导语：Next.js 于 2026 年 9 月 22 日发布紧急安全更新，修复 next/og 包中 Node.js ImageResponse 的 SVG 注入漏洞 CVE-2026-94545。该漏洞 CVSS 评分为 9.5，攻击者无需认证即可远程利用，在受影响服务器上执行任意代码。
一、事件概述
2026 年 9 月 22 日，Next.js 官方发布带外安全更新，分别推出 Active LTS 16.3.6 与 Maintenance LTS 15.5.26，修复上游依赖 Satori 中的 SVG 转义缺陷。该缺陷可被利用为远程代码执行，编号 CVE-2026-94545，对应 GitHub 安全公告 GHSA-vcvr-r3jv-pc5j。官方在公告中明确表示，受影响的仅是 Node.js 版 ImageResponse，Edge 运行时不受此问题影响。
二、漏洞详情
该漏洞位于 next/og 的 ImageResponse 实现。当应用将攻击者可控制的数据写入 SVG 内容、属性或样式时，上游组件 Satori 在序列化 SVG 时未正确转义，导致注入 payload 逃逸到嵌入式 SVG 文档内部。公告给出的典型场景是：应用从 URL 参数读取 value，并将其写入 {value}，攻击者即可构造恶意输入，使 </code> 标签提前闭合，后续 payload 变成真正的 SVG 元素，最终经过渲染管线落为 PNG 位图返回。</p>
<p class="wp-block-paragraph">据公开资料，该漏洞根源来自上游 Satori 的 GHSA-wx4j-mvgx-mqwp，Next.js 在 16.3.6 中通过升级相关依赖并强化 <code>buildXMLString()</code> 转义逻辑来修复。攻击路径具备远程、无认证、无需用户交互的特点，CVSS v4 评分达到 9.5。</p>
<h2 class="wp-block-heading">三、影响范围</h2>
<p class="wp-block-paragraph">影响范围为 Next.js <code>>= 16.2.0</code> 且小于 <code>16.3.6</code>。受影响的部署需同时满足以下条件：使用 Node.js 版 <code>ImageResponse</code>，且将不受信任的输入嵌入 SVG 内容、属性或 CSS 样式。Edge 版 <code>ImageResponse</code>、以及不接收用户输入进行 SVG 渲染的应用，不在影响范围内。</p>
<p class="wp-block-paragraph">实际影响程度取决于部署环境权限：若图像生成进程可访问密钥、云凭证、内部服务或部署基础设施，攻击者成功利用后可进一步读取敏感数据、篡改内容、中断服务，或以此为跳板横向移动。</p>
<h2 class="wp-block-heading">四、修复建议</h2>
<p class="wp-block-paragraph">官方建议受影响用户尽快升级：</p>
<pre class="wp-block-code"><code lang="bash">npm install next@16.3.6 # Next.js 16.x Active LTS
npm install next@15.5.26 # Next.js 15.x Maintenance LTS（仅含加固补丁，15.x 不受 RCE 影响）</code></pre>
<p class="wp-block-paragraph">若暂时无法升级，应暂停将用户可控数据传入 Node.js <code>ImageResponse</code> 的 SVG 内容、属性及样式。需要特别注意的是，输入校验不能视为长期方案，复杂 SVG 解析行为仍可能产生意外攻击路径。</p>
<h2 class="wp-block-heading">五、POC 验证</h2>
<p class="wp-block-paragraph">公开 POC 已发布，可用于受控环境下的漏洞验证。该仓库提供 Docker 隔离实验室，对比 16.3.5 与 16.3.6 的行为差异，并通过像素级 PNG 扫描确认注入是否成立。项目明确指出不演示文件读取、SSRF 或代码执行，仅验证 SVG 注入原语。</p>
<p class="wp-block-paragraph"><strong>POC 下载地址</strong>：https://github.com/Hassham1/CVE-2026-94545-nextjs-og-poc</p>
<p class="wp-block-paragraph"><strong>版权声明</strong>：本文由华盟网原创发布，保留所有权利。配图由华盟网授权使用。 <!-- 版权：华盟网 --></p>
</div>
<div class="em09 muted-3-color"><div><span>©</span> 版权声明</div><div class="posts-copyright">文章版权归作者所有，未经允许请勿转载。</div></div><div class="text-center theme-box muted-3-color box-body separator em09">THE END</div><div class="theme-box article-tags"><a class="but ml6 radius c-blue" title="查看更多分类文章" href="https://www.77169.net/ld/zxld"><i class="fa fa-folder-open-o" aria-hidden="true"></i>最新漏洞</a><a class="but ml6 radius c-yellow" title="查看更多分类文章" href="https://www.77169.net/ld/ldyj"><i class="fa fa-folder-open-o" aria-hidden="true"></i>漏洞预警</a><br><a href="https://www.77169.net/html/tag/rce" title="查看此标签更多文章" class="but ml6 radius"># RCE</a><a href="https://www.77169.net/html/tag/%e6%bc%8f%e6%b4%9e%e9%a2%84%e8%ad%a6" title="查看此标签更多文章" class="but ml6 radius"># 漏洞预警</a><a href="https://www.77169.net/html/tag/next-js" title="查看此标签更多文章" class="but ml6 radius"># Next.js</a><a href="https://www.77169.net/html/tag/cve-2026-94545" title="查看此标签更多文章" class="but ml6 radius"># CVE-2026-94545</a><a href="https://www.77169.net/html/tag/svg%e6%b3%a8%e5%85%a5" title="查看此标签更多文章" class="but ml6 radius"># SVG注入</a></div> </div>
<div class="text-center muted-3-color box-body em09">喜欢就支持一下吧</div><div class="text-center post-actions"><a href="javascript:;" data-action="like" class="action action-like" data-pid="362025"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-like"></use></svg><text>点赞</text><count>14</count></a><span class="hover-show dropup action action-share">
<svg class="icon" aria-hidden="true"><use xlink:href="#icon-share"></use></svg><text>分享</text><div class="zib-widget hover-show-con share-button dropdown-menu"><div><a rel="nofollow" class="share-btn qzone" target="_blank" title="QQ空间" href="https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?url=https://www.77169.net/html/362025.html&title=Next.js next/og曝严重RCE漏洞CVE-2026-94545，官方紧急发布修复-华盟网&pics=https://www.77169.net/wp-content/uploads/2026/09/20260924_nextjs_og_rce_cover_1280x720.png&summary=Next.js 于 2026-09-22 发布紧急安全更新，修复 next/og 中 Node.js ImageResponse 的 SVG 注入漏洞 CVE-2026-94545。CVSS 9.5，影响 16.2.0-16.3.5，建议立即升级至 16.3.6。"