每日攻防资讯简报[Dec.29th]

1.SolarWinds Orion本地文件披露漏洞PoC（CVE-2020-10148）

https://gist.github.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965

2.Zyxel产品中未记录的用户帐户（CVE-2020-29583）

https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html

3.披露了大约8个零日漏洞，并提出一种绕过常见防病毒软件自我保护和CVE-2020-16902补丁绕过的新颖方法

https://halove23.blogspot.com/2020/12/oh-so-you-have-antivirus-nameevery-bug.html

4.SAP BusinessObjects 商业智能平台（Web服务）CVE-2020-6308 POC

https://github.com/InitRoot/CVE-2020-6308-PoC

1.PcapMonkey：提供使用最新版本的Suricata和Zeek分析pcap的简便方法

https://github.com/certego/PcapMonkey

https://www.certego.net/en/news/introducing-pcapmonkey/

2.Vulnerable-Kext：针对iOS/macOS的带漏洞的kext，用于玩耍和学习iOS/macOS内核漏洞利用

https://github.com/ant4g0nist/Vulnerable-Kext

3.2020年Hacking工具Top 20

https://www.kitploit.com/2020/12/top-20-most-popular-hacking-tools-in.html

4.Wynis：审核Win10和Win Server2016的最佳实践

https://github.com/Sneakysecdoggo/Wynis

1.一种新的基于宏的恶意软件

Interesting sample looking like Muddywater, the macro download and execute the code from the GitHub at the opening of the document. This downloads a picture from picture web storage and uses steganography in using the value of the pixels for getting the payload to execute. pic.twitter.com/WRS9uA9ct6

— Arkbird (@Arkbird_SOLG) December 27, 2020

1.破解任天堂游戏与手表

2.作者介绍自己的12年渗透测试之旅

https://blog.scrt.ch/2020/12/28/state-of-pentesting-2020/

3.讨论如何使用宏从Excel与Outlook进行交互，发布一个PoC，将Outlook转换为键盘记录程序

https://adepts.of0x.cc/vba-outlook/

4.逆向Go二进制文件，Part1

https://x0r19x91.gitlab.io/post/reversing-go-part-1/

5.使用Radamsa对一个简单的C程序进行模糊cesium

6.使用Postman和Newman查找在线格式化工具中保存的有用数据

https://medium.com/bugbountywriteup/finding-data-leaks-in-online-formatters-404503b9fcb0

7.使用Microsoft 365 Defender来识别，调查和响应Solorigate攻击

https://www.microsoft.com/security/blog/2020/12/28/using-microsoft-365-defender-to-coordinate-protection-against-solorigate/

8.Having fun with ANSI codes and x64 Linux Assembly

https://www.guitmz.com/having-fun-with-ansi-codes-and-x64-linux-assembly/

9.Burp Suite For Pentester: HackBar

https://www.hackingarticles.in/burp-suite-for-pentester-hackbar/