每日攻防资讯简报[Nov.17th]

1.逆向被遗忘的1970年代英特尔双核野兽：8271，一个新的ISA

https://scarybeastsecurity.blogspot.com/2020/11/reverse-engineering-forgotten-1970s.html

2.域密钥标识邮件（DKIM）是什么，为何谷歌需要定期轮换发布DKIM密钥以消除犯罪分子窃取和泄漏电子邮件的强烈动机

https://blog.cryptographyengineering.com/2020/11/16/ok-google-please-publish-your-dkim-secret-keys/

3.在Active Directory环境中使用Impacket的NTLM中继功能

https://clement.notin.org/blog/2020/11/16/ntlm-relay-of-adws-connections-with-impacket/

4.自定义修改C&C框架的源码以实现免杀

https://s3cur3th1ssh1t.github.io/Customizing_C2_Frameworks/

5.SD-PWN Part2：在Citrix SD-WAN平台中实现远程代码执行

https://medium.com/realmodelabs/sd-pwn-part-2-citrix-sd-wan-center-another-network-takeover-a9c950a1a27c

6.使用几行Go代码从头开始实现容器

https://github.com/rewanth1997/containers-from-scratch

7.攻击JSON Web Tokens (JWTs)：伪造令牌以获得未经授权的访问

https://medium.com/bugbountywriteup/attacking-json-web-tokens-jwts-d1d51a1e17cb

8.在2分钟内禁用WiFi网络的绝妙方法

https://medium.com/bugbountywriteup/disable-a-wi-fi-access-point-service-9f404fc2dc5f

9.在CPU的内部：对P6微代码进行逆向

10.漏洞赏金技巧，Part9

https://www.infosecmatter.com/bug-bounty-tips-9-nov-16/

11.绕过了/frame.html以进行注入和渲染的访问限制html，绕过了csp使用<base>元素执行远程javascript文件的权限，绕过了完整性检查并突破了iframe的沙箱来执行alert(origin)

https://dev.to/pirateducky/wacky-2g84

12.一种绕过AV检测/阻止对LSASS进程进行凭据转储访问的方法

https://skelsec.medium.com/duping-av-with-handles-537ef985eb03