><icon><svg class="icon" aria-hidden="true"><use xlink:href="#icon-qzone-color"></use></svg></icon><text>QQ空间<text></a><a rel="nofollow" class="share-btn weibo" target="_blank" title="微博" href="https://service.weibo.com/share/share.php?url=https://www.77169.net/html/362025.html&title=Next.js next/og曝严重RCE漏洞CVE-2026-94545，官方紧急发布修复-华盟网&pic=https://www.77169.net/wp-content/uploads/2026/09/20260924_nextjs_og_rce_cover_1280x720.png&searchPic=false"><icon><svg class="icon" aria-hidden="true"><use xlink:href="#icon-weibo-color"></use></svg></icon><text>微博<text></a><a rel="nofollow" class="share-btn qq" target="_blank" title="QQ好友" href="https://connect.qq.com/widget/shareqq/index.html?url=https://www.77169.net/html/362025.html&title=Next.js next/og曝严重RCE漏洞CVE-2026-94545，官方紧急发布修复-华盟网&pics=https://www.77169.net/wp-content/uploads/2026/09/20260924_nextjs_og_rce_cover_1280x720.png&desc=Next.js 于 2026-09-22 发布紧急安全更新，修复 next/og 中 Node.js ImageResponse 的 SVG 注入漏洞 CVE-2026-94545。CVSS 9.5，影响 16.2.0-16.3.5，建议立即升级至 16.3.6。"><icon><svg class="icon" aria-hidden="true"><use xlink:href="#icon-qq-color"></use></svg></icon><text>QQ好友<text></a><a rel="nofollow" class="share-btn poster" poster-share="362025" title="海报分享" href="javascript:;"><icon><svg class="icon" aria-hidden="true"><use xlink:href="#icon-poster-color"></use></svg></icon><text>海报分享<text></a><a rel="nofollow" class="share-btn copy" data-clipboard-text="https://www.77169.net/html/362025.html" data-clipboard-tag="链接" title="复制链接" href="javascript:;"><icon><svg class="icon" aria-hidden="true"><use xlink:href="#icon-copy-color"></use></svg></icon><text>复制链接<text></a></div></div></span><a href="javascript:;" class="action action-favorite signin-loader" data-pid="362025"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-favorite"></use></svg><text>收藏</text><count></count></a></div></article><div class="user-card zib-widget author">
<div class="card-content mt10 relative">
<div class="user-content">
<div class="user-avatar"><a href="https://www.77169.net/html/author/1"><span class="avatar-img avatar-lg"><img alt="小龙的头像-华盟网" src="https://www.77169.net/wp-content/themes/zibll/img/avatar-default.png" data-src="//www.77169.net/wp-content/themes/zibll/img/avatar-default.png" class="lazyload avatar avatar-id-1"></span></a></div>
<div class="user-info mt20 mb10">
<div class="user-name flex jc"><name class="flex1 flex ac"><a class="display-name text-ellipsis " href="https://www.77169.net/html/author/1">小龙</a><img class="lazyload img-icon ml3" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail-null.svg" data-src="https://www.77169.net/wp-content/themes/zibll/img/user-level-2.png" data-toggle="tooltip" title="LV2" alt="等级-LV2-华盟网"><a href="javascript:;" class="focus-color ml10 follow flex0 signin-loader" data-pid="1"><count><i class="fa fa-heart-o mr3" aria-hidden="true"></i>关注</count></a></name></div>
<div class="author-tag mt10 mini-scrollbar"><a class="but c-blue-2 tag-forum-post" data-toggle="tooltip" title="共0篇帖子" href="https://www.77169.net/html/author/1?tab=forum"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-posts"></use></svg>0</a><a class="but c-blue tag-posts" data-toggle="tooltip" title="共1519篇文章" href="https://www.77169.net/html/author/1"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-post"></use></svg>1519</a><a class="but c-green tag-comment" data-toggle="tooltip" title="共0条评论" href="https://www.77169.net/html/author/1?tab=comment"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-comment"></use></svg>0</a><span class="badg c-yellow tag-like" data-toggle="tooltip" title="获得4455个点赞"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-like"></use></svg>4455</span><span class="badg c-red tag-view" data-toggle="tooltip" title="人气值 7568W+"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-hot"></use></svg>7568W+</span></div>
<div class="user-desc mt10 muted-2-color em09">这家伙很懒，什么都没有写...</div>
</div>
</div>
