型攻击](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612401&idx=1&sn=49bb9448c8f3c623b5ab92b37426f023) +* [电影里的黑客酷炫操作，在现实中真的可行吗？](https://mp.weixin.qq.com/s?__biz=MzIxODQzOTA5Mg==&mid=2247486796&idx=1&sn=f6b9a9e8449ab8fcb5e9cda135f042ec) +* [欧洲机场陷入连锁中断：值机系统MUSE疑遭网络攻击](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247513936&idx=1&sn=d4007c0a11b6fc0db3eb79db453b8f00) ### 🛠️ 安全工具 * [java 代码审计 - 目录穿越（遍历）](https://mp.weixin.qq.com/s?__biz=MzU5NjYwNDIyOQ==&mid=2247485574&idx=1&sn=e31cab6ad4fe0bf27594465a7fbfe717) * [华夏ERP-v2.3代码审计合集](https://mp.weixin.qq.com/s?__biz=Mzg4NTg5MDQ0OA==&mid=2247488744&idx=1&sn=69125a03726cfe1b5b210765a9aaed08) +* [渗透测试报告生成工具](https://mp.weixin.qq.com/s?__biz=MzkyOTQzNjIwNw==&mid=2247492716&idx=1&sn=bbc7365b105152914c4cf437cac568da) +* [一文读懂大模型如何调用外部工具？（大白话版）](https://mp.weixin.qq.com/s?__biz=MzkxMDc1NzU1Ng==&mid=2247484235&idx=1&sn=b5f253a8d3375e412d95470aa427f3f1) +* [带你解锁编码新世界！-随波逐流CTF编码工具使用教程112 -单表置换密码MonoalphabeticSubstitution](https://mp.weixin.qq.com/s?__biz=MzU2NzIzNzU4Mg==&mid=2247491176&idx=1&sn=d4a4e3933b1e58c3e1a2461079621726) ### 📚 最佳实践 * [资讯广东省政数局就《广东省公共数据资源授权运营管理办法（征求意见稿）》公开征求意见](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247556429&idx=5&sn=35c0adfbcd8074d0f0f88c59ad66fba5) * [观展指南 | 2025世界制造业大会](https://mp.weixin.qq.com/s?__biz=Mzg5OTg5OTI1NQ==&mid=2247491844&idx=1&sn=5e5e83f27a687f006e25600c020454ef) +* [以CPS为核心的船舶信息感知与安全防护](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627514&idx=1&sn=e0b1cbbc9d94721d8c0ef357bf2dd91c) +* [我看《国家网络安全事件报告管理办法》](https://mp.weixin.qq.com/s?__biz=MzI2MzM0NjcxNw==&mid=2247485667&idx=1&sn=fb25ec2ebdf4843b74d8475630a6a8eb) +* [转载2024西湖论剑·数字安全大会第七届数据安全创新实践案例发布会成功举办](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=4&sn=998e2417173221f9ea75a5b708028f84) ### 🍉 吃瓜新闻 * [资讯市场监管总局依法决定对成都快购科技有限公司立案调查](https://mp.weixin.qq.com/s?__biz=MzU1NDY3NDgwMQ==&mid=2247556429&idx=3&sn=f8262be33a183c3c683c02b5d395d4c0) * [韩国电信运营商KT服务器遭入侵 大量用户个人信息泄露](https://mp.weixin.qq.com/s?__biz=MzkxNTI2NTQxOA==&mid=2247498981&idx=2&sn=ef17e73de05ed560ff8c7b90c4f4455e) +* [转载2024数字中国创新大赛数字安全赛道数据安全产业赛圆满落幕](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=1&sn=7cb8a37fecc2f63cc4a7f0400b6a1891) +* [转载晋级决赛附加赛理论赛名单公布|2024数字中国创新大赛数字安全赛道数据安全产业人才积分争夺赛晋级决赛附加赛理论赛名单](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=2&sn=6de1d97fa9e4e9874461937813249beb) +* [转载人才积分争夺赛晋级决赛名单公布|2024数字中国创新大赛数字安全赛道数据安全产业人才积分争夺赛晋级决赛名单](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=3&sn=ee2d1c114a54b066043b352625fcb934) +* [转载2024数字中国创新大赛数字安全赛道数据安全产业人才积分争夺赛比赛手册](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=5&sn=83be911a6c3e21c273afc0642a0565d4) +* [转载比赛经验分享| “2024数字中国创新大赛”数字安全赛道数据安全产业人才积分争夺赛金奖获得者-中国移动磐石队](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=6&sn=2d04cfbe01eb7601c3c439102e930f44) +* [转载经验分享| “2024数字中国创新大赛”数字安全赛道数据安全产业人才积分争夺赛进步奖获得者-iCloudshield战队](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=7&sn=c5a36d44e9f2dec07b56e4ad9fa09a25) +* [转载比赛经验分享| “2024数字中国创新大赛”数字安全赛道数据安全产业人才积分争夺赛进步奖获得者-湖北移动太极队](https://mp.weixin.qq.com/s?