每周蓝军技术推送（2024.4.13-4.19）

https://johnstawinski.com/2024/04/15/fixing-typos-and-breaching-microsofts-perimeter/

https://posts.specterops.io/lsa-whisperer-20874277ea3b

https://github.com/EvanMcBroom/lsa-whisperer

https://github.com/DosX-dev/obfus.h

https://github.com/Meowmycks/LetMeowIn

https://github.com/marco-liberale/PasteBomb

https://github.com/Cerbersec/pyMetaTwin

https://jsecurity101.medium.com/understanding-etw-patching-9f5af87f9d7b

https://redsiege.com/blog/2024/04/using-microsoft-dev-tunnels-for-c2-redirection/

https://github.com/MythicAgents/sliver/blob/main/blog/blog.md

https://github.com/Faisal-P27/WAREED-DNS-C2

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/redline-stealer-a-novel-approach/

https://www.openwall.com/lists/oss-security/2024/04/18/4

https://twitter.com/oss_security/status/1781002176589897854

https://hakaisecurity.io/cve-2024-21338-from-admin-to-kernel-through-token-manipulation-and-windows-kernel-exploitation/research-blog/

https://github.com/Nero22k/Exploits/tree/main/Windows/CVE-2024-21338

https://github.com/hakaioffsec/CVE-2024-21338

https://blog.theori.io/chaining-n-days-to-compromise-all-part-3-windows-driver-lpe-medium-to-system-12f7821d97bb

https://whereisk0shl.top/post/a-trick-the-story-of-cve-2024-26230

https://www.zerodayinitiative.com/blog/2024/4/17/cve-2024-20697-windows-libarchive-remote-code-execution-vulnerability

https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html

https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-2.html

https://www.akamai.com/blog/security-research/critical-vulnerability-create-uri-remote-code-execution

https://twitter.com/buptdsb/status/1780950890792550585

https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html

https://labs.watchtowr.com/palo-alto-putting-the-protecc-in-globalprotect-cve-2024-3400/

https://msrc.microsoft.com/blog/2024/04/toward-greater-transparency-adopting-the-cwe-standard-for-microsoft-cves/

https://aws.amazon.com/cn/about-aws/whats-new/2024/04/amazon-cloudfront-oac-lambda-function-url-origins/

https://github.com/AdnaneKhan/ActionsTOCTOU

https://fin3ss3g0d.net/index.php/2024/04/08/evilgophishs-approach-to-advanced-bot-detection-with-cloudflare-turnstile/

https://krebsonsecurity.com/2024/04/twitters-clumsy-pivot-to-x-com-is-a-gift-to-phishers/

https://www.stedi.com/blog/stedi-discovered-an-aws-access-vulnerability

https://www.microsoft.com/en-us/security/blog/2024/04/11/how-microsoft-discovers-and-mitigates-evolving-attacks-against-ai-guardrails/

https://arxiv.org/abs/2404.08793

https://github.com/prompt-security/ps-fuzz

https://mlcommons.org/2024/04/mlc-aisafety-v0-5-poc/

https://wiki.hego.tech/llm-security/garak-a-generative-ai-red-teaming-tool

https://github.com/mrwadams/attackgen

https://arxiv.org/abs/2404.04132

https://www.0ffset.net/reverse-engineering/capstone-resolving-stack-strings/

https://cloud.google.com/blog/topics/public-sector/google-public-sector-achieves-top-secret-and-secret-cloud-authorization?hl=en