MasonLiu/PyBot
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity
main
PyBot/resources/JSON/xianzhi.json

1002 lines
34 KiB
JSON
Raw Permalink Normal View History

update
2024-12-25 22:57:42 +08:00
[
大型更新优化
2025-01-22 14:03:36 +08:00
{
"title": "从PAGE_GUARD HOOK 到内存扫描规避",
"link": "https://xz.aliyun.com/t/17046",
"published": "2025-01-07T12:31:52+08:00",
"id": "https://xz.aliyun.com/t/17046",
"summary": {
"@type": "html",
"#text": "从PAGE_GUARD HOOK 到内存扫描规避"
}
},
{
"title": "免杀基础-硬断Hook",
"link": "https://xz.aliyun.com/t/17045",
"published": "2025-01-07T12:31:25+08:00",
"id": "https://xz.aliyun.com/t/17045",
"summary": {
"@type": "html",
"#text": "免杀基础-硬断Hook"
}
},
{
"title": "记一次题型VM-软件系统安全赛-pwn-<vm>",
"link": "https://xz.aliyun.com/t/17043",
"published": "2025-01-07T01:21:16+08:00",
"id": "https://xz.aliyun.com/t/17043",
"summary": {
"@type": "html",
"#text": "记一次题型VM-软件系统安全赛-pwn-<vm>"
}
},
{
"title": "aws之创建后门实现持久化利用的方式",
"link": "https://xz.aliyun.com/t/17040",
"published": "2025-01-06T17:14:00+08:00",
"id": "https://xz.aliyun.com/t/17040",
"summary": {
"@type": "html",
"#text": "aws之创建后门实现持久化利用的方式"
}
},
{
"title": "Sharp4Rundll32：一款通过.NET反射实现Rundll32功能绕过安全防护的工具",
"link": "https://xz.aliyun.com/t/17038",
"published": "2025-01-06T15:54:34+08:00",
"id": "https://xz.aliyun.com/t/17038",
"summary": {
"@type": "html",
"#text": "Sharp4Rundll32：一款通过.NET反射实现Rundll32功能绕过安全防护的工具"
}
},
{
"title": "软件系统安全赛CachedVisitor详解——记一次对Redis+ssrf的详细分析",
"link": "https://xz.aliyun.com/t/17036",
"published": "2025-01-06T12:07:06+08:00",
"id": "https://xz.aliyun.com/t/17036",
"summary": {
"@type": "html",
"#text": "软件系统安全赛CachedVisitor详解——记一次对Redis+ssrf的详细分析"
}
},
{
"title": "Lua项目下SSRF利用Redis文件覆盖lua回显RCE",
"link": "https://xz.aliyun.com/t/17034",
"published": "2025-01-06T10:05:25+08:00",
"id": "https://xz.aliyun.com/t/17034",
"summary": {
"@type": "html",
"#text": "Lua项目下SSRF利用Redis文件覆盖lua回显RCE"
}
},
{
"title": "MaxKB远程命令执行漏洞分析(CVE-2024-56137)",
"link": "https://xz.aliyun.com/t/17031",
"published": "2025-01-05T22:37:00+08:00",
"id": "https://xz.aliyun.com/t/17031",
"summary": {
"@type": "html",
"#text": "MaxKB远程命令执行漏洞分析(CVE-2024-56137)"
}
},
{
"title": "codeql 之 SSRF 漏洞自动化 寻找",
"link": "https://xz.aliyun.com/t/17030",
"published": "2025-01-05T21:18:11+08:00",
"id": "https://xz.aliyun.com/t/17030",
"summary": {
"@type": "html",
"#text": "codeql 之 SSRF 漏洞自动化 寻找"
}
},
{
"title": "使用分支对抗进行webshell bypass",
"link": "https://xz.aliyun.com/t/17029",
"published": "2025-01-05T18:33:40+08:00",
"id": "https://xz.aliyun.com/t/17029",
"summary": {
"@type": "html",
"#text": "使用分支对抗进行webshell bypass"
}
},
{
"title": "Solon内存马构造",
"link": "https://xz.aliyun.com/t/17028",
"published": "2025-01-05T17:36:22+08:00",
"id": "https://xz.aliyun.com/t/17028",
"summary": {
"@type": "html",
"#text": "Solon内存马构造"
}
},
{
"title": "强网杯RS加密签名伪造及PyramidWeb利用栈帧打内存马",
"link": "https://xz.aliyun.com/t/17027",
