每周蓝军技术推送（2022.12.10-12.16）

https://github.com/google/osv-scanner

https://blog.talosintelligence.com/html-smugglers-turn-to-svg-images/

https://github.com/Coldzer0/ReverseSock5Proxy

https://simondotsh.com/infosec/2022/12/12/assessing-smsa.html

https://unit42.paloaltonetworks.com/next-gen-kerberos-attacks/

https://github.com/p0dalirius/Coercer

https://mr0range.com/a-new-lolbin-using-the-windows-type-command-to-upload-download-files-81d7b6179e22

https://github.com/fr0gger/IATelligence

https://github.com/ironmansoftware/psmsi

https://medium.com/@bentamam/bypassing-cortex-xdr-a-case-study-in-the-power-of-simplicity-b436f4f570ad

https://github.com/SafeBreach-Labs/aikido_wiper

https://github.com/kleiton0x00/RedditC2

https://i.blackhat.com/EU-22/Thursday-Briefings/EU-22-Fitzl-Knockout-Win-Against-TCC.pdf

https://medium.com/@marcusthebrody/a-new-macos-persistence-and-deception-technique-default-application-hijacking-52de66955a16

https://www.rcesecurity.com/2022/11/from-zero-to-hero-part-1-bypassing-intel-dcms-authentication-cve-2022-33942/

https://www.rcesecurity.com/2022/12/from-zero-to-hero-part-2-intel-dcm-sql-injection-to-rce-cve-2022-21225/

https://medium.com/mii-cybersec/cve-2022-42889-text4shell-vulnerability-17b703a48dcd

https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html

https://github.com/gmh5225/CVE-2022-44721-CsFalconUninstaller

https://antonio-cooler.gitbook.io/coolervoid-tavern/detecting-heap-memory-pitfalls

https://bugs.chromium.org/p/chromium/issues/detail?id=1332924

https://medium.com/s2wblog/fuzzing-the-shield-cve-2022-24548-96f568980c0

https://julian-wieg.medium.com/visualizing-multi-cloud-iam-concepts-63525967c0a7

https://pswalia2u.medium.com/aws-oidc-eks-abuse-632e13ec01b1

https://pswalia2u.medium.com/oidc-github-actions-abuse-dbef1d4cd559

https://github.com/SikretaLabs/BlueMap

https://www.inversecos.com/2022/12/how-to-detect-malicious-oauth-device.html

https://github.com/praetorian-inc/noseyparker