每日安全动态推送(5-15)

Tencent Security Xuanwu Lab Daily News

• Authenticating to Dead by Daylight servers via Steam Session Tickets:

   ・ 如何在不使用 Steam 的情况下获取黎明杀机的有效身份验证 cookie，基于 Steamworks SDK – 

• Fuzztruction - Prototype Of A Fuzzer That Does Not Directly Mutate Inputs (As Most Fuzzers Do) But Instead Uses A So-Called Generator Application To Produce An Input For Our Fuzzing Target:

   ・ Fuzztruction，不直接对输入进行变异，而是使用生成器为目标生成输入 – 

• Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft:

   ・ Windows MSHTML 平台可能被滥用以绕过目标机器上的完整性保护。 – 

• Fake system update drops Aurora stealer via Invalid Printer loader:

   ・ 通过伪造系统更新来加载非法打印机，从而植入恶意软件 – 

• WinDbg_Scripts/symbolBuilderWnf.js / Jump to:

   ・ WinDbg 脚本集合，包括从 nsi.dll 生成 WNF 符号功能 – 

• Spartacus - DLL Hijacking Discovery Tool:

   ・ DLL 劫持发现工具，使用 SysInternals Process Monitor 解析原始 PML 日志文件以发现二级和三级 DLL 劫持漏洞 – 

• CVE-2023-28936: Apache OpenMeetings: insufficient check of invitation hash:

   ・ Apache OpenMeetings，邀请哈希检查不足漏洞 – 

• Fantastic Rootkits and Where to Find Them (Part 2):

   ・ APT 组织使用的在野 Rootkit 分析 – 

• Zyxel Chained Remote Code Execution:

   ・ zhttpd 和 zcmd 中的远程命令执行漏洞 – 

* 查看或搜索历史推送内容请访问：

* 新浪微博账号：腾讯玄武实验室