In this article, a red team expert shares valuable insights and experiences from large-scale enterprise phishing simulations. Discover key preparation steps, se

了解如何通过Shiro绕过WAF防护，以及针对阿里云WAF的RCE攻击利用。分享多个实战案例，包括Nacos未授权访问、Gitlab权限配置错误等攻防技巧。

Learn how to obtain a Telegram user's IP address using the STUN protocol. Discover the steps and tools needed for this process in detail.

This article discusses the red team assessment of a university's cybersecurity by identifying vulnerabilities in their network. It covers techniques such as inf

Explore advanced memory evasion techniques such as XOR encryption and one-click anti-sandboxing methods to bypass malware detection. This guide discusses practi

本文详细介绍了如何使用Frida对某企业版加固应用进行Hook绕过，具体展示了针对pthread_create函数的bypass方法和关键偏移量。

本文详细介绍Sliver C2的部署步骤及其基础用法，帮助安全专家掌握最新的C2工具。了解其强大的免杀能力和多平台支持特性。

This article details a case study of exploiting logical vulnerabilities using Burp Suite and Fiddler. It covers techniques for password reset through informatio

Learn advanced techniques to bypass Elastic Endpoint Detection and Response (EDR) during security assessments. Explore methods for web shell deployment, privile

了解shellcode自身免杀及加载方法，学习xor加密技术及其在内存中的执行。掌握多种加载方式，提升代码安全性。

了解如何在Netty和WebFlux中植入内存马，探索CompositeChannelPipelineConfigurer的工作原理，并学习使用Java-object-searcher辅助工具。

了解并掌握域渗透中的基本命令，包括信息收集、定位域控及执行命令等关键步骤。