每日安全动态推送(08-30)

Tencent Security Xuanwu Lab Daily News

• README.md:
https://github.com/evilsocket/jscythe

   ・ jscythe – 滥用 node.js inspector 机制实现任意 JS 代码执行 – Jett

• Blind exploits to rule WatchGuard firewalls:
https://www.ambionics.io/blog/hacking-watchguard-firewalls

   ・ 利用 5 个漏洞 Hacking WatchGuard Firewalls，实现 pre-auth RCE – Jett

• A technical analysis of Pegasus for Android – Part 1 – CYBER GEEKS:
https://cybergeeks.tech/a-technical-analysis-of-pegasus-for-android-part-1/

   ・ CyberGeeks 对 Pegasus Android 平台样本的技术分析 – Jett

• [Windows] Limitations:
https://blog.78researchlab.com/53e53729-d728-4635-a58d-08ad8a1f68e4

   ・ Windows IKE Extension 今年 1 月份修复漏洞的分析 – Jett

• +Malicious Cookie Stuffing Chrome Extensions with 1.4 Million Users:
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/malicious-cookie-stuffing-chrome-extensions-with-1-4-million-users/

   ・ 5 款总下载量超过 140 万的 Chrome 浏览器扩展被发现存在恶意 cookie 注入行为，攻击者通过该方法获取电商网站抽成 – Jett

• PureCrypter Loader持续活跃，已经传播了10多个其它家族:
https://blog.netlab.360.com/purecrypter/

   ・ PureCrypter Loader 持续活跃，已经传播了 10 多个其它家族 – Jett

• Smart App Control Internals (Part 1):
https://n4r1b.com/posts/2022/08/smart-app-control-internals-part-1

   ・ Windows App 运行控制机制 Smart App Control 的实现分析 – Jett

• [iOS] Part 1 – SingPass RASP Analysis:
https://www.romainthomas.fr/post/22-08-singpass-rasp-analysis/

   ・ 以 SingPass 应用为例分析 iOS RASP 应用自保护的实现以及绕过方法 – Jett

• 通过动态链接库绕过反病毒软件 Hook – Break JVM:
https://paper.seebug.org/1953/

   ・ 通过动态链接库绕过反病毒软件 Hook – Break JVM – lanying37

• oss-security – N-day exploit for CVE-2022-2586: Linux kernel nft_object UAF:
https://www.openwall.com/lists/oss-security/2022/08/29/5

   ・ Linux 内核 nft_object UAF（CVE-2022-2586）漏洞利用 – Jett

• Announcing Pwn2Own Toronto 2022 and Introducing the SOHO Smashup!:
https://www.zerodayinitiative.com/blog/2022/8/29/announcing-pwn2own-toronto-2022-and-introducing-the-soho-smashup

   ・ ZDI 将在今年 12 月份在加拿大多伦多举办 Pwn2Own 比赛，攻击目标包括多款手机和 IoT 设备 – Jett

• ATT&CK中的攻与防——T1059:
https://tttang.com/archive/1718/

   ・ ATT&CK中的攻与防——T1059 – lanying37

* 查看或搜索历史推送内容请访问：
https://sec.today

* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab

原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(08-30)