Compare commits

...

27 Commits
V1.1 ... main

Author SHA1 Message Date
f10bf7b402 小bug修复 2026-05-24 19:58:26 +08:00
cf5ff10e5d 2.0大版本更新 2026-05-24 19:54:12 +08:00
1135e05b7b 小更新 2026-05-20 01:16:44 +08:00
514a0131c9 紧急缺陷修复 2026-05-20 00:40:03 +08:00
62d20dacab Merge branch 'main' of https://git.masonliu.com/MasonLiu/PyBot 2026-05-19 20:58:54 +08:00
2afdf61e06 重大版本更新,sqlite已支持 2026-05-19 20:58:49 +08:00
b1aca1c702 小调整 2026-05-11 21:48:32 +08:00
fbf2c60e59 小调整 2026-05-11 21:46:19 +08:00
29819b8dbc 添加更新计划 2026-05-09 00:26:32 +08:00
b3dbfd76cb 更新自动安装脚本以及使用说明 2026-05-04 16:05:56 +08:00
7b595127e4 修改错误 2026-05-03 20:15:22 +08:00
b6772f5d7a 修改错误 2026-05-03 20:15:03 +08:00
8091219b84 常规更新 2026-05-03 20:12:40 +08:00
5532839f51 常规更新 2026-05-03 19:02:51 +08:00
2f6ae2b404 更新优化 2025-03-14 11:50:28 +08:00
42ad72c0ca update 2025-01-24 17:36:53 +08:00
36c9b9beb4 update 2025-01-23 10:20:10 +08:00
f1ee2d1092 Bugs fixed 2025-01-22 15:11:15 +08:00
fd7a51f24b 大型更新优化 2025-01-22 14:03:36 +08:00
71cc3b4d22 update 2025-01-16 10:40:06 +08:00
ba00741c11 update 2025-01-15 11:02:39 +08:00
61f505d439 update 2025-01-14 18:16:59 +08:00
e3ccf0db0d fixed a bug 2025-01-14 10:17:47 +08:00
c88316328c 添加自主开发文档 2025-01-10 17:45:44 +08:00
8ec55edd2a 上线百度搜索监测 2025-01-10 16:56:13 +08:00
ad0403554e update 2025-01-10 10:02:43 +08:00
865c477066 update 2025-01-06 17:06:15 +08:00
98 changed files with 10251 additions and 7522 deletions

244
Core.py
View File

@ -19,6 +19,8 @@ from spider.freebuf import freebuf_main
from spider.xianzhi import xianzhi_main
from spider.sougou_wx import sougou_wx_main
from spider.github import github_main, load_github_config
from spider.baidu import baidu_main
from spider.uni import uni_spider
from GotoSend.M_4hou import Src_4hou
from GotoSend.anquanke import Src_anquanke
from GotoSend.doonsec import Src_doonsec
@ -28,7 +30,9 @@ from GotoSend.qianxin import Src_qianxin
from GotoSend.seebug import Src_seebug
from GotoSend.sougou_wx import Src_sougou_wx
from GotoSend.github import Src_github
from config.check_config import get_core_config, get_debug_config, get_kewords_config
from GotoSend.baidu import Src_baidu
from GotoSend.uni_rss import Src_uni_rss
from config.check_config import get_core_config, get_debug_config, get_keywords_config
from loguru import logger
# 清除所有已有的日志记录器配置
@ -56,95 +60,148 @@ webhook_url_once, timestamp_once, sign_once = gen_sign()
e_hour, time_choice, choice, fs_activate, wx_activate, ding_activate, lx_activate, url_web = get_core_config()
def check_avaliable(info_long, info_short, title, webhook_url, timestamp, sign):
def check_avaliable(info_long, info_short, title):
if info_long: # 发送完整文章相关内容
# logger.info(f"{title} 递送中(飞书):")
result = SendToFeishu(info_long, title, webhook_url, timestamp, sign)
logger.info(result)
time.sleep(15)
else:
pass
if fs_activate == "True":
# logger.info(f"{title} 递送中(飞书):")
webhook_url, timestamp, sign = gen_sign()
result = SendToFeishu(info_long, title, webhook_url, timestamp, sign)
logger.info(result)
time.sleep(15)
if info_short: # 发送精简文章相关内容
# 企业微信相关
if wx_activate == "True":
# logger.info(f"{title} 递送中(企业微信):")
result = SendToWX(info_short, title)
logger.info(result)
for info in info_short:
result = SendToWX(info, title)
logger.info(result)
time.sleep(15)
else:
pass
# 钉钉相关
if ding_activate == "True":
# logger.info(f"{title} 递送中(钉钉):")
# result = SendToWX(info_short, title) # 待完善
logger.info(result)
# for info in info_short: # 开发中,暂未实现
# result = SendToDD(info, title)
# logger.info(result)
time.sleep(15)
else:
pass
if not info_long and not info_short:
logger.info(f"{title}数据为空,跳过执行。")
def send_job_RSS(time_1):
Sogou_WX, Doonsec_switch, Doonsec = get_kewords_config()
# print(f"当前配置信息:Doonsec_switch:{Doonsec_switch}")
# 爬取数据
seebug_main()
anquanke_main()
huawei_main()
doonsec_main()
qianxin_main()
freebuf_main()
xianzhi_main()
M_4hou_main()
# 分析各个数据源的结果(输出长结果)
result_4hou_long = Src_4hou(time_1, False)
result_anquanke_long = Src_anquanke(time_1, False)
result_doonsec_long = Src_doonsec(False, Doonsec_switch, Doonsec)
print(result_doonsec_long)
result_xianzhi_long = Src_xianzhi(time_1, False)
result_freebuf_long = Src_freebuf(time_1, False)
result_qianxin_long = Src_qianxin(time_1, False)
result_seebug_long = Src_seebug(time_1, False)
# 分析各个数据源的结果(输出短结果)
result_4hou_short = Src_4hou(time_1, True)
result_anquanke_short = Src_anquanke(time_1, True)
result_doonsec_short = Src_doonsec(True, Doonsec_switch, Doonsec)
result_xianzhi_short = Src_xianzhi(time_1, True)
result_freebuf_short = Src_freebuf(time_1, True)
result_qianxin_short = Src_qianxin(time_1, True)
result_seebug_short = Src_seebug(time_1, True)
webhook_url, timestamp, sign = gen_sign()
Doonsec_switch, Doonsec = get_keywords_config('Doonsec')
uni_switch, Unity = get_keywords_config('Unity')
check_avaliable(result_4hou_long, result_4hou_short, "嘶吼资讯", webhook_url, timestamp, sign)
check_avaliable(result_anquanke_long, result_anquanke_short, "安全客资讯", webhook_url, timestamp, sign)
check_avaliable(result_doonsec_long, result_doonsec_short, "洞见微信安全资讯", webhook_url, timestamp, sign)
check_avaliable(result_xianzhi_long, result_xianzhi_short, "先知社区资讯", webhook_url, timestamp, sign)
check_avaliable(result_freebuf_long, result_freebuf_short, "FreeBuf资讯", webhook_url, timestamp, sign)
check_avaliable(result_qianxin_long, result_qianxin_short, "奇安信攻防社区资讯", webhook_url, timestamp, sign)
check_avaliable(result_seebug_long, result_seebug_short, "Seebug社区资讯", webhook_url, timestamp, sign)
# Seebug数据获取分发
seebug_main()
seebug_results = Src_seebug(time_1)
if seebug_results != False:
result_seebug_long, result_seebug_short = seebug_results
check_avaliable(result_seebug_long, result_seebug_short, "Seebug社区资讯")
else:
logger.info("Seebug数据为空,跳过执行。")
# 安全客数据获取分发
anquanke_main()
anquanke_results = Src_anquanke(time_1)
if anquanke_results != False:
result_anquanke_long, result_anquanke_short = anquanke_results
check_avaliable(result_anquanke_long, result_anquanke_short, "安全客资讯")
else:
logger.info("安全客数据为空,跳过执行。")
# 华为数据获取分发
huawei_main()
# 奇安信数据获取分发
qianxin_main()
qianxin_results = Src_qianxin(time_1)
if qianxin_results != False:
result_qianxin_long, result_qianxin_short = qianxin_results
check_avaliable(result_qianxin_long, result_qianxin_short, "奇安信攻防社区资讯")
else:
logger.info("奇安信数据为空,跳过执行。")
# FreeBuf数据获取分发
freebuf_main()
freebuf_results = Src_freebuf(time_1)
if freebuf_results != False:
result_freebuf_long, result_freebuf_short = freebuf_results
check_avaliable(result_freebuf_long, result_freebuf_short, "FreeBuf资讯")
else:
logger.info("FreeBuf数据为空,跳过执行。")
# 先知数据获取分发
xianzhi_main()
xianzhi_results = Src_xianzhi(time_1)
if xianzhi_results != False:
result_xianzhi_long, result_xianzhi_short = xianzhi_results
check_avaliable(result_xianzhi_long, result_xianzhi_short, "先知社区资讯")
else:
logger.info("先知数据为空,跳过执行。")
# 4hou数据获取分发
M_4hou_main()
M_4hou_results = Src_4hou(time_1)
if M_4hou_results != False:
result_4hou_long, result_4hou_short = M_4hou_results
check_avaliable(result_4hou_long, result_4hou_short, "嘶吼资讯")
else:
logger.info("嘶吼数据为空,跳过执行。")
# 洞见微信安全数据获取分发
doonsec_main()
doonsec_results = Src_doonsec(Doonsec_switch, Doonsec)
if doonsec_results != False:
result_doonsec_long, result_doonsec_short = doonsec_results
check_avaliable(result_doonsec_long, result_doonsec_short, "洞见微信安全资讯")
else:
logger.info("洞见微信安全数据为空,跳过执行。")
# 聚合RSS数据获取分发
uni_spider()
rss_results = Src_uni_rss(uni_switch, Unity)
if rss_results != False:
result_rss_long, result_rss_short = rss_results
check_avaliable(result_rss_long, result_rss_short, "聚合RSS资讯")
else:
logger.info("聚合RSS数据为空,跳过执行。")
def send_job_SX():
Sogou_WX, Doonsec_switch, Doonsec = get_kewords_config()
Sogou_WX = get_keywords_config('Sogou-WX')
sougou_wx_main(Sogou_WX)
result_sx_long = Src_sougou_wx(False)
result_sx_short = Src_sougou_wx(True)
webhook_url, timestamp, sign = gen_sign()
check_avaliable(result_sx_long, result_sx_short, "微信公众号关键词相关内容", webhook_url, timestamp, sign)
results = Src_sougou_wx()
if results != False:
result_sx_long, result_sx_short = results
check_avaliable(result_sx_long, result_sx_short, "微信公众号关键词相关内容")
else:
logger.info("微信公众号数据为空,跳过执行。")
def send_job_github(time_1):
keyword_list, tool_list, user_list, black_words = load_github_config()
github_main(keyword_list, tool_list, user_list, black_words)
result_github_1_long, result_github_2_long, result_github_3_long, result_github_4_long = Src_github(time_1, False)
result_github_1_short, result_github_2_short, result_github_3_short, result_github_4_short = Src_github(time_1, True)
webhook_url, timestamp, sign = gen_sign()
check_avaliable(result_github_1_long, result_github_1_short, "Github项目监控-关键词监控", webhook_url, timestamp, sign)
check_avaliable(result_github_2_long, result_github_2_short, "Github项目监控-项目更新情况", webhook_url, timestamp, sign)
webhook_url, timestamp, sign = gen_sign()
check_avaliable(result_github_3_long, result_github_3_short, "Github项目监控-大佬工具", webhook_url, timestamp, sign)
check_avaliable(result_github_4_long, result_github_4_short, "Github项目监控-项目版本发布监测", webhook_url, timestamp, sign)
results = Src_github(time_1)
# 解构返回的结果
result_github_1_long, result_github_1_short = results[0]
result_github_2_long, result_github_2_short = results[1]
result_github_3_long, result_github_3_short = results[2]
result_github_4_long, result_github_4_short = results[3]
# 检查并处理结果
check_avaliable(result_github_1_long, result_github_1_short, "Github项目监控-关键词监控")
check_avaliable(result_github_2_long, result_github_2_short, "Github项目监控-项目更新情况")
check_avaliable(result_github_3_long, result_github_3_short, "Github项目监控-大佬工具")
check_avaliable(result_github_4_long, result_github_4_short, "Github项目监控-项目版本发布监测")
def send_job_baidu():
Baidu = get_keywords_config('Baidu')
baidu_main(Baidu)
results = Src_baidu()
if results != False:
result_baidu_long, result_baidu_short = results
check_avaliable(result_baidu_long, result_baidu_short, "百度搜索关键词相关内容")
else:
logger.info("百度搜索数据为空,跳过执行。")
# 探测rss源状态
def check_rss_status(url):
@ -190,6 +247,9 @@ def main_job(e_hour):
send_job_SX()
if 2 in choice:
send_job_github(e_hour)
if 3 in choice:
send_job_baidu()
logger.info("单次运行结束,等待下一次运行...")
def main_loop(time_choice):
if time_choice == 1:
@ -218,7 +278,6 @@ def main_loop(time_choice):
time.sleep(60) # 每分钟检查一次是否有任务需要执行
def send_first_message():
rss_info = test_rss_source()
start_info = ""
start_info += "程序已启动,当前时间为:" + datetime.now().strftime("%Y-%m-%d %H:%M:%S") + "\n"
start_info += "程序作者:MasonLiu \t 开源地址:[GM-gitea](https://git.masonliu.com/MasonLiu/PyBot)" + "\n"
@ -226,25 +285,52 @@ def send_first_message():
start_info += "时间配置:每隔" + str(e_hour) + "小时执行一次推送\n"
elif time_choice == 0:
start_info += "时间配置:每天固定时间点执行推送\n"
start_info += "开启状态:\n"
if 0 in choice:
start_info += "RSS源监测\n"
if 1 in choice:
# start_info += "搜狗-微信公众号监测\n"
Sogou_WX = get_keywords_config('Sogou-WX')
start_info += f"微信公众号监测关键词:{Sogou_WX}\n"
if 2 in choice:
# start_info += "Github项目监测\n"
with open('./config/github_config.yaml', 'r', encoding="utf-8") as file:
config = yaml.safe_load(file)
tool_list = config['tool_list']
start_info += f"Github监控项目:{tool_list}\n"
keyword_list = config['keyword_list']
start_info += f"Github监控关键词:{keyword_list}\n"
user_list = config['user_list']
start_info += f"Github监控用户:{user_list}\n"
if 3 in choice:
# start_info += "百度搜索关键词内容监测\n"
Baidu = get_keywords_config('Baidu')
start_info += f"百度搜索关键词:{Baidu}\n"
if fs_activate == "True":
result = SendToFeishu(start_info, "程序信息", webhook_url_once, timestamp_once, sign_once)
logger.info(result)
send_result = SendToFeishu(f"[点此访问]({url_web})网站以查看全部文章。", "首次运行提醒", webhook_url_once, timestamp_once, sign_once)
logger.info(send_result)
if wx_activate == "True":
result = SendToWX(start_info, "程序信息")
logger.info(result)
send_result = SendToWX(f"[点此访问]({url_web})网站以查看全部文章,若未开启网站请忽略本条消息。", "首次运行提醒")
logger.info(send_result)
if 0 in choice:
rss_info = test_rss_source()
if fs_activate == "True":
result = SendToFeishu(start_info, "程序信息", webhook_url_once, timestamp_once, sign_once)
logger.info(result)
result = SendToFeishu(rss_info, "RSS源状态", webhook_url_once, timestamp_once, sign_once)
# logger.info(rss_info)
logger.info(result)
send_result = SendToFeishu(f"[点此访问]({url_web})网站以查看全部文章。", "首次运行提醒", webhook_url_once, timestamp_once, sign_once)
logger.info(send_result)
else:
pass
if wx_activate == "True":
result = SendToWX(start_info, "程序信息")
logger.info(result)
result = SendToWX(rss_info, "RSS源状态")
# logger.info(rss_info)
logger.info(result)
send_result = SendToWX(f"[点此访问]({url_web})网站以查看全部文章。", "首次运行提醒")
logger.info(send_result)
else:
pass
@ -256,5 +342,5 @@ if __name__ == "__main__":
# time.sleep(2 * 60)
# 主程序
send_first_message()
# send_first_message()
main_loop(time_choice)

View File

@ -1,9 +1,10 @@
# -*- coding: utf-8 -*-
"""
@Author: MasonLiu
@Description: 测试用脚本,无需关注。
@Description: 本程序可以爬取各安全资讯源,并发送到飞书群组。
"""
from math import log
import schedule
import os
import signal
@ -19,6 +20,8 @@ from spider.freebuf import freebuf_main
from spider.xianzhi import xianzhi_main
from spider.sougou_wx import sougou_wx_main
from spider.github import github_main, load_github_config
from spider.baidu import baidu_main
from spider.uni import uni_spider
from GotoSend.M_4hou import Src_4hou
from GotoSend.anquanke import Src_anquanke
from GotoSend.doonsec import Src_doonsec
@ -28,23 +31,156 @@ from GotoSend.qianxin import Src_qianxin
from GotoSend.seebug import Src_seebug
from GotoSend.sougou_wx import Src_sougou_wx
from GotoSend.github import Src_github
from config.check_config import get_core_config, get_debug_config, get_kewords_config
from GotoSend.baidu import Src_baidu
from GotoSend.uni_rss import Src_uni_rss
from config.check_config import get_core_config, get_debug_config, get_keywords_config
from loguru import logger
# 清除所有已有的日志记录器配置
logger.remove()
logger.add("./resources/log/core.log",
format="{time:YYYY-MM-DD HH:mm:ss} - {level} - {name}:{function}:{line} - {message}",
rotation="100 MB",
compression="zip",
encoding="utf-8")
# shell终端打印日志
debug = get_debug_config()
if debug == "True":
logger.add(lambda msg: print(msg),
format="{time:YYYY-MM-DD HH:mm:ss} - {level} - {name}:{function}:{line} - {message}")
def signal_handler(sig, frame):
logger.info("接收到退出信号,程序即将退出...")
sys.exit(0)
# 全局变量
signal.signal(signal.SIGINT, signal_handler) # Ctrl+C
signal.signal(signal.SIGTERM, signal_handler) # kill命令
webhook_url_once, timestamp_once, sign_once = gen_sign()
e_hour, time_choice, choice, fs_activate, wx_activate, ding_activate, lx_activate, url_web = get_core_config()
Sogou_WX, Doonsec_switch, Doonsec = get_kewords_config()
# print(f"当前配置信息:Doonsec_switch:{Doonsec_switch}")
def check_avaliable(info_long, info_short, title):
if info_long: # 发送完整文章相关内容
if fs_activate == "True":
# logger.info(f"{title} 递送中(飞书):")
# webhook_url, timestamp, sign = gen_sign()
# result = SendToFeishu(info_long, title, webhook_url, timestamp, sign)
# logger.info(result)
time.sleep(15)
if info_short: # 发送精简文章相关内容
# 企业微信相关
if wx_activate == "True":
# logger.info(f"{title} 递送中(企业微信):")
for info in info_short:
result = SendToWX(info, title)
logger.info(result)
time.sleep(15)
# 钉钉相关
if ding_activate == "True":
# logger.info(f"{title} 递送中(钉钉):")
# for info in info_short: # 开发中,暂未实现
# result = SendToDD(info, title)
# logger.info(result)
time.sleep(15)
def send_job_RSS(time_1):
uni_switch, Unity = get_keywords_config('Unity')
# 聚合RSS数据获取分发
# uni_spider()
rss_results = Src_uni_rss(uni_switch, Unity)
if rss_results != False:
result_rss_long, result_rss_short = rss_results
check_avaliable(result_rss_long, result_rss_short, "聚合RSS资讯")
else:
logger.info("聚合RSS数据为空,跳过执行。")
def send_job_SX():
Sogou_WX = get_keywords_config('Sogou-WX')
# sougou_wx_main(Sogou_WX)
results = Src_sougou_wx()
if results != False:
logger.info("微信公众号数据获取完成")
else:
logger.info("微信公众号数据为空,跳过执行。")
def send_job_github(time_1):
keyword_list, tool_list, user_list, black_words = load_github_config()
# github_main(keyword_list, tool_list, user_list, black_words)
results = Src_github(time_1)
# 解构返回的结果
result_github_1_long, result_github_1_short = results[0]
result_github_2_long, result_github_2_short = results[1]
result_github_3_long, result_github_3_short = results[2]
result_github_4_long, result_github_4_short = results[3]
def send_job_baidu():
Baidu = get_keywords_config('Baidu')
# baidu_main(Baidu)
results = Src_baidu()
if results != False:
logger.info("百度搜索已完成")
else:
logger.info("百度搜索数据为空,跳过执行。")
def main_job(e_hour):
logger.info(f"发送程序启动,当前时间为:{datetime.now().strftime('%Y-%m-%d %H:%M:%S')}")
logger.info("正在启动各爬虫并获取资源中...")
if 0 in choice:
send_job_RSS(e_hour)
if 1 in choice:
send_job_SX()
if 2 in choice:
send_job_github(e_hour)
if 3 in choice:
send_job_baidu()
logger.info("单次运行结束,等待下一次运行...")
def main_loop(time_choice):
if time_choice == 1:
while True:
try:
# 执行任务
main_job(e_hour)
time.sleep(e_hour * 60 * 60 - 3 * 60)
except Exception as e:
logger.error(f"发生错误: {e}, 程序已暂停")
# result = SendToFeishu(f"发生错误: {e}, 程序已退出", "报错信息")
# logger.info(result)
exit()
elif time_choice == 0:
# 设置每天的特定时间点执行job函数
schedule.every().day.at("09:00").do(main_job, 12)
schedule.every().day.at("12:00").do(main_job, 3)
schedule.every().day.at("15:00").do(main_job, 3)
schedule.every().day.at("18:00").do(main_job, 3)
schedule.every().day.at("21:00").do(main_job, 3)
while True:
schedule.run_pending()
time.sleep(60) # 每分钟检查一次是否有任务需要执行
if __name__ == "__main__":
# result_doonsec_long = Src_doonsec(False, Doonsec_switch, Doonsec)
# print(result_doonsec_long)
while True:
Sogou_WX, Doonsec_switch, Doonsec = get_kewords_config()
print(f"当前配置信息:Doonsec_switch:{Doonsec_switch}")
print(f"当前配置信息:Sogou_WX:{Sogou_WX}")
print(f"当前配置信息:Doonsec:{Doonsec}")
print("\n")
time.sleep(10)
logger.info("程序正在运行当中。")
# time.sleep(5) # 添加短暂的延迟
# 首次运行先暂停两分钟
# time.sleep(2 * 60)
send_job_RSS(2400)
# send_job_baidu()
# send_job_github(2400)
# send_job_SX()

View File

@ -46,7 +46,11 @@ def get_4hou_json():
# 打开并读取JSON文件
with open('./resources/JSON/4hou.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -93,42 +97,72 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/sec_news.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title, link, author, upload_time, description=None, source=None, category=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS sec_news (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
source TEXT,
upload_time DATETIME,
category TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
# 插入数据
cursor.execute('''
INSERT INTO sec_news (article_title, link, author, description, source, upload_time, category)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, source, upload_time, category))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n作者:{entry[5]}\n"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
if Is_short == True:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"链接:{entry[2]}\n上传时间:{entry[4]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n作者:{entry[5]}\n"
result_long += f"上传时间:{entry[4]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**作者**:{entry[5]}\n"
record += f"**上传时间**:{entry[4]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"链接:{entry[2]}\n上传时间:{entry[4]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
author=entry[5],
upload_time=entry[4],
description=None,
source="嘶吼"
)
def Src_4hou(e_hour, Is_short):
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_4hou(e_hour):
if not os.path.exists('./resources/db/4hou.db'):
# 创建数据库和表
create_database()
@ -147,17 +181,27 @@ def Src_4hou(e_hour, Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return ""
return False
if __name__ == "__main__":
reslts = Src_4hou(4, False)
if reslts != "":
print(reslts)
results = Src_4hou(4)
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("嘶吼数据为空,跳过执行。")
print("嘶吼数据为空,跳过执行。")

Binary file not shown.

