每日攻防资讯简报[Mar.22th]

1.CurrentSense-TinyML：使用电流感应和嵌入式TinyML模型监视微控制器

https://github.com/Santandersecurityresearch/CurrentSense-TinyML

2.xeuledoc：提取公开的谷歌文档的所有者的信息

https://github.com/Malfrats/xeuledoc

3.COFFInjector：MSVC object文件的加载与注入

https://github.com/0xpat/COFFInjector

https://0xpat.github.io/Malware_development_part_8/

4.nzyme：下一代WiFi防御系统

https://github.com/lennartkoopmann/nzyme

https://www.nzyme.org/post/nzyme-v1-0-0-kyle-canyon-has-been-released

5.Rafel-Rat：Java编写的Android平台远控

https://github.com/swagkarna/Rafel-Rat

6.OWASP-Calculator：一个在线计算器，可基于OWASP风险评估来评估Web漏洞的风险

https://github.com/JavierOlmedo/OWASP-Calculator

7.reverse-shell-generator：反向Shell生成器

https://github.com/0dayCTF/reverse-shell-generator

8.OffensivePipeline：下载、编译（不使用Visual Studio）并混淆C＃工具，用于Red Team练习

https://github.com/Aetsu/OffensivePipeline

9.Invoke-SocksProxy：用于创建反向Shell的PowerShell脚本

https://github.com/tokyoneon/Invoke-SocksProxy

1.集成电路逆向：从未知体系结构的ROM硅片图像中提取比特

https://ryancor.medium.com/pulling-bits-from-rom-silicon-die-images-unknown-architecture-b73b6b0d4e5d

2.Lua虚拟化混淆，Part1：简介

https://ferib.dev/blog.php?l=post/Lua_Devirtualization_Part_1_Introduction

3.如何静态识别恶意软件中Actor编写代码（WinMain）的开头

4.逆向智能电表

5.攻击面分析，Part2：自定义协议处理器

https://parsiya.net/blog/2021-03-17-attack-surface-analysis-part-2-custom-protocol-handlers/

6.Hacking IIS

https://drive.google.com/file/d/1O0IARjqP4Pwa-ae1nAP8Nr9qb0ai2XPu/view

7.AWS中的子域接管，PoC

https://godiego.tech/posts/STO-AWS/

8.HTB: CrossFit

https://0xdf.gitlab.io/2021/03/20/htb-crossfit.html