每日安全动态推送(2-28)

Tencent Security Xuanwu Lab Daily News

• [Tools, Web] Toxssin – Open-source Penetration Testing Tool That Automates Exploiting Cross-Site Scripting (XSS):

   ・ Toxssin：XSS自动化利用工具 – 

• CVE-2023-21839:

   ・ Weblogic CVE-2023-21839 RCE的漏洞利用代码，该漏洞为Weblogic IIOP/T3协议的实现缺陷 – 

• [Tools] kraken-ng/Kraken: Kraken, a modular multi-language webshell coded by @secu_x11:

   ・ 模块化的、支持多语言的webshell – 

• [Fuzzing] libafl-wasm:

   ・ 将libafl harness编译为wasm来进行fuzz。 – 

• ProxmoxVE 下的 Windows 内核调试环境配置:

   ・ ProxmoxVE 下的 Windows 内核调试环境配置 – 

• [Android, Reverse Engineering] apk.sh: makes reverse engineering Android apps easier:

   ・ 安卓APP逆向工程实用脚本 – 

• [Firmware] GitHub - realoriginal/bootlicker: A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.:

   ・ 通用UEFI bootkit，可实现用户态代码执行 – 

• [Vulnerability] Unauthenticated RCE in Goanywhere - vsociety:

   ・ Goanaywhere存在因反序列化导致的RCE漏洞。 – 

• Apple Privilege Escalation Bug Let Attacker Execute Arbitrary Code:

   ・ 缓解措施NSPredicateVisitor可被绕过，允许攻击者执行任意代码。 – 

• oledump & MSI Files:

   ・ 使用oledump分析MSI文件。 – 

• [Malware] A tale of Phobos - how we almost cracked a ransomware using CUDA : ReverseEngineering:

   ・ 如何利用Phobos 勒索软件特定版本的问题对密钥生成可能性进行剪枝，从而在理论上实现对该勒索软件的暴力破解。 – 

* 查看或搜索历史推送内容请访问：

* 新浪微博账号：腾讯玄武实验室