Binary file not shown.

View File

@ -35,11 +35,17 @@ def insert_data(data):
def get_anquanke_json():
# 检查文件是否存在
if not os.path.exists('./resources/JSON/anquanke.json'):
raise FileNotFoundError(f"anquanke.json文件不存在,请检查程序是否运行正常!")
# 打开并读取JSON文件
with open('./resources/JSON/anquanke.json', 'r', encoding='utf-8') as file:
data = json.load(file)
data = []
# logger.error(f"anquanke.json文件不存在,请检查爬虫程序是否运行正常!")
print(f"anquanke.json文件不存在,请检查爬虫程序是否运行正常!")
else:
# 打开并读取JSON文件
with open('./resources/JSON/anquanke.json', 'r', encoding='utf-8') as file:
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -87,44 +93,74 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/sec_news.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
def record(title, link, author, upload_time, description=None, source=None, category=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS sec_news (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
source TEXT,
upload_time DATETIME,
category TEXT
)''')
# 插入数据
cursor.execute('''
INSERT INTO sec_news (article_title, link, author, description, source, upload_time, category)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, source, upload_time, category))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
# record = ""
short_results = []
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n作者:{entry[6]}\n来源:{entry[3]}\n"
result += f"上传时间:{entry[5]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
elif Is_short == True:
result += f"文章:{entry[1]}\n"
result += f"链接:{entry[2]}\n上传时间:{entry[5]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n作者:{entry[6]}\n来源:{entry[3]}\n"
result_long += f"上传时间:{entry[5]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**作者**:{entry[6]}\n"
record += f"**来源**:{entry[3]}\n"
record += f"**上传时间**:{entry[5]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[5]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
author=entry[6],
source="安全客",
upload_time=entry[5]
)
# 处理最后一个结果
if result_short:
short_results.append(result_short)
def Src_anquanke(e_hour, Is_short):
return result_long, short_results
def Src_anquanke(e_hour):
if not os.path.exists('./resources/db/anquanke.db'):
# 创建数据库和表
create_database()
@ -143,16 +179,27 @@ def Src_anquanke(e_hour, Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_anquanke(4, False)
if reslts != False:
print(reslts)
results = Src_anquanke(4)
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("安全客数据为空,跳过执行。")
print("安全客数据为空,跳过执行。")

232
GotoSend/baidu.py Normal file
View File

@ -0,0 +1,232 @@
import os
import json
import sqlite3
from datetime import datetime, timedelta
def clear_table():
conn = sqlite3.connect('./resources/db/baidu.db')
cursor = conn.cursor()
cursor.execute('DELETE FROM articles')
conn.commit()
conn.close()
def create_database():
conn = sqlite3.connect('./resources/db/baidu.db')
cursor = conn.cursor()
cursor.execute('''CREATE TABLE IF NOT EXISTS articles (
id INTEGER PRIMARY KEY AUTOINCREMENT,
title TEXT,
link TEXT,
description TEXT,
pubDate DATETIME,
author TEXT,
keyword TEXT,
is_sended BOOLEAN
)''')
conn.commit()
conn.close()
def insert_data(data):
conn = sqlite3.connect('./resources/db/baidu.db')
cursor = conn.cursor()
for entry in data:
# 检查是否存在相同 title 的记录
cursor.execute('''
SELECT 1 FROM articles WHERE title = ? AND author = ?
''', (entry['title'], entry['author']))
if cursor.fetchone() is None:
# 如果没有找到相同记录,则插入新记录
cursor.execute('''
INSERT INTO articles (title, link, description, pubDate, author, keyword)
VALUES (?, ?, ?, ?, ?, ?)
''', (entry['title'], entry['link'], entry['description'], entry['pubDate'], entry['author'], entry['keyword']))
conn.commit()
conn.close()
def get_json():
# 检查文件是否存在
if not os.path.exists('./resources/JSON/baidu.json'):
data = []
# logger.error("baidu.json文件不存在,请检查程序是否运行正常!")
else:
# 打开并读取JSON文件
with open('./resources/JSON/baidu.json', 'r', encoding='utf-8') as file:
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个关键词的字典
total_data = []
for keyword, keyword_data in data.items():
# 检查关键词对应的数据是否为列表
if not isinstance(keyword_data, list):
raise ValueError(f"关键词 {keyword} 对应的数据格式错误,请检查爬取程序是否异常!")
# 提取所需字段并编号
for index, item in enumerate(keyword_data, start=1):
entry = {
"id": index,
"title": item.get("title", ""),
"link": item.get("link", ""),
"description": item.get("description", ""),
"pubDate": item.get("pubDate", ""),
"author": item.get("author", ""),
"keyword": keyword
}
total_data.append(entry)
return total_data
def select_articles():
conn = sqlite3.connect('./resources/db/baidu.db')
cursor = conn.cursor()
# 获取当前日期和时间
now = datetime.now()
two_months_ago = now - timedelta(days=60) # 假设两个月大约60天
try:
# 查询最近且未被标记为True的消息且发布时间不超过两个月
cursor.execute('''
SELECT * FROM articles
WHERE is_sended IS NULL AND pubDate BETWEEN ? AND ?
ORDER BY pubDate DESC
''', (two_months_ago.strftime('%Y-%m-%d'), now.strftime('%Y-%m-%d')))
# 查询最近且未被标记为True的消息
# cursor.execute('''
# SELECT * FROM articles
# WHERE is_sended IS NULL
# ORDER BY pubDate DESC
# ''')
results = cursor.fetchall()
# print(results)
if results:
for row in results:
article_id = row[0]
cursor.execute('''
UPDATE articles
SET is_sended = True
WHERE id = ?
''', (article_id,))
conn.commit() # 提交事务
except Exception as e:
conn.rollback() # 回滚事务
print(f"Error: {e}")
finally:
cursor.close()
conn.close()
return results
def record(title, link, description, upload_time, source=None, keyword=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS baidu (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
description TEXT,
source TEXT,
upload_time DATETIME,
keyword TEXT
)''')
# 插入数据
cursor.execute('''
INSERT INTO baidu (article_title, link, description, source, upload_time, keyword)
VALUES (?, ?, ?, ?, ?, ?)
''', (title, link, description, source, upload_time, keyword))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
for entry in entries:
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n描述:{entry[3]}\n"
result_long += f"发布时间:{entry[4]}\n"
result_long += f"来源:{entry[5]}\n"
result_long += f"关键词:{entry[6]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"关键词:{entry[6]}\n"
f"上传时间:{entry[4]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(entry[1], entry[2], entry[3], entry[4], entry[5], entry[6])
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_baidu():
if not os.path.exists('./resources/db/baidu.db'):
# 创建数据库和表
create_database()
# 清空表
# clear_table()
# 获取 JSON 数据
baidu_data = get_json()
# 插入数据到数据库
insert_data(baidu_data)
# 查询指定时间段内的数据
filtered_articles = select_articles()
# print(filtered_articles)
if filtered_articles:
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
results = Src_baidu()
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("百度数据为空,跳过执行。")

View File

@ -53,7 +53,12 @@ def get_doonsec_json():
# 打开并读取JSON文件
with open('./resources/JSON/doonsec.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
# print(content)
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -132,46 +137,75 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/tech_passage.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title=None, link=None, author=None, upload_time=None, description=None, category=None, source=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS tech_passage (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
upload_time DATETIME,
category TEXT,
source TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据
cursor.execute('''
INSERT INTO tech_passage (article_title, link, author, description, upload_time, category, source)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, upload_time, category, source))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"作者:{entry[5]}\n"
result += f"上传时间:{entry[4]}\n"
result += f"简介:{entry[3]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
if Is_short == True:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n"
result_long += f"作者:{entry[5]}\n"
result_long += f"上传时间:{entry[4]}\n"
result_long += f"简介:{entry[3]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**作者**:{entry[5]}\n"
record += f"**上传时间**:{entry[4]}\n"
record += f"**简介**:{entry[3]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[4]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
author=entry[5],
upload_time=entry[4],
description=entry[3],
source="洞见微信安全"
)
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_doonsec(Is_short, Doonsec_switch, Doonsec):
def Src_doonsec(Doonsec_switch, Doonsec):
if not os.path.exists('./resources/db/doonsec.db'):
# 创建数据库和表
create_database()
@ -180,25 +214,36 @@ def Src_doonsec(Is_short, Doonsec_switch, Doonsec):
# clear_table()
# 获取 JSON 数据
M_doonsec_data = get_doonsec_json()
doonsec_data = get_doonsec_json()
# 插入数据到数据库
insert_data(M_doonsec_data)
insert_data(doonsec_data)
# 查询指定时间段内的数据
filtered_articles = select_articles(Doonsec_switch, Doonsec)
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_doonsec(False, False, ["webshell", "2000", "POC", "SQL", "XSS", "CSRF", "漏洞"] )
if reslts != False:
print(reslts)
results = Src_doonsec(False, ["webshell", "2000", "POC", "SQL", "XSS", "CSRF", "漏洞"])
if results != False:
result_long, short_results = results
# 写入长文本结果
with open("./1.txt", "a", encoding="utf-8") as f:
f.write(result_long)
f.write("\n" + "-" * 40 + "\n")
# 写入分块的短文本结果
for short_result in short_results:
with open("./2.txt", "a", encoding="utf-8") as f:
f.write(short_result)
f.write("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)

View File

@ -46,7 +46,11 @@ def get_freebuf_json():
# 打开并读取JSON文件
with open('./resources/JSON/freebuf.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -93,43 +97,73 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/sec_news.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title, link, author, upload_time, description=None, source=None, category=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS sec_news (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
source TEXT,
upload_time DATETIME,
category TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据
cursor.execute('''
INSERT INTO sec_news (article_title, link, author, description, source, upload_time, category)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, source, upload_time, category))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n类型:{entry[5]}\n"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
elif Is_short == True:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n类型:{entry[5]}\n"
result_long += f"上传时间:{entry[4]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**类型**:{entry[5]}\n"
record += f"**上传时间**:{entry[4]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[4]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
author=None,
upload_time=entry[4],
description=entry[3],
source="Freebuf",
category=entry[5]
)
def Src_freebuf(e_hour, Is_short):
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_freebuf(e_hour):
if not os.path.exists('./resources/db/freebuf.db'):
# 创建数据库和表
create_database()
@ -148,15 +182,26 @@ def Src_freebuf(e_hour, Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_freebuf(4, False)
if reslts != False:
print(reslts)
results = Src_freebuf(24)
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)

View File

@ -62,28 +62,44 @@ def insert_data():
if not os.path.exists('./resources/JSON/github_keyword.json'):
raise FileNotFoundError(f"github_keyword文件不存在,请检查程序是否运行正常!")
with open('./resources/JSON/github_keyword.json', 'r', encoding='utf-8') as file:
data_keyword = json.load(file)
content = file.read()
if not content:
pass
else:
data_keyword = json.loads(content)
if not isinstance(data_keyword, list):
raise ValueError("JSON文件格式错误,请检查爬取程序是否异常!")
if not os.path.exists('./resources/JSON/github_repo.json'):
raise FileNotFoundError(f"github_repo文件不存在,请检查程序是否运行正常!")
with open('./resources/JSON/github_repo.json', 'r', encoding='utf-8') as file:
data_repo = json.load(file)
content = file.read()
if not content:
pass
else:
data_repo = json.loads(content)
if not isinstance(data_repo, list):
raise ValueError("JSON文件格式错误,请检查爬取程序是否异常!")
if not os.path.exists('./resources/JSON/github_release.json'):
raise FileNotFoundError(f"github_release文件不存在,请检查程序是否运行正常!")
with open('./resources/JSON/github_release.json', 'r', encoding='utf-8') as file:
data_release = json.load(file)
content = file.read()
if not content:
pass
else:
data_release = json.loads(content)
if not isinstance(data_release, list):
raise ValueError("JSON文件格式错误,请检查爬取程序是否异常!")
if not os.path.exists('./resources/JSON/github_user.json'):
raise FileNotFoundError(f"github_user文件不存在,请检查程序是否运行正常!")
with open('./resources/JSON/github_user.json', 'r', encoding='utf-8') as file:
data_user = json.load(file)
content = file.read()
if not content:
pass
else:
data_user = json.loads(content)
if not isinstance(data_user, list):
raise ValueError("JSON文件格式错误,请检查爬取程序是否异常!")
@ -103,9 +119,8 @@ def insert_data():
"language": item.get("language", "")
}
try:
# 解析 pubDate 字符串为 datetime 对象
pub_date = datetime.strptime(entry['pubDate'], '%Y-%m-%dT%H:%M:%SZ')
# 格式化 pubDate 为所需的格式
pub_date += timedelta(hours=8)
formatted_pub_date = pub_date.strftime('%Y-%m-%d %H:%M:%S')
except ValueError:
# 如果解析失败,使用原始 pubDate 字符串
@ -128,7 +143,7 @@ def insert_data():
entry = {
"id": index,
"title": item.get("name", ""),
"link": item.get("link", ""),
"link": f"https://github.com/{item.get('keyword', '')}",
"description": item.get("description", ""),
"pubDate": item.get("updated_at", ""),
"author": item.get("author", ""),
@ -136,9 +151,8 @@ def insert_data():
"link2": item.get("link_2", "")
}
try:
# 解析 pubDate 字符串为 datetime 对象
pub_date = datetime.strptime(entry['pubDate'], '%Y-%m-%dT%H:%M:%SZ')
# 格式化 pubDate 为所需的格式
pub_date += timedelta(hours=8)
formatted_pub_date = pub_date.strftime('%Y-%m-%d %H:%M:%S')
except ValueError:
# 如果解析失败,使用原始 pubDate 字符串
@ -158,9 +172,8 @@ def insert_data():
"keyword": item.get("keyword", "")
}
try:
# 解析 pubDate 字符串为 datetime 对象
pub_date = datetime.strptime(entry['pubDate'], '%Y-%m-%dT%H:%M:%SZ')
# 格式化 pubDate 为所需的格式
pub_date += timedelta(hours=8)
formatted_pub_date = pub_date.strftime('%Y-%m-%d %H:%M:%S')
except ValueError:
# 如果解析失败,使用原始 pubDate 字符串
@ -185,9 +198,8 @@ def insert_data():
"language": item.get("language", "")
}
try:
# 解析 pubDate 字符串为 datetime 对象
pub_date = datetime.strptime(entry['pubDate'], '%Y-%m-%dT%H:%M:%SZ')
# 格式化 pubDate 为所需的格式
pub_date += timedelta(hours=8)
formatted_pub_date = pub_date.strftime('%Y-%m-%d %H:%M:%S')
except ValueError:
# 如果解析失败,使用原始 pubDate 字符串
@ -286,96 +298,157 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/github.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title, link, description, upload_time, author, keyword, language, source):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)— 添加 language 字段
cursor.execute('''CREATE TABLE IF NOT EXISTS github (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
description TEXT,
author TEXT,
upload_time DATETIME,
keyword TEXT,
language TEXT,
source TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据 — 添加 author 和 language 字段
cursor.execute('''
INSERT INTO github (article_title, link, description, author, upload_time, keyword, language, source)
VALUES (?, ?, ?, ?, ?, ?, ?, ?)
''', (title, link, description, author, upload_time, keyword, language, source))
conn.commit()
conn.close()
def get_filtered_articles(entries, choice):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short, choice):
result = ""
record = ""
for entry in entries:
if Is_short == False:
if choice == 1:
result += f"关键词【{entry[6]}】发现新项目:[{entry[1]}]({entry[2]})\n"
result += f"项目描述:{entry[3]}\n"
result += f"上传时间:{entry[4]}\n"
result += f"开发语言:{entry[7]}\t\t作者:{entry[5]}\n"
result += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
elif choice == 2:
result += f"项目:[{entry[1]}]({entry[2]})存在更新!!!\n"
result += f"更新描述:{entry[3]}\n"
result += f"更新时间:{entry[4]}\n"
result += f"提交者:{entry[5]},[点此查看提交详情]({entry[2]})\n"
result += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
elif choice == 3:
result += f"大佬 {entry[5]} 上传了一个新工具:[{entry[1]}]({entry[2]})\n"
result += f"项目描述:{entry[3]}\n"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
elif choice == 4:
result += f"【{entry[3]}】为[{entry[4]}]({entry[1]})发布了新版本,请及时查收!\n"
result += f"发布时间:{entry[2]}\n"
result += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
elif Is_short == True:
if choice == 1:
result += f"关键词【{entry[7]}】发现新项目:[{entry[1]}]({entry[2]})\n"
result += f"上传时间:{entry[4]}\n"
result += f"开发语言:{entry[6]}\t\t作者:{entry[5]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
elif choice == 2:
result += f"项目:[{entry[1]}]({entry[2]})存在更新!!!\n"
result += f"更新描述:{entry[3]}\n"
result += f"更新时间:{entry[4]}\n"
result += f"提交者:{entry[5]},[点此查看提交详情]({entry[2]})\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
elif choice == 3:
result += f"大佬 {entry[5]} 上传了一个新工具:[{entry[1]}]({entry[2]})\n"
result += f"项目描述:{entry[3]}\n"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
elif choice == 4:
result += f"【{entry[3]}】为[{entry[4]}]({entry[1]})发布了新版本,请及时查收!\n"
result += f"发布时间:{entry[2]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
if choice == 1:
record += f"#### 关键词【{entry[7]}】发现新项目:[{entry[1]}]({entry[2]})\n"
record += f"**项目描述**:{entry[3]}\n"
record += f"**上传时间**:{entry[4]}\n"
record += f"**开发语言**:{entry[6]}\t\t**作者**:{entry[5]}\n"
record += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"关键词【{entry[6]}】发现新项目:[{entry[1]}]({entry[2]})\n"
result_long += f"项目描述:{entry[3]}\n"
result_long += f"上传时间:{entry[4]}\n"
result_long += f"开发语言:{entry[7]}\t\t作者:{entry[5]}\n"
result_long += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建短文本结果并进行分块处理
current_entry = (
f"关键词【{entry[6]}】发现新项目:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[4]}\n"
f"开发语言:{entry[7]}\t\t作者:{entry[5]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
# 存入数据库
record(
title=entry[1],
link=entry[2],
description=entry[3],
upload_time=entry[4],
author=entry[5],
keyword=entry[6],
language=entry[7],
source="New project"
)
elif choice == 2:
record += f"#### 项目:[{entry[1]}]({entry[2]})存在更新!!!\n"
record += f"**更新描述**:{entry[3]}\n"
record += f"**更新时间**:{entry[4]}\n"
record += f"**提交者**:{entry[5]},[点此查看提交详情]({entry[2]})\n"
record += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"项目:[{entry[1]}]({entry[2]})存在更新!!!\n"
result_long += f"更新描述:{entry[3]}\n"
result_long += f"更新时间:{entry[4]}\n"
result_long += f"提交者:{entry[5]},[点此查看提交详情]({entry[7]})\n"
result_long += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建短文本结果并进行分块处理
current_entry = (
f"项目:[{entry[1]}]({entry[2]})存在更新!!!\n"
f"更新时间:{entry[4]}\n"
f"提交者:{entry[5]},[点此查看提交详情]({entry[7]})\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
# 存入数据库
record(
title=entry[1],
link=entry[2],
description=entry[3],
upload_time=entry[4],
author=entry[5],
keyword=entry[7],
language=None,
source="Project update"
)
elif choice == 3:
record += f"#### 大佬 {entry[5]} 上传了一个新工具:[{entry[1]}]({entry[2]})\n"
record += f"**项目描述**:{entry[3]}\n"
record += f"**上传时间**:{entry[4]}\n"
record += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"大佬 {entry[5]} 上传了一个新工具:[{entry[1]}]({entry[2]})\n"
result_long += f"项目描述:{entry[3]}\n"
result_long += f"上传时间:{entry[4]}\n"
result_long += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建短文本结果并进行分块处理
current_entry = (
f"大佬 {entry[5]} 上传了一个新工具:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[4]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
# 存入数据库
record(
title=entry[1],
link=entry[2],
description=entry[3],
upload_time=entry[4],
author=entry[5],
keyword=None,
language=None,
source="New tool"
)
elif choice == 4:
record += f"#### 【{entry[3]}】为[{entry[4]}]({entry[1]})发布了新版本,请及时查收!\n"
record += f"**发布时间**:{entry[2]}\n"
record += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"【{entry[3]}】为[{entry[4]}]({entry[1]})发布了新版本,请及时查收!\n"
result_long += f"发布时间:{entry[2]}\n"
result_long += "\n" + "-" * 10 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"【{entry[3]}】为[{entry[4]}]({entry[1]})发布了新版本,请及时查收!\n"
f"发布时间:{entry[2]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
# 存入数据库
record(
title=entry[4],
link=entry[1],
description=None,
upload_time=entry[2],
author=entry[3],
keyword=None,
language=None,
source="New version"
)
def Src_github(e_hour, Is_short):
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_github(e_hour):
if not os.path.exists('./resources/db/github.db'):
# 创建数据库和表
create_database()
@ -389,35 +462,48 @@ def Src_github(e_hour, Is_short):
# 查询指定时间段内的数据
keyword_data, repo_data, user_data, release_data = select_articles(e_hour)
results = []
if keyword_data:
result_1 = get_filtered_articles(keyword_data, Is_short, 1)
result_long_1, short_results_1 = get_filtered_articles(keyword_data, 1)
results.append((result_long_1, short_results_1))
else:
result_1 = ""
results.append(("", []))
if repo_data:
result_2 = get_filtered_articles(repo_data, Is_short, 2)
result_long_2, short_results_2 = get_filtered_articles(repo_data, 2)
results.append((result_long_2, short_results_2))
else:
result_2 = ""
results.append(("", []))
if user_data:
result_3 = get_filtered_articles(user_data, Is_short, 3)
result_long_3, short_results_3 = get_filtered_articles(user_data, 3)
results.append((result_long_3, short_results_3))
else:
result_3 = ""
results.append(("", []))
if release_data:
result_4 = get_filtered_articles(release_data, Is_short, 4)
result_long_4, short_results_4 = get_filtered_articles(release_data, 4)
results.append((result_long_4, short_results_4))
else:
result_4 = ""
return result_1, result_2, result_3, result_4
results.append(("", []))
return results
if __name__ == "__main__":
result_1, result_2, result_3, result_4 = Src_github(24000, False)
if result_1 != "":
print(result_1)
if result_2 != "":
print(result_2)
if result_3 != "":
print(result_3)
if result_4 != "":
print(result_4)
if result_1 == "" and result_2 == "" and result_3 == "" and result_4 == "":
results = Src_github(240)
for i, (result_long, short_results) in enumerate(results, start=1):
if result_long != "":
print(f"长文本结果 {i}:")
print(result_long)
print("\n" + "-" * 10 + "\n")
if short_results:
print(f"分块的短文本结果 {i}:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 10 + "\n")
if all(result_long == "" and not short_results for result_long, short_results in results):
# 如果为空,则跳过执行
print("-" * 10)
print("github数据为空,跳过执行。")
print("github数据为空,跳过执行。")

