Discover the latest methods for detecting encrypted network traffic. Learn about SSL-based encryption, webshell-related encryption, and practical implementation

揭秘一次关于二房东安装智能电表并利用微信小程序进行收费的案例。通过反编译微信小程序，发现其充值逻辑，揭露其中可能存在的欺诈行为。

本文详细描述了对ThinkPHP 3.2.3版本的源码审计过程，揭示了SQL注入和缓存漏洞的具体利用方法，并提供了实际案例。

本文深入探讨了Android设备抓包的常见场景及应对策略，包括Android 7.0之前的简单配置和单向证书认证（SSLPinning）。通过案例分析，分享了使用frida进行hook等方法，帮助开发者理解和解决实际...

本文详细介绍了如何使用autodecoder插件绕过某app的加密数据包和重放防护机制，分享了具体的技术实现步骤，并提供了相关代码示例。

了解如何使用Skeleton Key和DSRM域后门在内网环境中维持持久化访问。本文详细介绍了利用Mimikatz工具注入Skeleton Key及通过修改DSRM密码实现权限维持的方法，适用于网络安全专业人士阅读。

Analyze the security flaws in a specific order management system focusing on unauthorized file uploads. Explore authentication mechanisms and potential entry po

Learn about the severe security flaws in Mazda's infotainment systems that allow attackers to execute code via a specially crafted USB device. Understand the po

Explore the first red team experience analyzing a phishing sample. This article discusses the unpacking process, execution flow, and key features of a Python-ba

This article analyzes the file upload vulnerability in an order system that uses .NET framework. It includes details on authentication mechanisms and how a back

This article details a practical mini-program vulnerability test that led to the discovery of critical flaws. It covers static analysis and dynamic debugging te

本文详细记录了一次针对某CMS最新版的审计过程，发现并分析了其反序列化任意文件删除的安全隐患。通过技术探讨和实践操作，揭示了CMS系统的潜在风险点。