<div class="swiper-container more-posts swiper-scroll"><div class="swiper-wrapper"><div class="swiper-slide mr10"><a href="https://www.77169.net/html/127616.html"><div class="graphic hover-zoom-img em09 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2017/06/hhh.jpg" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="钓鱼邮件攻击中的猥琐技巧与策略-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">钓鱼邮件攻击中的猥琐技巧与策略</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">钓鱼邮件攻击中的猥琐技巧与策略</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 19.2W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/161371.html"><div class="graphic hover-zoom-img em09 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/1500/4659769f1f4d72b.png!small" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="QQ定位女友是否回家系列二之定位系统的打造-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">QQ定位女友是否回家系列二之定位系统的打造</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">QQ定位女友是否回家系列二之定位系统的打造</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 17.6W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/65782.html"><div class="graphic hover-zoom-img em09 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2017/05/edc.png" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="解码内置不安全“加密芯片”的勒索软件Gomasom-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">解码内置不安全“加密芯片”的勒索软件Gomasom</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">解码内置不安全“加密芯片”的勒索软件Gomasom</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 15.1W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/188622.html"><div class="graphic hover-zoom-img em09 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/1513/485a3870cd172e0.png" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="“Zealot”行动揭秘：黑客组织利用 NSA 漏洞入侵 Windows 、Linux 服务器挖掘门罗币-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">“Zealot”行动揭秘：黑客组织利用 NSA 漏洞入侵 Windows 、Linux 服务器挖掘门罗币</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">“Zealot”行动揭秘：黑客组织利用 NSA 漏洞入侵 Windows 、Linux 服...</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 15.1W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/188558.html"><div class="graphic hover-zoom-img em09 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/1513/465a386b1c2475b.png!small" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="对利用CVE-2017-0199漏洞的病毒变种的监测与分析-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">对利用CVE-2017-0199漏洞的病毒变种的监测与分析</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">对利用CVE-2017-0199漏洞的病毒变种的监测与分析</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 14.9W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/188585.html"><div class="graphic hover-zoom-img em09 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/1513/465a386b2d98d33.png!small" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="利用分析利器Angr帮助更好的Exploit-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">利用分析利器Angr帮助更好的Exploit</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">利用分析利器Angr帮助更好的Exploit</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 14.8W+</item></div></div></div></a></div></div><div class="swiper-button-prev"></div><div class="swiper-button-next"></div></div>
</div>
</div> <div class="theme-box" style="height:99px">
<nav class="article-nav">
<div class="main-bg box-body radius8 main-shadow">
<a href="https://www.77169.net/html/362028.html">
<p class="muted-2-color"><i class="fa fa-angle-left em12"></i><i
class="fa fa-angle-left em12 mr6"></i>上一篇</p>
<div class="text-ellipsis-2">
WordPress get_page_template() 未认证LFI转条件RCE：CVE-2026-87902技术剖析 </div>
</a>
</div>
<div class="main-bg box-body radius8 main-shadow">
<a href="javascript:;">
<p class="muted-2-color">下一篇<i class="fa fa-angle-right em12 ml6"></i><i
class="fa fa-angle-right em12"></i></p>
<div class="text-ellipsis-2">
无更多文章 </div>
</a>
</div>
</nav>
</div>
<div class="theme-box relates relates-thumb">
<div class="box-body notop">
<div class="title-theme">相关推荐</div>
</div><div class="zib-widget"><div class="swiper-container swiper-scroll"><div class="swiper-wrapper"><div class="swiper-slide mr10"><a href="https://www.77169.net/html/207273.html"><div class="graphic hover-zoom-img mb10 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2018/05/1-27.png" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="入侵监控设备最新漏洞附Poc工具【厉害了】-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">入侵监控设备最新漏洞附Poc工具【厉害了】</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">入侵监控设备最新漏洞附Poc工具【厉害了】</div><div class="px12 opacity8 mt6"><item>8年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 13.9W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/55448.html"><div class="graphic hover-zoom-img mb10 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2017/04/t01f53a9228f29b135b.jpg" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="CVE-2017-0199：Microsoft Office RTF 漏洞利用 PoC-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">CVE-2017-0199：Microsoft Office RTF 漏洞利用 PoC</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">CVE-2017-0199：Microsoft Office RTF 漏洞利用 PoC</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 11.9W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/235920.html"><div class="graphic hover-zoom-img mb10 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2019/05/5-1557975956.jpeg" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="没错你的机会来了，微软远程桌面又翻车了CVE-2019-0708！