View File

@ -37,7 +37,11 @@ def get_qianxin_json():
# 打开并读取JSON文件
with open('./resources/JSON/qianxin.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -84,45 +88,72 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/tech_passage.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title=None, link=None, author=None, upload_time=None, description=None, category=None, source=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS tech_passage (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
upload_time DATETIME,
category TEXT,
source TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据
cursor.execute('''
INSERT INTO tech_passage (article_title, link, author, description, upload_time, category, source)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, upload_time, category, source))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n来源:{entry[3]}\n"
result += f"上传时间:{entry[5]}\n"
result += f"描述:{entry[4]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
if Is_short == True:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"上传时间:{entry[5]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n来源:{entry[3]}\n"
result_long += f"上传时间:{entry[5]}\n"
result_long += f"描述:{entry[4]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**来源**:{entry[3]}\n"
record += f"**上传时间**:{entry[5]}\n"
record += f"**描述**:{entry[4]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[5]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
upload_time=entry[5],
description=entry[4],
source="奇安信攻防社区"
)
# 处理最后一个结果
if result_short:
short_results.append(result_short)
def Src_qianxin(e_hour, Is_short):
return result_long, short_results
def Src_qianxin(e_hour):
if not os.path.exists('./resources/db/qianxin.db'):
# 创建数据库和表
create_database()
@ -141,16 +172,27 @@ def Src_qianxin(e_hour, Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_qianxin(4, False)
if reslts != False:
print(reslts)
results = Src_qianxin(4)
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("奇安信攻防社区数据为空,跳过执行。")
print("奇安信攻防社区数据为空,跳过执行。")

View File

@ -44,7 +44,11 @@ def get_seebug_json():
# 打开并读取JSON文件
with open('./resources/JSON/seebug.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -91,45 +95,74 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/sec_news.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title, link, author, upload_time, description=None, source=None, category=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS sec_news (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
source TEXT,
upload_time DATETIME,
category TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据
cursor.execute('''
INSERT INTO sec_news (article_title, link, author, description, source, upload_time, category)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, source, upload_time, category))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n类型:{entry[3]}\n"
result += f"上传时间:{entry[5]}\n"
result += f"{entry[4]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
if Is_short == True:
result += f"文章:[{entry[1]}]({entry[2]})"
result += f"上传时间:{entry[5]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n类型:{entry[3]}\n"
result_long += f"上传时间:{entry[5]}\n"
result_long += f"{entry[4]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**类型**:{entry[3]}\n"
record += f"**上传时间**:{entry[5]}\n"
record += f"{entry[4]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[5]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
author=None,
upload_time=entry[5],
description=entry[4],
source="Seebug",
category=entry[3]
)
def Src_seebug(e_hour, Is_short):
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_seebug(e_hour):
if not os.path.exists('./resources/db/seebug.db'):
# 创建数据库和表
create_database()
@ -148,16 +181,27 @@ def Src_seebug(e_hour, Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_seebug(100, False)
if reslts != False:
print(reslts)
results = Src_seebug(100)
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("Seebug社区数据为空,跳过执行。")
print("Seebug社区数据为空,跳过执行。")

View File

@ -52,7 +52,11 @@ def get_json():
# 打开并读取JSON文件
with open('./resources/JSON/sougou-wx.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个关键词的字典
total_data = []
@ -92,14 +96,6 @@ def select_articles():
ORDER BY pubDate DESC
LIMIT 3
''', (two_months_ago.strftime('%Y-%m-%d %H:%M:%S'), now.strftime('%Y-%m-%d %H:%M:%S')))
# 查询最近的3条未被标记为True的消息
# cursor.execute('''
# SELECT * FROM articles
# WHERE is_sended IS NULL
# ORDER BY pubDate DESC
# LIMIT 3
# ''')
results = cursor.fetchall()
# print(results)
@ -124,45 +120,74 @@ def select_articles():
return results
def record_md(result, filename="./resources/history/wx_news.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title, link, description, upload_time, author, keyword):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS wx_news (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
description TEXT,
upload_time DATETIME,
author TEXT,
keyword TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据
cursor.execute('''
INSERT INTO wx_news (article_title, link, description, upload_time, author, keyword)
VALUES (?, ?, ?, ?, ?, ?)
''', (title, link, description, upload_time, author, keyword))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n描述:{entry[3]}\n"
result += f"上传时间:{entry[4]}\n"
result += f"作者:{entry[5]}\n"
result += f"关键词:{entry[6]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
if Is_short == True:
result += f"文章:[{entry[1]}]({entry[2]})"
result += f"上传时间:{entry[4]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n描述:{entry[3]}\n"
result_long += f"上传时间:{entry[4]}\n"
result_long += f"作者:{entry[5]}\n"
result_long += f"关键词:{entry[6]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n描述:{entry[3]}\n"
record += f"**上传时间**:{entry[4]}\n"
record += f"**作者**:{entry[5]}\n"
record += f"**关键词**:{entry[6]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"关键词:{entry[6]}\n"
f"上传时间:{entry[4]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
def Src_sougou_wx(Is_short):
record(
title=entry[1],
link=entry[2],
description=entry[3],
upload_time=entry[4],
author=entry[5],
keyword=entry[6]
)
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_sougou_wx():
if not os.path.exists('./resources/db/sougou-wx.db'):
# 创建数据库和表
create_database()
@ -181,15 +206,26 @@ def Src_sougou_wx(Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_sougou_wx(False)
if reslts != False:
print(reslts)
results = Src_sougou_wx()
if results != False:
result_long, short_results = results
# 写入长文本结果
with open("./1.txt", "a", encoding="utf-8") as f:
f.write(result_long)
f.write("\n" + "-" * 40 + "\n")
# 写入分块的短文本结果
for short_result in short_results:
with open("./2.txt", "a", encoding="utf-8") as f:
f.write(short_result)
f.write("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)

278
GotoSend/uni_rss.py Normal file
View File

@ -0,0 +1,278 @@
# -*- coding: utf-8 -*-
import json
import sqlite3
import os
from datetime import datetime, timedelta
def create_database():
conn = sqlite3.connect('./resources/db/uni_rss.db')
cursor = conn.cursor()
cursor.execute('''CREATE TABLE IF NOT EXISTS articles (
id INTEGER PRIMARY KEY AUTOINCREMENT,
title TEXT,
link TEXT,
author TEXT,
description TEXT,
pubDate DATETIME,
source TEXT,
is_sended BOOLEAN
)''')
conn.commit()
conn.close()
def parse_pub_date(pub_date_str):
if not pub_date_str:
return pub_date_str
# 定义多种日期格式
date_formats = [
# ISO 8601 格式(带 T)
'%Y-%m-%dT%H:%M:%S',
'%Y-%m-%dT%H:%M:%S%z',
# 标准日期时间格式
'%Y-%m-%d %H:%M:%S',
'%Y-%m-%d %H:%M',
'%Y-%m-%d',
# RFC 822/1123 格式(英文星期和月份)
'%a, %d %b %Y %H:%M:%S %z',
'%a, %d %b %Y %H:%M:%S GMT',
'%a, %d %b %Y %H:%M:%S',
# 其他常见格式
'%d %b %Y %H:%M:%S %z',
'%d %b %Y %H:%M:%S',
]
for fmt in date_formats:
try:
pub_date = datetime.strptime(pub_date_str, fmt)
# 格式化输出为统一格式
return pub_date.strftime('%Y-%m-%d %H:%M:%S')
except ValueError:
continue
# 如果所有格式都失败,返回原始字符串
return pub_date_str
def insert_data(data):
conn = sqlite3.connect('./resources/db/uni_rss.db')
cursor = conn.cursor()
for entry in data:
# 使用新的日期解析函数
formatted_pub_date = parse_pub_date(entry['published'])
cursor.execute('''
SELECT 1 FROM articles WHERE title = ? AND author = ?
''', (entry['title'], entry['author']))
if cursor.fetchone() is None:
cursor.execute('''
INSERT INTO articles (title, link, author, description, pubDate, source)
VALUES (?, ?, ?, ?, ?, ?)
''', (entry['title'], entry['link'], entry['author'], entry['description'], formatted_pub_date, entry['source']))
conn.commit()
conn.close()
def get_uni_rss_json():
# 检查文件是否存在
if not os.path.exists('./resources/JSON/uni_rss.json'):
raise FileNotFoundError(f"uni_rss.json文件不存在,请检查程序是否运行正常!")
# 打开并读取JSON文件
with open('./resources/JSON/uni_rss.json', 'r', encoding='utf-8') as file:
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
raise ValueError("JSON文件格式错误,请检查common.py是否异常!")
# 提取所需字段并编号
total_data = []
for index, item in enumerate(data, start=1):
entry = {
"id": index,
"title": item.get("title", ""),
"link": item.get("link", ""),
"author": item.get("author", ""),
"description": item.get("description", ""),
"published": item.get("published", ""),
"source": item.get("source", ""),
}
total_data.append(entry)
return total_data
def select_articles(uni_rss_switch, Unity):
conn = sqlite3.connect('./resources/db/uni_rss.db')
cursor = conn.cursor()
# 获取当前日期和时间
now = datetime.now()
two_days_ago = now - timedelta(days=200)
if uni_rss_switch == False:
# 查询指定时间段内的数据
cursor.execute('''
SELECT * FROM articles
WHERE is_sended IS NULL AND pubDate BETWEEN ? AND ?
ORDER BY pubDate DESC
''', (two_days_ago.strftime('%Y-%m-%d %H:%M:%S'), now.strftime('%Y-%m-%d %H:%M:%S')))
elif uni_rss_switch == True:
# 查询指定时间段内且title包含特定关键词的数据
like_conditions = ' OR '.join([f"title LIKE ?"] * len(Unity))
# 完整的查询语句
query = f'''
SELECT * FROM articles
WHERE is_sended IS NULL AND pubDate BETWEEN ? AND ?
AND ({like_conditions})
ORDER BY pubDate DESC
'''
# 构建参数列表
params = [
two_days_ago.strftime('%Y-%m-%d %H:%M:%S'),
now.strftime('%Y-%m-%d %H:%M:%S')
] + [f'%{keyword}%' for keyword in Unity]
# 执行查询
cursor.execute(query, params)
results = cursor.fetchall()
if results:
for row in results:
user_id = row[0]
cursor.execute('''
UPDATE articles
SET is_sended = True
WHERE id = ?
''', (user_id,))
conn.commit() # 提交事务
conn.close()
return results
def clear_table():
conn = sqlite3.connect('./resources/db/uni_rss.db')
cursor = conn.cursor()
cursor.execute('DELETE FROM articles')
conn.commit()
conn.close()
def record(title, link, description, upload_time, author, source):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS uni_rss (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
description TEXT,
upload_time DATETIME,
author TEXT,
source TEXT
)''')
# 插入数据
cursor.execute('''
INSERT INTO uni_rss (article_title, link, description, upload_time, author, source)
VALUES (?, ?, ?, ?, ?, ?)
''', (title, link, description, upload_time, author, source))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
for entry in entries:
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n"
result_long += f"作者:{entry[3]}\n"
result_long += f"描述:{entry[4]}\n"
result_long += f"上传时间:{entry[5]}\n"
result_long += f"来源:{entry[6]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[5]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
description=entry[4],
upload_time=entry[5],
author=entry[3],
source=entry[6]
)
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_uni_rss(uni_rss_switch, Unity):
if not os.path.exists('./resources/db/uni_rss.db'):
# 创建数据库和表
create_database()
# 清空表
# clear_table()
# 获取 JSON 数据
uni_rss_data = get_uni_rss_json()
# 插入数据到数据库
insert_data(uni_rss_data)
# 查询指定时间段内的数据
filtered_articles = select_articles(uni_rss_switch, Unity)
# print(filtered_articles)
if filtered_articles:
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
results = Src_uni_rss(False, ["webshell", "2000", "POC", "SQL", "XSS", "CSRF", "漏洞"])
if results:
result_long, short_results = results
# 写入长文本结果
with open("./1.txt", "a", encoding="utf-8") as f:
f.write(result_long)
f.write("\n" + "-" * 40 + "\n")
# 写入分块的短文本结果
for short_result in short_results:
with open("./2.txt", "a", encoding="utf-8") as f:
f.write(short_result)
f.write("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("聚合RSS数据为空,跳过执行。")

View File

@ -45,7 +45,11 @@ def get_xianzhi_json():
# 打开并读取JSON文件
with open('./resources/JSON/xianzhi.json', 'r', encoding='utf-8') as file:
data = json.load(file)
content = file.read()
if not content:
pass
else:
data = json.loads(content)
# 假设data是一个包含多个JSON对象的列表
if not isinstance(data, list):
@ -90,42 +94,70 @@ def clear_table():
conn.commit()
conn.close()
def record_md(result, filename="./resources/history/tech_passage.md"):
# 读取现有内容
if os.path.exists(filename):
with open(filename, 'r', encoding='utf-8') as file:
existing_content = file.read()
else:
existing_content = ""
def record(title=None, link=None, author=None, upload_time=None, description=None, category=None, source=None):
db_path = './resources/db/web.db'
conn = sqlite3.connect(db_path)
cursor = conn.cursor()
# 将新内容插入到现有内容的开头
new_content = result + existing_content
# 创建表(如果不存在)
cursor.execute('''CREATE TABLE IF NOT EXISTS tech_passage (
id INTEGER PRIMARY KEY AUTOINCREMENT,
article_title TEXT,
link TEXT,
author TEXT,
description TEXT,
upload_time DATETIME,
category TEXT,
source TEXT
)''')
# 写回文件
with open(filename, 'w', encoding='utf-8') as file:
file.write(new_content)
# 插入数据
cursor.execute('''
INSERT INTO tech_passage (article_title, link, author, description, upload_time, category, source)
VALUES (?, ?, ?, ?, ?, ?, ?)
''', (title, link, author, description, upload_time, category, source))
conn.commit()
conn.close()
def get_filtered_articles(entries):
result_long = ""
result_short = ""
short_results = []
def get_filtered_articles(entries, Is_short):
result = ""
record = ""
for entry in entries:
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"上传时间:{entry[3]}\n"
result += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
if Is_short == False:
result += f"文章:[{entry[1]}]({entry[2]})\n"
result += f"上传时间:{entry[3]}\n"
result += "\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
# 构建长文本结果
result_long += f"文章:[{entry[1]}]({entry[2]})\n"
result_long += f"上传时间:{entry[3]}\n"
result_long += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record += f"#### 文章:[{entry[1]}]({entry[2]})\n"
record += f"**上传时间**:{entry[3]}\n"
record += "\n" + "-" * 40 + "\n" # 添加分隔线以便区分不同文章
record_md(record)
return result
# 构建短文本结果并进行分块处理
current_entry = (
f"文章:[{entry[1]}]({entry[2]})\n"
f"上传时间:{entry[3]}\n"
"\n" + "-" * 3 + "\n" # 添加分隔线以便区分不同文章
)
temp_result = result_short + current_entry
if len(temp_result.encode('utf-8')) > 4096:
short_results.append(result_short)
result_short = current_entry
else:
result_short = temp_result
record(
title=entry[1],
link=entry[2],
upload_time=entry[3],
source="先知安全技术社区"
)
def Src_xianzhi(e_hour, Is_short):
# 处理最后一个结果
if result_short:
short_results.append(result_short)
return result_long, short_results
def Src_xianzhi(e_hour):
if not os.path.exists('./resources/db/xianzhi.db'):
# 创建数据库和表
create_database()
@ -144,16 +176,27 @@ def Src_xianzhi(e_hour, Is_short):
# print(filtered_articles)
if filtered_articles:
results = get_filtered_articles(filtered_articles, Is_short)
return results
result_long, short_results = get_filtered_articles(filtered_articles)
return result_long, short_results
else:
return False
if __name__ == "__main__":
reslts = Src_xianzhi(4, False)
if reslts != False:
print(reslts)
results = Src_xianzhi(124)
if results != False:
result_long, short_results = results
# 打印长文本结果
print("长文本结果:")
print(result_long)
print("\n" + "-" * 40 + "\n")
# 打印分块的短文本结果
print("分块的短文本结果:")
for short_result in short_results:
print(short_result)
print("\n" + "-" * 40 + "\n")
else:
# 如果为空,则跳过执行
print("-" * 40)
print("先知社区数据为空,跳过执行。")
print("先知社区数据为空,跳过执行。")

View File

@ -1,4 +1,19 @@
## 持续更新中 <br>
<div align="center">
# 🛡️ SecPulse - 赛博脉动
> 面向网络安全领域的智能资讯聚合与推送系统
[![Python](https://img.shields.io/badge/Python-3.6+-blue.svg)](https://www.python.org/)
[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)
**实时感知安全领域的脉搏跳动** 🔔
</div>
## 🚀 快速开始 <br>
RSS订阅链接来源:https://github.com/zhengjim/Chinese-Security-RSS <br>
使用python-json进行格式化,然后使用飞书webhook机器人进行发送 <br>
./config/config.yaml 可指定发送渠道、运行方式等基础配置信息 <br>
@ -6,15 +21,26 @@ RSS订阅链接来源:https://github.com/zhengjim/Chinese-Security-RSS <br>
./config/github_config.yaml 可指定Github相关参数(支持热修改) <br>
更新记录请查看./UpdateLOG.md
### 📱 推送渠道 <br>
目前支持以下推送渠道: <br>
- 飞书(Feishu) <br>
- 企业微信(WeChat Work) <br>
#### 后续更新渠道: <br>
- 钉钉(DingTalk) <br>
- 蓝信(Lanxin) <br>
#### 停更渠道: <br>
邮件(Email,中断开发) <br>
### 项目特色 <br>
- 模块化:爬虫(获取信息部分)、分析(对获取的json信息进行筛选分析存储)、推送(推送至各渠道)、网页等各模块均可单独运行。 <br>
- 轻量化:默认使用sqlite以及其他常见的各系统自带的库,用户仅需配置python环境,不会占用过多内存。 <br>
- 简单化:配置好config后即可一步运行,效率极高。 <br>
### 日志相关
### 日志相关 <br>
请查看./resources/log文件夹下内容 <br>
### 使用建议: <br>
### 🖥️ Linux后台运行建议: <br>
Linux系统建议下载screen于后台持续运行本脚本。 <br>
debian/ubuntu/kali: `apt install screen` <br>
centos: `yum install screen` <br>
@ -23,12 +49,14 @@ centos: `yum install screen` <br>
重新进入会话:`screen -r 会话名称` <br>
结束对话:进入会话后输入`exit` <br>
当然,您也可以直接使用install脚本一键注册systemd服务(注意,请将Core.py主函数中的send_first_message()注释掉,防止反复触发首次运行效果) <br>
### 使用方法: <br>
先下载支持库:`pip install -r requirements.txt` <br>
随后便可直接运行:`python Core.py` <br>
web运行:`python ./web/app.py` <br>
随后web网页将会在本地5000端口启动,访问即可,使用反向代理即可以域名映射到外网 <br>
直接访问web域名即可查看历史推送,访问路径/log即可查看程序运行日志,/weblog查看flask日志 <br>
web运行:直接将本程序包放置于支持php的网站路径下,然后访问即可 <br>
直接运行install.sh即可注册system服务持续化运行,目前脚本存在一定问题,正在尽力修复。 <br>
### 配置 <br>
首先先在飞书中创建群组,然后再创建WebHook机器人 <br>
@ -49,8 +77,19 @@ web运行:`python ./web/app.py` <br>
`./config/github_config.yaml`中可配置github_token <br>
### 运行结果 <br>
### 📊 运行效果展示 <br>
<center><img src="./resources/imgs/run.jpg" width="50%" alt="后端"/></center><br>
<center><img src="./resources/imgs/start.jpg" width="50%" alt="飞书运行提示"/></center><br>
<center><img src="./resources/imgs/result.jpg" width="50%" alt="飞书运行展示"/></center><br>
<center><img src="./resources/imgs/result_mobile.jpg" width="70%" alt="飞书运行展示-安卓"/></center><br>
### 📝 更新日志 <br>
详细的更新记录请查看 [UpdateLOG.md](./UpdateLOG.md)
### 🤝 贡献指南 <br>
欢迎提交Issue和Pull Request来改进本项目!<br>
您也可以通过QQ(2857911564)或者发送邮件(admin@masonliu.com)给我反馈问题。<br>
### 🙏 致谢 <br>
RSS订阅链接来源:[Chinese-Security-RSS](https://github.com/zhengjim/Chinese-Security-RSS) <br>
感谢所有为开源社区做出贡献的开发者 <br>

3
SendCore/DocGeneBot.py Normal file
View File

@ -0,0 +1,3 @@
'''
文档生成功能暂无开发计划。
'''

View File

@ -1,5 +1,8 @@
#!/usr/bin/python
# -*- coding: UTF-8 -*-
'''
邮件发送功能开发流程已中断,无实际利用场景。
'''
import yaml
import smtplib

