​​10 real-world stories of how we’ve compromised CI/CD pipelines:
https://research.nccgroup.com/2022/01/13/10-real-world-stories-of-how-weve-compromised-ci-cd-pipelines/

・ 10 real-world stories of how we’ve compromised CI/CD pipelines  – Jett

IOCTLDump:
https://github.com/Kharos102/IOCTLDump

・ IOCTLDump - 用于 hook 和 dump 其他驱动注册的 IOCTLS 的工具 – Jett

Overview:
https://github.com/foniod/redbpf

・ RedBPF - 用于 Build 和运行 BPF/eBPF 模块的工具 – Jett

[Android] RCE in Adobe Acrobat Reader for android(CVE-2021-40724):
https://hulkvision.github.io/blog/post1/

・ 适用于 Android 平台的 Adob​​e Acrobat Reader 中RCE漏洞利用(CVE-2021-40724). – lanying37

2032401 – (CVE-2021-4122) CVE-2021-4122 cryptsetup: disable encryption via header rewrite:
https://bugzilla.redhat.com/show_bug.cgi?id=2032401

・ CVE-2021-4122 cryptsetup: disable encryption via header rewrite – Jett

Decrypting Qakbot’s Encrypted Registry Keys:
https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/decrypting-qakbots-encrypted-registry-keys/

・ 针对Qakbot的恶意软件的加密注册表项分析研究. – lanying37

A Deep Dive into The Grief Ransomware’s Capabilities:
https://lifars.com/knowledge-center/a-deep-dive-into-the-grief-ransomwares-capabilities/

・ Lifars 对 Grief 勒索软件的研究报告 – Jett

Destructive malware targeting Ukrainian organizations:
https://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/

・ 微软威胁情报中心发现针对乌克兰组织的攻击行动 – Jett

探索高版本 JDK 下 JNDI 漏洞的利用方法:
https://tttang.com/archive/1405/

・ 探索高版本 JDK 下 JNDI 漏洞的利用方法. – lanying37

GitHub - opsdisk/the_cyber_plumbers_handbook: Free copy of The Cyber Plumber's Handbook:
https://github.com/opsdisk/the_cyber_plumbers_handbook

・ “The Cyber Plumber's Handbook”，一本专注 ssh 隧道与端口转发在渗透测试中应用的电子书 – Jett

[Browser] Exploiting IndexedDB API information leaks in Safari 15:
https://fingerprintjs.com/blog/indexeddb-api-browser-vulnerability-safari-15/

・ Exploiting IndexedDB API information leaks in Safari 15 – Jett

LKVM Escape:
https://www.kalmarunionen.dk/writeups/2021/hxp-2021/lkvm/

・ HXP 2021 CTF 比赛 LKVM 虚拟机逃逸题的 writeup – Jett

* 查看或搜索历史推送内容请访问：

   https://sec.today

* 微信公众号： 腾讯玄武实验室 

​​​​