-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">没错你的机会来了，微软远程桌面又翻车了CVE-2019-0708！</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">没错你的机会来了，微软远程桌面又翻车了CVE-2019-0708！</div><div class="px12 opacity8 mt6"><item>7年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 11.7W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/40578.html"><div class="graphic hover-zoom-img mb10 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2017/03/t015d9c3fa790becc43.png" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="Struts 2 远程代码执行漏洞(s2-045\s2-046) (含PoC)-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">Struts 2 远程代码执行漏洞(s2-045\s2-046) (含PoC)</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">Struts 2 远程代码执行漏洞(s2-045\s2-046) (含PoC)</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 11.7W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/44190.html"><div class="graphic hover-zoom-img mb10 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/1490/2158dda8847a29e.jpg" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="fastjson远程代码执行漏洞技术分析与防护方案-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">fastjson远程代码执行漏洞技术分析与防护方案</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">fastjson远程代码执行漏洞技术分析与防护方案</div><div class="px12 opacity8 mt6"><item>9年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 11.7W+</item></div></div></div></a></div><div class="swiper-slide mr10"><a href="https://www.77169.net/html/205018.html"><div class="graphic hover-zoom-img mb10 style-3" style="padding-bottom: 70%!important;"><img class="fit-cover lazyload" data-src="https://www.77169.net/wp-content/uploads/2018/04/1-116.png" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail.svg" alt="【注意】RouterOS 重要漏洞-华盟网"><div class="abs-center left-bottom graphic-text text-ellipsis">【注意】RouterOS 重要漏洞</div><div class="abs-center left-bottom graphic-text"><div class="em09 opacity8">【注意】RouterOS 重要漏洞</div><div class="px12 opacity8 mt6"><item>8年前</item><item class="pull-right"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-view"></use></svg> 11.2W+</item></div></div></div></a></div></div><div class="swiper-button-prev"></div><div class="swiper-button-next"></div></div></div></div><div class="theme-box" id="comments">
<div class="box-body notop">
<div class="title-theme">评论 <small>抢沙发</small></div>
</div>
<div class="no_webshot main-bg theme-box box-body radius8 main-shadow">
<div class="comment-signarea text-center box-body radius8">
<h3 class="text-muted em12 theme-box muted-3-color">请登录后发表评论</h3>
<p>
<a href="javascript:;" class="signin-loader but c-blue padding-lg"><i class="fa fa-fw fa-sign-in mr10" aria-hidden="true"></i>登录</a>
<a href="javascript:;" class="signup-loader ml10 but c-yellow padding-lg"><svg class="icon mr10" aria-hidden="true"><use xlink:href="#icon-signup"></use></svg>注册</a> </p>
</div>
<div id="postcomments">
<ol class="commentlist list-unstyled">
<div class="text-center comment comment-null" style="padding:40px 0;"><img style="width:280px;opacity: .7;" src="https://www.77169.net/wp-content/themes/zibll/img/null.svg"><p style="margin-top:40px;" class="em09 muted-3-color separator">暂无评论内容</p></div><div class="pagenav hide"><div class="next-page ajax-next"><a href="#"></a></div></div> </ol>
</div>
</div>
</div> </div>
</div>
<div class="sidebar">
<div data-affix="true" class="posts-nav-box" data-title="文章目录"></div><div class="zib-widget widget_block"><div style="text-align: center;">
<ol style="display: inline-block; text-align: left; margin: 0 auto; padding-left: 20px;">
<li style="margin: 4px 0; line-height: 1.3;"><a href="https://www.77169.net/redteam-tools.html" target="_blank" rel="noopener noreferrer">红队工具集合</a></li>
<li style="margin: 4px 0; line-height: 1.3;"><a href="https://www.77169.net/blueteam-tools.html" target="_blank" rel="noopener noreferrer">蓝队工具集合</a></li>
<li style="margin: 4px 0; line-height: 1.3;"><a href="https://www.77169.net/ai-hacking-agents.html" target="_blank" rel="noopener noreferrer">AI红队智能体</a></li>