View File

@ -1,40 +1,56 @@
### 问题反馈 <br>
- 准点发送的文章在定点推送模式下可能会被遗漏推送 <br>
### 问题反馈
- 准点发送的文章在定点推送模式下可能会被遗漏推送
`已通过增加时间范围功能改善此问题,彻底解决需要重构代码`
- 钉钉/企业微信/蓝信webhook存在字节长度限制,需要优化程序推送逻辑 <br>
`尽力改善中,彻底解决需重构代码`
- 首次运行时若抓取RSS源失败,筛选模块无法获取json文件时会导致中断 <br>
- 钉钉/企业微信/蓝信webhook存在字节长度限制,需要优化程序推送逻辑
`重构了短文本推送机制,已解决此bug`
- 首次运行时若抓取RSS源失败,筛选模块无法获取json文件时会导致中断
`为项目添加一个初始json文件`
- 程序运行会产生越来越巨大的DB文件与Markdown文件,同时web网页显示的内容也会非常长,不利于节省服务器流量与加载速度
`为系统添加性能限制模块`
### 下一步计划(待完成) <br>
- 添加更多RSS订阅源(持续进行中) <br>
- 添加更多推送方式,如邮件、微信等 <br>
- 添加百度搜索、谷歌搜索等更多相关检测源,后续将支持谷歌语法 <br>
### 下一步计划(待完成)
- 添加更多推送方式,如邮件、微信等
- 添加谷歌搜索等更多相关检测源,后续将支持谷歌语法
### 下一步计划(已完成) <br>
### 下一步计划(已完成)
- 将所有打印信息转为logging info并存档(已完成)<br>
- 将logging info转为异步的loguru(已完成) <br>
- 探查异常中断原因(已解决,获取rss源时的请求未做超时检测) <br>
- 添加超时机制,防止程序异常卡死(已完成) <br>
- 存档所有推送文章方便以后查看(已完成) <br>
- 创建Web网页以展示最新推送(info.masonliu.com,已完成) <br>
- 更换筛选模块,由时段筛选改为历史记录筛选以确保不会有资讯漏报(筛选条件增加了时间筛选和是否已发送筛选) <br>
- 添加GitHub等监测源(重构参考项目逻辑并上线) <br>
- 将logging info转为异步的loguru(已完成)
- 探查异常中断原因(已解决,获取rss源时的请求未做超时检测)
- 添加超时机制,防止程序异常卡死(已完成)
- 存档所有推送文章方便以后查看(已完成)
- 创建Web网页以展示最新推送(info.masonliu.com,已完成)
- 更换筛选模块,由时段筛选改为历史记录筛选以确保不会有资讯漏报(筛选条件增加了时间筛选和是否已发送筛选)
- 添加GitHub等监测源(重构参考项目逻辑并上线)
- 添加百度监测源
- 添加性能限制模块(限制每次读取数量)
- 将搜狗-微信和GitHub同步上网站推送
### 下一步计划(已作废) <br>
- 添加Mysql作为数据库存储(现有sqlite已满足使用) <br>
### 下一步计划(已作废)
- 添加Mysql作为数据库存储(现有sqlite已满足使用)
### 更新日志
#### 从2024年12月15日开始记录
- 2024年12月15日早:优化了文件结构,修复了日志记录时的小BUG,添加web展示日志功能 <br>
- 2024年12月15日晚:修复了单次运行结束时的校验错误问题 <br>
- 2024年12月18日早:添加了短文本推送机制,一定程度上解决了长字节推送问题(解决办法正在思考中) <br>
- 2024年12月24日晚:上传了测试0.1版本,修复了报错问题 <br>
- 2024年12月25日早:优化了代码逻辑和表现 <br>
- 2024年12月25日晚:优化了推送报文格式 <br>
- 2024年12月30日:添加并完善了基于搜狗搜索的微信公众号文章监测 <br>
- 2024年12月30日晚:为洞见微信资讯推送添加了关键词筛选 <br>
- 2025年01月02日:更新并上线了Github项目监测功能,readme后续更新中 <br>
- 2025年01月02日晚:再次优化了文件结构,提高可读性 <br>
- 2025年01月05日晚:修复了doonsec相关配置的bug,程序现已可正常运行 <br>
- 2025年01月06日:更新了配置信息自动获取的逻辑,添加关键词等现可在运行时添加,重要配置信息(config.yaml)仍需暂停重新运行 <br>
- 2024年12月15日早:优化了文件结构,修复了日志记录时的小BUG,添加web展示日志功能
- 2024年12月15日晚:修复了单次运行结束时的校验错误问题
- 2024年12月18日早:添加了短文本推送机制,一定程度上解决了长字节推送问题(解决办法正在思考中)
- 2024年12月24日晚:上传了测试0.1版本,修复了报错问题
- 2024年12月25日早:优化了代码逻辑和表现
- 2024年12月25日晚:优化了推送报文格式
- 2024年12月30日:添加并完善了基于搜狗搜索的微信公众号文章监测
- 2024年12月30日晚:为洞见微信资讯推送添加了关键词筛选
- 2025年01月02日:更新并上线了Github项目监测功能,readme后续更新中
- 2025年01月02日晚:再次优化了文件结构,提高可读性
- 2025年01月05日晚:修复了doonsec相关配置的bug,程序现已可正常运行
- 2025年01月06日:更新了配置信息自动获取的逻辑,添加关键词等现可在运行时添加,重要配置信息(config.yaml)仍需暂停重新运行
- 2025年01月10日上午:修复了github推送的问题(时区,消息配置错误等)
- 2025年01月10日下午:上线了百度搜索内容监测
- 2025年01月14日晚:添加了网站读取文件逻辑仅读取限制数量的文件,避免文件过大导致程序崩溃或是阅读困难
- 2025年01月15日早:优化并精简了web程序的代码
- 2025年01月22日:完善短文本推送机制,现已可完美支持推送至企业微信、钉钉、蓝信、微信等,等待后续开发
- 2025年01月24日早:修复了json文件为空时程序中断的问题并优化了报错逻辑
- 2025年03月10日早:为程序添加了通用rss接口,可支持更多rss源
- 2025年03月14日晚:为程序添加了通用rss发送程序,同时修复了一个神奇的bug,现可支持更多rss源
- 2026年05月04日晚:更新了当前的WEB UI样式并重新启动程序开发计划
- 2026年05月11日晚:稍微更新了一下sh脚本,项目更名为SecPulse(赛博脉动)
- 2026年05月19日晚:重大版本更新(网页优化,修复bug,sqlite支持度提升)

View File

@ -4,7 +4,7 @@ from loguru import logger
# 清除所有已有的日志记录器配置
logger.remove()
logger.add("./log/core.log",
logger.add("./resources/log/core.log",
format="{time:YYYY-MM-DD HH:mm:ss} - {level} - {name}:{function}:{line} - {message}",
rotation="100 MB",
compression="zip",
@ -17,10 +17,10 @@ def get_core_config():
# 加载参数
with open('./config/config.yaml', 'r', encoding="utf-8") as file:
config = yaml.safe_load(file)
debug = f"{config['debug']}"
if debug == "True":
debug = config.get('debug', 'False') # 使用 get 方法提供默认值
if str(debug).lower() == "true": # 统一转换为小写进行比较
logger.debug("Debug mode is on")
logger.debug(f"Loaded config: {config}") # 输出加载的配置
# logger.debug(f"Loaded config: {config}") # 输出加载的配置,可能导致密钥泄露,请勿取消注释
time_choice = int(f"{config['time_mode']}")
choice = config['mode'] # 假设 mode 是一个列表
@ -66,15 +66,23 @@ def get_debug_config():
return debug
def get_kewords_config():
def get_keywords_config(item):
with open('./config/keywords.yaml', 'r', encoding="utf-8") as file:
config = yaml.safe_load(file)
Sogou_WX = config['Sogou-WX']
Doonsec_switch = config.get('Doonsec-switch', False)
Doonsec = config['Doonsec']
# print (Sogou_WX, Doonsec_switch, Doonsec)
return Sogou_WX, Doonsec_switch, Doonsec
if __name__ == "__main__":
get_kewords_config()
if item == 'Doonsec':
Doonsec_switch = config.get('Doonsec-switch', False)
Doonsec = config['Doonsec']
return Doonsec_switch, Doonsec
elif item == 'Sogou-WX':
Sogou_WX = config['Sogou-WX']
return Sogou_WX
elif item == 'Baidu':
Baidu = config['Baidu']
return Baidu
elif item == 'Unity':
uni_switch = config.get('uni-switch', False)
Unity = config['Unity']
return uni_switch, Unity
else:
logger.error("参数错误,请检查./config/keywords.yaml")

View File

@ -1,14 +1,12 @@
# 飞书相关配置信息
# fs_activate: True
# fs_key: aa04a02f-d7bf-4279-bd48-44c4f28c8f74 # 此处填写token,记得冒号后空一格,如aa04a02f-d7bf-4279-bd48-44c4f28c8f74
# fs_secret: 4tq65T4jm1MO2IlxvHxBWe # 此处填写签名密钥,记得冒号后空一格,如4tq65T4jm1MO2IlxvHxBWe
fs_activate: True
fs_key: 202d7e51-9a46-422e-a035-863bc42bc459 # 此处填写token,记得冒号后空一格,如aa04a02f-d7bf-4279-bd48-44c4f28c8f74
fs_secret: eZaSCl5DSqtJyZ8QpJBDFh # 此处填写签名密钥,记得冒号后空一格,如4tq65T4jm1MO2IlxvHxBWe
fs_key: aa04a02f-d7bf-4279-bd48-44c4f28c8f74 # 此处填写token,记得冒号后空一格,如aa04a02f-d7bf-4279-bd48-44c4f28c8f74
fs_secret: 4tq65T4jm1MO2IlxvHxBWe # 此处填写签名密钥,记得冒号后空一格,如4tq65T4jm1MO2IlxvHxBWe
# 企业微信相关配置信息
wx_activate: False
wx_key: # 此处填写token,记得冒号后空一格,如9a3dd6ff-75d6-4208-bc4b-77724a5805d6
wx_key: 9a3dd6ff-75d6-4208-bc4b-77724a5805d6 # 此处填写token,记得冒号后空一格,如9a3dd6ff-75d6-4208-bc4b-77724a5805d6
# 钉钉相关配置信息
ding_activate: False
@ -29,13 +27,14 @@ e_hour: 4 # 程序运行时间间隔
time_mode: 1
# 0:定时运行模式,仅在指定时间运行(参照Core.py中设置)
# 1:启用循环,一定间隔时间后运行
mode: [0] # 运行模式,可多选
mode: [0, 1, 2, 3] # 运行模式,可多选
# 0:启用RSS抓取模式
# 1:启用搜狗-微信公众号文章监测
# 2:启用github项目监测
# 3:启用百度搜索内容监测
# 网址配置
url: https://info.masonliu.com/ # 请设置为您自己反代的域名,或者改为 http://127.0.0.1:5000 或者对应IP域名
# 调试模式
debug: False
debug: True

View File

@ -4,46 +4,21 @@ translate: False # 是否开启翻译
# 监控列表
tool_list: # 监控已创建的仓库是否更新
- BeichenDream/Godzilla
- rebeyond/Behinder
- AntSwordProject/antSword
- j1anFen/shiro_attack
- yhy0/github-cve-monitor
- gentilkiwi/mimikatz
- ehang-io/nps
- chaitin/xray
- FunnyWolf/pystinger
- L-codes/Neo-reGeorg
- shadow1ng/fscan
- SafeGroceryStore/MDUT
- EdgeSecurityTeam/Vulnerability
- Vme18000yuan/FreePOC
- wy876/POC
keyword_list: # 监控关键词
- sql注入
- cnvd
- 未授权
- 漏洞POC
- POC
- RCE
- 渗透测试
- 反序列化
- 攻防
- webshell
- 红队
- redteam
- 信息收集
- 绕过
- bypass av
- CVE-2026
- 内网渗透
- 漏洞检测
- 钓鱼
user_list: # 监控用户
- su18
- BeichenDream
- phith0n
- zhzyker
- lijiejie
- projectdiscovery
- HavocFramework
black_words: # 监控违禁词
- 反共

View File

@ -1,3 +1,6 @@
Sogou-WX: ["银行测试", "APP逆向", "渗透测试", "手机银行漏洞", "银行漏洞", "支付漏洞"] # 基于搜狗引擎搜索特定关键词的微信公众号文章
Doonsec-switch: False
Doonsec: ["逆向", "解包", "POC"] # 洞见微信安全资讯关键词
Doonsec: ["逆向", "解包", "POC"] # 洞见微信安全资讯关键词
uni-switch: False
Unity: ["逆向", "解包", "POC", "漏洞"] # 聚合RSS资讯关键词
Sogou-WX: ["银行测试", "APP逆向", "渗透测试", "手机银行漏洞", "银行漏洞", "支付漏洞"] # 基于搜狗引擎搜索特定关键词的微信公众号文章
Baidu: ["银行测试", "APP逆向", "渗透测试", "手机银行漏洞", "银行漏洞", "支付漏洞"] # 基于百度搜索特定关键词的文章

9
config/uni_rss.yaml Normal file
View File

@ -0,0 +1,9 @@
link:
- 美团技术团队|https://tech.meituan.com/feed
- 360 Netlab Blog|https://blog.netlab.360.com/rss # 当前无法处理该时间格式
- 知道创宇404实验室|https://paper.seebug.org/rss
- 腾讯安全响应中心|https://security.tencent.com/index.php/feed/blog
- Hacker News|https://hnrss.org/frontpage
wechat:
- 美团技术团队|https://wechat2rss.xlab.app/feed/294bc034c9941529cd86a8a4b8999d100186c04d.xml

1279
index.php Normal file

File diff suppressed because it is too large Load Diff

85
install.sh Normal file
View File

@ -0,0 +1,85 @@
#!/bin/bash
set -e
BASE_DIR=$(cd "$(dirname "$0")"; pwd)
USER_NAME=$(whoami)
ehco -e "███████ ███████ ██████ ██████ ██ ██ ██ ███████ ███████
██ ██ ██ ██ ██ ██ ██ ██ ██ ██
███████ █████ ██ ██████ ██ ██ ██ ███████ █████
██ ██ ██ ██ ██ ██ ██ ██ ██
███████ ███████ ██████ ██ ██████ ███████ ███████ ███████
"
echo "欢迎使用 SecPulse 赛博脉动监控推送系统"
echo "项目路径: $BASE_DIR"
# 检测 Python
if command -v python3 >/dev/null 2>&1; then
PYTHON_CMD=python3
elif command -v python >/dev/null 2>&1; then
PYTHON_CMD=python
else
echo "❌ 未检测到 Python,请先安装 Python 3.6+"
exit 1
fi
VERSION=$($PYTHON_CMD -c 'import sys; print(".".join(map(str, sys.version_info[:3])))')
MAJOR=$(echo $VERSION | cut -d. -f1)
MINOR=$(echo $VERSION | cut -d. -f2)
if [ "$MAJOR" -lt 3 ] || { [ "$MAJOR" -eq 3 ] && [ "$MINOR" -lt 6 ]; }; then
echo "❌ Python 版本过低(需要 >= 3.6),当前版本: $VERSION"
exit 1
fi
echo "✅ 检测到 Python: $PYTHON_CMD ($VERSION)"
# 检查 pip
if ! $PYTHON_CMD -m pip --version >/dev/null 2>&1; then
echo "❌ pip 未安装或不可用"
exit 1
fi
# 安装依赖
if [ -f "$BASE_DIR/requirements.txt" ]; then
echo "📦 安装 Python 依赖..."
$PYTHON_CMD -m pip install --upgrade pip -q
$PYTHON_CMD -m pip install -r "$BASE_DIR/requirements.txt" -q
echo "✅ 依赖安装完成"
else
echo "⚠️ 未找到 requirements.txt,跳过依赖安装"
fi
# 创建 systemd 服务
sudo tee /etc/systemd/system/secpulse.service > /dev/null <<EOF
[Unit]
Description=SecPulse Core Service
After=network.target
[Service]
Type=simple
User=$USER_NAME
WorkingDirectory=$BASE_DIR
ExecStart=$PYTHON_CMD $BASE_DIR/Core.py
Restart=always
RestartSec=3
Environment=PYTHONUNBUFFERED=1
[Install]
WantedBy=multi-user.target
EOF
# 重载并启动服务
sudo systemctl daemon-reload
sudo systemctl enable --now secpulse
echo ""
echo "===================================="
echo "✅ SecPulse 服务已安装并启动"
echo "📄 日志查看: sudo journalctl -u SecPulse -f"
echo "🌐 访问 index.php 获取网页服务"
echo "===================================="

239
log.php Normal file
View File

@ -0,0 +1,239 @@
<?php
// log.php - 日志查看页面
// 设置字符编码
header('Content-Type: text/html; charset=utf-8');
// 日志文件路径
$logFile = './resources/log/core.log';
// 检查日志文件是否存在
if (!file_exists($logFile)) {
$logContent = "日志文件不存在: " . htmlspecialchars($logFile);
} else {
// 读取日志文件内容
$logContent = file_get_contents($logFile);
// 如果文件为空
if (empty($logContent)) {
$logContent = "日志文件为空";
}
// 对内容进行HTML转义以防止XSS攻击
$logContent = htmlspecialchars($logContent, ENT_QUOTES, 'UTF-8');
}
// 获取最后修改时间
$lastModified = file_exists($logFile) ? date("Y-m-d H:i:s", filemtime($logFile)) : "未知";
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="shortcut icon" href="./static/favicon.ico" type="image/x-icon">
<title>SecPulse运行日志</title>
<!-- 引入 Layui 的 CSS -->
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/layui-src/dist/css/layui.css">
<style>
* {
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
font-family: "Microsoft YaHei", Arial, sans-serif;
background-color: #f5f5f5;
padding: 20px;
line-height: 1.6;
}
.container {
max-width: 1200px;
margin: 0 auto;
background: white;
border-radius: 8px;
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
overflow: hidden;
}
.header {
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
color: white;
padding: 20px;
text-align: center;
}
.header h1 {
font-size: clamp(1.5rem, 4vw, 2.5rem);
margin-bottom: 10px;
}
.header p {
font-size: clamp(0.9rem, 2vw, 1.1rem);
opacity: 0.9;
}
.info-bar {
background: #f8f9fa;
padding: 15px 20px;
border-bottom: 1px solid #eee;
display: flex;
justify-content: space-between;
align-items: center;
flex-wrap: wrap;
gap: 10px;
}
.info-item {
font-size: 0.9rem;
color: #666;
}
.log-container {
padding: 20px;
max-height: 70vh;
overflow-y: auto;
}
.log-content {
background: #2d2d2d;
color: #f8f8f2;
padding: 20px;
border-radius: 6px;
font-family: 'Consolas', 'Monaco', monospace;
font-size: clamp(0.8rem, 1.5vw, 0.95rem);
line-height: 1.5;
white-space: pre-wrap;
word-wrap: break-word;
overflow-x: auto;
}
.footer {
text-align: center;
padding: 15px;
background: #f8f9fa;
color: #666;
font-size: 0.85rem;
border-top: 1px solid #eee;
}
/* 响应式设计 */
@media (max-width: 768px) {
body {
padding: 10px;
}
.header {
padding: 15px;
}
.info-bar {
flex-direction: column;
align-items: flex-start;
gap: 5px;
}
.log-container {
padding: 15px;
max-height: 60vh;
}
.log-content {
padding: 15px;
font-size: 0.85rem;
}
}
@media (max-width: 480px) {
.header h1 {
font-size: 1.3rem;
}
.header p {
font-size: 0.85rem;
}
.log-content {
font-size: 0.8rem;
padding: 10px;
}
}
/* 滚动条样式 */
.log-container::-webkit-scrollbar {
width: 8px;
}
.log-container::-webkit-scrollbar-track {
background: #f1f1f1;
border-radius: 4px;
}
.log-container::-webkit-scrollbar-thumb {
background: #c1c1c1;
border-radius: 4px;
}
.log-container::-webkit-scrollbar-thumb:hover {
background: #a8a8a8;
}
</style>
</head>
<body>
<div class="container">
<div class="header">
<h1>📋 程序运行日志</h1>
<p>实时监控系统运行状态</p>
</div>
<div class="info-bar">
<div class="info-item">
<strong>日志文件:</strong> <?php echo htmlspecialchars(basename($logFile)); ?>
</div>
<div class="info-item">
<strong>最后更新:</strong> <?php echo $lastModified; ?>
</div>
<div class="info-item">
<strong>文件大小:</strong> <?php echo formatFileSize(file_exists($logFile) ? filesize($logFile) : 0); ?>
</div>
</div>
<div class="log-container">
<div class="log-content"><?php echo $logContent; ?></div>
</div>
<div class="footer">
<p>© 2026 SecPulse 日志系统 | 自动刷新间隔: 30秒</p>
</div>
</div>
<script>
// 自动刷新功能
setTimeout(function() {
location.reload();
}, 30000); // 30秒自动刷新
// 滚动到底部
window.addEventListener('load', function() {
const logContainer = document.querySelector('.log-container');
if (logContainer) {
logContainer.scrollTop = logContainer.scrollHeight;
}
});
</script>
<?php
// 格式化文件大小函数
function formatFileSize($bytes) {
if ($bytes === 0) return '0 Bytes';
$k = 1024;
$sizes = ['Bytes', 'KB', 'MB', 'GB'];
$i = floor(log($bytes) / log($k));
return round($bytes / pow($k, $i), 2) . ' ' . $sizes[$i];
}
?>
</body>
</html>

View File

@ -1,4 +0,0 @@
2025-01-06 00:28:38 - DEBUG - config.check_config:get_core_config:20 - Loaded config: {'fs_activate': True, 'fs_key': '202d7e51-9a46-422e-a035-863bc42bc459', 'fs_secret': 'eZaSCl5DSqtJyZ8QpJBDFh', 'wx_activate': False, 'wx_key': None, 'ding_activate': False, 'ding_key': None, 'lx_activate': False, 'lx_key': None, 'mail_host': 'smtp.masonliu.com', 'mail_user': 'test@masonliu.com', 'mail_pass': 'Test123456', 'sender': 'test@masonliu.com', 'receivers': ['2857911564@qq.com'], 'e_hour': 4, 'time_mode': 1, 'mode': [0], 'url': 'https://info.masonliu.com/', 'debug': True}
2025-01-06 00:29:41 - DEBUG - config.check_config:get_core_config:20 - Loaded config: {'fs_activate': True, 'fs_key': '202d7e51-9a46-422e-a035-863bc42bc459', 'fs_secret': 'eZaSCl5DSqtJyZ8QpJBDFh', 'wx_activate': False, 'wx_key': None, 'ding_activate': False, 'ding_key': None, 'lx_activate': False, 'lx_key': None, 'mail_host': 'smtp.masonliu.com', 'mail_user': 'test@masonliu.com', 'mail_pass': 'Test123456', 'sender': 'test@masonliu.com', 'receivers': ['2857911564@qq.com'], 'e_hour': 4, 'time_mode': 1, 'mode': [0], 'url': 'https://info.masonliu.com/', 'debug': True}
2025-01-06 00:33:10 - DEBUG - config.check_config:get_core_config:20 - Loaded config: {'fs_activate': True, 'fs_key': '202d7e51-9a46-422e-a035-863bc42bc459', 'fs_secret': 'eZaSCl5DSqtJyZ8QpJBDFh', 'wx_activate': False, 'wx_key': None, 'ding_activate': False, 'ding_key': None, 'lx_activate': False, 'lx_key': None, 'mail_host': 'smtp.masonliu.com', 'mail_user': 'test@masonliu.com', 'mail_pass': 'Test123456', 'sender': 'test@masonliu.com', 'receivers': ['2857911564@qq.com'], 'e_hour': 4, 'time_mode': 1, 'mode': [0], 'url': 'https://info.masonliu.com/', 'debug': True}
2025-01-06 00:33:15 - DEBUG - config.check_config:get_core_config:20 - Loaded config: {'fs_activate': True, 'fs_key': '202d7e51-9a46-422e-a035-863bc42bc459', 'fs_secret': 'eZaSCl5DSqtJyZ8QpJBDFh', 'wx_activate': False, 'wx_key': None, 'ding_activate': False, 'ding_key': None, 'lx_activate': False, 'lx_key': None, 'mail_host': 'smtp.masonliu.com', 'mail_user': 'test@masonliu.com', 'mail_pass': 'Test123456', 'sender': 'test@masonliu.com', 'receivers': ['2857911564@qq.com'], 'e_hour': 4, 'time_mode': 1, 'mode': [0], 'url': 'https://info.masonliu.com/', 'debug': True}

