鑽石舞台

1、msprobe: 在Microsoft 內部查找所有內容以進行密碼噴灑和枚舉

https://github.com/puzzlepeaches/msprobe

2、gshell: 靈活且可擴展的跨平台shell 生成器

https://github.com/nozerobit/gshell

1、在 Google Nest Hub(第2 代) 上打破安全啟動以運行 Ubuntu

https://fredericb.info/2022/06/breaking-secure-boot-on-google-nest-hub-2nd-gen-to-run-ubuntu.html

2、更新公開的 MikroTik 知識, 並提供有關 MikroTik 內部原理的速成課程, 可快速熟悉關鍵 MikroTik 概念和抽象

https://margin.re/blog/pulling-mikrotik-into-the-limelight.aspx

https://margin.re/attachments/Pulling_MikroTik_into_the_Limelight.pdf

3、針對非 Bitlocker 目標的TPM 嗅探攻擊

https://www.secura.com/blog/tpm-sniffing-attacks-against-non-bitlocker-targets

4、使用懸掛 iframe 繞過 CSP

https://portswigger.net/research/bypassing-csp-with-dangling-iframes

5、DriftingCloud: Sophos 防火牆的零日漏洞利用和隱蔽漏洞

https://www.volexity.com/blog/2022/06/15/driftingcloud-zero-day-sophos-firewall-exploitation-and-an-insidious-breach/

6、在現代 EDR 環境中模擬Phineas 網絡釣魚攻擊

https://www.sentinelone.com/blog/research-paper-emulating-phineas-phisher-attacks-in-modern-edr-environments/

7、閾值 ECDSA 密碼學審查

https://research.nccgroup.com/2022/06/15/public-report-threshold-ecdsa-cryptography-review/

8、探討了特定類別的 Web3 網絡釣魚頁面, 稱為 "Crypto Drainers"

https://blog.confiant.com/how-one-crypto-drainer-template-facilitates-tens-of-millions-of-dollars-in-theft-66f3794aea4b

9、通過 Windows 回調運行Shellcode

https://marcoramilli.com/2022/06/15/running-shellcode-through-windows-callbacks/