本文介绍了针对白名单过滤规则下的SQL注入绕过方法，包括replace into、添加MySQL用户和rename重命名等技巧。适合网络安全专业人士阅读学习。

This article details a complex security breach involving multiple stages of attack including SSO weak passwords, source code leaks, and SQL injection. Discover

Explore comprehensive strategies and tools used by red teams to attack large-scale assets. Learn about effective asset collection methods, advanced vulnerabilit

了解如何在WebPack下提取和分析加密方法，包括搜索关键字、补齐依赖以及实现自定义加密逻辑。

Explore the detailed process of a unique pen test on TryHackMe’s Holo靶场，covering port scanning, vulnerability enumeration, privilege escalation techniques and m

Learn about the 'MalDoc in PDF' technique where attackers embed malicious Word documents within seemingly harmless PDFs. Discover how this method bypasses tradi

This article describes a detailed process of a penetration test on an educational website, covering weak password login, file upload vulnerabilities, SQL inject

Explore the techniques for exploiting coupon vulnerabilities in e-commerce systems, including coupon ID traversal, concurrent issuance, and more. Understand how

本文详细记录了一次从xss攻击演变至任意文件读取的过程，揭示了wkhtmltopdf组件的安全隐患。通过此案例，深入了解xss与ssrf的关联及修复方法。

本文详细记录了一次针对小型公司的网络渗透测试实战案例，包括如何通过钓鱼邮件和内网渗透获取权限的过程。

分享通过手机NFC功能复制洗澡卡的详细过程，探讨nfc技术的应用与挑战。本文适合网络安全和技术爱好者阅读。

This article details a penetration test from Linux to domain control. It covers techniques such as LDAP authentication, DCSYNC privilege escalation, and cloud d