431
monitor.php Normal file
View File

@ -0,0 +1,431 @@
<?php
// monitor.php - 系统文件监控页面
// 设置字符编码
header('Content-Type: text/html; charset=utf-8');
// 格式化文件大小函数
function formatFileSize($bytes) {
if ($bytes === 0) return '0 Bytes';
$k = 1024;
$sizes = ['Bytes', 'KB', 'MB', 'GB'];
$i = floor(log($bytes) / log($k));
return round($bytes / pow($k, $i), 2) . ' ' . $sizes[$i];
}
// 格式化时间函数
function formatTime($timestamp) {
if (!$timestamp) return '未知';
return date("Y-m-d H:i:s", $timestamp);
}
// 获取目录信息的函数
function getDirectoryInfo($dirPath, $displayName) {
$files = [];
if (!is_dir($dirPath)) {
return [
'name' => $displayName,
'path' => $dirPath,
'exists' => false,
'files' => [],
'totalSize' => 0,
'fileCount' => 0
];
}
$items = glob($dirPath . '/*');
$totalSize = 0;
$fileCount = 0;
foreach ($items as $item) {
if (is_file($item)) {
$fileInfo = [
'name' => basename($item),
'path' => $item,
'size' => filesize($item),
'modified' => filemtime($item),
'extension' => strtolower(pathinfo($item, PATHINFO_EXTENSION))
];
$files[] = $fileInfo;
$totalSize += $fileInfo['size'];
$fileCount++;
}
}
// 按修改时间降序排列
usort($files, function($a, $b) {
return $b['modified'] - $a['modified'];
});
return [
'name' => $displayName,
'path' => $dirPath,
'exists' => true,
'files' => $files,
'totalSize' => $totalSize,
'fileCount' => $fileCount
];
}
// 定义要监控的目录
$directories = [
getDirectoryInfo('./resources/log', 'SecPulse运行日志'),
getDirectoryInfo('./resources/db', '数据库文件'),
getDirectoryInfo('./resources/JSON', '中转JSON文件')
];
// 计算总体统计信息
$totalFiles = 0;
$totalSize = 0;
foreach ($directories as $dir) {
$totalFiles += $dir['fileCount'];
$totalSize += $dir['totalSize'];
}
$currentTime = date("Y-m-d H:i:s");
?>
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="shortcut icon" href="./static/favicon.ico" type="image/x-icon">
<title>SecPulse系统文件监控</title>
<!-- 引入 Layui 的 CSS -->
<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/layui-src/dist/css/layui.css">
<style>
* {
margin: 0;
padding: 0;
box-sizing: border-box;
}
body {
font-family: "Microsoft YaHei", Arial, sans-serif;
background-color: #f5f5f5;
padding: 20px;
line-height: 1.6;
}
.container {
max-width: 1200px;
margin: 0 auto;
background: white;
border-radius: 8px;
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
overflow: hidden;
}
.header {
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
color: white;
padding: 20px;
text-align: center;
}
.header h1 {
font-size: clamp(1.5rem, 4vw, 2.5rem);
margin-bottom: 10px;
}
.header p {
font-size: clamp(0.9rem, 2vw, 1.1rem);
opacity: 0.9;
}
.stats-bar {
background: #f8f9fa;
padding: 15px 20px;
border-bottom: 1px solid #eee;
display: flex;
justify-content: space-around;
align-items: center;
flex-wrap: wrap;
gap: 15px;
}
.stat-item {
text-align: center;
min-width: 120px;
}
.stat-value {
font-size: 1.5rem;
font-weight: bold;
color: #667eea;
}
.stat-label {
font-size: 0.85rem;
color: #666;
margin-top: 5px;
}
.directory-section {
margin: 20px;
border: 1px solid #eee;
border-radius: 6px;
overflow: hidden;
}
.directory-header {
background: linear-gradient(135deg, #f093fb 0%, #f5576c 100%);
color: white;
padding: 15px 20px;
display: flex;
justify-content: space-between;
align-items: center;
flex-wrap: wrap;
gap: 10px;
}
.directory-title {
font-size: 1.2rem;
font-weight: bold;
}
.directory-info {
font-size: 0.9rem;
opacity: 0.9;
}
.file-table {
width: 100%;
border-collapse: collapse;
}
.file-table th {
background: #f8f9fa;
padding: 12px 15px;
text-align: left;
font-weight: 600;
color: #333;
border-bottom: 2px solid #eee;
}
.file-table td {
padding: 12px 15px;
border-bottom: 1px solid #f0f0f0;
color: #666;
}
.file-table tr:hover {
background: #f8f9ff;
}
.file-name {
font-weight: 500;
color: #333;
}
.file-size {
font-family: 'Consolas', monospace;
color: #667eea;
}
.file-time {
font-size: 0.85rem;
color: #888;
}
.empty-directory {
padding: 30px;
text-align: center;
color: #999;
font-style: italic;
}
.footer {
text-align: center;
padding: 15px;
background: #f8f9fa;
color: #666;
font-size: 0.85rem;
border-top: 1px solid #eee;
}
/* 响应式设计 */
@media (max-width: 768px) {
body {
padding: 10px;
}
.header {
padding: 15px;
}
.stats-bar {
flex-direction: column;
gap: 10px;
}
.stat-item {
min-width: auto;
}
.directory-section {
margin: 15px;
}
.directory-header {
flex-direction: column;
align-items: flex-start;
gap: 8px;
}
.file-table {
font-size: 0.85rem;
}
.file-table th,
.file-table td {
padding: 8px 10px;
}
}
@media (max-width: 480px) {
.header h1 {
font-size: 1.3rem;
}
.header p {
font-size: 0.85rem;
}
.directory-title {
font-size: 1rem;
}
.file-table {
font-size: 0.8rem;
}
.file-table th,
.file-table td {
padding: 6px 8px;
}
}
/* 滚动条样式 */
::-webkit-scrollbar {
width: 8px;
height: 8px;
}
::-webkit-scrollbar-track {
background: #f1f1f1;
border-radius: 4px;
}
::-webkit-scrollbar-thumb {
background: #c1c1c1;
border-radius: 4px;
}
::-webkit-scrollbar-thumb:hover {
background: #a8a8a8;
}
</style>
</head>
<body>
<div class="container">
<div class="header">
<h1>📊 系统文件监控</h1>
<p>实时监控系统资源文件状态</p>
</div>
<div class="stats-bar">
<div class="stat-item">
<div class="stat-value"><?php echo count($directories); ?></div>
<div class="stat-label">监控目录</div>
</div>
<div class="stat-item">
<div class="stat-value"><?php echo $totalFiles; ?></div>
<div class="stat-label">文件总数</div>
</div>
<div class="stat-item">
<div class="stat-value"><?php echo formatFileSize($totalSize); ?></div>
<div class="stat-label">总大小</div>
</div>
<div class="stat-item">
<div class="stat-value"><?php echo $currentTime; ?></div>
<div class="stat-label">更新时间</div>
</div>
</div>
<?php foreach ($directories as $dir): ?>
<div class="directory-section">
<div class="directory-header">
<div class="directory-title">📁 <?php echo htmlspecialchars($dir['name']); ?></div>
<div class="directory-info">
<?php if ($dir['exists']): ?>
<?php echo $dir['fileCount']; ?> 个文件 |
总大小: <?php echo formatFileSize($dir['totalSize']); ?>
<?php else: ?>
目录不存在
<?php endif; ?>
</div>
</div>
<?php if ($dir['exists'] && !empty($dir['files'])): ?>
<table class="file-table">
<thead>
<tr>
<th>文件名称</th>
<th>文件大小</th>
<th>更新时间</th>
<th>文件类型</th>
</tr>
</thead>
<tbody>
<?php foreach ($dir['files'] as $file): ?>
<tr>
<td class="file-name"><?php echo htmlspecialchars($file['name']); ?></td>
<td class="file-size"><?php echo formatFileSize($file['size']); ?></td>
<td class="file-time"><?php echo formatTime($file['modified']); ?></td>
<td><?php echo strtoupper(htmlspecialchars($file['extension'])); ?></td>
</tr>
<?php endforeach; ?>
</tbody>
</table>
<?php elseif ($dir['exists']): ?>
<div class="empty-directory">
该目录下暂无文件
</div>
<?php else: ?>
<div class="empty-directory">
目录路径: <?php echo htmlspecialchars($dir['path']); ?><br>
该目录不存在或无法访问
</div>
<?php endif; ?>
</div>
<?php endforeach; ?>
<div class="footer">
<p>© 2026 SecPulse 文件监控系统 | 自动刷新间隔: 60秒</p>
</div>
</div>
<script>
// 自动刷新功能
setTimeout(function() {
location.reload();
}, 60000); // 60秒自动刷新
// 添加加载动画效果
window.addEventListener('load', function() {
const container = document.querySelector('.container');
container.style.opacity = '0';
container.style.transform = 'translateY(20px)';
container.style.transition = 'all 0.5s ease';
setTimeout(() => {
container.style.opacity = '1';
container.style.transform = 'translateY(0)';
}, 100);
});
</script>
</body>
</html>

View File

@ -5,4 +5,5 @@ schedule
requests
python-dateutil
loguru
beautifulsoup4
beautifulsoup4
feedparser

File diff suppressed because one or more lines are too long

View File

@ -1,162 +1,162 @@
[
{
"guid": "https://www.anquanke.com/post/id/303249",
"title": "2025年数字安全十大趋势预测:挑战、机遇、变革与战略布局",
"author": " 安全客",
"guid": "https://www.anquanke.com/post/id/315489",
"title": "科技云报到:智算千亿赛道向何方?一文读懂信通院《2026智能算力服务研究报告》",
"author": " 科技云报到",
"description": null,
"source": "微信",
"pubDate": "2025-01-03 11:28:51"
"source": null,
"pubDate": "2026-05-12 16:57:09"
},
{
"guid": "https://www.anquanke.com/post/id/303246",
"title": "已打补丁但仍有漏洞 Windows BitLocker 加密再次被绕过",
"guid": "https://www.anquanke.com/post/id/315487",
"title": "亿格云完成数亿元B轮融资,加码“人+AI”统一安全治理",
"author": " 亿格云",
"description": null,
"source": null,
"pubDate": "2026-05-12 16:36:31"
},
{
"guid": "https://www.anquanke.com/post/id/315417",
"title": "安全进入“AI自主攻击”时代,瑞数信息如何用AI对抗AI",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-04-29 16:51:10"
},
{
"guid": "https://www.anquanke.com/post/id/315419",
"title": "智能体关键年:Agent扎根业务流,AI生产力正在形成",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-04-29 16:50:36"
},
{
"guid": "https://www.anquanke.com/post/id/315390",
"title": "深度分析Sorry勒索软件的加密实现与行为特征",
"author": " 安全客",
"description": null,
"source": null,
"pubDate": "2026-04-29 13:32:51"
},
{
"guid": "https://www.anquanke.com/post/id/315341",
"title": "科技云报到:当AI闯入特教行业,一场颠覆变革正在发生!",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-04-21 10:21:50"
},
{
"guid": "https://www.anquanke.com/post/id/315337",
"title": "科技云报到:AI云,逻辑变了吗?",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-04-20 16:21:23"
},
{
"guid": "https://www.anquanke.com/post/id/315292",
"title": "工程化实战思维在红队技战术中的应用",
"author": " 蔚(Yù)谛",
"description": null,
"source": null,
"pubDate": "2026-04-13 11:15:45"
},
{
"guid": "https://www.anquanke.com/post/id/315277",
"title": "鸿蒙NEXT应用一键加固——AI Agent助力安全开发",
"author": " 三六零天御",
"description": null,
"source": null,
"pubDate": "2026-04-10 16:25:22"
},
{
"guid": "https://www.anquanke.com/post/id/315253",
"title": "科技云报到:AI算力革命,终结云计算20年降价史",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-04-03 17:38:08"
},
{
"guid": "https://www.anquanke.com/post/id/315234",
"title": "科技云报到:“龙虾”入笼:为何金融行业不敢“养”?",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-03-27 10:44:02"
},
{
"guid": "https://www.anquanke.com/post/id/315195",
"title": "科技云报到:“龙虾”OpenClaw狂欢之下,需要一针清醒剂",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-03-19 16:04:44"
},
{
"guid": "https://www.anquanke.com/post/id/315209",
"title": "瑞数信息入选IDC两大AI安全报告,防御OpenClaw小龙虾裸奔危机",
"author": " 科技云报到",
"description": null,
"source": null,
"pubDate": "2026-03-19 16:04:10"
},
{
"guid": "https://www.anquanke.com/post/id/315197",
"title": "2026首届汽车安全白帽黑客大会圆满收官,共筑车联网安全新生态",
"author": " 泽鹿安全",
"description": null,
"source": null,
"pubDate": "2026-03-19 12:15:49"
},
{
"guid": "https://www.anquanke.com/post/id/315140",
"title": "Ally WordPress插件高危SQL注入漏洞 威胁40万个网站",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-03 11:21:09"
"pubDate": "2026-03-13 10:34:49"
},
{
"guid": "https://www.anquanke.com/post/id/303243",
"title": "CVE-2024-21182: 针对严重 WebLogic 漏洞发布 PoC 漏洞利用代码",
"guid": "https://www.anquanke.com/post/id/315145",
"title": "OpenAI战略调整Sora视频AI将直接接入ChatGPT",
"author": " 安全客",
"description": null,
"source": "webpronews",
"pubDate": "2026-03-13 10:34:23"
},
{
"guid": "https://www.anquanke.com/post/id/315148",
"title": "HPE发布Aruba OS高危漏洞预警 可未授权重置密码",
"author": " 安全客",
"description": null,
"source": "webpronews",
"pubDate": "2026-03-13 10:34:00"
},
{
"guid": "https://www.anquanke.com/post/id/315152",
"title": "能感知自身正在被测试的AI Anthropic关于Claude自我意识的惊人发现",
"author": " 安全客",
"description": null,
"source": "webpronews",
"pubDate": "2026-03-13 10:33:36"
},
{
"guid": "https://www.anquanke.com/post/id/315155",
"title": "GitLab发布紧急安全更新 修复高危XSS与API拒绝服务漏洞",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-03 11:15:29"
"pubDate": "2026-03-13 10:33:13"
},
{
"guid": "https://www.anquanke.com/post/id/303240",
"title": "日本最大移动运营商称网络攻击中断了部分服务",
"author": " 安全客",
"description": null,
"source": "therecord",
"pubDate": "2025-01-03 11:02:09"
},
{
"guid": "https://www.anquanke.com/post/id/303236",
"title": "新的 DoubleClickjacking 攻击利用双击来劫持帐户",
"author": " 安全客",
"description": null,
"source": "bleepingcomputer",
"pubDate": "2025-01-03 10:53:02"
},
{
"guid": "https://www.anquanke.com/post/id/303233",
"title": "揭开虚假人气的面纱: 研究揭露 GitHub 上的 450 万颗假星",
"guid": "https://www.anquanke.com/post/id/315158",
"title": "Telegram的黑色面 网络罪犯利用机器人API隐秘窃取数据",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-03 10:41:42"
},
{
"guid": "https://www.anquanke.com/post/id/303230",
"title": "苹果公司将支付 9500 万美元解决 Siri 隐私诉讼",
"author": " 安全客",
"description": null,
"source": "therecord",
"pubDate": "2025-01-03 10:29:54"
},
{
"guid": "https://www.anquanke.com/post/id/303227",
"title": "跨域攻击: 现代安全面临的日益严重的威胁以及如何应对这些威胁",
"author": " 安全客",
"description": null,
"source": "TheHackersNews",
"pubDate": "2025-01-03 10:21:30"
},
{
"guid": "https://www.anquanke.com/post/id/303224",
"title": "假冒 7-Zip 漏洞代码源于人工智能生成的误解",
"author": " 安全客",
"description": null,
"source": "hackread",
"pubDate": "2025-01-03 10:12:25"
},
{
"guid": "https://www.anquanke.com/post/id/303221",
"title": "官员警告:黑客泄露了罗德岛州勒索软件攻击的数据",
"author": " 安全客",
"description": null,
"source": "cybersecuritydive",
"pubDate": "2025-01-03 10:04:05"
},
{
"guid": "https://www.anquanke.com/post/id/303208",
"title": "2024年度盘点之漏洞威胁:AI技术降低漏洞利用门槛,网络边缘设备成重灾区",
"author": " 安全客",
"description": null,
"source": "微信",
"pubDate": "2025-01-02 16:51:55"
},
{
"guid": "https://www.anquanke.com/post/id/303205",
"title": "66,000 台 DrayTek 网关存在远程命令注入漏洞 (CVE-2024-12987),已发布 PoC",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-02 16:41:12"
},
{
"guid": "https://www.anquanke.com/post/id/303202",
"title": "D-Link 就易受僵尸网络攻击的报废路由器发出警告",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-02 16:35:11"
},
{
"guid": "https://www.anquanke.com/post/id/303199",
"title": "CVE-2024-12108 (CVSS 9.6) 及更高版本: Progress 为 WhatsUp Gold 网络监控软件发布关键补丁程序",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-02 16:27:46"
},
{
"guid": "https://www.anquanke.com/post/id/303196",
"title": "针对 Windows 零点击漏洞 CVE-2024-49112 发布 PoC 漏洞利用程序",
"author": " 安全客",
"description": null,
"source": "securityonline",
"pubDate": "2025-01-02 16:20:29"
},
{
"guid": "https://www.anquanke.com/post/id/303193",
"title": "拟议更新HIPAA安全规则授权,以在72小时内恢复某些相关电子信息系统和数据的丢失",
"author": " 安全客",
"description": null,
"source": "securityaffairs",
"pubDate": "2025-01-02 15:15:33"
},
{
"guid": "https://www.anquanke.com/post/id/303187",
"title": "新的 “双重点击劫持 ”漏洞绕过了主要网站的点击劫持保护措施",
"author": " 安全客",
"description": null,
"source": "TheHackersNews",
"pubDate": "2025-01-02 14:53:40"
},
{
"guid": "https://www.anquanke.com/post/id/303182",
"title": "新的 IOCONTROL 恶意软件用于关键基础设施攻击",
"author": " 安全客",
"description": null,
"source": "嘶吼",
"pubDate": "2025-01-02 14:44:44"
},
{
"guid": "https://www.anquanke.com/post/id/303179",
"title": "2025 年医疗保健网络监管和立法前景如何?",
"author": " 安全客",
"description": null,
"source": "govinfosecurity",
"pubDate": "2025-01-02 14:27:41"
},
{
"guid": "https://www.anquanke.com/post/id/303176",
"title": "FortiGuard Labs 将新的 EC2 Grouper 黑客与 AWS 凭证漏洞联系起来",
"author": " 安全客",
"description": null,
"source": "hackread",
"pubDate": "2025-01-02 14:19:55"
"pubDate": "2026-03-13 10:32:51"
}
]

