每周蓝军技术推送（2023.8.5-8.11）

https://research.aurainfosec.io/pentest/hook-line-and-phishlet/

https://github.com/MzHmO/TGSThief

https://github.com/vu-ls/Crassus

https://pentera.io/resources/research/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/

https://github.com/codewhitesec/apollon

https://github.com/codewhitesec/daphne

https://github.com/ACE-Responder/RogueSliver

https://github.com/Cyb3r-Monk/ACCD

https://www.dsinternals.com/en/dpapi-backup-key-theft-auditing/

https://bishopfox.com/blog/analysis-exploitation-cve-2023-3519

https://github.com/BishopFox/CVE-2023-3519

https://www.rapid7.com/blog/post/2023/08/02/cve-2023-35082-mobileiron-core-unauthenticated-api-access-vulnerability/

https://bishopfox.com/blog/breaking-fortinet-firmware-encryption

https://lock.cmpxchg8b.com/zenbleed.html

https://github.com/edwardz246003/presentations/tree/main/Usenix%20Security%202023

https://blackhat.com/us-23/briefings/schedule/#diving-into-windows-remote-access-service-for-pre-auth-bugs-31968

https://www.tenable.com/security/research/tra-2023-25

https://www.o3c.no/knowledge/abusing-app-role-assignment-actions-in-entra-id

https://github.com/hashicorp-forge/grove/

https://www.r-tec.net/r-tec-blog-evade-signature-based-phishing-detections.html

https://cofense.com/blog/google-amp-the-newest-of-evasive-phishing-tactic/

https://dropbox.tech/machine-learning/prompt-injection-with-control-characters-openai-chatgpt-llm

https://github.com/utkusen/promptmap

https://github.com/geekan/MetaGPT

https://ti.qianxin.com/uploads/2023/07/20/fcd50f2540db9ca6fb91b192c0fe2a4c.pdf

https://github.com/Legit-Labs/legitify

https://arxiv.org/abs/2308.01074