1、在OSX上编译非osx ida pro插件

http://www.surrendercontrol.com/2016/01/compiling-non-osx-ida-pro-plugins-on-os.html

2、paypal远程代码执行使用java反序列化

http://artsploit.blogspot.jp/2016/01/paypal-rce.html

3、分析NanoLocker恶意欺诈软件

http://blog.malwareclipboard.com/2016/01/nanolocker-ransomware-analysis.html

4、swift反向工程:深入对象

http://rotlogix.com/2016/01/25/digging-into-swift-objects/

5、RWMC:使用powershell遍历内存中的账户信息

https://github.com/giMini/RWMC

6、当使用tor的时,为了匿名隐私你不要做的事情(不要使用google和Torrent)

http://www.digitalmunition.me/2016/01/tor-anonymity-things-not-to-do-while-using-tor/

7、linux发行版本gentoo的地址随机化

https://wiki.gentoo.org/wiki/AddressSanitizer

8、nfssvc system call的整形溢出

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206626

9、瞄准少数活动家长达一年的间谍活动

http://researchcenter.paloaltonetworks.com/2016/01/scarlet-mimic-years-long-espionage-targets-minority-activists/

10、ruby on rails安全漏洞列表

https://groups.google.com/forum/#!forum/rubyonrails-security

11、osx上简单使用docker

https://blog.andyet.com/2016/01/25/easy-docker-on-osx/

12、CVE-2015-8651 (Flash up to 20.0.0.228/235) 和 Exploit Kits

http://malware.dontneedcoffee.com/2016/01/cve-2015-8651.html

13、通过构造一个没有公钥的BER文件导致系统死机

http://www.openwall.com/lists/oss-security/2016/01/25/2

14、针对逆向工程的防御

https://medium.com/@againsthimself/in-defense-of-reverse-engineering-e07fe19b26c#.70qh865yz

15、混淆的MIME文件

https://isc.sans.edu/diary/Obfuscated+MIME+Files/20643

16、Grehack 2015安全会议的在线视频

https://www.youtube.com/playlist?list=PL7_XhIpUqISnoe1hpTZrnbSYbM76WUQBF

17、针对联想thinkpad笔记本的Linux DMA攻击POC

https://github.com/Cr4sh/UEFI_boot_script_expl

18、使用GNU toolchian进行嵌入式开发

http://www.bravegnu.org/gnu-eprog/