749
resources/JSON/baidu.json Normal file
View File

@ -0,0 +1,749 @@
{
"银行测试": [
{
"title": "银行压力测试- 百度百科",
"link": "https://baike.baidu.com/item/%E9%93%B6%E8%A1%8C%E5%8E%8B%E5%8A%9B%E6%B5%8B%E8%AF%95/2786826",
"description": "银行 压力 测试 是以定量分析为主的风险分析方法,涵盖信用风险、市场风险、流动性风险和操作风险等领域,要求商业银行综合评估不同风险的相互作用。该方法由美国财长盖特纳在2009年提出的金融稳定计划中列为重点,欧盟要求大型银行通过压力测试检测资产负债表隐患。国际货币基金组织和世界银行于1999年将压力测试纳入金融部门评估计划作为核心工具",
"author": "百度快照",
"pubDate": "2025-11-29"
},
{
"title": "【学习】银行测试项目和普通测试有哪些区别?_银行测试和普通项目...",
"link": "https://blog.csdn.net/qdguozhixin/article/details/137777453",
"description": "此外, 银行测试 项目还需对数据进行加密和保护,以防止信息泄露。而常规测试项目在风险控制方面的要求相对较低。 四、监管要求 银行业务受到严格的监管,因此银行测试项目必须满足相关法规和政策要求。例如,银行测试项目需要对反洗钱、反恐怖融资等方面进行测试,以确保系统符合相关法律法规。而常规测试项目在监管要求方面相对宽...",
"author": "百度快照",
"pubDate": "2024-04-15"
},
{
"title": "银行项目测试_银行验收测试-CSDN博客",
"link": "https://blog.csdn.net/2301_76679169/article/details/130297869",
"description": "测试 独立在UAT环境测试;配合业务需求人员在UAT环境验收测试;设计和选取:主流程主要业务功能进行测试,以真实使用系统用户的角度测试,以用户体验角度测试系统,发现系统的功能操作是否简单容易,是否符合用户的操作习惯。 准(预)生产测试 准生产测试的环境配置与生产环境接近;测试时主要检查项目版本是否正确完整发布到该环境,主...",
"author": "百度快照",
"pubDate": "2023-04-21"
},
{
"title": "【银行测试】银行项目-系统性能测试总结(最详细汇总) - 知乎",
"link": "https://zhuanlan.zhihu.com/p/676034641",
"description": "测试 前对铺底数据的构造可从以下四个方面考虑: 表分区情况: 确认测试环境与生产环境(或预计投产后)的表分区和索引分区规划一致,结合表清理策略确认典型场景中各分区、各表中的数据存量大小和分布情况。 表清理策略: 确认生产环境(或预计投产后)的数据库表(尤其业务热表)清理和备份策略,与表分区情况配合,预铺数据并...",
"author": "百度快照",
"pubDate": "2024-01-04"
},
{
"title": "银行金融测试与金融项目测试要点全面解析",
"link": "http://word.baidu.com/noteview/b3ee5f1da36e58fafab069dc5022aaea998f4148.html",
"description": "银行 金融 测试 全攻略 解锁测试新技能 银行金融测试是金融科技领域的守护神 确保系统安全又可靠 从功能到性能 从安全到合规 全方位验证 让金融系统稳如泰山 功能测试 基础中的基础 每个业务场景都要细致入微 转账 贷款 理财...一个都不能少 性能测试 模拟真实场景...",
"author": "百度快照",
"pubDate": "2026-04-09"
},
{
"title": "银行测试是做什么的",
"link": "https://aiqicha.baidu.com/details/ugknowledge?id=c321e1a3a1eef3056844dff7106b588d",
"description": "银行测试 是针对银行软件系统(如柜面、信贷、网银系统)和专用设备(如ATM机)进行的一系列测试工作,旨在确保系统的功能正确性、业务流畅性、性能稳定性和安全性,以保障金融业务正常运行和用户资金安全。 1 测试对象与核心目的 测试对象:主要包括银行核心业务系统(如柜面、信贷、核心系统)、渠道系统(如手机银行、网上银行...",
"author": "百度快照",
"pubDate": "2026-03-10"
},
{
"title": "银行测试是干什么 - 百度知道",
"link": "https://zhidao.baidu.com/question/1972182363540511500.html",
"description": "银行测试 是银行为了确保其业务运营的稳健性、合规性以及客户服务质量的持续提升而进行的各项测试活动。以下是银行测试的主要目的和类型:1. 风险管理测试:信用风险测试:主要评估借款人的信用状况,确保贷款发放的合理性,降低信用风险。市场风险测试:监控市场波动对银行资产和负债价值的影响,帮助银行制定应对...",
"author": "百度快照",
"pubDate": "2025-04-07"
},
{
"title": "银行测试主要测试什么",
"link": "https://localsite.baidu.com/site/wjzsorv8/8cd47d9a-7797-42f3-9306-b902ded71161?qaId=3460778&categoryLv1=%E6%95%99%E8%82%B2%E5%9F%B9%E8%AE%AD&efs=1&ch=54&srcid=10014&source=natural&category=%E9%93%B6%E8%A1%8C%E4%BB%8E%E4%B8%9A%E8%B5%84%E6%A0%BC&eduFrom=136&botSourceType=46",
"description": "银行测试 主要围绕应聘者的多维能力展开评估,涵盖逻辑思维、专业素养、性格适配性等多个层面。其核心目的在于筛选出既具备扎实知识储备,又能适应银",
"author": "百度快照",
"pubDate": "2024-12-06"
},
{
"title": "最新!软件测试-银行测试全面实战详解,全程干货一套带你上手!_哔哩...",
"link": "https://www.bilibili.com/video/av113424499541375/",
"description": "【银行 测试 】最新版软件测试-银行测试项目实战教程,即学即会攻破银行岗!31671506:04:36app 【完整】pytest自动化测试框架实战教程,从0到1自动化测试框架封装,即学即会!57215101:08:43app 一套拿下!web自动化测试-docker+git+jenkins容器自动化集成,即学即上手!121.2万2.7万50:31:07百万播放 app 最新最全花1w...",
"author": "百度快照",
"pubDate": "2024-11-04"
},
{
"title": "银行软件测试有哪些测试点?一般银行的软件测试工作流程有哪些...",
"link": "https://www.zhihu.com/question/351055762/answer/99418952429",
"description": "一、 银行 软件 测试 的测试点 1.功能测试 账户管理:开户、销户、账户信息查询等。转账汇款:行内转账、跨...",
"author": "百度快照",
"pubDate": "2025-02-12"
},
{
"title": "银行测评避坑10条!性格测试千万别踩雷💥",
"link": "https://mbd.baidu.com/newspage/data/dtlandingsuper?nid=dt_3780407932263043684",
"description": "\"占小便宜\"\"讲闲话\"\"逃避问题\"这类描述,毫不犹豫选\"不符合\",别给 银行 留下坏印象哦!🙅‍♀️9️⃣ 结果与过程都要抓!📈 选\"重结果也重成长\"的平衡项,银行可是希望员工能兼顾结果和过程的哦!😎🔟 不计分但致命!💥 性格测试是面试的重要参考,必须认真对待!别以为它不计分就无所谓,这可是会刷人的关键",
"author": "百度快照",
"pubDate": "2026-04-22"
},
{
"title": "银行测试工作内容 - 百度文库",
"link": "https://wenku.baidu.com/view/82df1f8ebbf67c1cfad6195f312b3169a451eacb.html",
"description": "银行测试 工作内容 银行测试工作内容 银行测试工作是指对银行系统进行各种测试,以确保其运行稳定、数据安全、功能完备、用户友好等方面的质量。银行测试工作内容包括以下方面:1.功能测试:测试银行系统的各个模块功能是否符合需求,如账户开户、存取款、转账汇款、贷款申请等。2.性能测试:测试银行系统的性能指标,如响应...",
"author": "百度快照",
"pubDate": "2023-05-01"
},
{
"title": "全程软件测试(八十七):银行业务测试基础—读书笔记",
"link": "https://baijiahao.baidu.com/s?id=1719903831467634475&wfr=spider&for=pc",
"description": "银行测试 介绍 1.银行测试简介及前景 银行测试主要是给银行软件系统或是银行专用设备进行测试的工作。一般银行的系统多为中标公司或合作公司承担开发维护的工作,现在很多银行也成立了自己的科技部并进行了资源扩充,其主要负责银行项目管理及部分开发的工作,但是90%的系统开发维护工作仍然由合作公司来负责。为了保证最终...",
"author": "百度快照",
"pubDate": "2021-12-23"
},
{
"title": "银行核心项目之测试阶段 - zouhui - 博客园",
"link": "https://www.cnblogs.com/finer/p/10871988.html",
"description": "一、 银行测试 的主要任务 二、银行测试的分类和依据 三、银行测试的案例设计 四、银行测试执行要求及准则 1 银行测试的主要任务 银行作为大家的理财顾问,对金钱非常敏感,频繁甚至偶尔出现的软件故障都会打击顾客的信心,如果来个黑客攻击,个人财产受到威胁,银行也必然蒙受损失。所以银行对系统的质量要求非常高,追求功能稳定...",
"author": "百度快照",
"pubDate": "2019-05-15"
},
{
"title": "银行软件测试全景:流程、侧重点与关键步骤",
"link": "https://baijiahao.baidu.com/s?id=1858891011651889936&wfr=spider&for=pc",
"description": "流程顺畅、数据一致、系统间“不卡壳”是 银行测试 的硬指标;任何一笔转账、一笔贷款、一次还款,只要业务链路里涉及多家系统,测试就必须把整条链路跑通。银行测试团队通常由行方人员与非行方人员(外包)共同组成:非行方人员:需求吃透、用例设计、手工执行、缺陷跟踪、复测,是测试执行的主力;行方人员:更多扮演“...",
"author": "百度快照",
"pubDate": "2026-03-06"
},
{
"title": "银行软件测试有哪些测试点?一般银行的软件测试工作流程有哪些...",
"link": "http://quan.51testing.com/pcQuan/article/147715?name=%E6%9B%BC%E5%80%A9%E8%AF%99%E8%B0%90",
"description": "银行测试 行业前景广阔,随着金融科技的快速发展和银行业务的不断创新,银行对软件测试的需求也在持续增长。软件测试在确保银行系统软件的稳定性、安全性和可靠性方面起着至关重要的作用,因此,银行测试岗位一直受到广泛的关注和重视。 此外,随着数字化转型的加速推进,银行测试领域也在逐步向自动化、智能化和云化方向发展,...",
"author": "百度快照",
"pubDate": "2025-05-23"
},
{
"title": "转行做银行测试,需要了解哪些?_业务_系统_人员",
"link": "https://business.sohu.com/a/777791280_121943715",
"description": "转行做 银行测试 ,需要了解哪些? 在这个内卷严重的时代,银行的业务不断增加,随着软件信息化的要求越来越高,银行对软件测试人员也提出了非常高的要求。 银行的软件测试是针对银行的软件系统(如柜面系统、信贷系统)和银行专用设备(如ATM机、自助柜员机等)进行的一系列测试工作。",
"author": "百度快照",
"pubDate": "2024-05-10"
},
{
"title": "AI 24小时测试银行核心系统!润和软件的“原子化”将终结金融人海...",
"link": "https://baijiahao.baidu.com/s?id=1865224685631595250&wfr=spider&for=pc",
"description": "当AI智能体开始7×24小时自动 测试银行 核心系统,金融行业的“人海战术”时代真要终结了吗?传统金融测试正面临前所未有的困境。随着数字金融的深入发展,银行产品迭代速度越来越快,测试任务随之激增。为了守住金融安全、客户隐私的底线,银行软件测试必须做到极致严谨。然而,传统测试模式高度依赖人力、周期长、场景覆盖有限...",
"author": "百度快照",
"pubDate": "2026-05-15"
},
{
"title": "银行测试工程师主要测试什么 – PingCode",
"link": "https://docs.pingcode.com/ask/149641.html",
"description": "银行测试 工程师主要负责对银行系统软件进行功能性、性能、安全性、兼容性等方面的测试,确保软件的稳定性、可靠性和用户体验。这些测试关键点包括但不限于:ATM系统、网上银行系统、支付系统、核心银行业务系统等。其中,核心银行业务系统的测试尤为重要,因为它涉及到账户管理、贷款业务、存取款操作等银行的基础服务,直接影...",
"author": "百度快照",
"pubDate": "2024-04-30"
},
{
"title": "【银行测试】银行金融测试+金融项目测试点汇总..._金融支付系统测...",
"link": "https://blog.csdn.net/m0_70102063/article/details/135130005",
"description": "1、 银行 金融 测试 是做什么? 银行金融测试是指对银行和金融机构的软件系统、应用和服务进行测试和验证,以确保其安全、可靠、符合法规,并提供良好的用户体验。 银行金融测试的主要目标是评估系统的功能、性能、安全性、合规性和用户体验,以及确认系统在真实环境中的稳定性和可用性。",
"author": "百度快照",
"pubDate": "2023-12-21"
}
],
"APP逆向": [
{
"title": "把AndroidApp 逆向分为几步?三步-腾讯云开发者社区-腾讯云",
"link": "https://cloud.tencent.com/developer/article/1541448",
"description": "逆向作为一项与应用开发者对抗的网络安全技术,其手段花样多端,有时甚至不需要代码也可以完成逆向,所以这个概括仅对应文中的遇到情况。 定位目标 本次逆向是针对某款 App 的订单接口,首先我们使用抓包工具捕获订单列表请求,下图为 Charles 界面: 可以看到参数里的 data 字段是密文,我们就使用这个API作为目标切入点。 反编译 APK 这里使",
"author": "百度快照",
"pubDate": "2025-10-11"
},
{
"title": "Python爬虫进阶:APP逆向技术与实战-百度开发者中心",
"link": "https://developer.baidu.com/article/details/3258071",
"description": "APP逆向技术是指通过反编译、调试等手段,获取APP的内部逻辑、数据结构、加密算法等信息,进而实现对APP功能的扩展或数据抓取 。APP逆向技术主要涉及以下几个方面: 反编译技术:将APP的二进制文件转换回源代码,便于分析和理解。 动态调试技术:在APP运行过程中,通过插入断点、查看变量值等手段,实时了解APP的运行状态。 加密...",
"author": "百度快照",
"pubDate": "2024-03-22"
},
{
"title": "Android逆向实战:一款APP的深度探索与逆向解析",
"link": "https://cloud.baidu.com/article/3305461",
"description": "随着移动互联网的普及,Android平台上的应用数量与日俱增。但你是否想过,这些 APP 是如何运作的?它们的源代码是否如我们所见的那般简单?今天,我们将通过一款实际的APP,来探讨其 逆向 过程,解析其中的奥秘。",
"author": "百度快照",
"pubDate": "2024-04-09"
},
{
"title": "app逆向(1)| 为什么要进行app逆向_APP逆向-CSDN专栏",
"link": "https://download.csdn.net/blog/column/11648365/123086013",
"description": "1.为什么要进行 app逆向 ? 比如你看到别人写的某个程序能够做出某种漂亮的动画效果,通过反汇编、反编译和动态跟踪等方法分析出其动画效果的实现过程这种行为就是逆向工程。 2.什么是软件逆向? 软件逆向也叫逆向工程,英文名是reverse engineering,大意是根据已有的东西和结果,通过分析来推导出具体实现方法。 3.逆向工程的...",
"author": "百度快照",
"pubDate": "2026-04-12"
},
{
"title": "APP逆向工程,核心原理与移动应用逆向技术全景解析",
"link": "https://baijiahao.baidu.com/s?id=1859991585185227373&wfr=spider&for=pc",
"description": "APP逆向工程是指通过分析已编译的应用程序二进制代码,推导其内部工作原理、算法实现或业务逻辑的技术过程 。这一技术领域处于法律与技术的交叉地带,需要工程师深刻理解其边界。从技术本质来看,逆向工程包含三个核心层次:行为分析层:通过监控应用输入输出、网络通信等外部表现推断功能代码逻辑层:反编译可执行文件还原高级...",
"author": "百度快照",
"pubDate": "2026-03-18"
},
{
"title": "APP遭遇逆向破解、恶意篡改有解决办法吗?-CSDN博客",
"link": "https://blog.csdn.net/2301_78078966/article/details/160988475",
"description": "APP 遭遇 逆向 破解和恶意篡改(比如植入木马、插入广告、重打包)确实是移动安全领域的“重灾区”。一旦APP被破解,不仅开发者的知识产权(核心算法、商业逻辑)会裸奔,用户的隐私数据和资金安全也会面临极大威胁。 要想彻底解决这个问题,不存在“一劳永逸”的银弹,但我们可以通过一套“纵深防御体系”,把破解成本无限拉高,让...",
"author": "百度快照",
"pubDate": "2026-05-11"
},
{
"title": "App逆向-CSDN博客",
"link": "https://blog.csdn.net/u011513939/article/details/151721721",
"description": "1 app 逆向 入门 # 1 逆向设备与root-真机和模拟器-解BL锁-fastboot刷机和root-twrp刷root-面具和常见模块# 2 Python虚拟环境-系统解释器环境-virtualenv虚拟环境-解释器配置常见错误# 3 抓包与配置-charles介绍配置和安装-https证书-用户证书与系统证书-解锁system分区-Magisk+moveCert# 4 反编译工具和配置-apk文件...",
"author": "百度快照",
"pubDate": "2025-09-15"
},
{
"title": "安卓逆向实战:某App360脱壳、加密协议还原与请求伪造全记录(学...",
"link": "https://www.52pojie.cn/thread-2081208-1-1.html",
"description": "“这是我第一篇关于 App 逆向 的学习笔记,属于是一篇新手学习记录帖,文中可能存在术语使用不当或逻辑...",
"author": "百度快照",
"pubDate": "2025-12-20"
},
{
"title": "某音乐APP逆向实战(上篇):协议发现与 params 加密破解 - 知乎",
"link": "https://zhuanlan.zhihu.com/p/2018406728010593387",
"description": "某音乐 APP逆向 实战(上篇):协议发现与 params 加密破解 免责声明:本文所有分析内容仅用于安全研究与学习目的,不涉及任何商业利用或恶意攻击行为。文中涉及的技术方法遵循”最小必要”原则,所有密钥、接口等敏感信息均已脱敏处理。请勿将本文内容用于任何违法用途,读者需自行承担相关法律责任。",
"author": "百度快照",
"pubDate": "2026-03-20"
},
{
"title": "APP逆向入门(adb和Charles抓包) - 凫弥 - 博客园",
"link": "https://www.cnblogs.com/fuminer/p/17300854.html",
"description": "1. 逆向 基本流程 常见 app 的逆向的基本流程: 安装运行 抓包分析 反编译apk 在Java代码中定位 + Hook校验 基于Python还原算法 2.安装运行 后续我们对手机会经常进行:安装、卸载、上传、下载等操作。 【电脑】下载adb 【手机】开启开发者模式 + 打开usb调试 + USB线连接手机 ...",
"author": "百度快照",
"pubDate": "2023-04-09"
},
{
"title": "APP逆向工程实战笔记:石货APP逆向分析与Hook技术实现",
"link": "http://word.baidu.com/noteview/e35be1150f4e767f5acfa1c7aa00b52acfc79c4b.html",
"description": "APP逆向 工程干货分享 石货 APP逆向 全攻略 在移动互联网时代 APP逆向 工程超重要 本文带你深入了解石货APP逆向分析全过程 从环境配置到强制更新绕过 再到网络抓包 满满都是实战经验 实验环境搭建 Windows 10 雷电模拟器 root版 JD GUI IDA Pro Frida Charles等工具一应俱全 模拟器环境还做了特别配置哦 强制更新",
"author": "百度快照",
"pubDate": "2026-03-30"
},
{
"title": "安卓APP逆向(五)APP逆向实战-CSDN博客",
"link": "http://famensi.com/about_content.asp?haownn=.shtml20260418925462220",
"description": "安卓 APP逆向 (五)APP逆向实战-CSDN博客在数字时代,学习安卓APP逆向工程就像开启一扇通往创新之门的窗户。它不仅仅是技术技能,更是培养耐心、逻辑思维和问题解决能力的绝佳方式。今天,我们以79777.app为例,来一场积极向上的实战之旅,共同探索如何通过合法、正向的方法剖析APP结构,提升自己的编程素养。首先,理解APP逆向...",
"author": "百度快照",
"pubDate": "2026-04-18"
},
{
"title": "超赞!发现一个APP逆向神器!",
"link": "https://mp.weixin.qq.com/s?__biz=MzAxMjUyNDQ5OA==&mid=2653580341&idx=1&sn=6ebc99379b3c421d81a8dda62c347925&chksm=806e4288b719cb9e82a8808cf287c6149575c0f6529430d2ff1756644b113bd884539b6d24e2&scene=27",
"description": "此次特训为期3天,专为高阶爬虫 逆向 技术速成而设计。课程内包含多项业界难觅的真实项目,每个项目都是对当下最热门的网站& APP 的深入破解,对应每一项案例都有代码级的拆分详解,深入浅出干货满满,理解和掌握起来很轻松。 顶尖名师的专业指导与规划,搭配最前沿的爬虫逆向实战项目边...",
"author": "百度快照",
"pubDate": "2022-08-01"
},
{
"title": "APP遭遇逆向破解、恶意篡改有解决办法",
"link": "https://baijiahao.baidu.com/s?id=1840307627260533639&wfr=spider&for=pc",
"description": "APP 遭遇 逆向 破解、恶意篡改,后果往往直接且严重:源代码被窃取导致核心功能仿冒,植入恶意代码后推送诈骗广告,甚至窃取用户隐私数据 —— 这些不仅损害用户体验,更会让企业品牌声誉扫地,造成直接经济损失。对移动应用而言,传统的服务器端防护难以覆盖客户端安全,而移动应用安全方案能从源头构建防护,成为应对这类威胁的...",
"author": "百度快照",
"pubDate": "2025-08-13"
},
{
"title": "Web逆向、软件逆向、安卓逆向、APP逆向是什么?-知了爱学",
"link": "https://localsite.baidu.com/article-detail.html?articleId=20186873&ucid=n1DvP1c3nHf&categoryLv1=%E6%95%99%E8%82%B2%E5%9F%B9%E8%AE%AD&ch=54&srcid=10004",
"description": "Web逆向、软件逆向、安卓逆向和 APP逆向 都是指对不同类型的软件或应用进行反向工程,从而了解其内部运行机制、破解或修改其功能的技术和方法。 Web逆向主要是指对Web应用程序进行逆向工程,获取其源代码或数据库信息。常见的Web逆向技术包括爬虫、抓包分析、JavaScript反混淆、反编译前端代码等。Web逆向工程常用于...",
"author": "百度快照",
"pubDate": "2024-03-19"
},
{
"title": "移动应用防逆向破解安全加固-移动应用安全加固-移动开发平台...",
"link": "https://help.aliyun.com/document_detail/173377.html",
"description": "移动应用安全加固(Mobile Security Armor,简称 MSA)为移动应用(下文简称 App )提供稳定、简单、有效的安全保护,提高 App 的整体安全水平,力保应用不被 逆向 破解。 产品背景 Android 应用安全加固 由于Android 系统本身的开源特性,应用极易遭到盗版侵袭、反编译破解等攻击,严重影响应用的数据与隐私安全。mPaaS 移动应用安全...",
"author": "百度快照",
"pubDate": "2025-12-11"
},
{
"title": "Android逆向技术揭秘:从入门到实践-百度开发者中心",
"link": "https://developer.baidu.com/article/details/3305419",
"description": "一、Android 逆向 入门 Android逆向,简而言之,就是对已经打包好的APK文件进行反编译、源码分析,了解 APP 实现逻辑的一门技术。我们可以把APK文件看作一个加密后的压缩包,逆向就是要最大程度地还原出APK打包之前的源码。逆向需要用到解密、反编译、解压缩等技术,虽然无法100%还原APK的源码,但可以根据实际需求,分析出APK的...",
"author": "百度快照",
"pubDate": "2024-04-09"
},
{
"title": "ios逆向-app登录协议逆向分析破解-腾讯云开发者社区-腾讯云",
"link": "https://cloud.tencent.com/developer/article/1902084",
"description": "某 app 登录协议 逆向 分析 设备 iphone 5s Mac Os app:神奇的字符串57qm5Y2V 本文主要通过frida-trace、fridaHook、lldb动态调试完成破解相应的登录算法,从达到登录成功,并根据该步骤完成ios逆向分析,文中所有涉及的脚本都已经放在github上面。 弟弟建了一个ios逆向学习交流群,互相学习交流。",
"author": "百度快照",
"pubDate": "2021-11-16"
},
{
"title": "Android逆向工具篇—反编译工具的选择与使用-腾讯云开发者社区...",
"link": "https://cloud.tencent.com/developer/article/1548700",
"description": "原因很简单,在技术娴熟和精通之前, APP逆向 是门不折不扣的玄学,既然是玄学,就会有很多不可控、随机、稀奇古怪的状况。当JADX中一个变量模糊不清的时候,你就需要去JEB中看一下它的反编译结果,或者使用JEB进行动态调试。当使用JEB 遇到头疼的APK混淆时,就可以试一下开启JADX的反混淆功能。因为这几个软件的逆向原理是...",
"author": "百度快照",
"pubDate": "2019-12-04"
},
{
"title": "App逆向实战:从查壳到动态Hook的完整流程解析-CSDN博客",
"link": "https://blog.csdn.net/weixin_28732953/article/details/159819675",
"description": "1. 逆向 工程入门:从APK获取到查壳 当你拿到一个陌生的APK文件时,第一反应可能是直接扔进反编译工具。但现实往往没那么简单——就像拆快递时发现包裹被层层胶带缠绕,很多APK都会使用加壳技术保护核心代码。我去年分析某电商 App 时就踩过坑,直接用Jadx打开看到的全是混淆代码,根本找不到业务逻辑入口。",
"author": "百度快照",
"pubDate": "2026-04-04"
}
],
"渗透测试": [
{
"title": "渗透测试- 百度百科",
"link": "https://baike.baidu.com/item/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/7363639",
"description": "渗透测试 ,是一项在计算机系统上进行的授权模拟攻击,旨在对其安全性进行评估,是为了证明网络防御按照预期计划正常运行而提供的一种机制。人工渗透测试的目的就是为了验证系统和各种Web应用是否存在后门。随着网络犯罪防治立法趋势从事后追责转向生态防控,渗透测试等专业安全服务被纳入法律监管框架。不妨假设,你的公司定期更新安全策略和程序,时时",
"author": "百度快照",
"pubDate": "2026-04-17"
},
{
"title": "什么是渗透测试? | IBM",
"link": "https://www.ibm.com/cn-zh/topics/penetration-testing",
"description": "渗透测试 是一种重要的信息安全测试方法,通过渗透测试技术发起模拟的网络攻击,以系统化地查找计算机系统、应用程序或网络中的安全漏洞。",
"author": "百度快照",
"pubDate": "2026-02-11"
},
{
"title": "渗透测试业务简介",
"link": "https://www.itsec.gov.cn/qtyw/ywjs/201205/t20120509_15231.html",
"description": "渗透测试 业务简介 渗透测试是指测试人员尽可能完整地模拟攻击者使用的漏洞发现技术和攻击手段,从攻击者的角度对目标网络、系统、主机应用的安全性作深入的非破坏性的探测, 发现系统最脆弱环节的过程。渗透测试通常能以非常明显、直观的结果来反映出系统的安全现状,其目的是能够让管理人员直观地知道自己网络所面临的问题。",
"author": "百度快照",
"pubDate": "2012-05-09"
},
{
"title": "渗透(IT术语) - 百度百科",
"link": "https://baike.baidu.com/item/%E6%B8%97%E9%80%8F/9457427",
"description": "渗透测试 (Penetration Testing,简称PenTest)是一种获得授权的模拟黑客攻击的安全评估方法,用于评估计算机系统、网络、主机或应用程序的安全性。渗透测试旨在从攻击者角度发现系统最脆弱环节,直观反映安全现状,为管理人员提供决策依据,并支持合规性要求(如PCI DSS、等保2.0)。渗透测试为避免对目标造成损害,通常排除...",
"author": "百度快照",
"pubDate": "2026-02-12"
},
{
"title": "产品-渗透测试",
"link": "https://www.jl.10086.cn/ecloud/product-introduction/safefusion.html",
"description": "渗透测试 是经客户授权模拟黑客可能使用的攻击技术和漏洞发现技术,对目标系统的安全做深入的探测,能够发现逻辑性更强,更深层次的弱点,让管理者能够直观的了解自己网络和系统的安全状态,分为标准版和专业版。敬请期待 敬请期待 产品优势 产品功能 应用场景 ...",
"author": "百度快照",
"pubDate": "2026-05-10"
},
{
"title": "渗透测试服务简介_渗透测试服务购买指南_渗透测试服务操作指南...",
"link": "https://cloud.tencent.com/document/product/1489",
"description": "渗透测试 服务 渗透测试服务(Penetration Test Service, PTS),为用户提供针对于 Web 应用、移动 App、微信小程序的黑盒安全测试内容;可以覆盖安全漏洞全生命周期,包括漏洞的发现、利用、修复以及修复后的验证。使用腾讯云渗透测试服务,可以随时将安全测试这一动作加入到您的产品研发、应用上线、安全自检等计划中来。不仅...",
"author": "百度快照",
"pubDate": "2026-05-03"
},
{
"title": "每日一问丨什么是渗透测试-腾讯云开发者社区-腾讯云",
"link": "https://cloud.tencent.com/developer/article/2580536",
"description": "渗透测试 (Penetration Testing),又称“渗透性测试”或“道德黑客攻击”,是一种通过模拟恶意攻击者的技术手段,对目标系统、网络或应用程序进行安全性评估的方法。其核心目的是发现系统中存在的漏洞和弱点,并提供修复建议,从而提升整体安全防护能力。渗透测试不仅是网络安全领域的重要实践,也是企业合规性(如等保2.0、GDPR等...",
"author": "百度快照",
"pubDate": "2025-10-23"
},
{
"title": "什么是渗透测试,为什么需要做渗透测试-百度开发者中心",
"link": "https://developer.baidu.com/article/detail.html?id=3370896",
"description": "虽然 渗透测试 需要一定的投入,但与潜在的数据泄露、法律诉讼、业务损失相比,其成本效益显著。 6.验证安全措施的有效性 渗透测试可以验证现有的安全措施是否有效,包括防火墙、入侵检测系统、数据加密和其他安全控制。这有助于确保安全投资得到合理利用,并针对实际威胁进行调整。",
"author": "百度快照",
"pubDate": "2024-11-24"
},
{
"title": "渗透测试是什么意思?一文带你轻松了解",
"link": "https://www.ruijie.com.cn/fw/wt/89621/",
"description": "渗透测试 是什么意思?是指通过模拟恶意黑客的攻击方法,来评估计算机网络系统安全的一种评估方法,是为了证明网络防御按照预期计划正常运行的一种机制。测试渗透从一个攻击者可能存在的位置来主动分析系统的弱点、技术缺陷或漏洞,并且从这个位置有条件主动防范安全漏洞。",
"author": "百度快照",
"pubDate": "2022-08-30"
},
{
"title": "13种常见物理渗透测试方法-西安工业大学-信息化管理处",
"link": "https://nsinfo.xatu.edu.cn/info/1007/1682.htm",
"description": "天线和接收器– 如果 渗透测试 人员想要窃听公司内的电线以拦截员工通信,则需要使用天线来拦截电磁波并将电流传递到接收器。一旦信号通过,接收器就可以提取所需的信息。 进行物理渗透测试需要多长时间? 大多数物理渗透测试从最初的发现呼叫到提供最终报告需要两到六周的时间才能完成。",
"author": "百度快照",
"pubDate": "2024-02-27"
},
{
"title": "渗透测试全面解析与实战思路",
"link": "https://cloud.baidu.com/article/3406693",
"description": "渗透测试 作为网络安全领域的重要一环,对于评估系统安全性、发现潜在漏洞具有重要意义。本文将详细探讨渗透测试的相关术语、必备工具、导航流程,并总结入侵网站的实战思路,为读者提供一份全面的渗透测试指南。",
"author": "百度快照",
"pubDate": "2024-11-29"
},
{
"title": "渗透测试基础(全)(3)-阿里云开发者社区",
"link": "https://developer.aliyun.com/article/1525433",
"description": "无论您是在内部工作还是作为顾问/承包商,在执行 渗透测试 时,沟通都是至关重要的。你需要有一个联系点,这样你可以让他们知道你在做什么,以防他们需要通知某人潜在的中断,如果这是他们关心的事情。作为渗透测试人员,您可能会采取许多可能导致系统中断的措施,包括利用漏洞。其中一些漏洞可能会导致服务崩溃,而不允许您控制...",
"author": "百度快照",
"pubDate": "2024-05-31"
},
{
"title": "【网安】渗透测试教程(非常详细),0基础从入门到精通,看完这一篇就...",
"link": "https://zhuanlan.zhihu.com/p/687602989",
"description": "一:什么是 渗透测试 ? 渗透测试(Penetration Testing)是一种安全评估技术,旨在评估信息系统的安全性并确定潜在的安全威胁。具体来说,它是一项在计算机系统上进行的授权模拟攻击,通过模拟恶意黑客的攻击方法,来评估计算机网络系统安全。 与黑客攻击不一样的是,渗透测试的目的是尽可能多地发现安全漏洞,而真实黑客攻击只要发现...",
