本文深入探讨了如何通过黑盒渗透技术攻击Java Web应用，包括中间件漏洞、框架及组件漏洞和API接口漏洞。重点关注Weblogic、Spring Security等常见安全问题。

Learn how to use Metasploit's built-in tools for conducting TCP, SYN, and XMAS scans to discover open ports. This guide covers the process of identifying vulner

This article details a penetration test conducted on a talent website, highlighting issues such as logical privilege escalation, XSS vulnerabilities, and SQL in

Learn the basics of PHP code auditing with practical examples from CTFs. Explore functions, SQL injection, session hijacking, and more to enhance your web secur

This real case study details the exploitation of a Sitescope version 9 vulnerability on an internal network. Learn about command execution and file reading vuln

Learn how to call Android JNI functions from the command line and pass Java object parameters using a small tool. This guide helps in analyzing or testing appli

本速查笔记详细介绍了SQL注入的各种技术，包括GET和POST请求、联合查询、报错注入等方法。适用于网络安全和技术专家快速学习SQL注入技巧。

文章详细解析了一款新型远控木马如何通过白利用手法，包括FileProtocolHandler函数的巧妙运用和证书导入等技术。了解此类攻击手段有助于网络安全防护，360安全卫士提供全方位防御机制。

本文提供10种排查Linux系统入侵的实用方法，包括检查日志、查看passwd和shadow文件等技巧。

Learn how weak default passwords can lead to server compromise using PHPMyAdmin and SQL injection techniques. Discover the steps from login to gaining full syst

MAC_Tools 是一个专为Mac设计的安全渗透测试工具包，包含Behinder、Burp Suite Pro等多款专业工具。适用于网络安全和运维人员进行学习与实践。

深入了解针对乌克兰计算机系统的DiskCoder.C攻击，揭示M.E.Doc合法模块中的隐蔽后门及其工作原理。