每日攻防资讯简报[Dec.25th]

1.WSUS本地提权漏洞（CVE-2020-1013）的微补丁

https://blog.0patch.com/2020/12/micropatch-is-available-for-wsus.html

1.Chameleon：可定制的蜜罐，用于监视网络流量，漫游器活动和用户名\密码凭据

https://github.com/qeeqbox/chameleon

2.censys-python：用于Censys搜索引擎 API包装器

https://github.com/censys/censys-python

3.clairvoyance：在希尔伯特曲线上可视化Windows进程的虚拟地址空间

https://github.com/0vercl0k/clairvoyance

4.CRT：识别并帮助缓解Azure Active Directory中的风险

https://github.com/CrowdStrike/CRT

https://www.crowdstrike.com/blog/crowdstrike-launches-free-tool-to-identify-and-help-mitigate-risks-in-azure-active-directory/

5.ImprosecPasswordAuditor：Active Directory环境密码审计工具

https://github.com/improsec/ImprosecPasswordAuditor

1.SUNBURST后门其他技术细节

https://www.fireeye.com/blog/threat-research/2020/12/sunburst-additional-technical-details.html

2.Cybereason vs. Clop Ransomware

https://www.cybereason.com/blog/cybereason-vs.-clop-ransomware

1.高级XXE漏洞利用

https://gosecure.github.io/xxe-workshop/#0

2.漏洞赏金Tips: 10

https://www.infosecmatter.com/bug-bounty-tips-10-dec-24/

3.解释UEFI运行时驱动的概念，它们如何与OS交互以及尝试提取它们

https://standa-note.blogspot.com/2020/12/experiment-in-extracting-runtime.html

https://github.com/tandasat/kraft_dinner/tree/main/kraft_dinner

4.第三方API：如何防止枚举攻击

https://threatpost.com/third-party-apis-enumeration-attacks/162589/