"author": "百度快照",
"pubDate": "2024-03-18"
},
{
"title": "渗透测试的8个步骤(超详细),小白必看!(非常详细)从零基础到精通,...",
"link": "https://blog.csdn.net/weixin_57514792/article/details/149115214",
"description": "渗透测试 :以安全为基本原则,通过攻击者以及防御者的角度去分析目标所存在的安全隐患以及脆弱性,以保护系统安全为最终目标。 入侵:通过各种方法,甚至破坏性的操作,来获取系统权限以及各种敏感信息。 一般渗透测试流程 编辑 1. 明确目标 l 确定范围:测试目标的范围、ip、域名、内外网、测试账户。",
"author": "百度快照",
"pubDate": "2025-07-04"
},
{
"title": "什么是渗透测试(Penetration Testing) - zhencool - 博客园",
"link": "https://www.cnblogs.com/zhencool/p/11195454.html",
"description": "渗透测试 (Penetration Testing),也称为Pen Testing,是测试计算机系统、网络或Web应用程序以发现攻击者可能利用的安全漏洞的实践。渗透测试可以通过软件应用自动化或手动执行。无论哪种方式,该过程都包括在测试之前收集关于目标的信息,识别可能的入口点,试图闯入(虚拟的或真实的)并报告结果。",
"author": "百度快照",
"pubDate": "2019-07-16"
},
{
"title": "计算机网络渗透测试研究",
"link": "http://xueshu.baidu.com/s?wd=paperuri:(a5af98d7302af075bc6767856028dc51)&filter=sc_long_sign&sc_ks_para=q%3D%E8%AE%A1%E7%AE%97%E6%9C%BA%E7%BD%91%E7%BB%9C%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E7%A0%94%E7%A9%B6&tn=SE_baiduxueshu_c1gjeupa&ie=utf-8&sc_us=8921007187115454744",
"description": "渗透测试 作为网络安全防范的一种新技术,对于网络安全具有重大的实际应用价值。但要找到一家合适的信息安全公司实施渗透测试并不容易。因为现在渗透测试还处于少数网络安全专家独立利用自己的经验和能力解决问题的阶段,远没有实现标准化,渗透测试理论和技术还处于不断的变化发展之中。 渗透测试作为一种专业的安全服务,在...",
"author": "百度快照",
"pubDate": "2024-08-28"
},
{
"title": "干货|渗透测试核心思路-边界突破",
"link": "http://www.topsec.com.cn/newsx/2821",
"description": "渗透测试 的目标可以是单个主机,也可以是整个内网。在实战中,比如最近如火如荼的HW行动,更多的是对一个目标的内网进行渗透,争取获得所有有价值的资产。完整的内网渗透涉及的步骤如下图所示",
"author": "百度快照",
"pubDate": "2022-09-01"
},
{
"title": "渗透性测试- 百度百科",
"link": "https://baike.baidu.com/item/%E6%B8%97%E9%80%8F%E6%80%A7%E6%B5%8B%E8%AF%95/3960442",
"description": "标准化流程包含三个阶段:通过攻击路径构建实施漏洞挖掘,基于漏洞成因分析制定防御方案,最终通过回归测试验证修复效果并形成闭环报告。英国CBEST测试框架由英格兰银行与CREST组织联合开发,专为银行机构打造的网络攻防压力测试体系,整合威胁情报分析、实战化 渗透测试 及整改效果追踪三大核心模块。渗透测试即服务(PTaaS)通过...",
"author": "百度快照",
"pubDate": "2026-03-27"
},
{
"title": "渗透测试工具 - 百度百科",
"link": "https://baike.baidu.com/item/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95%E5%B7%A5%E5%85%B7/1649873",
"description": "渗透测试 工具是通过模拟黑客攻击方式评估计算机网络系统安全性能的专用软件,其工作原理聚焦于预攻击阶段的信息收集与脆弱性探查,不实施实际入侵行为。渗透测试流程包括明确目标、信息收集、漏洞探测、验证与权限提升等阶段,产出的结果以报告形式输出。该工具可分为网络扫描、通用漏洞检测和应用漏洞检测三类。网络扫描工具主要...",
"author": "百度快照",
"pubDate": "2025-09-18"
},
{
"title": "App上线前的安全\"体检\":一文读懂移动应用渗透测试全流程-腾讯云...",
"link": "https://cloud.tencent.com/developer/article/2668831",
"description": "一次全面的App 渗透测试 ,覆盖客户端和服务端的11大检测项,支持iOS和Android双平台,从反编译保护到API安全再到业务逻辑——只有这样的\"全面体检\",才能真正确保你的App在上线时具备足够的安全防护能力。 腾讯云App渗透测试服务由腾讯安全实验室专家执行,覆盖客户端安全、组件安全、数据存储、通信安全、API安全等11大检测项...",
"author": "百度快照",
"pubDate": "2026-05-14"
}
],
"手机银行漏洞": [
{
"title": "北京某银行储蓄员携巨款潜逃近20年从未离京终落网_手机新浪网",
"link": "https://news.sina.cn/gn/2022-06-21/detail-imizirau9700372.d.html",
"description": "发现 银行漏洞 ,他伺机实施蓄谋已久的计划 时间拨回到20多年前。1997年7月毕业后,20岁的李伟进入招商银行北京分行某支行工作,担任储蓄员。2001年,经朋友介绍,李伟与做护士的刘芳认识,并于次年结婚。 婚后,李伟虽也度过了一段甜蜜的生活,但与妻子之间渐渐产生了一些摩擦,他认为妻子总是歇斯底里地说他,令他无法忍受,于是产生了离婚的念头。",
"author": "百度快照",
"pubDate": "2022-06-21"
},
{
"title": "安全专家发现ATM机NFC功能漏洞,仅用一台手机就可改变金额,甚至强...",
"link": "https://dy.163.com/article/GE5D5QC605118OGM.html",
"description": "一般来说, 银行 在考虑到ATM存在被抢风险的情况下,都会把ATM机建造的很坚固,但是依然有人选择“硬来”; 当然,也有人选择智取。近期,一位安全公司的研究人员发现了现在ATM机中NFC功能的 漏洞 ,利用这个漏洞,可以修改交易金额,甚至可以让ATM直接吐钱。 安全顾问入侵ATM机多, 修改金额只需一部 手机 安全公司IOActive的研究...",
"author": "百度快照",
"pubDate": "2021-07-05"
},
{
"title": "手机被盗后,你以为挂失手机号、冻结银行卡就安全了? - 简书",
"link": "https://www.jianshu.com/p/bf3ac424e367",
"description": "案件中存在的主要 漏洞 : 1.四川电信电话挂失、解挂业务,未考虑到 手机 被盗后身份信息泄露的情况,目前电信部门已作出调整。 2.部分网站和app通过短信验证码登入后,即可看到身份证号、 银行 卡号全部数位,目前各省社保官网已作出调整,其他有类似风险的网站和app,逐个摸排并进行安全改进的速度是比较慢的。 3.部分网贷平台提供...",
"author": "百度快照",
"pubDate": "2021-03-03"
},
{
"title": "2014年浙江大妈发现银行漏洞,一月内偷走5亿,警方:银行的责任|储户...",
"link": "https://www.163.com/dy/article/HSLTP6A90553LFQF.html",
"description": "她成功找到 银行 的 漏洞 ,在一个月之内挪走了多家银行近五亿元的存款,直到一年后才东窗事发。 事发后,涉事银行却推卸责任,引起众怒。 最终,警方经过调查,确定这次事件完全是银行的责任。 那么,这位大妈是如何转走他人存款的?为什么这些受害者直到一年后才发现自己存款不见了?这些储户的损失最终又由谁来买单? 一 消...",
"author": "百度快照",
"pubDate": "2023-02-03"
},
{
"title": "电信诈骗频发,多家银行调整个人账户限额堵漏洞|洗钱|反诈|交易|...",
"link": "http://k.sina.com.cn/article_1684012053_645ffc1501901cua6.html",
"description": "在此之中,并非所有客户受到影响,徽商银行在其公告中对所调整的个人账户作出了界定范围:一年以上(含一年)未发生取现、转账等主动交易,账户余额在50元(含)以下的I类个人银行结算账户(包含借记卡、存折);一年以上(含一年)未登录过 手机银行 或个人网银,账户余额在10元(含)以下的Ⅰ类个人银行结算账户。",
"author": "百度快照",
"pubDate": "2023-08-22"
},
{
"title": "银行行长被骗26次,共计3.5亿元,却不敢报警?_手机新浪网",
"link": "https://news.sina.com.cn/c/2022-07-14/doc-imizirav3354658.shtml",
"description": "受赵某河这句并不高明的谎言蛊惑,心忧女儿学业的某 银行 行长李某先后26次上当受骗,成了一名可怜的受害者,并一步步从一名领导干部蜕变成了骗取贷款、违法发放贷款的“蛀虫”。 近日,李某因犯骗取贷款罪、违法发放贷款罪,被法院判处有期徒刑七年。 在此之前的3月11日,山东省高级法院对赵某河诈骗案作出终审裁定,...",
"author": "百度快照",
"pubDate": "2022-07-14"
},
{
"title": "啥信号?有银行“叫停”ATM二维码存款 “黑科技”不仅要酷炫更要...",
"link": "https://view.inews.qq.com/qd/20220816A09ZY400?refer=wx_hot",
"description": "从安全性来看,ATM二维码存取款业也需要多种交叉验证来保障用户安全,例如 手机银行 App登录密码、现场扫码、扫码后仍需要在ATM机上输入银行卡交易密码等等;出于安全考虑,部分银行也对无卡取款设置了一定的取款限额,如,二维码取款要求日累计取款金额不超5000元,预约取款的单笔限额为1000元等。",
"author": "百度快照",
"pubDate": "2022-08-16"
},
{
"title": "...一觉睡醒存款被掏空|支付宝|银行卡|手机免密支付功能_网易订阅",
"link": "https://www.163.com/dy/article/KS69574V0553TDXU.html",
"description": "这是本次盗刷最核心 漏洞 。 银行 、微信、支付宝等正规软件,完全不需要这个权限。 一旦开启,诈骗分子就能远程模拟点击 手机 屏幕,点开软件、跳转页面、确认支付,和本人手动操作一模一样。 第二个:短信读取、通知拦截权限 木马可以实时查看所有银行验证码、余额变动提醒,同时自动删除、屏蔽异常短信。",
"author": "百度快照",
"pubDate": "2026-05-05"
},
{
"title": "15楼财经|崇左幼专上千名学生莫名被开账户 农行致歉承认操作不...",
"link": "https://new.qq.com/omn/20211211/20211211A06TME00.html",
"description": "不难发现,在农行 手机银行 上开立Ⅱ、Ⅲ类账户,需要验证身份证、手机号,还要进行人脸识别并阅读同意相关协议,这些程序都符合央行的要求。 聚焦 农行崇左江州支行为何得以“瞒着”学生开户? 业内人士质疑道歉声明“避重就轻” 学生们之前怀疑学校泄露了个人信息,但学校已经公开声明予以否定。那么银行如何得知这些学生的个人...",
"author": "百度快照",
"pubDate": "2021-12-11"
},
{
"title": "豆包手机漏洞,银行验证码被盗?官方回应:已修复,但有黑公关!|黑客_...",
"link": "https://dy.163.com/article/KMPRD57M0511DG68.html",
"description": "简单来说,想要 银行 验证码被外人盗取,前提是需要先用 手机 AI去读取恶意短信的内容才可以,其实这个与之前网上流传人们去点击恶意短信链接,遭到银行卡被盗刷案件相似,只不过从人的操作,变成了AI的操作,对于这个 漏洞 ,豆包手机助手官方也升级了相应防护措施。 而对于网上大批量对于豆包手机助手安全恐吓的内容,豆包手机助手认为...",
"author": "百度快照",
"pubDate": "2026-02-27"
},
{
"title": "长沙银行系统漏洞成敛财工具?3人用外挂造4万非法账户获利16万|商...",
"link": "https://www.163.com/dy/article/H0SPDVU8055280CT.html",
"description": "近日,裁判文书网披露的一则裁定书显示,3人利用长沙 银行 系统的 漏洞 ,短时间内开设异常账户4万多个,非法获利16万余元,3人最终均获刑。 2019年2月间,经营软件公司的尚某等人将内含公民身份证号码、姓名、手机号码等信息内容及串码、一个固定银行卡号、Fiddler应用程序软件提供给司某、刘某,利用Fiddler应用程序软件能够拦截由长沙银",
"author": "百度快照",
"pubDate": "2022-02-23"
},
{
"title": "案例研究 | 刘仁文、车浩、时延安、田宏杰等:利用银行系统漏洞...",
"link": "https://new.qq.com/rain/a/20240826A06P2W00",
"description": "2022年2月24日17时许,刘某甲通过操作其母亲李某中国 银行手机 APP发现,李某中国银行积利金账户内黄金克数由原本的26克增长为900克,并将上述情况告知其父刘某乙、其母李某。三人商议后将该900克黄金点击卖出,发现出售后账户内黄金克数仍显示为900克,后该三人于15分钟内连续24次点击出售账户内黄金得款共计人民币86...",
"author": "百度快照",
"pubDate": "2024-08-26"
},
{
"title": "别让去银行存款成为“危险之旅”_手机新浪网",
"link": "https://news.sina.cn/2016-03-03/detail-ifxqafrm6791021.d.html",
"description": "面对“1万元进去1700元出来”的典型案例,监管部门也应及时介入,一是要进行调查,查清其中是否存在违规操作的问题;二是要加强相关知识的宣传,引导公众增强对类似行为的警惕性和免疫力;三是要排查 银行 管理方面存在的问题,及时堵塞 漏洞 ,不要让消费者去银行存款成为一场考验智商的“危险之旅”。",
"author": "百度快照",
"pubDate": "2016-03-03"
},
{
"title": "乐山商业银行APP违规遭通报,为何中小银行数据治理漏洞频现?_用户...",
"link": "https://www.sohu.com/a/864346760_387251",
"description": "近日,国家计算机病毒应急处理中心监测发现14款违规移动应用,乐山商业银行APP因“未经明示同意收集个人信息”“未列出个人信息收集用途”“处理敏感个人信息未取得个人的单独同意”等五项问题被通报,在一众软件中格外显眼。2月25日,乐山市商业银行回应称,将加强 手机银行 APP隐私保护。此外,全国已有多家中小银行APP因隐私问题...",
"author": "百度快照",
"pubDate": "2017-03-01"
},
{
"title": "手机被远程控制盗刷银行有责任吗安全吗",
"link": "https://ailegal.baidu.com/legalarticle/qadetail?id=311b17f8516a7d250205",
"description": "手机 被远程控制盗刷, 银行 是否承担责任需分情况讨论,具体如下: 一、银行可能承担责任的情形 技术 漏洞 或安全缺陷:若银行系统存在安全漏洞,如未及时更新加密技术、防火墙存在缺陷,或未对异常交易进行预警,导致客户资金被盗刷,银行需承担赔偿责任。法律依据:《中华人民共和国民法典》第一千一百九十八条规定,银行作为经营场所...",
"author": "百度快照",
"pubDate": "2026-05-12"
},
{
"title": "交通银行手机银行到底有没有漏洞?我损失的钱该不该由交通银行赔付",
"link": "https://weibo.com/ttarticle/p/show?id=2309404698741067350401",
"description": "交通银行借记卡通过 手机银行 被盗刷,交通银行偷换概念,绝口不提没有尽到保管义务。 ​​ 说实话,现在回想起来还觉得事情挺梦幻的,卡在我手里,手机没丢过(旧手机也一直放在家里,)也没有收到任何登录、验证码等信息,钱没了……真的没有任何提示,交通银行短信除了孜孜不倦的卖理财,任何任何提示都没有。如果不...",
"author": "百度快照",
"pubDate": "2021-11-01"
},
{
"title": "长沙银行系统漏洞致4万异常账户开设,或须承担民事责任|中小银行|...",
"link": "https://m.163.com/dy/article/H21OIFLS0550EWRZ.html",
"description": "日前,一则有关长沙 银行 系统 漏洞 被利用的消息引发关注。中国裁判文书网披露的一则湖南省长沙市中级人民法院刑事裁定书显示,3名犯罪分子利用长沙银行系统漏洞,对计算机信息系统中传输的数据进行删除、修改,短时间内开设异常账户4万多个,非法获利16万余元,三人均获刑。",
"author": "百度快照",
"pubDate": "2022-03-09"
},
{
"title": "部分银行收紧无卡取款业务,记者探访多数银行仍可扫码或刷脸取款...",
"link": "https://new.qq.com/rain/a/20240707A0418P00",
"description": "记者梳理发现,在全国范围内取消ATM扫码取款的银行并不算多,更多的银行只是暂停了手机预约取款功能,扫码取款功能并未取消。例如,交通银行公告称:“从5月24日起,停止个人 手机银行 中无卡取款功能中的预约取款服务。客户仍可通过该行智能机具办理有卡取款、扫码取款或前往该行营业网点办理取款业务。”农业银行于5月9日起...",
"author": "百度快照",
"pubDate": "2024-07-07"
},
{
"title": "315金融消费者权益保护|金融消费投诉频发 “止损、报警、维权”三...",
"link": "https://new.qq.com/omn/20210313/20210313A02T4B00.html",
"description": "通联支付与建设 银行 在该事件中可能存在管理和技术方面的过错,其中管理过错是指通联支付与银行是否按照双方指定的协议进行管理;技术过错是指平台是否因技术 漏洞 导致相关问题的出现,银行或通联支付是否尽到了维护客户资金安全的义务,是否对平台技术进行定期巡查,接到修先生此类投诉后是否进行及时处理等。",
"author": "百度快照",
"pubDate": "2021-03-13"
},
{
"title": "银行的手机银行安全防护漏洞如何修复??-和讯网",
"link": "http://insurance.hexun.com/2025-05-10/218949278.html",
"description": "在数字化时代, 手机银行 已成为人们日常金融交易的重要工具,然而其安全防护问题也备受关注。当发现手机银行存在安全防护 漏洞 时,可从以下几个方面进行修复。 首先是技术层面的修复。银行应定期对手机银行系统进行全面的安全评估和漏洞扫描。利用先进的漏洞扫描工具,对系统代码、数据库等进行深度检测,及时发现潜在的安全漏洞。",
"author": "百度快照",
"pubDate": "2025-05-10"
}
],
"银行漏洞": [
{
"title": "300亿上市银行系统漏洞被利用,开设4万多个异常账户!非法获利16万...",
"link": "https://www.163.com/dy/article/H15DMK220539LWQ1.html",
"description": "日前,一则有关长沙 银行 系统 漏洞 被利用的消息引发关注。 中国裁判文书网披露的一则湖南省长沙市中级人民法院刑事裁定书显示,3名犯罪分子利用长沙银行系统漏洞,对计算机信息系统中传输的数据进行删除、修改,短时间内开设异常账户4万多个,非法获利16万余元,三人均获刑。 长沙银行系统存在哪些漏洞?“被开户”的户主会否遭受损失?长沙银行要负",
"author": "百度快照",
"pubDate": "2022-02-26"
},
{
"title": "2014年浙江大妈发现银行漏洞,一月内偷走5亿,警方:银行的责任|储户...",
"link": "https://www.163.com/dy/article/HSLTP6A90553LFQF.html",
"description": "她成功找到 银行 的 漏洞 ,在一个月之内挪走了多家银行近五亿元的存款,直到一年后才东窗事发。 事发后,涉事银行却推卸责任,引起众怒。 最终,警方经过调查,确定这次事件完全是银行的责任。 那么,这位大妈是如何转走他人存款的?为什么这些受害者直到一年后才发现自己存款不见了?这些储户的损失最终又由谁来买单? 一 消...",
"author": "百度快照",
"pubDate": "2023-02-03"
},
{
"title": "银行网络惊魂“大劫案”|银行|资产|腾讯安全_新浪新闻",
"link": "https://news.sina.com.cn/sx/2022-12-30/detail-imxymmtq9354405.shtml",
"description": "两边的工作人员打起了传切配合,像一支球队快速奔袭全场,同时不断填补防守 漏洞 。 72小时内, 银行 的互联网资产完成全面排查。腾讯安全团队帮助客户发现互联网暴露资产共15万左右,其中包括域名资产和IP资产11万左右、影子资产2000多、小程序和公众号3万多等等。 这么短时间梳理出如此多资产类型和数量,银行客户也表示惊叹。",
"author": "百度快照",
"pubDate": "2022-12-30"
},
{
"title": "2013年,浙江大妈利用漏洞,偷走6家银行5亿元,她是怎么做到的?_腾讯...",
"link": "https://new.qq.com/rain/a/20220821A03XXT00",
"description": "“后来我也是偶然发现了 银行 的 漏洞 ,所以才生了歪心思。” 邱某口中所说的“漏洞”,其实就是银行转账业务的一个小纰漏。原本银行工作人员是没有这么大的权限进行大额转账交易,但是却可以通过同事授权来完成。而祝某也就是通过这一点,一次次地骗走了储户的存款。 由于大家都是同事,所以根本没有人会怀疑祝某是在...",
"author": "百度快照",
"pubDate": "2022-08-26"
},
{
"title": "电信诈骗频发,多家银行调整个人账户限额堵漏洞|洗钱|反诈|交易|...",
"link": "http://k.sina.com.cn/article_1684012053_645ffc1501901cua6.html",
"description": "在此之中,并非所有客户受到影响,徽商 银行 在其公告中对所调整的个人账户作出了界定范围:一年以上(含一年)未发生取现、转账等主动交易,账户余额在50元(含)以下的I类个人银行结算账户(包含借记卡、存折);一年以上(含一年)未登录过手机银行或个人网银,账户余额在10元(含)以下的Ⅰ类个人银行结算账户。",
"author": "百度快照",
"pubDate": "2023-08-22"
},
{
"title": "银行监管体系存漏洞女嫌犯趁机拉拢银行“内鬼”",
"link": "https://www.sohu.com/a/1019079_116897",
"description": "当一个违法操作被当成正常业务来办理的时候,大额资金就这样突破临柜监督、远程监控,而无从控制。这就是 银行 监管体系可笑的地方。 银行的一些 “坏习惯” 银行监管体系的脆弱,不仅仅发生在柜台业务办理那一刻。钱江晚报记者在调查中发现,杭州联合银行案情曝光是在2014年初,据浙江省银监局有关工作人员说,杭州联合银行事...",
"author": "百度快照",
"pubDate": "2007-02-06"
},
{
"title": "案例研究 | 刘仁文、车浩、时延安、田宏杰等:利用银行系统漏洞...",
"link": "https://new.qq.com/rain/a/20240826A06P2W00",
"description": "当系统 漏洞 存在时,往往基于公民一种认识在于,由于 银行 系统存在过错,进而应当由银行承担相应后果,行为人的行为属于合法行为而不构成犯罪。因此应当明确,虽然行为人第一次取款行为属于合法行为,但是由于其后续主观意图的转变,对于资金的占有存在恶意利用系统的目的,导致了合法行为向非法行为的转变。即使存在合法形式也不能...",
"author": "百度快照",
"pubDate": "2024-08-26"
},
{
"title": "2014年浙江大妈发现银行漏洞,1个月盗取5亿资金,最终结果如何?|储...",
"link": "https://dy.163.com/article/H7GK5GA705534K6C.html",
"description": "通过中间人,这笔钱会被直接存入 银行 ,方先生能够立刻拿到15%的利息。 这个数字让方先生很是心动,银行为了资金周转,通过中间人找大客户去存款的事情时有发生。 方先生以前也进行过类似的业务,他不仅拿到了比普通存款方式更高的利息,本金也没有受损。 通过这个朋友,方先生和中间人取得了联系,让方先生感到欣慰的是,对...",
"author": "百度快照",
"pubDate": "2022-05-17"
},
{
"title": "北京某银行储蓄员携巨款潜逃近20年从未离京 靠卖房款过日子_手机...",
"link": "https://news.sina.cn/gn/2022-06-21/detail-imizirau9700403.d.html",
"description": "发现 银行漏洞 ,他伺机实施蓄谋已久的计划 时间拨回到20多年前。1997年7月毕业后,20岁的李伟进入招商银行北京分行某支行工作,担任储蓄员。2001年,经朋友介绍,李伟与做护士的刘芳认识,并于次年结婚。 婚后,李伟虽也度过了一段甜蜜的生活,但与妻子之间渐渐产生了一些摩擦,他认为妻子总是歇斯底里地说他,令他无法忍受...",
"author": "百度快照",
"pubDate": "2022-06-21"
},
{
"title": "杭州“日光盘”烂尾背后:多家银行卷入预售金监管漏洞--房产--人民网",
"link": "http://house.people.com.cn/n/2015/0505/c164220-26948515.html",
"description": "原标题:杭州“日光盘”烂尾背后:多家 银行 卷入预售金监管 漏洞 2013年12月18日,杭州田逸之星公寓三号楼和四号楼的业主们收到一纸延时交付书,原定2013年12月30日前交付使用的房子被告知延后,延时交付书称,“我公司力争于2014年4月30日前交房,最迟于2014年6月30日前交房”。",
"author": "百度快照",
"pubDate": "2015-05-05"
},
{
"title": "2018年,沈阳男子发现银行系统漏洞,半年内用小额存款套取3000万|银...",
"link": "https://www.163.com/dy/article/H0LBPPP80550TA0M.html",
"description": "梦想着自己能够在 银行 的系统中找到它们的 漏洞 ,修改自己在 银行 账户的存款余额,把银行变为自己的免费取款机,从此一劳永逸。 在膨胀的贪婪心的驱使下,这个二手车销售员变身为“银行系统测试员”,他在2013年到2018年这5年的时间里,不停地在银行系统上尝试。 就在2018年的5月份,他这个天马行空,看似不可能的想法,竟然被他实现了,一张余额只有5",
"author": "百度快照",
"pubDate": "2022-02-20"
},
{
"title": "长沙银行系统漏洞成敛财工具?3人用外挂造4万非法账户获利16万_中...",
"link": "http://finance.ce.cn/bank12/scroll/202202/23/t20220223_37350803.shtml",
"description": "在老百姓的心目中, 银行 是最受信任的金融机构,中国老百姓大部分的金融资产都放在银行当中。但最近却发生一起因银行系统 漏洞 而引发的恶性违法事件,有一家上市银行因存在系统漏洞成了他人的敛财工具。 01 银行系统漏洞被利用 3人开设4万异常账户赚16万 近日,裁判文书网披露的一则裁定书显示,3人利用长沙银行系统的漏洞...",
"author": "百度快照",
"pubDate": "2022-02-23"
},
{
"title": "疑案精解 | 利用银行系统漏洞获得财物的行为判断-钟兴刚律师团队...",
"link": "https://lawyers.66law.cn/s2a142327f7077_i1443873.aspx",
"description": "行为人利用 银行 系统 漏洞 造成银行损失的行为如何评价,是犯罪行为,还是民事不当得利,实践中存在分歧。行为人主观上是否具有非法占有目的、客观上是否具有转移占有行为成为此类案件定性的关键因素。实践中应以个案证据为基础,严格按照犯罪构成要件分析行为人的客观行为性质和主观目的,坚持主客观相一致的原则,对案件作出准确定性...",
"author": "百度快照",
"pubDate": "2024-06-29"
},
{
"title": "别人开的二类账户却致自己工资卡被盗刷,北京一男子将银行告上法庭...",
"link": "https://www.jfdaily.com.cn/news/detail?id=404736",
"description": "富滇 银行 认为,在这个过程当中中国银行存在 漏洞 ,没有尽到审核义务,“如果有个短信验证之类的,让客户知道钱要出去了,就不会出现后面的消费了。” 对此,中国银行解释,这个机制是为了方便客户消费和资金流转的顺畅,已经通过报文核验后,系统接到支付指令,就会无条件地及时通过,“在一类账户向二类账户支付的过程中,不要求再...",
"author": "百度快照",
"pubDate": "2021-09-12"
},
{
"title": "客户212万分20多笔被转走银行系统存漏洞担责七成_新闻频道_中国...",
"link": "http://news.youth.cn/sh/201708/t20170814_10508759.htm",
"description": "当天,其 银行 卡内212万元分成20多笔被转走。陈女士起诉开户行,认为银行系统存在安全 漏洞 。银行辩称,案件没有侦破,款项是否被骗未知,即使被骗也是因为诈骗分子的行为,以及陈女士的严重过失所致。天河区法院一审认为,陈女士预留了电话号码,银行未全面推行实施转账验证码,并告知不开通该功能的风险责任自负,也未对跨行多笔...",
"author": "百度快照",
"pubDate": "2017-08-14"
},
{
"title": "金融犯罪频发 凸显银行监管的漏洞_手机新浪网",
"link": "http://finance.sina.cn/sa/2006-06-07/detail-ikknscsi3443890.d.html",
"description": "银川市公安局经侦支队于今年5月中旬成功破获一起截留20余万元 银行 预存款案。宁夏大学政法学院院长张秉民和西北第二民族大学法学教授王幽深等专家指出,近年来,宁夏一直大力打击金融犯罪,可如今一个职员却能连续3次截留银行预存款,并且在长达近一个月的时间内未被发现,暴露出银行的监管 漏洞 。",
"author": "百度快照",
"pubDate": "2006-06-07"
},
{
"title": "澳小伙发现ATM无限吐钱! 租飞机办派对, 带陌生人挥霍!",
"link": "https://weibo.com/ttarticle/p/show?id=2309404996342547349998",
"description": "意外发现 银行漏洞 从一个普通的调酒师摇身一变成为百万富翁,每天都能过着纸醉金迷的奢华生活,这或许是电影里才有的情节。 只能说艺术源于生活,一位澳洲小哥的经历,比电影清洁更加精彩。 Dan Saunders出生在墨尔本,曾经是一名职业调酒师,在维州Wangaratta小镇的酒吧上班,几乎过着昼夜颠倒的生活,每天下班都可能是微醺甚...",
"author": "百度快照",
"pubDate": "2024-01-31"
},
{
"title": "中信银行因泄露艺人账户明细发布致歉信 储户隐私如何保护?|商业银...",
"link": "https://news.hsw.cn/system/2020/0508/1182718.shtml",
"description": "律师说法:个案折射出 银行 管理 漏洞 必须严惩 陕西恒达律师事务所高级合伙人、知名公益律师赵良善认为:“中信银行未经持卡人授权、未经正当程序泄露持卡人银行账户交易明细,依据《商业银行法》第二十九条‘商业银行办理个人储蓄存款业务,应当遵循存款自愿、取款自由、存款有息、为存款人保密的原则。对个人储蓄存款,商业银行有...",
"author": "百度快照",
"pubDate": "2020-05-08"
},
{
"title": "兰州银行信贷业务内控或存漏洞管理人员在外兼职拷问人员独立性...",
"link": "https://new.qq.com/rain/a/20211216A0CH9N00",
"description": "此外,兰州 银行 曾要求未以个人名义签订保证合同的相关方承担连带清偿责任,但其对视为夫妻共同债务的债权未取得夫妻双方的签字,也未能提供文件证明此债务为夫妻双方共同意思表示,最终上诉遭驳回。对此,兰州银行信贷业务内控是否存在 漏洞 ?一波未停一波又起,兰州银行管理人员或在外兼任董事、监事,人员独立性或遭拷问。",
"author": "百度快照",
"pubDate": "2021-12-16"
},
{
"title": "2.5亿元银行存款被盗 知情人:年息24%揽存后销户 银行流程有漏洞...",
"link": "https://new.qq.com/omn/20220318/20220318A08IQI00.html",
"description": "近日,南宁工行2.5亿存款不翼而飞事件引发网友高度关注,储户丢失的存款为何追不回来?3月17日,上游新闻记者向案件相关知情人以及一位当事人代理律师了解情况发现,该案涉及到第三方经济犯罪,而受害人被24%的不正常年息所诱为起因,但 银行 流程上存在 漏洞 。",
"author": "百度快照",
"pubDate": "2022-03-18"
}
],
"支付漏洞": [
{
"title": "25%银行类网站存高危风险小银行和P2P平台成重灾区_中央网络安全和...",
"link": "https://www.cac.gov.cn/2015-01/26/c_1114126337.htm",
"description": "另据360补天 漏洞 响应平台提供的信息,此前,国内P2P平台小米贷存多个高危 漏洞 ,黑客可直接控制服务器;普资华企P2P理财网站存在XSS漏洞,使得数十万会员信息存在隐患;易网融通金融综合服务平台存在用户信息泄露风险;点点理财P2P平台存在万能密码,黑客可进入后台操作,泄露所有用户资料;长沙大定财富理财网站存在的漏洞可导致泄露多个数据库信息。目前,",
"author": "百度快照",
"pubDate": "2015-01-26"
},
{
"title": "人民银行提示:网络支付小心信息泄露风险_中央网络安全和信息化...",
"link": "https://www.cac.gov.cn/2016-02/18/c_1118077447.htm",
"description": "非银行 支付 机构方面,应加强规范化管理。支付机构应引入多重安全验证方式,对于小额支付可支持消费者采用较简单的交易安全验证手段;对于大额支付应要求消费者采用安全保障高的交易验证手段,有效防止消费者因不慎遗失个人金融信息而导致的资金安全 漏洞 。鼓励支付机构向客户提供账户资金安全保险服务。消费者在接受支付机构支付服务...",
"author": "百度快照",
"pubDate": "2016-02-18"
},
{
"title": "财付通被爆存安全性漏洞:资金频被盗刷赔付解决难_中央网络安全和...",
"link": "https://www.cac.gov.cn/2015-09/06/c_1116476475.htm",
"description": "在网络第三方 支付 平台方面,有行业专家指出,资金遭冻结并难以解决和资金遭盗刷仍旧是用户投诉热点。同时,记者采访发现,小额资金被盗刷的情况,在实际中更是难以得到有效解决。 某第三方网络支付平台过去的用户小朱(化名)说,在经历了一次被盗刷事件后,他就注销了在该平台的支付业务。 用户:刚打进过一笔钱,第二天早上...",
"author": "百度快照",
"pubDate": "2015-09-06"
},
{
"title": "@所有人,这些网络安全“漏洞”,你堵好了吗?_中央网络安全和信息化...",
"link": "https://www.cac.gov.cn/2021-10/13/c_1635718065867728.htm",
"description": "如果收到了来自信任的朋友或者同事的邮件,你对邮件内容表示怀疑,可直接拨打电话向其核实。 漏洞 五: 扫描来路不明的网站或APP上的二维码 移动 支付 时代,扫描二维码已经成为我们生活中最稀松平常的事儿。可是,这些二维码看起来方便,但是一不小心,你可能就要付出钱财损失的代价。 以下是常见的几种二维码诈骗伎俩: 1、在商...",
"author": "百度快照",
"pubDate": "2021-10-13"
},
{
"title": "聚焦“金融日”:网上支付有风险 陌生链接不要点-中央网络安全和...",
"link": "https://www.cac.gov.cn/2015-06/03/c_1115503708.htm",
"description": "聚焦“金融日”:网上 支付 有风险 陌生链接不要点 便捷的网银支付已渗透到我们生活的方方面面。昨天,在第二届国家网络安全宣传周的“金融日”上,中国工商银行数据中心(北京)安全部总经理敦宏程坦言,信息泄露、恶意软件、钓鱼网站等在不断的威胁到网银安全服务。",
"author": "百度快照",
"pubDate": "2015-06-03"
}
]
}

