1、分析利用 CVE-2021-40444 MSHTML 漏洞的攻击 

https://www.microsoft.com/security/blog/2021/09/15/analyzing-attacks-that-exploit-the-mshtml-cve-2021-40444-vulnerability/

2、CVE-2021-36965：Windows WLAN 自动配置服务远程代码执行漏洞

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-36965

3、CVE-2021-38647 的 RCE 概念证明 (OMIGOD) 

https://github.com/horizon3ai/CVE-2021-38647

4、CVE-2021-38112：AWS WorkSpaces 远程代码执行

https://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/

5、海康威视 IP 摄像机/NVR 固件中的未经身份验证的远程代码执行 (RCE) 漏洞 (CVE-2021-36260)

https://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html 

6、CVE-2021-26084：最近被利用的 Atlassian Confluence OGNL 注入漏洞的详细信息

https://www.thezdi.com/blog/2021/9/21/cve-2021-26084-details-on-the-recently-exploited-atlassian-confluence-ognl-injection-bug

1、白帽战士集结｜12家SRC邀您加入双11安全保卫战

https://mp.weixin.qq.com/s/x8G3H3_i3f-tv56ACht1aA

2、DXMSRC & i春秋｜10倍奖励 国庆挖洞大作战 ！

https://mp.weixin.qq.com/s/rQLVsGIb1-WpVnj_yCDOeA

3、网易SRC来助力你的国庆假期

https://mp.weixin.qq.com/s/zYNrItExqw6xD1K9mvARWQ

1、ByteCTF

https://2021bytectf.xctf.org.cn/

2、深育杯

https://sy.edu.sangfor.com.cn/

1、研究人员汇总了勒索软件团伙滥用的漏洞列表

https://www.bleepingcomputer.com/news/security/researchers-compile-list-of-vulnerabilities-abused-by-ransomware-gangs/ 

2、Web 应用程序安全学习路线图 

https://securityflow.io/roadmap/ 

3、PetitPotam – NTLM 中继到 AD CS

https://pentestlab.blog/2021/09/14/petitpotam-ntlm-relay-to-ad-cs/ 

4、OWASP Top 10 2021

https://owasp.org/Top10/

5、Web应用组件自动化发现的探索 

https://security.tencent.com/index.php/blog/msg/201 

6、知识星球《漏洞百出》最新 20条 Topic 

https://github.com/CHYbeta/Vuln100Topics20

1、Go365:An Office365 User Attack Tool 

https://github.com/optiv/Go365 

2、一个为渗透测试与CTF而制作的工具集，主要实现一些加解密的功能

https://github.com/ffffffff0x/BerylEnigma

3、CuiRi:一款红队专用免杀木马生成器 

https://github.com/NyDubh3/CuiRi 

4、一款适用于红蓝对抗中的仿真钓鱼系统

https://github.com/xiecat/goblin

5、About-Attack:关于 Github 中红队向工具 / 资源的手册 

https://github.com/lintstar/About-Attack

1、Anonymous 声称已经入侵了备受争议的网络托管服务提供商 Epik

https://securityaffairs.co/wordpress/122263/hacktivism/anonymous-hacked-epik-provider.html 

2、黑客泄露了 500,000 个 Fortinet VPN 帐户的密码

https://www.bleepingcomputer.com/news/security/hackers-leak-passwords-for-500-000-fortinet-vpn-accounts/

3、Microsoft Exchange Autodiscover 漏洞泄露 100K Windows 凭据

https://www.bleepingcomputer.com/news/microsoft/microsoft-exchange-autodiscover-bugs-leak-100k-windows-credentials/ 

4、1.06 亿泰国游客数据在网上泄露 

https://securityaffairs.co/wordpress/122418/data-breach/thailand-visitors-leaked-online.html