每日攻防资讯简报[Dec.15th]

1.Go的标准库中encoding/xml与round-trips相关的三个严重漏洞

https://mattermost.com/blog/coordinated-disclosure-go-xml-vulnerabilities/

2.大规模扫描和利用FortiOS SSL VPN Web门户中的路径遍历漏洞，可允许未经身份验证的攻击者通过特制的HTTP资源请求（CVE-2018-13379）下载FortiOS系统文件

https://github.com/Zeop-CyberSec/fortios_vpnssl_traversal_leak

1.Reverie：一个优化的零知识证明系统

https://github.com/trailofbits/reverie

https://blog.trailofbits.com/2020/12/14/reverie-an-optimized-zero-knowledge-proof-system/

1.黑客组织UNC2452在全球范围内的攻击，利用SUNBURST后门和SolarWinds Orion商业软件实现传播

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

2.SolarWinds高级网络攻击：发生了什么以及现在该怎么办

https://blog.malwarebytes.com/threat-analysis/2020/12/advanced-cyber-attack-hits-private-and-public-sector-via-supply-chain-software-update/

3.针对MySQL服务器的PLEASE_READ_ME勒索软件攻击

https://www.tripwire.com/state-of-security/security-data-protection/please_read_me-ransomware-campaign-targeting-mysql-servers/

1.自动化十六进制转储分析

https://suszter.com/hexlasso/automating-hexdump-analysis

2.虚拟机中的页面错误注入：从HVMI访问交换出的页面

https://hvmi.github.io/blog/2020/12/14/pfinjection.html

3.HTB：二进制漏洞利用介绍

4.在研究BBC Micro光盘保护过程中遇到的天才之处

https://scarybeastsecurity.blogspot.com/2020/12/the-cleverest-floppy-disc-protection.html?m=1

5.AS_REP Roastin和Kerberoasting之间的确切区别

https://luemmelsec.github.io/Kerberoasting-VS-AS-REP-Roasting/

6.使用Qiling框架脱壳TA505样本

https://www.blueliv.com/cyber-security-and-cyber-threat-intelligence-blog-blueliv/using-qiling-framework-to-unpack-ta505-packed-samples/

7.如何使用Defensics SDK构建串行端口Fuzzer

https://www.synopsys.com/blogs/software-security/serial-port-fuzzer-defensics-sdk/

8.Autopsy Tool综合指南（Windows）

https://www.hackingarticles.in/comprehensive-guide-on-autopsy-tool-windows/

9.为了推进机器学习在恶意代码分类方向的发展，网络安全公司Sophos和ReversingLabs联合发布了数据集SoReL-20M，包括2000万个PE样本（1000万恶意+1000万良性）以及一组基于PyTorch和LightGBM的机器学习模型

https://thehackernews.com/2020/12/sorel-20m-huge-dataset-of-20-million.html

https://github.com/sophos-ai/SOREL-20M

https://ai.sophos.com/2020/12/14/sophos-reversinglabs-sorel-20-million-sample-malware-dataset/

10.针对WordPress的渗透测试

https://gupta-bless.medium.com/penetration-testing-on-wordpress-f96bc701832e

11.传递哈希的其他方法（PtH）

https://www.n00py.io/2020/12/alternative-ways-to-pass-the-hash-pth/