每周蓝军技术推送（2025.8.30-9.5）

分析Chromium浏览器Cookie保护机制变化及窃取技术

https://specterops.io/blog/2025/08/27/dough-no-revisiting-cookie-theft/

Sitecore CMS缓存投毒漏洞导致远程代码执行

https://labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/

thermoptic：伪装为Chrome浏览器请求的HTTP隐身代理

https://github.com/mandatoryprogrammer/thermoptic/

Burp Suite自动化工具，提供CLI和Python接口用于动态应用安全测试

https://github.com/tristanlatr/burpa

ADSyncDump-BOF：将ADSync凭证解密工具移植为无依赖的BOF文件

https://github.com/Paradoxis/ADSyncDump-BOF

SAMLSmith：C，实现Silver/Golden SAML攻击

https://github.com/Semperis/SAMLSmith

介绍DLL侧加载技术用于红队初始访问的工具和指南

https://print3m.github.io/blog/dll-sideloading-for-initial-access

NTSleuth：Windows系统调用提取与分析框架

https://github.com/xaitax/NTSleuth

BYOVD-DriverKiller：驱动程序逆向和漏洞利用工具

https://github.com/alex3O/BYOVD-DriverKiller

Python脚本混淆工具，用于代码保护和防逆向分析

https://github.com/dashingsoft/pyarmor

利用Discord和Slack API隐藏C2流量

https://arszilla.com/hiding-your-c2-traffic-with-discord-and-slack

威胁组织滥用Velociraptor工具进行远程访问和C2隧道建立

https://news.sophos.com/en-us/2025/08/26/velociraptor-incident-response-tool-abused-for-remote-access/

利用Zoom TURN服务器进行隐蔽C2通信的技术研究

https://www.praetorian.com/blog/ghost-calls-abusing-web-conferencing-for-covert-command-control-part-1-of-2

CVE-2025-0309：Netskope Windows客户端本地提权漏洞分析及POC利用工具

https://blog.amberwolf.com/blog/2025/august/advisory---netskope-client-for-windows---local-privilege-escalation-via-rogue-server/

https://github.com/AmberWolfCyber/UpSkope

CVE-2024-50264：Linux内核权限提升漏洞分析与利用新路径

https://swarm.ptsecurity.com/kernel-hack-drill-and-a-new-approach-to-exploiting-cve-2024-50264-in-the-linux-kernel/

CVE-2025-54309：CrushFTP认证绕过和远程代码执行漏洞分析

https://labs.watchtowr.com/the-one-where-we-just-steal-the-vulnerabilities-crushftp-cve-2025-54309/

CVE-2025-34158：Plex Media Server输入验证漏洞影响30万+实例

https://www.helpnetsecurity.com/2025/08/27/plex-media-server-cve-2025-34158-attack

Anthropic关于AI模型网络犯罪的威胁情报分析，包括自动化网络侦察、凭证窃取和勒索攻击的案例研究

https://www.anthropic.com/news/detecting-countering-misuse-aug-2025

https://www.youtube.com/watch?v=EsCNkDrIGCw

CVE-2025-9478：Google Big Sleep AI工具发现Chrome关键图形库漏洞

https://hackread.com/google-big-sleep-ai-tool-critical-chrome-vulnerability/

Slice：结合SAST和LLM的代码上下文提取工具，用于发现潜在UAF漏洞

https://noperator.dev/posts/slice/

评估AI代理在真实漏洞分析任务中的能力表现

https://www.cybergym.io/

评估Claude Code和OpenAI Codex在真实Web应用中查找漏洞的效果

https://semgrep.dev/blog/2025/finding-vulnerabilities-in-modern-web-apps-using-claude-code-and-openai-codex/

AgentHopper概念验证AI病毒，展示跨AI代理的提示注入攻击

https://embracethered.com/blog/posts/2025/agenthopper-a-poc-ai-virus/

VMDragonSlayer：自动化多引擎框架，用于解包和分析虚拟机保护二进制文件

https://github.com/poppopjmp/VMDragonSlayer

OptixGate：开源Windows远程访问工具，支持多协议连接

https://github.com/DarkCoderSc/OptixGate

M01N Team公众号

官方攻防交流群