<li style="margin: 4px 0; line-height: 1.3;"><a href="https://www.77169.net/pentest-tools.html" target="_blank" rel="noopener noreferrer">渗透测试工具集合</a></li>
<li style="margin: 4px 0; line-height: 1.3;"><a href="https://www.77169.net/security-tools.html" target="_blank" rel="noopener noreferrer">安全工具集合</a></li>
</ol>
</div></div><div class="zib-widget widget_categories"><h3>分类</h3><form action="https://www.77169.net" method="get"><label class="screen-reader-text" for="cat">分类</label><select name='cat' id='cat' class='postform'>
<option value='-1'>选择分类</option>
<option class="level-0" value="7">安全资讯 (6,685)</option>
<option class="level-1" value="22"> 原创推荐 (318)</option>
<option class="level-1" value="13"> 最新资讯 (3,437)</option>
<option class="level-1" value="11"> 网络资讯 (363)</option>
<option class="level-0" value="21">教学频道 (2,733)</option>
<option class="level-1" value="72"> WEB开发 (3)</option>
<option class="level-1" value="56"> 书籍下载 (18)</option>
<option class="level-1" value="66"> 其他教程类 (7)</option>
<option class="level-1" value="74"> 办公系列 (1)</option>
<option class="level-1" value="14"> 新手入门 (83)</option>
<option class="level-1" value="50"> 有意思 (28)</option>
<option class="level-1" value="39"> 疑难技巧 (31)</option>
<option class="level-1" value="44"> 硬件频道 (5)</option>
<option class="level-1" value="9"> 软件 (4)</option>
<option class="level-1" value="189"> 防诈骗 (39)</option>
<option class="level-1" value="52"> 黑客工具 (1,257)</option>
<option class="level-2" value="57"> 其他工具 (19)</option>
<option class="level-3" value="55"> 应用软件 (3)</option>
<option class="level-2" value="15"> 工具介绍 (1,098)</option>
<option class="level-0" value="58">渗透测试 (1,384)</option>
<option class="level-1" value="85"> 代码审计 (69)</option>
<option class="level-1" value="37"> 入侵检测 (12)</option>
<option class="level-1" value="19"> 加密解密 (12)</option>
<option class="level-1" value="82"> 渗透技巧 (199)</option>
<option class="level-1" value="54"> 编程调试 (24)</option>
<option class="level-1" value="64"> 脚本入侵 (5)</option>
<option class="level-0" value="25">漏洞 (640)</option>
<option class="level-1" value="26"> 最新漏洞 (279)</option>
<option class="level-1" value="30"> 本地漏洞 (1)</option>
<option class="level-1" value="61"> 漏洞利用 (141)</option>
<option class="level-1" value="6878"> 漏洞预警 (42)</option>
<option class="level-1" value="33"> 网站漏洞 (9)</option>
<option class="level-1" value="83"> 脚本漏洞攻击 (13)</option>
<option class="level-1" value="29"> 远程漏洞 (10)</option>
<option class="level-0" value="49">网络安全 (2,645)</option>
<option class="level-1" value="40"> Linux (74)</option>
<option class="level-1" value="46"> web安全 (70)</option>
<option class="level-2" value="36"> 网站建设 (3)</option>
<option class="level-1" value="819"> 信息安全 (696)</option>
<option class="level-1" value="79"> 安全技术 (194)</option>
<option class="level-1" value="1"> 安全界 (1,359)</option>
<option class="level-1" value="35"> 应用安全 (22)</option>
<option class="level-2" value="77"> 网络应用 (5)</option>
<option class="level-1" value="67"> 操作系统 (2)</option>
<option class="level-1" value="73"> 数据库 (16)</option>
<option class="level-1" value="60"> 木马类 (12)</option>
<option class="level-1" value="7114"> 物联网安全 (2)</option>
<option class="level-1" value="23"> 社会工程学 (13)</option>
<option class="level-1" value="10"> 系统安全 (24)</option>
<option class="level-1" value="766"> 网络产品 (7)</option>
<option class="level-1" value="76"> 网络原理 (3)</option>
<option class="level-0" value="18">黑客新闻 (1,621)</option>
<option class="level-1" value="45"> 威胁情报分析 (63)</option>
<option class="level-1" value="17"> 木马天地 (26)</option>
<option class="level-1" value="47"> 极客新闻 (35)</option>
<option class="level-1" value="20"> 病毒知识 (24)</option>
<option class="level-1" value="84"> 黑客入侵 (225)</option>
<option class="level-1" value="16"> 黑客技术 (1,037)</option>
<option class="level-1" value="63"> 黑客攻防 (80)</option>
</select>
</form><script>
( ( dropdownId ) => {
const dropdown = document.getElementById( dropdownId );
function onSelectChange() {
setTimeout( () => {
if ( 'escape' === dropdown.dataset.lastkey ) {
return;
}
if ( dropdown.value && parseInt( dropdown.value ) > 0 && dropdown instanceof HTMLSelectElement ) {
dropdown.parentElement.submit();
}
}, 250 );
}
function onKeyUp( event ) {
if ( 'Escape' === event.key ) {
dropdown.dataset.lastkey = 'escape';
} else {
delete dropdown.dataset.lastkey;
}
}
function onClick() {
