了解如何在Windows系统中利用DDE执行代码，以及使用cscript和wscript等命令行工具从远程服务器下载并执行Payload的技术。

本文探讨了如何利用MSHTA命令执行CVE-2017-11882漏洞，重点介绍了htaa文件在安全领域的应用及命令构造方法。

Discover how Infoga can help you collect email accounts from various public resources like search engines and PGP key servers. Ideal for initial stages of penet

Learn how to add assets in OSSIM using direct addition, CSV import, SIME event import, and network scanning. Discover the steps for setting up regular automatic

Learn how to build an FTP password cracker using Ruby. Understand the concept of brute force attacks and their importance in cybersecurity. Follow this guide to

本文详细介绍如何通过Docker安装并配置最新版IVRE，包括被动流量分析、主动扫描等关键功能。

探讨除了PowerShell外，使用DDE等命令行工具远程执行恶意代码的多种方法和步骤。了解如何利用标准化、广泛部署的Microsoft二进制文件在内存中驻留而不写入硬盘。

Explore the analysis of recent Office vulnerabilities and learn how advanced threat protection tools like Windows Defender Advanced Threat Protection can help d

本文介绍利用Outlook的CreateObject方法和DotNetToJScript技术进行内网渗透的方法，通过实例化ScriptControl COM对象执行远程shellcode。

Explore the details of CVE-2017-8715 and how it allows bypassing Microsoft security patches using PowerShell module list files. Understand the impact on Device

Discover OWASP Juice Shop, a comprehensive web application designed for security training that includes over 47 challenges based on real-world vulnerabilities.

本文介绍了一种针对漏洞出现的一键排查系统，能够快速定位主机软件和Java依赖插件的版本信息。通过自动化脚本和实时监控技术，提高应急响应效率。