每日攻防资讯简报[Apr.6th]

1.使用Ghidra改装游戏《十字军之王III》

https://waffleironer.medium.com/legalizing-gay-marriage-in-crusader-kings-iii-with-ghidra-2602e6aa8689

2.在线网游Runescape检测机器人的机制有缺陷

https://secret.club/2021/04/03/runescape-heuristics.html

3.使用Ghidra分析恶意代码

4.Zynq芯片分析，Part1：以困难的方式转储bootrom

https://blog.ropcha.in/part-1-zynq-glitching.html

5.跨壳的代码重用与DLL加载器

https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders

6.如何在树莓派上构建一次性攻击盒

https://feed.prelude.org/p/catch-me-if-you-can

7.播放Youtube用户的私人视频

https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/

8.AMD预测性存储转发的安全性分析

https://www.amd.com/system/files/documents/security-analysis-predictive-store-forwarding.pdf

9.PostgreSQL数据库加固

https://goteleport.com/blog/securing-postgres-postgresql/

10.测试大量工具及其对反向Shell通信进行加密的能力

https://www.hackingarticles.in/encrypted-reverse-shell-for-pentester/

11.SQL注入新手指南

https://infosecwriteups.com/sql-injection-for-noobs-3677eac68d38

12.了解和识别不安全的反序列化漏洞

https://infosecwriteups.com/understanding-identifying-insecure-deserialization-vulnerabilities-f7fac5414bb3

13.如何成为中间人攻击中的中间人

https://infosecwriteups.com/the-art-of-man-in-the-middle-attack-9e92aaf806ee

14.HTB: Time

https://0xdf.gitlab.io/2021/04/03/htb-time.html