"published": "2025-01-05T17:12:56+08:00",
"id": "https://xz.aliyun.com/t/17027",
"summary": {
"@type": "html",
"#text": "强网杯RS加密签名伪造及PyramidWeb利用栈帧打内存马"
}
},
{
"title": "XXE 在文件上传当中的应用",
"link": "https://xz.aliyun.com/t/17026",
"published": "2025-01-05T17:10:20+08:00",
"id": "https://xz.aliyun.com/t/17026",
"summary": {
"@type": "html",
"#text": "XXE 在文件上传当中的应用"
}
},
{
"title": "php木马的混淆免杀探究",
"link": "https://xz.aliyun.com/t/17023",
"published": "2025-01-05T13:29:00+08:00",
"id": "https://xz.aliyun.com/t/17023",
"summary": {
"@type": "html",
"#text": "php木马的混淆免杀探究"
}
},
{
"title": "ctf中的字节爆破",
"link": "https://xz.aliyun.com/t/17022",
"published": "2025-01-04T19:37:51+08:00",
"id": "https://xz.aliyun.com/t/17022",
"summary": {
"@type": "html",
"#text": "ctf中的字节爆破"
}
},
{
"title": "Thinkphp6高版本反序列化toString新链调试挖掘",
"link": "https://xz.aliyun.com/t/17019",
"published": "2025-01-04T13:17:14+08:00",
"id": "https://xz.aliyun.com/t/17019",
"summary": {
"@type": "html",
"#text": "Thinkphp6高版本反序列化toString新链调试挖掘"
}
},
{
"title": "探究Pker对opcode字节码的利用",
"link": "https://xz.aliyun.com/t/17018",
"published": "2025-01-04T11:11:08+08:00",
"id": "https://xz.aliyun.com/t/17018",
"summary": {
"@type": "html",
"#text": "探究Pker对opcode字节码的利用"
}
},
{
"title": "Yaml反序列化name标签打响应头回显",
"link": "https://xz.aliyun.com/t/17017",
"published": "2025-01-04T01:27:15+08:00",
"id": "https://xz.aliyun.com/t/17017",
"summary": {
"@type": "html",
"#text": "Yaml反序列化name标签打响应头回显"
}
},
{
"title": "Pickle反序列化中的字节码重写绕过",
"link": "https://xz.aliyun.com/t/17016",
"published": "2025-01-03T23:50:09+08:00",
"id": "https://xz.aliyun.com/t/17016",
"summary": {
"@type": "html",
"#text": "Pickle反序列化中的字节码重写绕过"
}
},
{
"title": "【Reverse-Crypto】深入逆向-密码篇-MD5算法详解以及代码编写",
"link": "https://xz.aliyun.com/t/17014",
"published": "2025-01-03T21:40:27+08:00",
"id": "https://xz.aliyun.com/t/17014",
"summary": {
"@type": "html",
"#text": "【Reverse-Crypto】深入逆向-密码篇-MD5算法详解以及代码编写"
}
},
{
"title": "ORW：侧信道时间盲注",
"link": "https://xz.aliyun.com/t/17011",
"published": "2025-01-03T21:22:32+08:00",
"id": "https://xz.aliyun.com/t/17011",
"summary": {
"@type": "html",
"#text": "ORW：侧信道时间盲注"
}
},
{
"title": "AWD：PWN流程与技巧总结",
"link": "https://xz.aliyun.com/t/17010",
"published": "2025-01-03T21:17:32+08:00",
"id": "https://xz.aliyun.com/t/17010",
"summary": {
"@type": "html",
"#text": "AWD：PWN流程与技巧总结"
}
},
{
"title": "信呼 OA 最新 sql 注入分析",
"link": "https://xz.aliyun.com/t/17007",
"published": "2025-01-03T16:54:52+08:00",
"id": "https://xz.aliyun.com/t/17007",
"summary": {
"@type": "html",
"#text": "信呼 OA 最新 sql 注入分析"
}
},
{
"title": "某小说vip破解代码分析",
"link": "https://xz.aliyun.com/t/17006",
"published": "2025-01-03T16:01:37+08:00",
"id": "https://xz.aliyun.com/t/17006",
"summary": {
"@type": "html",
"#text": "某小说vip破解代码分析"
}
},
{
"title": "Hoverfly 任意文件读取漏洞分析",
"link": "https://xz.aliyun.com/t/17004",
"published": "2025-01-03T15:39:34+08:00",
"id": "https://xz.aliyun.com/t/17004",