delete dropdown.dataset.lastkey;
}
dropdown.addEventListener( 'keyup', onKeyUp );
dropdown.addEventListener( 'click', onClick );
dropdown.addEventListener( 'change', onSelectChange );
})( "cat" );
//# sourceURL=WP_Widget_Categories%3A%3Awidget
</script>
</div></div></main>
<div class="container fluid-widget"></div><footer class="footer">
<div class="container-fluid container-footer">
<ul class="list-inline"><li class="hidden-xs" style="max-width: 300px;"><p><a class="footer-logo" href="https://www.77169.net" title="华盟">
<img src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail-sm.svg" data-src="https://www.77169.net/wp-content/themes/zibll/img/logo.png" switch-src="https://www.77169.net/wp-content/themes/zibll/img/logo_dark.png" alt="华盟" class="lazyload" style="height: 40px;">
</a></p><div class="footer-muted em09">华盟网</div></li><li style="max-width: 550px;"><p class="fcode-links"> <a href="https://www.77169.net/us">关于我们 </a>
<a href="https://www.77169.net/call">联系我们 </a>
<a href="https://www.77169.net/sitemaps">站点地图 </a>
<a href="http://www.aqtd.com/">华盟信安</a>
<a href="https://www.ifaxin.com/subInvite/subscriptionInvite.do?invitecode=fcc58a5d-848f-4ee9-b082-950e6a9b74d6">邮件订阅</a></p><div class="footer-muted em09">Copyright © 2026 · <a href="https://www.77169.net">华盟网</a></div><div class="footer-contact mt10 hidden-xs"><a class="toggle-radius hover-show nowave" href="javascript:;"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-d-wechat"></use></svg><div class="hover-show-con footer-wechat-img"><img style="box-shadow: 0 5px 10px rgba(0,0,0,.2); border-radius:4px;" height="100" class="lazyload" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail-sm.svg" data-src="https://www.77169.net/wp-content/uploads/2026/03/qrcode_for_gh_886b94872294_258.jpg" alt="扫一扫加微信-华盟网"></div></a><a class="toggle-radius" data-toggle="tooltip" target="_blank" title="QQ联系" href="https://wpa.qq.com/msgrd?v=3&uin=652471&site=qq&menu=yes"><svg class="icon" aria-hidden="true" data-viewBox="-50 0 1100 1100" viewBox="-50 0 1100 1100"><use xlink:href="#icon-d-qq"></use></svg></a><a class="toggle-radius" data-toggle="tooltip" title="微博" target="_blank" href="https://weibo.com/"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-d-weibo"></use></svg></a><a class="toggle-radius" data-toggle="tooltip" title="发邮件" href="mailto:652471@QQ.COM"><svg class="icon" aria-hidden="true" data-viewBox="-20 80 1024 1024" viewBox="-20 80 1024 1024"><use xlink:href="#icon-d-email"></use></svg></a></div></li><li class="hidden-xs"><div class="footer-miniimg" data-toggle="tooltip" title="扫码加QQ群">
<p>
<img class="lazyload" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail-sm.svg" data-src="https://www.77169.net/wp-content/uploads/2026/03/捕获.png" alt="扫码加QQ群-华盟网">
</p>
<span class="opacity8 em09">扫码加QQ群</span>
</div><div class="footer-miniimg" data-toggle="tooltip" title="扫码加微信">
<p>
<img class="lazyload" src="https://www.77169.net/wp-content/themes/zibll/img/thumbnail-sm.svg" data-src="https://www.77169.net/wp-content/uploads/2026/03/qrcode_for_gh_886b94872294_258.jpg" alt="扫码加微信-华盟网">
</p>
<span class="opacity8 em09">扫码加微信</span>
</div></li></ul> </div>
</footer>
<script type="speculationrules">
{"prefetch":[{"source":"document","where":{"and":[{"href_matches":"/*"},{"not":{"href_matches":["/wp-*.php","/wp-admin/*","/wp-content/uploads/*","/wp-content/*","/wp-content/plugins/*","/wp-content/themes/zibll/*","/*\\?(.+)"]}},{"not":{"selector_matches":"a[rel~=\"nofollow\"]"}},{"not":{"selector_matches":".no-prefetch, .no-prefetch a"}}]},"eagerness":"conservative"}]}
</script>
<script type="text/javascript">
window._win = {
views: '362025',
www: 'https://www.77169.net',
uri: 'https://www.77169.net/wp-content/themes/zibll',
ver: '8.8.1',
imgbox: '1',
imgbox_type: 'group',
imgbox_thumbs: '1',
imgbox_zoom: '1',
imgbox_full: '1',
imgbox_play: '1',
imgbox_down: '1',
sign_type: 'modal',
signin_url: 'https://www.77169.net/user-sign-2?tab=signin&redirect_to=https%3A%2F%2Fwww.77169.net%2Fhtml%2F362025.html',
signup_url: 'https://www.77169.net/user-sign-2?tab=signup&redirect_to=https%3A%2F%2Fwww.77169.net%2Fhtml%2F362025.html',
ajax_url: 'https://www.77169.net/wp-admin/admin-ajax.php',
ajaxpager: '',
ajax_trigger: '<i class="fa fa-angle-right"></i>加载更多',
ajax_nomore: '没有更多内容了',
qj_loading: '',
highlight_kg: '1',
highlight_hh: '',
highlight_btn: '1',
