https://blog.1sec.day/tags/%E4%BE%9B%E5%BA%94%E9%93%BE%E6%94%BB%E5%87%BB/ Recent content in 供应链攻击 on 思安录 | Thinking's Security Notes Hugo -- gohugo.io zh-cn Thinking Thinking Wed, 15 Jul 2026 00:00:00 +0000 https://blog.1sec.day/posts/2026-07-15-grok-cli-codebase-exfiltration/ Wed, 15 Jul 2026 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2026-07-15-grok-cli-codebase-exfiltration/ https://blog.1sec.day/posts/2025-12-26-trust-wallet-extension-backdoor/ Fri, 26 Dec 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2025-12-26-trust-wallet-extension-backdoor/ https://blog.1sec.day/posts/2025-07-03-solana-bot-supply-chain-attack/ Thu, 03 Jul 2025 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2025-07-03-solana-bot-supply-chain-attack/ https://blog.1sec.day/posts/2024-05-15-cve-2024-32002-git-rce/ Wed, 15 May 2024 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2024-05-15-cve-2024-32002-git-rce/ <p>Git 在 recursive clone 时会执行 submodule 的 post-checkout hook，攻击者构造带 symlink 的恶意仓库能在 clone 阶段直接 RCE，连上马都不用。</p> https://blog.1sec.day/posts/2020-01-14-cve-2020-0601-curveball/ Tue, 14 Jan 2020 00:00:00 +0000 Thinking https://blog.1sec.day/posts/2020-01-14-cve-2020-0601-curveball/ <p>CurveBall 让攻击者用<strong>伪造的椭圆曲线证书</strong>直接绕过 Windows 的整个信任链——只要你能算出一对「同形但不同」的椭圆曲线密钥对，你签出的证书 Windows 就认。</p>