"summary": {
"@type": "html",
"#text": "Hoverfly 任意文件读取漏洞分析"
}
},
{
"title": "Sekiro+Yakit 热加载无痛绕sign",
"link": "https://xz.aliyun.com/t/17003",
"published": "2025-01-03T15:09:34+08:00",
"id": "https://xz.aliyun.com/t/17003",
"summary": {
"@type": "html",
"#text": "Sekiro+Yakit 热加载无痛绕sign"
}
},
{
"title": "cJSON库函数存在的堆溢出漏洞分析",
"link": "https://xz.aliyun.com/t/16999",
"published": "2025-01-02T20:58:51+08:00",
"id": "https://xz.aliyun.com/t/16999",
"summary": {
"@type": "html",
"#text": "cJSON库函数存在的堆溢出漏洞分析"
}
},
{
"title": "WP-0ops2024-pwn-<IP Management System>",
"link": "https://xz.aliyun.com/t/16998",
"published": "2025-01-02T18:50:18+08:00",
"id": "https://xz.aliyun.com/t/16998",
"summary": {
"@type": "html",
"#text": "WP-0ops2024-pwn-<IP Management System>"
}
},
{
"title": "Linux渗透实战之Hackademic: RTB1靶场提权",
"link": "https://xz.aliyun.com/t/16995",
"published": "2025-01-02T15:22:06+08:00",
"id": "https://xz.aliyun.com/t/16995",
"summary": {
"@type": "html",
"#text": "Linux渗透实战之Hackademic: RTB1靶场提权"
}
},
{
"title": "Sharp4UACPASS：一款通过调用CMSTP进程绕过UAC的工具",
"link": "https://xz.aliyun.com/t/16994",
"published": "2025-01-02T15:12:05+08:00",
"id": "https://xz.aliyun.com/t/16994",
"summary": {
"@type": "html",
"#text": "Sharp4UACPASS：一款通过调用CMSTP进程绕过UAC的工具"
}
},
{
"title": "传统Office结构下的后门和利用手段解析",
"link": "https://xz.aliyun.com/t/16993",
"published": "2025-01-02T14:54:47+08:00",
"id": "https://xz.aliyun.com/t/16993",
"summary": {
"@type": "html",
"#text": "传统Office结构下的后门和利用手段解析"
}
},
{
"title": "蚁景网安实验室-双层内网渗透虚拟仿真实战",
"link": "https://xz.aliyun.com/t/16992",
"published": "2025-01-02T14:51:14+08:00",
"id": "https://xz.aliyun.com/t/16992",
"summary": {
"@type": "html",
"#text": "蚁景网安实验室-双层内网渗透虚拟仿真实战"
}
},
{
"title": "春秋云镜—专业徽章—Initial",
"link": "https://xz.aliyun.com/t/16991",
"published": "2025-01-02T14:43:00+08:00",
"id": "https://xz.aliyun.com/t/16991",
"summary": {
"@type": "html",
"#text": "春秋云镜—专业徽章—Initial"
}
},
{
"title": "JAVA代码审计-StudentManager",
"link": "https://xz.aliyun.com/t/16990",
"published": "2025-01-02T11:32:05+08:00",
"id": "https://xz.aliyun.com/t/16990",
"summary": {
"@type": "html",
"#text": "JAVA代码审计-StudentManager"
}
},
{
"title": "伪装成Chrome安装程序传播银狐最新变种",
"link": "https://xz.aliyun.com/t/16989",
"published": "2025-01-02T07:46:43+08:00",
"id": "https://xz.aliyun.com/t/16989",
"summary": {
"@type": "html",
"#text": "伪装成Chrome安装程序传播银狐最新变种"
}
},
{
"title": "绕过App某加密企业版加固Frida检测",
"link": "https://xz.aliyun.com/t/16988",
"published": "2025-01-01T23:59:38+08:00",
"id": "https://xz.aliyun.com/t/16988",
"summary": {
"@type": "html",
"#text": "绕过App某加密企业版加固Frida检测"
}
},
{
"title": "无限安全靶场-月挑战靶场1",
"link": "https://xz.aliyun.com/t/16984",
"published": "2025-01-01T22:30:52+08:00",
"id": "https://xz.aliyun.com/t/16984",
"summary": {
"@type": "html",
"#text": "无限安全靶场-月挑战靶场1"
}
},
{
"title": "shiro codeql分析理解（附带完整ql代码）",
"link": "https://xz.aliyun.com/t/16983",