highlight_zt: 'classic',
highlight_white_zt: 'classic',
highlight_dark_zt: 'atomic',
upload_img_size: '3',
img_upload_multiple: '6',
upload_video_size: '30',
upload_file_size: '30',
upload_ext: 'jpg|jpeg|jpe|gif|png|bmp|tiff|tif|webp|avif|ico|heic|heif|heics|heifs|asf|asx|wmv|wmx|wm|avi|divx|flv|mov|qt|mpeg|mpg|mpe|mp4|m4v|ogv|webm|mkv|3gp|3gpp|3g2|3gp2|txt|asc|c|cc|h|srt|csv|tsv|ics|rtx|css|vtt|dfxp|mp3|m4a|m4b|aac|ra|ram|wav|x-wav|ogg|oga|flac|mid|midi|wma|wax|mka|rtf|pdf|class|tar|zip|gz|gzip|rar|7z|psd|xcf|doc|pot|pps|ppt|wri|xla|xls|xlt|xlw|mdb|mpp|docx|docm|dotx|dotm|xlsx|xlsm|xlsb|xltx|xltm|xlam|pptx|pptm|ppsx|ppsm|potx|potm|ppam|sldx|sldm|onetoc|onetoc2|onetmp|onepkg|oxps|xps|odt|odp|ods|odg|odc|odb|odf|wp|wpd|key|numbers|pages',
user_upload_nonce: '49408b264d',
post_action_nonce: '8af6d3f9d6',
is_split_upload: '1',
split_minimum_size: '20',
comment_upload_img: '',
translate_config: '',
}
</script>
<script type="text/javascript">window._win.translate_config = [];</script><div class="float-right round position-bottom scroll-down-hide"><span class="newadd-btns hover-show float-btn add-btn">
<i class="fa fa-pencil" aria-hidden="true"></i>
<div class="hover-show-con dropdown-menu drop-newadd"><a rel="nofollow" class="btn-newadd" href="https://www.77169.net/%e6%8a%95%e7%a8%bf"><icon class="jb-green"><i class="fa fa-pencil-square"></i></icon><text>发布文章</text></a><a class="signin-loader btn-newadd" href="javascript:;"><icon class="jb-pink"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-topic"></use></svg></icon><text>创建话题</text></a><a class="signin-loader plate-add btn-newadd" href="javascript:;"><icon class="jb-yellow"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-plate-fill"></use></svg></icon><text>创建版块</text></a><a rel="nofollow" class="btn-newadd" href="https://www.77169.net/posts-edit"><icon class="jb-blue"><svg class="icon" aria-hidden="true"><use xlink:href="#icon-posts"></use></svg></icon><text>发布帖子</text></a></div>
</span><a class="float-btn ontop fade" data-toggle="tooltip" data-placement="left" title="返回顶部" href="javascript:(scrollTopTo());"><i class="fa fa-angle-up em12"></i></a></div><div mini-touch="nav_search" touch-direction="top" class="main-search fixed-body main-bg box-body navbar-search nopw-sm"><div class="container"><div class="mb20 search-close-box"><button class="but cir" data-toggle-class data-target=".navbar-search" ><svg class="ic-close" aria-hidden="true"><use xlink:href="#icon-close"></use></svg></button></div><div remote-box="https://www.77169.net/wp-admin/admin-ajax.php?action=search_box" load-click><div class="search-input"><p><i class="placeholder s1 mr6"></i><i class="placeholder s1 mr6"></i><i class="placeholder s1 mr6"></i></p><p class="placeholder k2"></p>
<p class="placeholder t1"></p><p><i class="placeholder s1 mr6"></i><i class="placeholder s1 mr6"></i><i class="placeholder s1 mr6"></i><i class="placeholder s1 mr6"></i></p><p class="placeholder k1"></p><p class="placeholder t1"></p><p></p>
<p class="placeholder k1" style="height: 80px;"></p>
</div></div></div></div> <div class="modal fade" id="u_sign" tabindex="-1" role="dialog">
<div class="modal-dialog" role="document">
<div class="sign-content">
<div class="sign zib-widget blur-bg relative">
<button class="close" data-dismiss="modal">
<svg class="ic-close" aria-hidden="true" data-viewBox="0 0 1024 1024" viewBox="0 0 1024 1024"><use xlink:href="#icon-close"></use></svg> </button>
<div class="tab-content"><div class="tab-pane fade active in" id="tab-sign-in"><div class="box-body"><div class="title-h-left fa-2x">登录</div><a class="muted-color px12" href="#tab-sign-up" data-toggle="tab">没有账号？立即注册<i class="em12 ml3 fa fa-angle-right"></i></a></div><div id="sign-in"><form><div class="relative line-form mb10"><input type="text" name="username" class="line-form-input" tabindex="1" placeholder=""><i class="line-form-line"></i><div class="scale-placeholder">用户名或邮箱</div></div><div class="relative line-form mb10"><input type="password" name="password" class="line-form-input" tabindex="2" placeholder=""><div class="scale-placeholder">登录密码</div><div class="abs-right passw muted-2-color"><i class="fa-fw fa fa-eye"></i></div><i class="line-form-line"></i></div><input machine-verification="slider" type="hidden" name="captcha_mode" value="slider" slider-id=""><div class="relative line-form mb10 em09"><span class="muted-color