Explore the detailed process of a unique pen test on TryHackMe’s Holo靶场，covering port scanning, vulnerability enumeration, privilege escalation techniques and m

Learn about the 'MalDoc in PDF' technique where attackers embed malicious Word documents within seemingly harmless PDFs. Discover how this method bypasses tradi

This article describes a detailed process of a penetration test on an educational website, covering weak password login, file upload vulnerabilities, SQL inject

Explore the techniques for exploiting coupon vulnerabilities in e-commerce systems, including coupon ID traversal, concurrent issuance, and more. Understand how

本文详细记录了一次从xss攻击演变至任意文件读取的过程，揭示了wkhtmltopdf组件的安全隐患。通过此案例，深入了解xss与ssrf的关联及修复方法。

本文详细记录了一次针对小型公司的网络渗透测试实战案例，包括如何通过钓鱼邮件和内网渗透获取权限的过程。

分享通过手机NFC功能复制洗澡卡的详细过程，探讨nfc技术的应用与挑战。本文适合网络安全和技术爱好者阅读。

This article details a penetration test from Linux to domain control. It covers techniques such as LDAP authentication, DCSYNC privilege escalation, and cloud d

本文详细介绍了对friendzone靶机的渗透过程，包括DNS区域传输和SMB文件上传技术。同时推荐了实用工具Aquatone，帮助提升渗透测试效率。

This article explores the process of decoding encrypted data in a website and exploiting password reset vulnerabilities. Learn about DES encryption modes, ECN p

本文分享了一次实战经验，详细解析了通过未授权访问和SQL注入发现并利用postgresql数据库漏洞的过程。探索网站安全测试中的关键技术和高危漏洞识别方法。

本文详细记录了一次SRC漏洞挖掘过程，通过曲线救国的方法绕过了验证码限制，并解析了RSA加密流程。适合网络安全从业者学习参考。