每周蓝军技术推送（2024.6.29-7.5）

文章预览

 内网渗透 RemoteKrbRelay：远程Kerberos中继框架 https://github.com/CICADA8-Research/RemoteKrbRelay 终端对抗 De-Optimizer：汇编代码反优化膨胀器 https://github.com/EgeBalci/deoptimizer SharpIncrease：样本体积膨胀器 https://github.com/mertdas/SharpIncrease Mythic C2特殊类型agent介绍，支持Nemesis等多个平台集成 https://www.youtube.com/watch?v=_dqiYDkaG7M ApexLdr：纯C代码开发的DLL载荷加载器 https://github.com/Cipher7/ApexLdr MemoryBouncing 和 MemoryHopping 睡眠混淆技术及武器化加载器 https://www.naksyn.com/cobalt%20strike/2024/07/02/raising-beacons-without-UDRLs-teaching-how-to-sleep.html https://github.com/naksyn/DojoLoader x86下借助回调函数以干净的栈执行内存权限修改 https://pastebin.com/XMfKJ9ZG EDRPrison：借用合法WFP驱动程序来静音 EDR 代理 https://www.3nailsinfosec.com/post/edrprison-borrow-a-legitimate-driver-to-mute-edr-agent https://github.com/senzee1984/EDRPrison 规避ETW事 ………………………………