"published": "2025-01-01T20:07:25+08:00",
"id": "https://xz.aliyun.com/t/16983",
"summary": {
"@type": "html",
"#text": "shiro codeql分析理解（附带完整ql代码）"
}
},
{
"title": "前端加密对抗常见场景突破",
"link": "https://xz.aliyun.com/t/16981",
"published": "2025-01-01T17:09:23+08:00",
"id": "https://xz.aliyun.com/t/16981",
"summary": {
"@type": "html",
"#text": "前端加密对抗常见场景突破"
}
},
{
"title": "BurpSuite插件：OneScan - 递归目录扫描插件",
"link": "https://xz.aliyun.com/t/16980",
"published": "2025-01-01T12:22:35+08:00",
"id": "https://xz.aliyun.com/t/16980",
"summary": {
"@type": "html",
"#text": "BurpSuite插件：OneScan - 递归目录扫描插件"
}
},
{
"title": "CVE-2024-13025-Codezips 大学管理系统 faculty.php sql 注入分析及拓展",
"link": "https://xz.aliyun.com/t/16979",
"published": "2025-01-01T07:22:48+08:00",
"id": "https://xz.aliyun.com/t/16979",
"summary": {
"@type": "html",
"#text": "CVE-2024-13025-Codezips 大学管理系统 faculty.php sql 注入分析及拓展"
}
},
{
"title": "第二届CN-fnst::CTF WriteUp(web,misc,crypto,osint,pwn)",
"link": "https://xz.aliyun.com/t/16978",
"published": "2024-12-31T23:28:53+08:00",
"id": "https://xz.aliyun.com/t/16978",
"summary": {
"@type": "html",
"#text": "第二届CN-fnst::CTF WriteUp(web,misc,crypto,osint,pwn)"
}
},
{
"title": "禅道CMS开源版SQL注入漏洞分析",
"link": "https://xz.aliyun.com/t/16976",
"published": "2024-12-31T21:12:31+08:00",
"id": "https://xz.aliyun.com/t/16976",
"summary": {
"@type": "html",
"#text": "禅道CMS开源版SQL注入漏洞分析"
}
},
{
"title": "2024ImaginaryCTF 12月练习赛——部分Crypto题解分享",
"link": "https://xz.aliyun.com/t/16975",
"published": "2024-12-31T18:14:07+08:00",
"id": "https://xz.aliyun.com/t/16975",
"summary": {
"@type": "html",
"#text": "2024ImaginaryCTF 12月练习赛——部分Crypto题解分享"
}
},
{
"title": "JAVA代码审计-某报表平台",
"link": "https://xz.aliyun.com/t/16974",
"published": "2024-12-31T17:15:00+08:00",
"id": "https://xz.aliyun.com/t/16974",
"summary": {
"@type": "html",
"#text": "JAVA代码审计-某报表平台"
}
},
update
2025-01-06 14:26:37 +08:00
{
"title": "记一次渗透测试实战之Sea",
"link": "https://xz.aliyun.com/t/16972",
"published": "2024-12-31T14:47:50+08:00",
"id": "https://xz.aliyun.com/t/16972",
"summary": {
"@type": "html",
"#text": "记一次渗透测试实战之Sea"
}
},
{
"title": "【免杀技术】致盲组件 - AMSI内存修复 （修改一个字节就能绕过AMSI？）",
"link": "https://xz.aliyun.com/t/16971",
"published": "2024-12-31T14:08:53+08:00",
"id": "https://xz.aliyun.com/t/16971",
"summary": {
"@type": "html",
"#text": "【免杀技术】致盲组件 - AMSI内存修复 （修改一个字节就能绕过AMSI？）"
}
},
{
"title": "JAVA代码审计-jfinal",
"link": "https://xz.aliyun.com/t/16969",
"published": "2024-12-31T11:46:25+08:00",
"id": "https://xz.aliyun.com/t/16969",
"summary": {
"@type": "html",
"#text": "JAVA代码审计-jfinal"
}
},
{
"title": "初探webshell免杀的艺术",
"link": "https://xz.aliyun.com/t/16968",
"published": "2024-12-31T11:13:41+08:00",
"id": "https://xz.aliyun.com/t/16968",
"summary": {
"@type": "html",
"#text": "初探webshell免杀的艺术"
}
},
{
"title": "AWS云之EFS 挂载安全",
"link": "https://xz.aliyun.com/t/16967",
"published": "2024-12-31T02:20:32+08:00",
