本文总结了常见的CMS后台getshell方法，包括数据库备份、上传绕过、服务器解析漏洞等。帮助提升网站安全性。

Explore the best subdomain collection tools like OneForAll and fofa_view for efficient web pentesting. Learn how to configure these tools and optimize your doma

Explore the detailed analysis of internal network proxy and penetration tools such as ICMP Tunnel, pingtunnel, and EarthWorm. This article covers their setup, u

Discover the top 10 open source security testing tools that are essential for network and application protection. Learn about Kali Linux, Metasploit, Zed Attack

Explore the top 10 rules of setting secure passwords and common habits that can compromise your online safety. Learn about password patterns based on personal i

本文详细介绍了在某次红蓝对抗中解决Solr RCE漏洞的具体过程与绕过方法，包括命令执行限制、Webshell编写及特殊字符处理等技术细节。

poc2jar是一款用Java编写的漏洞验证及利用工具，支持Python辅助依赖，并提供了丰富的功能模块。适用于安全测试和学习交流，下载地址：https://github.com/f0ng/poc2jar

本文总结了实战中遇到的各种WAF拦截SQL注入场景及绕过方法，包括%00绕过、Base64绕WAF、Emoji绕过等技巧。

LadonGo是一款开源的内网渗透扫描器，提供C段、B段、A段存活主机探测、高危漏洞检测（如MS17-010、SmbGhost）及远程命令执行等功能。

Discover and exploit vulnerabilities in multiple assets with the EHole tool. This quick batch fingerprinting solution helps red teams efficiently identify criti

ThunderSearch 是一款基于ZoomEye官方API开发的图形化信息搜集工具，支持主机搜索、域名/IP查询、个人信息获取等功能。适用于安全测试和学习交流。

Narthex is a powerful modular and customizable dictionary generator designed for security research. Utilize its tools to create personalized dictionaries for pa