每日安全动态推送(02-18)

Tencent Security Xuanwu Lab Daily News

• Never, Ever, Ever Use Pixelation for Redacting Text:
https://bishopfox.com/blog/unredacter-tool-never-pixelation

   ・ 利用 Unredacter 工具还原被马赛克打码的文字 – Jett

• Bypassing software update package encryption – extracting the Lexmark MC3224i printer firmware (part 1):
https://research.nccgroup.com/2022/02/17/bypassing-software-update-package-encryption-extracting-the-lexmark-mc3224i-printer-firmware-part-1/

   ・ 绕过安装包更新机制，提取 Lexmark MC3224i 打印机的固件 – Jett

• JAVA 协议安全笔记-JNDI篇:
https://tttang.com/archive/1441/

   ・ JAVA 协议安全笔记-JNDI篇. – lanying37

• [Attack] APT组织Lorec53（洛瑞熊）近期针对乌克兰的大规模网络攻击活动:
http://blog.nsfocus.net/apt-lorec53-20220216/

   ・ APT组织Lorec53(洛瑞熊)近期针对乌克兰的大规模网络攻击活动. – lanying37

• [Pentest] A primer on DCSync attack and detection:
https://www.alteredsecurity.com/post/a-primer-on-dcsync-attack-and-detection

   ・ DCSync 攻击与检测方法入门介绍. – lanying37

• exploiting CVE-2019-2215 | cutesmilee’s blog:
https://cutesmilee.github.io/kernel/linux/android/2022/02/17/cve-2019-2215_writeup.html

   ・ Android Binder CVE-2019-2215 漏洞的利用 – Jett

• HyperGuard – Secure Kernel Patch Guard: Part 2 – SKPG Extents – Winsider Seminars & Solutions Inc.:
https://windows-internals.com/hyperguard-secure-kernel-patch-guard-part-2-skpg-extents/?utm_source=rss&utm_medium=rss&utm_campaign=hyperguard-secure-kernel-patch-guard-part-2-skpg-extents

   ・ Windows 内核保护机制 HyperGuard 的实现研究 – Jett

• The Most Memory Safe Buffer Overflow in Rust!:
https://gist.github.com/rexim/38c176fe4669ef83db69aca9909d7b7f

   ・ Rust 语言的 Buffer Overflow 漏洞代码实例 – Jett

• [Vulnerability] Zabbix – A Case Study of Unsafe Session Storage:
https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage

   ・ Zabbix – A Case Study of Unsafe Session Storage – Jett

• Attack Surface Monitoring using Open-Source Intelligence:
https://infosecwriteups.com/attack-surface-monitoring-using-open-source-intelligence-90415e863e93?source=rss—-7b722bfd1b8d—4

   ・ Attack Surface Monitoring using Open-Source Intelligence. – lanying37

• Exploiting Jenkins build authorization:
https://medium.com/cider-sec/exploiting-jenkins-build-authorization-22bf72926072

   ・ Jenkins 默认的 Build Authorization 配置存在缺陷 – Jett

• Tutorial: Kubernetes Vulnerability Scanning & Testing With Open Source:
https://www.conjur.org/blog/tutorial-kubernetes-vulnerability-scanning-testing-with-open-source/

   ・ 利用 Kubesploit & KubiScan 开源工具扫描 Kubernetes 的漏洞 – Jett

* 查看或搜索历史推送内容请访问：
https://sec.today

* 新浪微博账号：腾讯玄武实验室
https://weibo.com/xuanwulab

原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(02-18)