"id": "https://xz.aliyun.com/t/16967",
"summary": {
"@type": "html",
"#text": "AWS云之EFS 挂载安全"
}
},
{
"title": "浅谈密码相关原理及代码实现",
"link": "https://xz.aliyun.com/t/16966",
"published": "2024-12-31T00:41:22+08:00",
"id": "https://xz.aliyun.com/t/16966",
"summary": {
"@type": "html",
"#text": "浅谈密码相关原理及代码实现"
}
},
{
"title": "【免杀技术】WinApi规避 - 字符串HASH与动态调用 （完美的IAT隐藏技术）",
"link": "https://xz.aliyun.com/t/16965",
"published": "2024-12-31T00:04:33+08:00",
"id": "https://xz.aliyun.com/t/16965",
"summary": {
"@type": "html",
"#text": "【免杀技术】WinApi规避 - 字符串HASH与动态调用 （完美的IAT隐藏技术）"
}
},
{
"title": "JAVA安全之Java Agent打内存马",
"link": "https://xz.aliyun.com/t/16962",
"published": "2024-12-30T16:02:07+08:00",
"id": "https://xz.aliyun.com/t/16962",
"summary": {
"@type": "html",
"#text": "JAVA安全之Java Agent打内存马"
}
},
{
"title": "安卓逆向入门全面解析入口点定位,资源文件,四大组件,native,java层逆向(带实战例题)",
"link": "https://xz.aliyun.com/t/16961",
"published": "2024-12-30T15:27:00+08:00",
"id": "https://xz.aliyun.com/t/16961",
"summary": {
"@type": "html",
"#text": "安卓逆向入门全面解析入口点定位,资源文件,四大组件,native,java层逆向(带实战例题)"
}
},
{
"title": "哥斯拉流量PHP3种加密方式讲解及PHP_XOR_BASE64爆破密钥思路",
"link": "https://xz.aliyun.com/t/16960",
"published": "2024-12-30T13:24:00+08:00",
"id": "https://xz.aliyun.com/t/16960",
"summary": {
"@type": "html",
"#text": "哥斯拉流量PHP3种加密方式讲解及PHP_XOR_BASE64爆破密钥思路"
}
},
{
"title": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析",
"link": "https://xz.aliyun.com/t/16959",
"published": "2024-12-30T11:46:01+08:00",
"id": "https://xz.aliyun.com/t/16959",
"summary": {
"@type": "html",
"#text": "记一次某OA渗透测试有意思的文件上传漏洞挖掘经历以及分析"
}
},
{
"title": "RASP从0到1",
"link": "https://xz.aliyun.com/t/16958",
"published": "2024-12-30T10:30:37+08:00",
"id": "https://xz.aliyun.com/t/16958",
"summary": {
"@type": "html",
"#text": "RASP从0到1"
}
},
{
"title": "elephant Datart 1.0.0-rc3漏洞分析(CVE-2024-12994)",
"link": "https://xz.aliyun.com/t/16957",
"published": "2024-12-29T23:05:00+08:00",
"id": "https://xz.aliyun.com/t/16957",
"summary": {
"@type": "html",
"#text": "elephant Datart 1.0.0-rc3漏洞分析(CVE-2024-12994)"
}
},
{
"title": "Android Security学习之ByteCTF2021_mobile 环境搭建+前两道题Writeup",
"link": "https://xz.aliyun.com/t/16956",
"published": "2024-12-29T22:32:16+08:00",
"id": "https://xz.aliyun.com/t/16956",
"summary": {
"@type": "html",
"#text": "Android Security学习之ByteCTF2021_mobile 环境搭建+前两道题Writeup"
}
},
{
"title": "从JS源码分析到任意用户登录",
"link": "https://xz.aliyun.com/t/16955",
"published": "2024-12-29T22:30:27+08:00",
"id": "https://xz.aliyun.com/t/16955",
"summary": {
"@type": "html",
"#text": "从JS源码分析到任意用户登录"
}
},
{
"title": "JS中的漏洞信息",
"link": "https://xz.aliyun.com/t/16954",
"published": "2024-12-29T21:41:24+08:00",
"id": "https://xz.aliyun.com/t/16954",
"summary": {
"@type": "html",
"#text": "JS中的漏洞信息"
}
},
{
"title": "渗透测试-非寻常漏洞案例",
"link": "https://xz.aliyun.com/t/16952",
"published": "2024-12-29T19:23:31+08:00",
"id": "https://xz.aliyun.com/t/16952",
"summary": {
