漏洞报告

• 微软和 GitHub OAuth 实施漏洞导致重定向攻击
  https://www.proofpoint.com/us/blog/cloud-security/microsoft-and-github-oauth-implementation-vulnerabilities-lead-redirection

  挖洞技巧

• 一个简单的基于 x86_64 堆栈的缓冲区溢出利用 gdb
  https://oxagast.org/posts/simple-buffer-overflow-exploitation-walkthrough-gdb/

• CVE-2021-42287/CVE-2021-42278 武器化
  https://exploit.ph/cve-2021-42287-cve-2021-42278-weaponisation.html

  挖洞工具

• CVE-2021-44228 Log4j RCE Burp Bounty Pro 配置文件
  https://twitter.com/BurpBounty/status/1469249786092085249

• 用于检测 HTTP 服务器是否可能受到 log4j 0day RCE 攻击的 Python 脚本
  https://gist.github.com/byt3bl33d3r/46661bc206d323e6770907d259e009b6