本文分享应急响应安全工具DuckMemoryScan，提供内存免杀后门和无文件木马检测功能。附带详细使用说明与下载地址。

Fscan是一款强大的内网综合扫描工具，支持全方位的安全检测与自动化管理。具备主机存活探测、端口扫描、服务爆破等功能，适用于网络安全运维人员进行高效安全评估。

AuxTools is a penetration testing auxiliary tool developed using C++ and QML, featuring antivirus detection, command generation, encoding/decoding, encryption/d

AsamF是一款集成多个网络资产测绘平台的搜索工具，支持子域名收集、端口扫描和Shodan高级查询。适用于网络安全研究与学习。

本文总结了常见的CMS后台getshell方法，包括数据库备份、上传绕过、服务器解析漏洞等。帮助提升网站安全性。

Explore the best subdomain collection tools like OneForAll and fofa_view for efficient web pentesting. Learn how to configure these tools and optimize your doma

Explore the detailed analysis of internal network proxy and penetration tools such as ICMP Tunnel, pingtunnel, and EarthWorm. This article covers their setup, u

Discover the top 10 open source security testing tools that are essential for network and application protection. Learn about Kali Linux, Metasploit, Zed Attack

Explore the top 10 rules of setting secure passwords and common habits that can compromise your online safety. Learn about password patterns based on personal i

本文详细介绍了在某次红蓝对抗中解决Solr RCE漏洞的具体过程与绕过方法，包括命令执行限制、Webshell编写及特殊字符处理等技术细节。

poc2jar是一款用Java编写的漏洞验证及利用工具，支持Python辅助依赖，并提供了丰富的功能模块。适用于安全测试和学习交流，下载地址：https://github.com/f0ng/poc2jar

本文总结了实战中遇到的各种WAF拦截SQL注入场景及绕过方法，包括%00绕过、Base64绕WAF、Emoji绕过等技巧。