内网渗透
通过Cloudflare连接到任何TCP服务的隧道
https://iq.thc.org/tunnel-via-cloudflare-to-any-tcp-service
终端对抗
Discord-DLL-Hijacking:通过Excel宏实现Discord自动化DLL劫持
https://github.com/MitchHS/Discord-DLL-Hijacking
Office宏安全性、常用安全配置及绕过方法
https://outflank.nl/blog/2023/04/25/so-you-think-you-can-block-macros/
Trawler:帮助事件响应者发现对手持久性机制的PowerShell脚本
https://github.com/joeavanzato/Trawler
Hunt-Weird-Syscalls:基于ETW识别直接和间接系统调用
https://github.com/thefLink/Hunt-Weird-Syscalls
漏洞相关
CVE-2023-23410:HTTP协议本地提权漏洞分析
https://www.freebuf.com/vuls/364920.html
CVE-2023-21987、CVE-2023-21991:VirtualBox VM漏洞分析
https://qriousec.github.io/post/vbox-pwn2own-2023/
CVE-2023-1585 、CVE-2023-1587:Avast中的特权提升漏洞
https://the-deniss.github.io/posts/2023/04/26/avast-privileged-arbitrary-file-create-on-quarantine.html
云安全
GhostToken:利用GCP应用基础设施在谷歌账户上创建隐形且不可移除的恶意应用
https://astrix.security/ghosttoken-exploiting-gcp-application-infrastructure-to-create-invisible-unremovable-trojan-app-on-google-accounts/
其他
PentestGPT:ChatGPT赋能的自动化渗透测试工具
https://github.com/GreyDGL/PentestGPT
利用ChatGPT搭建蜜罐
https://cyberdeception.substack.com/p/building-a-honeypot-with-chatgpt
人工智能驱动的低误报率安全运营架构
https://towardsdatascience.com/architecture-of-ai-driven-security-operations-with-a-low-false-positive-rate-a33dbbad55b4
使用机器学习对加壳的恶意软件进行分类
https://www.accidentalrebel.com/classifying-malware-packers-using-machine-learning.html
iOS:使用LLDB绕过越狱检测
https://blog.snoopbees.com/ios-bypass-jailbreak-detection-with-lldb-242b65c1ab94
Mergen:MacOS审计和安全检查工具
https://github.com/sametsazak/mergen
RSA 2023:解决网络风险量化问题仍然是安全领导者的关键
https://www.picussecurity.com/resource/blog/rsa-2023-addressing-cyber-risk-quantification-remains-key-for-security-leaders
Botconf 2023视频
https://www.youtube.com/playlist?list=PL8fFmUArVzKhanPzq5HlGAUHhzRB3qDLE
adversary_emulation_library:开源对手模拟计划库,旨在使组织能够根据真实的TTP测试防御能力
https://github.com/center-for-threat-informed-defense/adversary_emulation_library
Outlook添加Authenticator Lite扩展以提高身份认证安全强度
https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/public-preview-authenticator-lite-in-outlook/ba-p/3773139
M01N Team公众号
聚焦高级攻防对抗热点技术
绿盟科技蓝军技术研究战队
官方攻防交流群
网络安全一手资讯
攻防技术答疑解惑
扫码加好友即可拉群
往期推荐