每周蓝军技术推送（2025.3.29-4.11）

https://github.com/thisis0xczar/FrogPost

https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

https://labs.watchtowr.com/xss-to-rce-by-abusing-custom-file-handlers-kentico-xperience-cms-cve-2025-2748/

https://Tx0actical.github.io/posts/ss-bypass/

https://posts.specterops.io/an-operators-guide-to-device-joined-hosts-and-the-prt-cookie-bcd0db2812c4

https://github.com/Friends-Security/sharefiltrator

https://github.com/nullenc0de/Internal_Pentest

https://github.com/openpubkey/opkssh

https://github.com/boku7/Loki

https://github.com/Teach2Breach/Tempest

https://github.com/EricEsquivel/Inline-EA

https://github.com/ricardojoserf/NativeNtdllRemap

https://github.com/ricardojoserf/NativeTokenImpersonate

https://github.com/Slowerzs/KeyJumper

https://blog.slowerzs.net/posts/keyjumper/

https://github.com/vari-sh/RedTeamGrimoire

https://github.com/thalium/rkchk

https://starlabs.sg/blog/2025/03-cimfs-crashing-in-memory-finding-system-kernel-edition

https://www.praetorian.com/blog/codeqleaked-public-secrets-exposure-leads-to-supply-chain-attack-on-github-codeql/

https://github.com/AmitMoshel1/PatchGuardEncryptorDriver

https://security.googleblog.com/2025/04/google-launches-sec-gemini-v1-new.html

lhttps://newsroom.trendmicro.com/2025-03-19-Trend-Micro-to-Open-source-AI-Model-and-Agent-to-Drive-the-Future-of-Agentic-Cybersecurity

https://trustedsec.com/blog/mcp-an-introduction-to-agentic-op-support

https://www.detectionatscale.com/p/mcp-and-security-operations

https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-attacks

https://github.com/MorDavid/BloodHound-MCP-AI

https://github.com/xpn/mythic_mcp

https://blog.runreveal.com/security-operations-with-runreveals-mcp-server/

https://www.youtube.com/watch?v=iFxNuk3kxhk

https://github.com/mrexodia/ida-pro-mcp

https://github.com/LaurieWired/GhidraMCP

https://www.pillar.security/blog/new-vulnerability-in-github-copilot-and-cursor-how-hackers-can-weaponize-code-agents

https://www.vpnmentor.com/news/report-gennomis-breach/

https://embracethered.com/blog/posts/2024/hiding-and-finding-text-with-unicode-tags/

https://www.troyhunt.com/a-sneaky-phish-just-grabbed-my-mailchimp-mailing-list/

https://xbz0n.sh/blog/social-engineering-redteam

https://github.com/adanalvarez/MyScripts/tree/main/GitHub

https://github.com/francisconeves97/jxscout

https://www.bsidesseattle.com/2025-schedule.htm

https://openssf.org/blog/2025/03/14/openssf-policy-summit-dc-2025-recap/