国内外安全技术分享（2019年11月18日）

1、天府杯赛况

360TQL

2、Exploit Joomla! 3.4.6 - Remote Code Execution

https://sploitus.com/exploit?id=EDB-ID:47524

3、ffuf v0.12 releases: Fast web fuzzer written in Go

Source: https://github.com/ffuf

4、Examining and exploiting android vendor binder services – part1

https://blog.flanker017.me/examining-and-exploiting-android-vendor-binder-services-part1/

5、OWASP CSRF Vulnerability Code Review

https://www.peerlyst.com/posts/owasp-csrf-vulnerability-code-review-26-motasem-hamdan?utm_source=twitter&utm_medium=social&utm_content=peerlyst_post&utm_campaign=peerlyst_shared_post