每日攻防资讯简报[Jan.22th]

1.链接多个漏洞，以在SolarWinds Orion平台上获得未经认证的远程代码执行

https://www.zerodayinitiative.com/blog/2021/1/20/three-bugs-in-orions-belt-chaining-multiple-bugs-for-unauthenticated-rce-in-the-solarwinds-orion-platform

2.KindleDrip：亚马逊Kindle严重漏洞，从电子邮件地址到使用您的信用卡

https://medium.com/realmodelabs/kindledrip-from-your-kindles-email-address-to-using-your-credit-card-bb93dbfb2a08

3.SAP解决方案管理器中缺少身份验证检查漏洞PoC（CVE-2020-6207）

https://github.com/chipik/SAP_EEM_CVE-2020-6207

1.Wireshark教程：检查Emotet感染流量

https://unit42.paloaltonetworks.com/wireshark-tutorial-emotet-infection/

2.挖矿软件MrbMiner似乎是由位于伊朗的一家小型软件开发公司创建，托管和控制的

https://news.sophos.com/en-us/2021/01/21/mrbminer-cryptojacking-to-bypass-international-sanctions/

1.通过为进程内存使用量设置一个小于或等于当前内存使用量的限制，可以防止创建线程和修改可执行内存，进而实现反调试

https://secret.club/2021/01/20/diet-process.html

2.UART Root Shells指南：如何在物联网设备上获得快速简便的root shell

3.2021 OWASP Top-10，基于统计的提案

https://lab.wallarm.com/owasp-top-10-2021-proposal-based-on-a-statistical-data

4.一种通过利用防火墙规则来确保没有事件发送到Microsoft Defender安全中心来使Endpoint MD沉默的一种可能方法，以及如何检测这种活动

https://medium.com/csis-techblog/silencing-microsoft-defender-for-endpoint-using-firewall-rules-3839a8bf8d18

5.使用零信任原则来防御复杂的攻击，例如Solorigate

https://www.microsoft.com/security/blog/2021/01/19/using-zero-trust-principles-to-protect-against-sophisticated-attacks-like-solorigate/

6.KEMTLS: Post-quantum TLS without signatures

https://blog.cloudflare.com/kemtls-post-quantum-tls-without-signatures/

7.请直接停止使用RSA加密：RSA用于加密对称密钥，而不是整个消息

https://soatok.blog/2021/01/20/please-stop-encrypting-with-rsa-directly/

8.Windows漏洞利用技巧：陷阱虚拟内存访问

https://googleprojectzero.blogspot.com/2021/01/windows-exploitation-tricks-trapping.html

9.Hacking BugPoc’s 18 Game (XSS challenge) hosted by The XXS rat

https://medium.com/bugbountywriteup/hacking-bugpocs-18-game-xss-challenge-hosted-by-the-xxs-rat-f3f1adc04c8

10.Forest HackTheBox Walkthrough

https://www.hackingarticles.in/forest-hackthebox-walkthrough/

11.Site Defacement and Denial of Service via. Cross-Site Scripting

https://medium.com/bugbountywriteup/site-defacement-and-denial-of-service-via-cross-site-scripting-9c54d1d3fd06