__biz=Mzk0NTU0ODc0Nw==&mid=2247494212&idx=8&sn=4b8b1b717f55a22057abde05944ef8d7) ### 📌 其他 @@ -48,6 +77,24 @@ * [100条核心指令，瞬间提升你的Windows效率](https://mp.weixin.qq.com/s?__biz=MzUyNTExOTY1Nw==&mid=2247531796&idx=1&sn=2d48d74ade425bfe568ba5a645b85e47) * [小火矩：一条路边狗的自我修养](https://mp.weixin.qq.com/s?__biz=MzkzMTIyOTA1NA==&mid=2247484338&idx=1&sn=ed9f0138625c114968f1f83502b3c273) * [秦安：受不了就打，东部战区再发视频，收台之前可否先打菲律宾？](https://mp.weixin.qq.com/s?__biz=MzA5MDg1MDUyMA==&mid=2650481355&idx=1&sn=a73a586855e94230952f3c009477afb3) +* [网安原创文章推荐2025/9/20](https://mp.weixin.qq.com/s?__biz=MzAxNzg3NzMyNQ==&mid=2247490447&idx=1&sn=183b6b98a20ec6b21bc193fb9acdbe73) +* [2025年国家网络安全宣传周-人工智能篇](https://mp.weixin.qq.com/s?__biz=MzkyNTY3Nzc3Mg==&mid=2247490533&idx=1&sn=24844d40552d2330830778ace3a2408a) +* [车联网供应链安全与合规培训课程 2025](https://mp.weixin.qq.com/s?__biz=MzU2MDk1Nzg2MQ==&mid=2247627514&idx=3&sn=906fb7c8745c09aa4e6b8e2296784f6b) +* [网络安全软件库限时免费下载](https://mp.weixin.qq.com/s?__biz=MzU4OTg4Nzc4MQ==&mid=2247506613&idx=1&sn=e4d9ddbe584ca6a64dda3d4491f310ce) +* [盘点：安全主管职业中最常见的10个“坑”](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612401&idx=2&sn=68cfe44208b6ef9e7251ff6fe6fde233) +* [GPT-5 Codex与Claude Code，谁才是机械码皇？](https://mp.weixin.qq.com/s?__biz=MzAxMjE3ODU3MQ==&mid=2650612401&idx=3&sn=6730240548ecd502790eba99ba9db3a6) +* [每周网安态势概览20250921036期](https://mp.weixin.qq.com/s?__biz=MzkyMjQ5ODk5OA==&mid=2247513937&idx=1&sn=159dcfabc80f84111cf92b5315232400) +* [走出堑壕：俄乌战争中的战术趋势及其对兵力设计的影响](https://mp.weixin.qq.com/s?__biz=MzkyMjY1MTg1MQ==&mid=2247496143&idx=1&sn=66bfa2ce7d7c3fb9369233fe2bcfe188) +* [arp表找不到目标方向，ping命令不通未来](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247500436&idx=1&sn=07943776335d7112cdd1c1c1b4227cc5) +* [SCI论文一直投不中？保姆级投稿套餐来了！润色、选刊、投稿、返修，最快3个月中刊！](https://mp.weixin.qq.com/s?__biz=MzAwMjQ2NTQ4Mg==&mid=2247500436&idx=2&sn=cfbaa9bd641dcd54e448684fe50dc1ee) +* [上海法院境外变现9万枚FIL币：虚拟货币司法处置的创新里程碑](https://mp.weixin.qq.com/s?__biz=MzIxOTM2MDYwNg==&mid=2247518309&idx=1&sn=2d5a9474d772118bd33ad4cbc036b30a) +* [1.1.1.1：你以为只是个普通 IP，其实大有来头！](https://mp.weixin.qq.com/s?__biz=MzIyMzIwNzAxMQ==&mid=2649470770&idx=1&sn=c42d243c49b8adc26d296c096dbc2b7e) +* [MusicFree音乐播放器手机端v0.6.1更新](https://mp.weixin.qq.com/s?__biz=MzA4MjkzMTcxMg==&mid=2449047669&idx=1&sn=0a35b94213772a3e191e8bd93e5724da) +* [现在行情变了，差别真的挺大。。。](https://mp.weixin.qq.com/s?__biz=MzAwMjA5OTY5Ng==&mid=2247527360&idx=1&sn=7cf049ca9e55ebfc807ad37e9aa62c69) +* [令牌撕裂者：JWT越权一条龙](https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486154&idx=1&sn=7864a1b2b6b3ece08f18e6cde0ef3377) +* [记一次红队内网渗透全流程](https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486154&idx=2&sn=26fd98b9fe90ee800b50c0a6e2a50203) +* [这篇网络安全大学生求职手册！必看！](https://mp.weixin.qq.com/s?__biz=MzkyOTUxMzk2NQ==&mid=2247486154&idx=3&sn=403dd310b211a063120c60f50f797c41) +* [苦日子来了，全体程序员做好长期打算吧！](https://mp.weixin.qq.com/s?__biz=MzIwMzIyMjYzNA==&mid=2247519686&idx=1&sn=e4b6b16cbdbf4b31864e88b94a73ad0f) ## 安全分析 (2025-09-21)