每日安全动态推送(09-27)

Tencent Security Xuanwu Lab Daily News

• [Tools] What does it do?:
https://github.com/DavidBuchanan314/monomorph

   ・ MD5-Monomorphic Shellcode Packer – 向可执行文件中插入 Shellcode 但保持 MD5 不变的工具 – Jett

• [Defend] Hunting for Unsigned DLLs to Find APTs:
https://bit.ly/3CkHPi9

   ・ 基于未签名 DLL 加载的行为事件检测 APT – Jett

• 最新CS RCE曲折的复现路:
https://mp.weixin.qq.com/s/l5e2p_WtYSCYYhYE0lzRdQ

   ・ 最新 CS RCE 曲折的复现路（CVE-2022-39197） – Jett

• In the Hunt for the Auto Login Setup Process:
https://www.offensive-security.com/offsec/in-the-hunt-for-the-auto-login-setup-process/

   ・ 研究员对 macOS Auto Login 自动登录配置过程的研究 – Jett

• Tell Me Where You Live and I Will Tell You About Your P@ssw0rd: Understanding the Macrosocial Factors Influencing Password’s Strength:
https://www.gosecure.net/blog/2022/09/26/tell-me-where-you-live-and-i-will-tell-you-about-your-password-understanding-the-macrosocial-factors-influencing-passwords-strength/

   ・ 不同国家以及语言环境对用户设置的密码强度的影响 – Jett

• [Windows] Microsoft Windows Shift F10 Bypass and Autopilot privilge escalation:
https://k4m1ll0.com/ShiftF10Bypass-and-privesc.html

   ・ 利用 Shift F10 键在装有 Windows Autopilot 的环境中实现提权 – Jett

• [Tools] Starter Guide to BJT Transistors (ElectroBOOM101 – 011):
https://youtu.be/2uowMENwiHQ

   ・ BJT 晶体管入门指南教程视频(ElectroBOOM101 – 011) – lanying37

• Druva inSync for Mac Local Privilege Escalation:
https://imhotepisinvisible.com/druva-lpe/

   ・ 企业云同步工具 Druva inSync macOS 本地提权漏洞分析 – Jett

• Every authorization has its black: tackling privilege escalation in macOS:
https://hitcon.org/2022/en/agenda/2492d003-197e-44ac-bfe0-135bf5cd1707/

   ・ HITCON 会议关于 macOS 授权认证机制以及提权漏洞的议题 – Jett

• Vultron: A Protocol for Coordinated Vulnerability Disclosure:
https://insights.sei.cmu.edu/blog/vultron-a-protocol-for-coordinated-vulnerability-disclosure/

   ・ Vultron – 多方漏洞合作披露的协议 – Jett

• [Malware] Erbium Stealer Malware Report:
https://www.cyfirma.com/outofband/erbium-stealer-malware-report/

   ・ Erbium Stealer 恶意软件分析报告 – lanying37

* 查看或搜索历史推送内容请访问：
https://sec.today

* 新浪微博账号： 腾讯玄武实验室
https://weibo.com/xuanwulab

原文始发于微信公众号（腾讯玄武实验室）：每日安全动态推送(09-27)