This article details a complex security breach involving multiple stages of attack including SSO weak passwords, source code leaks, and SQL injection. Discover

Explore comprehensive strategies and tools used by red teams to attack large-scale assets. Learn about effective asset collection methods, advanced vulnerabilit

了解如何在WebPack下提取和分析加密方法，包括搜索关键字、补齐依赖以及实现自定义加密逻辑。

Explore the detailed process of a unique pen test on TryHackMe’s Holo靶场，covering port scanning, vulnerability enumeration, privilege escalation techniques and m

Learn about the 'MalDoc in PDF' technique where attackers embed malicious Word documents within seemingly harmless PDFs. Discover how this method bypasses tradi

This article describes a detailed process of a penetration test on an educational website, covering weak password login, file upload vulnerabilities, SQL inject

Explore the techniques for exploiting coupon vulnerabilities in e-commerce systems, including coupon ID traversal, concurrent issuance, and more. Understand how

本文详细记录了一次从xss攻击演变至任意文件读取的过程，揭示了wkhtmltopdf组件的安全隐患。通过此案例，深入了解xss与ssrf的关联及修复方法。

本文详细记录了一次针对小型公司的网络渗透测试实战案例，包括如何通过钓鱼邮件和内网渗透获取权限的过程。

分享通过手机NFC功能复制洗澡卡的详细过程，探讨nfc技术的应用与挑战。本文适合网络安全和技术爱好者阅读。

This article details a penetration test from Linux to domain control. It covers techniques such as LDAP authentication, DCSYNC privilege escalation, and cloud d

本文详细介绍了对friendzone靶机的渗透过程，包括DNS区域传输和SMB文件上传技术。同时推荐了实用工具Aquatone，帮助提升渗透测试效率。