每周蓝军技术推送（2024.2.2-2.23）

https://github.com/narfindustries/http-garden/

https://github.com/Anof-cyber/AlphaScan

https://github.com/ad0nis/ntlm_relay_gat

https://github.com/wh0amitz/SharpADWS

https://github.com/eversinc33/1.6-C2

https://malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html

https://xz.aliyun.com/t/13579

https://github.com/mlcsec/proctools

https://blog.trailofbits.com/2024/02/07/binary-type-inference-in-ghidra/

https://github.com/trailofbits/BTIGhidra

https://github.com/mlcsec/FormThief

https://github.com/senzee1984/InflativeLoading

https://github.com/iamagarre/BadExclusionsNWBO

https://github.com/icyguider/UAC-BOF-Bonanza

https://vovohelo.medium.com/net-threadless-process-injection-6c389a9ce585

https://github.com/bananabr/CLRInjector

https://www.trendmicro.com/en_us/research/24/b/cve202421412-water-hydra-targets-traders-with-windows-defender-s.html

https://github.com/labesterOct/CVE-2024-21413

https://github.com/n132/Libc-GOT-Hijacking

https://snicco.io/vulnerability-disclosure/bricks/unauthenticated-rce-in-bricks-1-9-6

https://github.com/Chocapikk/CVE-2024-25600

https://blog.hrncirik.net/cve-2023-46214-analysis

https://aws.amazon.com/cn/blogs/security/how-to-automate-rule-management-for-aws-network-firewall/

https://www.wiz.io/blog/new-attack-vectors-emerge-via-recent-eks-access-entries-and-pod-identity-features

https://www.wiz.io/blog/eks-cluster-access-management-and-pod-identity-security-recommendations

https://blog.thinkst.com/2024/01/defending-against-the-attack-of-the-cloned-websites.html

https://www.microsoft.com/en-us/security/blog/2024/02/22/announcing-microsofts-open-automation-framework-to-red-team-generative-ai-systems/

https://github.com/referefref/aiocrioc

https://arxiv.org/abs/2402.08679

https://github.com/Yu-Fangxu/COLD-Attack

https://arxiv.org/abs/2402.06664

https://portswigger.net/research/top-10-web-hacking-techniques-of-2023