每日攻防资讯简报[Nov.2th]

1.Flare-On 7 2020 Write-Ups

https://eviatargerzi.medium.com/flare-on-7-2020-write-ups-4342fb819039

2.逆向3D电影制作器，Part3：脚本引擎

https://benstoneonline.com/posts/reverse-engineering-3d-movie-maker-part-three/

3.关于反编译程序的符号执行

https://divine.fi.muni.cz/2020/decompile/

4.使用Linux 审计 API跟踪进程

https://natanyellin.com/posts/using-linux-audit-to-track-processes/

5.探索一系列流行的媒体流Roku

https://adtechmadness.wordpress.com/2020/11/01/attacking-roku-sticks-for-fun-and-profit/

6.NAT Slipstreaming：攻击者可以仅通过受害者访问网站来绕过受害者的NAT /防火墙（任意防火墙针孔控制），来远程访问绑定到受害者计算机的任何TCP / UDP服务

https://samy.pl/slipstream/

7.以书信（epistolary）方式进行黑客攻击：在纯VBA中实现kerberoast

https://adepts.of0x.cc/kerberoast-vba-macro/

8.GoLang包Fuzzing工具go-fuzz入门

https://adalogics.com/blog/getting-started-with-go-fuzz

9.HTB Fuse writeup：域控制器侦察、密码喷雾、暴力攻击、SeLoadDriver特权滥用

https://medium.com/bugbountywriteup/htb-fuse-writeup-2c181d837b78

10.在Apple III中使用的堆叠RAM模块内部

http://www.righto.com/2020/10/inside-stacked-ram-modules-used-in.html

11.使用C# Shellcode和ConfuserEx绕过UAC

https://hausec.com/2020/10/30/using-a-c-shellcode-runner-and-confuserex-to-bypass-uac-while-evading-av/

12.识别和升级HTTP主机头注入攻击

https://medium.com/bugbountywriteup/identifying-escalating-http-host-header-injection-attacks-7586d0ff2c67