"@type": "html",
"#text": "渗透测试-非寻常漏洞案例"
}
},
{
"title": "免杀基础-常见shellcode执行方式",
"link": "https://xz.aliyun.com/t/16951",
"published": "2024-12-29T16:44:22+08:00",
"id": "https://xz.aliyun.com/t/16951",
"summary": {
"@type": "html",
"#text": "免杀基础-常见shellcode执行方式"
}
},
{
"title": "从APC到APC注入",
"link": "https://xz.aliyun.com/t/16950",
"published": "2024-12-29T16:43:39+08:00",
"id": "https://xz.aliyun.com/t/16950",
"summary": {
"@type": "html",
"#text": "从APC到APC注入"
}
},
{
"title": "基于大模型LLM的黑白盒RCE漏洞自动化挖掘",
"link": "https://xz.aliyun.com/t/16948",
"published": "2024-12-29T13:27:39+08:00",
"id": "https://xz.aliyun.com/t/16948",
"summary": {
"@type": "html",
"#text": "基于大模型LLM的黑白盒RCE漏洞自动化挖掘"
}
},
{
"title": "PHPGurukul Small CRM 1.0 sql注入漏洞分析(CVE-2024-12999)",
"link": "https://xz.aliyun.com/t/16947",
"published": "2024-12-29T11:41:00+08:00",
"id": "https://xz.aliyun.com/t/16947",
"summary": {
"@type": "html",
"#text": "PHPGurukul Small CRM 1.0 sql注入漏洞分析(CVE-2024-12999)"
}
},
{
"title": "HTML Application利用",
"link": "https://xz.aliyun.com/t/16946",
"published": "2024-12-29T00:10:14+08:00",
"id": "https://xz.aliyun.com/t/16946",
"summary": {
"@type": "html",
"#text": "HTML Application利用"
}
},
{
"title": "WBCE CMS v1.5.2代码审计以及cve分析扩展",
"link": "https://xz.aliyun.com/t/16945",
"published": "2024-12-28T23:51:27+08:00",
"id": "https://xz.aliyun.com/t/16945",
"summary": {
"@type": "html",
"#text": "WBCE CMS v1.5.2代码审计以及cve分析扩展"
}
},
{
"title": "2024第一届Solar杯应急响应挑战赛 内存取证",
"link": "https://xz.aliyun.com/t/16940",
"published": "2024-12-28T18:33:23+08:00",
"id": "https://xz.aliyun.com/t/16940",
"summary": {
"@type": "html",
"#text": "2024第一届Solar杯应急响应挑战赛 内存取证"
}
},
{
"title": "2024第一届Solar杯应急响应挑战赛WP",
"link": "https://xz.aliyun.com/t/16938",
"published": "2024-12-28T15:56:58+08:00",
"id": "https://xz.aliyun.com/t/16938",
"summary": {
"@type": "html",
"#text": "2024第一届Solar杯应急响应挑战赛WP"
}
},
{
"title": "2024睿抗决赛pwn题解",
"link": "https://xz.aliyun.com/t/16934",
"published": "2024-12-28T12:26:54+08:00",
"id": "https://xz.aliyun.com/t/16934",
"summary": {
"@type": "html",
"#text": "2024睿抗决赛pwn题解"
}
},
{
"title": "云安全之IAM权限提升场景和利用",
"link": "https://xz.aliyun.com/t/16930",
"published": "2024-12-27T19:09:32+08:00",
"id": "https://xz.aliyun.com/t/16930",
"summary": {
"@type": "html",
"#text": "云安全之IAM权限提升场景和利用"
}
},
完成github监控部分的程序
2025-01-02 13:00:43 +08:00
{
"title": "cjson&json 二进制漏洞利用总结",
"link": "https://xz.aliyun.com/t/16928",
"published": "2024-12-26T22:55:12+08:00",
"id": "https://xz.aliyun.com/t/16928",
"summary": {
"@type": "html",
"#text": "cjson&json 二进制漏洞利用总结"
}
},
{
"title": "CVE-2024-9047 (WordPress File Upload 插件漏洞分析）",
"link": "https://xz.aliyun.com/t/16927",
"published": "2024-12-26T20:23:12+08:00",
"id": "https://xz.aliyun.com/t/16927",
"summary": {
"@type": "html",
"#text": "CVE-2024-9047 (WordPress File Upload 插件漏洞分析）"
}
},
{
"title": "Windows应急响应之USBDevices日志",
