Discover advanced techniques for password extraction in post-exploitation scenarios on Windows systems. Learn methods like procdump, Wdigest, and comsvcs.dll to

本文详细记录了一次真实的攻击IP溯源和反制过程，包括告警信息分析、IP归属地查询、域名解析及备案信息获取等技术手段。通过微步在线情报社区和阿里云账号找回功能，最终确定了攻击者的真实身份...

Discover how to exploit a certificate target through unauthorized access and front-end validation techniques. This article shares insights from a real case stud

本文详细介绍了利用JavaScript进行漏洞挖掘的技术和实战案例，涵盖敏感信息泄露、指纹信息提取、接口泄露及异步加载等关键点。通过具体实例演示如何逆向破解加密算法并测试漏洞。

Discover the steps to decrypt an app's encrypted data package and generate valid signatures using JavaScript. Learn about AES encryption with PKCS7 padding, sor

Learn how to exploit SQL injection vulnerabilities and bypass WAF by analyzing a practical case involving MySQL errors. Explore techniques for identifying colum

本文详细记录了一次针对某CMS最新版的审计过程，发现并分析了其反序列化任意文件删除的安全隐患。通过技术探讨和实践操作，揭示了CMS系统的潜在风险点。

Discover how to bypass Content Delivery Network (CDN) to find the true IP address of a website. Learn methods such as querying historical DNS records and using

本文详细记录了一次关于CMS中RCE漏洞的发现、分析和复现过程。通过对比版本源码，我们发现了关键的命令执行点，并对其实现机制进行了深入解析。

Discover how to use Alibaba Cloud’s Tongyi Lingma to quickly conduct code audits on PHP and OA systems. This article shares best practices and tips for beginner

本文详细介绍了在一次值守中如何通过社工信息收集、地图定位与多个平台检索，逐步深入溯源到攻击者完整信息的过程。适合网络安全专业人士学习交流使用。