每日攻防资讯简报[Mar.19th]

1.Strafer：在Elasticsearch实例中检测潜在感染

https://github.com/adityaks/strafer

1.PyPANDA：基于全系统记录与重放的通用脱壳工具，与Ghidra集成

2.以EKANS勒索软件演示Gobfuscator混淆软件的自动化去混淆

https://www.goggleheadedhacker.com/blog/post/22

3.RIFT：最近的F5 BIG-IP / BIG-IQ iControl REST API漏洞CVE-2021-22986的检测能力

https://research.nccgroup.com/2021/03/18/rift-detection-capabilities-for-recent-f5-big-ip-big-iq-icontrol-rest-api-vulnerabilities-cve-2021-22986/

4.窃取任意GitHub Actions机密

https://blog.teddykatz.com/2021/03/17/github-actions-write-access.html

5.对安全软件更新框架（TUF）的理解

https://dlorenc.medium.com/the-update-framework-and-you-2f5cbaa964d5

6.通过Telegram API进行服务器端数据渗透

https://blog.sucuri.net/2021/03/server-side-data-exfiltration-via-telegram-api.html

7.NFTs解释：区块链上的日光抢劫

https://blog.malwarebytes.com/explained/2021/03/nfts-explained-daylight-robbery-on-the-blockchain/

8.简易的Python键盘记录器

https://isc.sans.edu/diary/rss/27216

9.检测重要的敏感数据泄漏：如何使用数据流扫描PII泄漏、凭据和其他敏感数据泄漏

https://blog.shiftleft.io/detecting-sensitive-data-leaks-that-matter-42f7530f5f6d