"link": "https://xz.aliyun.com/t/16926",
"published": "2024-12-26T17:39:57+08:00",
"id": "https://xz.aliyun.com/t/16926",
"summary": {
"@type": "html",
"#text": "Windows应急响应之USBDevices日志"
}
},
{
"title": "0CTF 2024 部分WP",
"link": "https://xz.aliyun.com/t/16925",
"published": "2024-12-26T17:39:49+08:00",
"id": "https://xz.aliyun.com/t/16925",
"summary": {
"@type": "html",
"#text": "0CTF 2024 部分WP"
}
},
{
"title": "通过漏洞靶场学习Android应用安全",
"link": "https://xz.aliyun.com/t/16924",
"published": "2024-12-26T17:38:34+08:00",
"id": "https://xz.aliyun.com/t/16924",
"summary": {
"@type": "html",
"#text": "通过漏洞靶场学习Android应用安全"
}
},
{
"title": "Apache mina CVE-2024-52046漏洞分析复现",
"link": "https://xz.aliyun.com/t/16923",
"published": "2024-12-26T17:30:45+08:00",
"id": "https://xz.aliyun.com/t/16923",
"summary": {
"@type": "html",
"#text": "Apache mina CVE-2024-52046漏洞分析复现"
}
},
{
"title": "ciscn2024 androidso_re分析",
"link": "https://xz.aliyun.com/t/16920",
"published": "2024-12-26T10:37:32+08:00",
"id": "https://xz.aliyun.com/t/16920",
"summary": {
"@type": "html",
"#text": "ciscn2024 androidso_re分析"
}
},
{
"title": "前端加解密对抗encrypt-labs",
"link": "https://xz.aliyun.com/t/16919",
"published": "2024-12-26T10:29:25+08:00",
"id": "https://xz.aliyun.com/t/16919",
"summary": {
"@type": "html",
"#text": "前端加解密对抗encrypt-labs"
}
},
{
"title": "AFL工具使用实践：以libtiff为例的使用指南",
"link": "https://xz.aliyun.com/t/16916",
"published": "2024-12-26T04:16:13+08:00",
"id": "https://xz.aliyun.com/t/16916",
"summary": {
"@type": "html",
"#text": "AFL工具使用实践：以libtiff为例的使用指南"
}
},
{
"title": "应急响应系列靶场解析",
"link": "https://xz.aliyun.com/t/16914",
"published": "2024-12-25T23:48:42+08:00",
"id": "https://xz.aliyun.com/t/16914",
"summary": {
"@type": "html",
"#text": "应急响应系列靶场解析"
}
},
{
"title": "记一次某红蓝演练经历",
"link": "https://xz.aliyun.com/t/16913",
"published": "2024-12-25T22:35:21+08:00",
"id": "https://xz.aliyun.com/t/16913",
"summary": {
"@type": "html",
"#text": "记一次某红蓝演练经历"
}
},
{
"title": "Java安全-WebShell免杀的多种方式",
"link": "https://xz.aliyun.com/t/16912",
"published": "2024-12-25T21:33:55+08:00",
"id": "https://xz.aliyun.com/t/16912",
"summary": {
"@type": "html",
"#text": "Java安全-WebShell免杀的多种方式"
}
},
{
"title": "Linux渗透实战之Nullbyte靶场提权",
"link": "https://xz.aliyun.com/t/16911",
"published": "2024-12-25T20:46:30+08:00",
"id": "https://xz.aliyun.com/t/16911",
"summary": {
"@type": "html",
"#text": "Linux渗透实战之Nullbyte靶场提权"
}
},
{
"title": "六安市第二届网络安全大赛WP",
"link": "https://xz.aliyun.com/t/16909",
"published": "2024-12-25T18:21:31+08:00",
"id": "https://xz.aliyun.com/t/16909",
"summary": {
"@type": "html",
"#text": "六安市第二届网络安全大赛WP"
}
},
{
"title": "PyYAML反序列化学习",
"link": "https://xz.aliyun.com/t/16908",
"published": "2024-12-25T18:12:03+08:00",
"id": "https://xz.aliyun.com/t/16908",
"summary": {
"@type": "html",
"#text": "PyYAML反序列化学习"
}
},
update
2024-12-25 22:57:42 +08:00
{
"title": "JAVA安全之SpEL表达式执行",
"link": "https://xz.aliyun.com/t/16905",
