每日安全动态推送(03-02)

渗透技巧 2年前 (2022) admin
665 0 0
Tencent Security Xuanwu Lab Daily News


• [Malware] DiskKill/HermeticWiper and NotPetya (Dis)similarities:
https://marcoramilli.com/2022/03/01/diskkill-hermeticwiper-and-notpetya-dissimilarities/

   ・ NotPetya 与 DiskKill 恶意软件的代码相似度分析 – Jett


• [Linux] Exploiting CVE-2021-26708 (Linux kernel) with sshd:
https://hardenedvault.net/2022/03/01/poc-cve-2021-26708.html

   ・ Exploiting CVE-2021-26708 (Linux kernel) with sshd – Jett


• Triaging A Malicious Docker Container:
https://sysdig.com/blog/triaging-malicious-docker-container/

   ・ 如何分析恶意 Docker 容器 – Jett


• [Tools] SSL/TLS MITM with Python:
https://yrck.nl/posts/ssl-mitm.html

   ・ SSL/TLS MITM with Python – Jett


• 如何使用机器账户进行域维权:
https://tttang.com/archive/1448/

   ・ 如何使用机器账户进行域维权. – lanying37


• Installation:
https://github.com/cxnder/ktool

   ・ MachO 文件编辑及分析工具,支持 ObjC Header Dump – Jett


• [Malware] IsaacWiper and HermeticWizard: New wiper and worm targeting Ukraine:
https://www.welivesecurity.com/2022/03/01/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine/

   ・ IsaacWiper and HermeticWizard: New wiper and worm targeting Ukraine – Jett


• 5 New Vulnerabilities Discovered in PJSIP Open Source Library:
https://jfrog.com/blog/jfrog-discloses-5-memory-corruption-vulnerabilities-in-pjsip-a-popular-multimedia-library/

   ・ 即时通讯 App 使用的开源多媒体库 PJSUA 被发现多个高危漏洞 – Jett


• [PDF] https://www.s3.eurecom.fr/docs/fuzzing22_fioraldi_report.pdf:
https://www.s3.eurecom.fr/docs/fuzzing22_fioraldi_report.pdf

   ・ 剖析 AFL 的内部实现机制以及性能调优 – Jett


• Hack The Box Blog – CVE-2022-0185: A Case Study:
https://www.hackthebox.com/blog/CVE-2022-0185:_A_case_study

   ・ Linux 内核 CVE-2022-0185 漏洞的发现和利用过程 – Jett


* 查看或搜索历史推送内容请访问:
https://sec.today

* 新浪微博账号:腾讯玄武实验室
https://weibo.com/xuanwulab


原文始发于微信公众号(腾讯玄武实验室):每日安全动态推送(03-02)

版权声明:admin 发表于 2022年3月2日 下午12:26。
转载请注明:每日安全动态推送(03-02) | CTF导航

相关文章

暂无评论

您必须登录才能参与评论!
立即登录
暂无评论...