每日攻防资讯简报[Feb.12th]

1.Session: 具有最小元数据泄漏的端到端加密对话的模型

https://getsession.org/wp-content/uploads/2020/02/Session-Whitepaper.pdf

2.Linux系统中本地ASLR永无止境的问题

https://blog.blazeinfosec.com/the-never-ending-problems-of-local-aslr-holes-in-linux/

3.使用Docker和Socat托管并隐藏C&C

https://khast3x.club/posts/2020-02-09-C2-Protection-Socat-Docker/

4.Blind SSRF exploitation

https://lab.wallarm.com/blind-ssrf-exploitation/

5.Windows Defender驱动WdFilter研究, Part1

https://n4r1b.netlify.com/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/

6.高级二进制文件反混淆, 课程材料, 共7课

https://github.com/malrev/ABD

7.Flare-On 2019 solutions

https://www.youtube.com/playlist?list=PL8bwawVZNV0ydaubtWyhMeHZHoIENW-43

8.帮助Chrome团队解决一个很难复现的bug,此bug可能导致代码执行和浏览器沙箱逃逸

https://googleprojectzero.blogspot.com/2020/02/several-months-in-life-of-part1.html

https://googleprojectzero.blogspot.com/2020/02/several-months-in-life-of-part2.html

9.Metasploit CTF 2020 - Five of HeartsWriteup

https://iwantmore.pizza/posts/metasploit-ctf-2020-five-of-hearts.html

10.利用CVE-2019-8449实现Jira用户名枚举

https://www.doyler.net/security-not-included/more-jira-enumeration

1.研究人员发现Shadowsocks协议漏洞, 可打破Shadowsocks流密码的机密性, 通过重定向攻击可以轻松解密所有加密的shadowsocks数据包, 而且, 中间人攻击可以实时修改流量,就像根本没有加密一样

https://github.com/edwardz246003/shadowsocks

2.在线音乐平台SoundCloud的多个漏洞公告

https://www.checkmarx.com/blog/checkmarx-research-soundcloud-api-security-advisory

3.MS Office Excel Ordinal43函数代码执行漏洞(CVE-2020-0759)

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0968

4.MS Media FoundationIMFASFSplitter::Initialize函数代码执行漏洞(CVE-2020-0738)

https://talosintelligence.com/vulnerability_reports/TALOS-2019-0946

5.Interfaces.d to RCE

https://research.nccgroup.com/2020/02/10/interfaces-d-to-rce/

1.黑客组织Outlaw在最近的攻击中扩大了攻击目标, 更新了挖矿软件的版本

https://blog.trendmicro.com/trendlabs-security-intelligence/outlaw-updates-kit-to-kill-older-miner-versions-targets-more-systems/

2.勒索软件利用带漏洞的技嘉主板驱动, 删除受害系统安装的安全软件