每日攻防资讯简报[Mar.2th]

1.Posta：研究跨文档消息传递通信，可以跟踪、探索和利用postMessage漏洞，并包括诸如重播任何连接的浏览器内的Windows之间发送的消息之类的功能

https://github.com/benso-io/posta

2.WdToggle：Cobalt Strike Beacon对象，使用直接系统调用启用WDigest凭据缓存并绕过Credential Guard

https://github.com/outflanknl/WdToggle

1.编写一个自定义的BootLoader

https://www.ired.team/miscellaneous-reversing-forensics/windows-kernel-internals/writing-a-custom-bootloader

2.SQL注入完全指南

3.VulnHub Odin Walkthrough

https://infosecwriteups.com/vulnhub-odin-walkthrough-d79f9764519d

4.使用WinAFL Fuzzing并查找漏洞

5..NET AMSI接口拦截[System.Reflection.Assembly]::Load()的示例和绕过方法

https://s3cur3th1ssh1t.github.io/Powershell-and-the-.NET-AMSI-Interface/

6.Pwn2Own或Not2Pwn，Part3：详细介绍如何将特权升级为系统级特权

https://medium.com/cognite/pwn2own-or-not2pwn-part-3-the-lazy-mans-escalation-392fd00a0ec8

7.拆分ping

https://blog.benjojo.co.uk/post/ping-with-loss-latency-split