每周蓝军技术推送（2022.10.15-10.21）

https://github.com/knassar702/lorsrf

https://medium.com/bugbountywriteup/http-request-smuggling-explained-and-exploited-part-0x1-89ce2956534f

https://medium.com/bugbountywriteup/http-request-smuggling-explained-and-exploited-part-0x2-7768d04883fb

https://blog.blacklanternsecurity.com/p/yet-another-telerik-ui-revisit

https://github.com/OPENCYBER-FR/RustHound

https://github.com/ORCx41/NoRunPI

https://github.com/Wh04m1001/IFaultrepElevatedDataCollectionUAC

https://github.com/ORCx41/AtomPePacker

https://blog.xpnsec.com/wam-bam/

https://github.com/xpn/WAMBam

https://github.com/cisagov/RedEye

https://github.com/echtdefault/Janus

https://twitter.com/notwhickey/status/1582961336610213888

https://github.com/zimawhit3/Bitmancer

https://www.x86matthew.com/view_post?id=shared_mem_utils

https://www.mdsec.co.uk/2022/10/microsoft-office-online-server-remote-code-execution/

https://devco.re/blog/2022/10/19/a-new-attack-surface-on-MS-exchange-part-4-ProxyRelay/

https://securityintelligence.com/posts/analysis-rce-vulnerability-cobalt-strike/

https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/

https://github.com/its-arun/CVE-2022-39197

https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/

https://github.com/Gerenios/AADInternals

https://github.com/zolderio/misp-to-sentinel

https://www.wiz.io/blog/lateral-movement-risks-in-the-cloud-and-how-to-prevent-them-part-1-the-network-layer

https://blog.doyensec.com//2022/10/11/ebpf-bypass-security-monitoring.html

https://www.mdsec.co.uk/2022/10/analysing-lastpass-part-1/

https://github.com/cisagov/ScubaGear

https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules

https://www.diva-portal.org/smash/get/diva2:1703640/FULLTEXT01.pdf

https://github.com/edoardottt/awesome-hacker-search-engines