每日攻防资讯简报[Sept.9th]

1.Shlayer恶意软件的最新变种ZShlayer：率先采用苹果公司的Zsh而不是Bash作为其默认的Shell语言，并采用了一种新颖的编码方法来避免检测

https://www.sentinelone.com/blog/coming-out-of-your-shell-from-shlayer-to-zshlayer/

1.twistrs：Rust编写的域名枚举工具

https://github.com/JuxhinDB/twistrs

https://blog.digital-horror.com/twistrs/

2.cryptoguard：在Java和Android程序中查找错误使用的加密（cryptographic）

https://github.com/CryptoGuardOSS/cryptoguard

https://www.computer.org/csdl/pds/api/csdl/proceedings/download-article/1mbmHwIxTb2/pdf

3.PurpleCloud：云中小型Active Directory渗透测试实验室的基础架构即代码（IaC：Infrastructure as Code）部署

https://github.com/iknowjason/PurpleCloud

1.渗透工具包Axiom介绍

https://adamsvoboda.net/axiom-feels-like-cheating/

2.h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)

https://labs.bishopfox.com/tech-blog/h2c-smuggling-request-smuggling-via-http/2-cleartext-h2c

3.Elastic Kubernetes服务（EKS）的安全组（SG）和网络访问控制列表（NACL）配置

https://www.padok.fr/en/blog/sg-nacl-eks

4.滥用Azure AD中的动态组进行特权升级

https://www.mnemonic.no/blog/abusing-dynamic-groups-in-azure/

5.被低估的Obscurity安全性：针对Obscurity不安全的反驳

https://utkusen.com/blog/security-by-obscurity-is-underrated.html

6.WSUS攻击，Part2：CVE-2020-1013，一个Win 10本地特权升级1-Day

https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/

7.SIEM：使用Splunk监控Windows客户端

https://www.hackingarticles.in/siem-windows-client-monitoring-with-splunk/

8.Fuzzing：挑战与反思

9.Empire 3.4.0版本中的Malleable C2功能，可通过profile文件进行配置

https://www.bc-security.org/post/empire-malleable-c2-profiles/

10.使用二进制仿真自动动态解析导入表

https://lopqto.me/posts/automated-dynamic-import-resolving

11.漏洞赏金Tips

https://github.com/KingOfBugbounty/KingOfBugBountyTips

12.暗网的网络安全状态研究：

https://www.immuniweb.com/blog/state-cybersecurity-dark-web-exposure.html