form-checkbox"><input type="checkbox" id="remember" checked="checked" tabindex="4" name="remember" value="forever"><label for="remember" class="ml3">记住登录</label></span><span class="pull-right muted-2-color"><a rel="nofollow" class="muted-2-color" href="https://www.77169.net/user-sign-2?tab=resetpassword&redirect_to=https%3A%2F%2Fwww.77169.net%2Fhtml%2F362025.html">找回密码</a></span></div><div class="box-body"><input type="hidden" name="action" value="user_signin"><button type="button" class="but radius jb-blue padding-lg signsubmit-loader btn-block"><i class="fa fa-sign-in mr10"></i>登录</button></div></form></div></div><div class="tab-pane fade" id="tab-sign-up"><div class="box-body"><div class="title-h-left fa-2x">注册</div><a class="muted-color px12" href="#tab-sign-in" data-toggle="tab">已有账号，立即登录<i class="em12 ml3 fa fa-angle-right"></i></a></div><form id="sign-up"><div class="relative line-form mb10"><input type="text" name="name" class="line-form-input" tabindex="1" placeholder=""><i class="line-form-line"></i><div class="scale-placeholder">设置用户名</div></div><div class="relative line-form mb10"><input type="password" name="password2" class="line-form-input" tabindex="3" placeholder=""><div class="scale-placeholder">设置密码</div><div class="abs-right passw muted-2-color"><i class="fa-fw fa fa-eye"></i></div><i class="line-form-line"></i></div><div class="relative line-form mb10"><input type="password" name="repassword" class="line-form-input" tabindex="4" placeholder=""><div class="scale-placeholder">重复密码</div><div class="abs-right passw muted-2-color"><i class="fa-fw fa fa-eye"></i></div><i class="line-form-line"></i></div><input machine-verification="slider" type="hidden" name="captcha_mode" value="slider" slider-id=""><div class="box-body"><input type="hidden" name="action" value="user_signup"><button type="button" class="but radius jb-green padding-lg signsubmit-loader btn-block"><svg class="icon mr10" aria-hidden="true" data-viewBox="0 0 1024 1024" viewBox="0 0 1024 1024"><use xlink:href="#icon-signup"></use></svg>注册</button></div></form></div></div> </div>
</div>
</div>
</div>
<script id="bootstrap-js" src="https://www.77169.net/wp-content/themes/zibll/js/libs/bootstrap.min.js?ver=8.8.1"></script>
<script id="_loader-js" src="https://www.77169.net/wp-content/themes/zibll/js/loader.js?ver=8.8.1"></script>
<script id="forums-js" src="https://www.77169.net/wp-content/themes/zibll/inc/functions/bbs/assets/js/main.min.js?ver=8.8.1"></script>
<script id="shop-js" src="https://www.77169.net/wp-content/themes/zibll/inc/functions/shop/assets/js/main.min.js?ver=8.8.1"></script>
<script id="wp-statistics-tracker-js-extra">
var WP_Statistics_Tracker_Object = {"requestUrl":"https://www.77169.net","ajaxUrl":"https://www.77169.net/wp-admin/admin-ajax.php","hitParams":{"wp_statistics_hit":1,"source_type":"post","source_id":362025,"search_query":"","signature":"0e7f53f769f3a76c15c4341c9dbc41fe","action":"wp_statistics_hit_record"},"option":{"dntEnabled":"","bypassAdBlockers":"1","consentIntegration":{"name":null,"status":[]},"isPreview":false,"userOnline":false,"isWpConsentApiActive":false},"isLegacyEventLoaded":"","customEventAjaxUrl":"https://www.77169.net/wp-admin/admin-ajax.php?action=wp_statistics_custom_event&nonce=961d246758","onlineParams":{"wp_statistics_hit":1,"source_type":"post","source_id":362025,"search_query":"","signature":"0e7f53f769f3a76c15c4341c9dbc41fe","action":"wp_statistics_online_check"},"jsCheckTime":"60000"};
//# sourceURL=wp-statistics-tracker-js-extra
</script>
<script id="wp-statistics-tracker-js" src="https://www.77169.net/?234ee2=279a196cbf.js&ver=14.16.10"></script>
<!--baidu_push_js-->
<script type="text/javascript">
(function() {
var bp = document.createElement('script');
var curProtocol = window.location.protocol.split(':')[0];
if (curProtocol === 'https') {
bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
} else {
bp.src = 'http://push.zhanzhang.baidu.com/push.js';
}
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(bp, s);
})();
</script>
<!--baidu_push_js-->
<script type="text/javascript">
console.log("数据库查询：19次 | 页面生成耗时：411.109ms");
</script>
</body>
</html><!-- Performance optimized by Redis Object Cache. Learn more: https://wprediscache.com -->
<!-- WP Fastest Cache file was created in 0.391 seconds, on 2026年9月24日 @ am9:57 --><!-- need to refresh to see cached version -->
