This article details an interesting experience of discovering a file upload vulnerability during an OA system penetration test. It covers the process from initi

Explore the common attack methods on GraphQL APIs and learn about securing your system with best practices. Discover how to protect against vulnerabilities in t

本文详细记录了一次针对GPU服务器的挖矿事件应急响应过程，包括排查异常IP、进程分析及恶意文件查找等关键技术步骤。

本文详细记录了一次渗透测试中针对启用debug模式的Symfony 2.8.34框架进行的利用过程，探讨了命令执行、配置文件访问以及权限绕过的具体方法和经验教训。

Explore advanced red team tactics for educational sectors focusing on JY and ZW industries. Learn about target selection, information gathering, privilege maint

This article discusses the process of penetration testing a school's internal network, including target selection, information collection, and asset mapping. Ke

本文详细分析了YL行业的网络环境特点及针对其发起的钓鱼攻击策略。探讨了不同级别的网络架构下如何实现有效的钓鱼操作，并提供了解决方案和实战技巧。

本文介绍了反沙箱分析的关键思路和技术，包括硬件检测法和BIOS检测法等方法，以帮助红队开发出能够抵御云沙箱动态分析的payload。

Discover the steps to decrypt an app's encrypted data package and generate valid signatures using JavaScript. Learn about AES encryption with PKCS7 padding, sor

Learn how to use assembly code to create a reverse shell connection. This guide explains the process of locating kernel32.dll using PEB and executing shellcode

Discover advanced techniques for password extraction in post-exploitation scenarios on Windows systems. Learn methods like procdump, Wdigest, and comsvcs.dll to

详细分析华为HG532路由器CVE-2017-17215漏洞，包括逆向工程、漏洞定位和远程代码执行流程。了解IoT设备安全关键技巧。