"published": "2024-12-25T14:36:47+08:00",
"id": "https://xz.aliyun.com/t/16905",
"summary": {
"@type": "html",
"#text": "JAVA安全之SpEL表达式执行"
}
},
{
"title": "从源码角度分析hessian特别的原因",
"link": "https://xz.aliyun.com/t/16904",
"published": "2024-12-25T13:46:49+08:00",
"id": "https://xz.aliyun.com/t/16904",
"summary": {
"@type": "html",
"#text": "从源码角度分析hessian特别的原因"
}
},
{
"title": "fastapi 框架中的无回显利用",
"link": "https://xz.aliyun.com/t/16903",
"published": "2024-12-25T13:27:28+08:00",
"id": "https://xz.aliyun.com/t/16903",
"summary": {
"@type": "html",
"#text": "fastapi 框架中的无回显利用"
}
},
{
"title": "Linux渗透实战之Trickster",
"link": "https://xz.aliyun.com/t/16902",
"published": "2024-12-25T11:49:15+08:00",
"id": "https://xz.aliyun.com/t/16902",
"summary": {
"@type": "html",
"#text": "Linux渗透实战之Trickster"
}
},
{
"title": "HELLOCTF反序列化靶场全解",
"link": "https://xz.aliyun.com/t/16901",
"published": "2024-12-25T10:21:49+08:00",
"id": "https://xz.aliyun.com/t/16901",
"summary": {
"@type": "html",
"#text": "HELLOCTF反序列化靶场全解"
}
},
{
"title": "Tomcat CVE-2024-50379 / CVE-2024-56337 条件竞争漏洞分析",
"link": "https://xz.aliyun.com/t/16900",
"published": "2024-12-25T09:41:05+08:00",
"id": "https://xz.aliyun.com/t/16900",
"summary": {
"@type": "html",
"#text": "Tomcat CVE-2024-50379 / CVE-2024-56337 条件竞争漏洞分析"
}
},
{
"title": "AFL源码学习(一)",
"link": "https://xz.aliyun.com/t/16896",
"published": "2024-12-24T21:58:11+08:00",
"id": "https://xz.aliyun.com/t/16896",
"summary": {
"@type": "html",
"#text": "AFL源码学习(一)"
}
},
{
"title": "基于科来的哥斯拉流量分析",
"link": "https://xz.aliyun.com/t/16895",
"published": "2024-12-24T17:04:59+08:00",
"id": "https://xz.aliyun.com/t/16895",
"summary": {
"@type": "html",
"#text": "基于科来的哥斯拉流量分析"
}
},
{
"title": "Java安全之加载shellcode_bypass杀软",
"link": "https://xz.aliyun.com/t/16894",
"published": "2024-12-24T16:57:00+08:00",
"id": "https://xz.aliyun.com/t/16894",
"summary": {
"@type": "html",
"#text": "Java安全之加载shellcode_bypass杀软"
}
},
{
"title": "pwn的堆中如何使用off by one 和off by null的详细解析以及每一步的调试过程",
"link": "https://xz.aliyun.com/t/16893",
"published": "2024-12-24T15:41:09+08:00",
"id": "https://xz.aliyun.com/t/16893",
"summary": {
"@type": "html",
"#text": "pwn的堆中如何使用off by one 和off by null的详细解析以及每一步的调试过程"
}
},
{
"title": "Linux渗透实战之Instant",
"link": "https://xz.aliyun.com/t/16889",
"published": "2024-12-23T20:01:20+08:00",
"id": "https://xz.aliyun.com/t/16889",
"summary": {
"@type": "html",
"#text": "Linux渗透实战之Instant"
}
},
{
"title": "vulnhub靶机billu_b0x精讲",
"link": "https://xz.aliyun.com/t/16888",
"published": "2024-12-23T18:33:18+08:00",
"id": "https://xz.aliyun.com/t/16888",
"summary": {
"@type": "html",
"#text": "vulnhub靶机billu_b0x精讲"
}
},
{
"title": "企业上云的新攻击面分析",
"link": "https://xz.aliyun.com/t/16887",
"published": "2024-12-23T17:43:33+08:00",
"id": "https://xz.aliyun.com/t/16887",
"summary": {
"@type": "html",
"#text": "企业上云的新攻击面分析"
}
}
]
Reference in New Issue Copy Permalink