MiaoTony's Box

2022-07-06 13:27:40 #今天又看了啥 #tools
里面有些破解软件，比如 Typora, Bandizip7, Navicat Premium, JetBrains 等
可用性安全性等自己看看（
https://www.fahai.org/ 打开/如何

2022-07-05 22:36:43 #今天又看了啥 #security #OS
通过模拟管道客户端提升权限
InstantView from Source 打开/如何

2022-07-05 22:22:42 #今天又看了啥 #通信
关于这次通信故障，我想多说几句…
InstantView from Source 打开/如何

2022-07-05 17:51:59 #今天又看了啥 #security #chrome #CVE
CVE-2022-2294 Chrome Heap buffer overflow in WebRTC

Google Chrome WebRTC（网络实时通信）组件中存在基于堆的缓冲区溢出漏洞，成功利用此漏洞可导致程序崩溃甚至任意代码执行。
Users are recommended to update to version 103.0.5060.114 for Windows, macOS, and Linux and 103.0.5060.71 for Android to mitigate potential threats. Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are also advised to apply the fixes as and when they become available.

https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html
The Hacker News: Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild
奇安信: Google Chrome远程代码执行漏洞(CVE-2022-2294)安全风险通告 打开/如何

2022-07-05 17:34:20 #今天又看了啥 #telegram
核心技术突破！重磅取证小程序上线：PC端Telegram免密取证
InstantView from Source

看起来是取证拿里面的现成 session 之类的（ 打开/如何

2022-07-05 15:02:32 打开/如何

2022-07-04 23:40:38 #今天又看了啥 #GitHub #security #云安全 #tools
CF
CF 是一个云环境利用框架，主要用来方便红队人员在获得云服务的访问凭证即 Access Key 的后续工作。

Repo: https://github.com/teamssix/cf
Docs: https://wiki.teamssix.com/cf/ 打开/如何

2022-07-04 23:28:07 #GitHub #project #瞎折腾 #develop 继续给 pyshark 修了个垃圾 bug（ https://github.com/KimiNewt/pyshark/pull/563 顺便，昨天修的 https://github.com/KimiNewt/pyshark/pull/562 合了 打开/如何

2022-07-04 21:49:50 #GitHub #project #瞎折腾 #develop
继续给 pyshark 修了个垃圾 bug（

https://github.com/KimiNewt/pyshark/pull/563

顺便，昨天修的 https://github.com/KimiNewt/pyshark/pull/562 合了 打开/如何