File diff suppressed because it is too large Load Diff

View File

@ -1,161 +1,162 @@
[
{
"title": "【全球首发】【6w$赏金】微软身份漏洞-未授权强制解绑任意微软账户邮箱",
"link": "https://www.freebuf.com/vuls/419097.html",
"description": "网络安全并不是我的最终梦想职业,只是梦想职业的其中一个技能点。",
"body": "<h2 id=\"h2-1\">致谢</h2><p>我是Feng Jiaming,公开别名 Sugobet/M1n9K1n9,来自中国广东工贸职业技术学院的在校学生。</p><p>I'm Feng Jiaming, my public alias Sugobet/M1n9K1n9, a student from Guangdong Polytechnic of Industry and Commerc",
"category": "漏洞",
"pubDate": "Sun, 05 Jan 2025 13:35:19 +0800"
"title": "黑客利用单字母拼写错误的Go模块部署基于DNS的后门",
"link": "https://www.freebuf.com/articles/481976.html",
"description": "黑客利用单字母拼写错误的Go模块潜伏3年,植入隐蔽DNS后门!",
"body": "\n<p><img src=\"https://image.3001.net/images/20260520/1779282821948311_b79b9afbfa6c4129be05629890d868a1.webp!small\" alt=\"\"></p>\n<p>一个看似无害的Go模块拼写错误已悄然充当活跃后门近三年。安全研究人员发现名为<code>github.com/shopsprint/deci",
"category": "技术",
"pubDate": "Wed, 20 May 2026 12:30:23 +0800"
},
{
"title": "都在给网安泼冷水,我来给网安泼盆开水",
"link": "https://www.freebuf.com/articles/neopoints/419094.html",
"description": "契机今天看到一篇文章契机今天看到一篇文章让我有了估算大黑阔赚钱能力的灵感。给网安行业泼盆开水!",
"body": "<h2 id=\"h2-1\"><strong>契机</strong></h2><p style=\"text-align:center;\">今天看到一篇文章让我有了估算大黑阔赚钱能力的灵感。给网安行业泼盆开水!<br /><img src=\"https://image.3001.net/images/20250105/1736053407_677a129f75ed5e9a02268.png!small",
"category": "观点",
"pubDate": "Sun, 05 Jan 2025 13:14:47 +0800"
},
{
"title": "盘点万亿市值的Palantir在2024年拿下的至少87亿的美军合同都是啥",
"link": "https://www.freebuf.com/articles/neopoints/419073.html",
"description": "仅2024年一年,该公司与美国军方的合同额就高达12亿美元(约合人民币87.8亿元)。",
"body": "<p style=\"text-align:center;\">近日,美国科技公司Palantir宣布,美国陆军已授予Palantir一份价值4.007亿美元(约合人民币29亿元)的合同。近年来,Palantir持续获得美国军方的青睐,公开信息显示,仅2024年一年,该公司与美国军方的合同额就高达12亿美元(约合人民币87.8亿元)。目前,Palantir的大部分收入都来自于美国政府和军事部门。<br",
"category": "观点",
"pubDate": "Sat, 04 Jan 2025 14:01:04 +0800"
},
{
"title": "一周网安优质PDF资源推荐丨FreeBuf知识大陆",
"link": "https://www.freebuf.com/articles/419042.html",
"description": "我们精选了本周知识大陆公开发布的10条优质资源,让我们一起看看吧。",
"body": "<p>各位读者周末好,以下是本周「FreeBuf知识大陆一周优质资源推荐」,我们精选了本周知识大陆公开发布的10条优质资源,让我们一起看看吧。</p><p><img src=\"https://image.3001.net/images/20250103/1735891639_67779ab73e8d0be0fdbae.png!small\" alt=\"\" /></p><h2 id=\"h2-1\">笔记",
"pubDate": "Fri, 03 Jan 2025 16:22:28 +0800"
},
{
"title": "FreeBuf周报 | 超过300万台未加密的邮件服务器暴露;WPA3协议存在安全漏洞",
"link": "https://www.freebuf.com/news/419036.html",
"description": "总结推荐本周的热点资讯、安全事件、一周好文和省心工具,保证大家不错过本周的每一个重点!",
"body": "<p>各位 Buffer 周末好,以下是本周「FreeBuf周报」,我们总结推荐了本周的热点资讯、安全事件、一周好文和省心工具,保证大家不错过本周的每一个重点!<img style=\"border-width:0px;line-height:inherit;max-width:635px;height:auto;\" src=\"https://image.3001.net/images/202209",
"title": "GitHub证实被入侵,4000个私有仓库被窃取",
"link": "https://www.freebuf.com/news/481866.html",
"description": "GitHub通过官方X(原Twitter)账号发布声明,确认正在调查针对其内部代码仓库的未授权访问事件。",
"body": "<p>5月20日,GitHub通过官方X(原Twitter)账号发布声明,确认正在调查针对其内部代码仓库的未授权访问事件。该回应直接指向威胁组织“TeamPCP”此前宣称的大规模数据窃取行为。</p><h2 id=\"h2-1\">官方回应:客户数据暂未受影响</h2><p><img src=\"https://image.3001.net/images/20260520/1779249234_6a0d",
"category": "资讯",
"pubDate": "Fri, 03 Jan 2025 15:56:46 +0800"
"pubDate": "Wed, 20 May 2026 11:51:03 +0800"
},
{
"title": "Agneyastra:一款Firebase 错误配置检测工具包",
"link": "https://www.freebuf.com/sectool/419006.html",
"description": "Agneyastra是一款功能强大的错误配置检测工具,可以帮助广大研究人员更好地保障Firebase平台的安全。",
"body": "<h2 id=\"h2-1\">关于Agneyastra</h2><p>Agneyastra是一款功能强大的错误配置检测工具,该工具主要针对的是Firebase平台,可以帮助广大研究人员更好地保障Firebase平台的安全。</p><p><img src=\"https://image.3001.net/images/20250103/1735881390_677772aecfdd43a52c23b.p",
"category": "工具",
"pubDate": "Fri, 03 Jan 2025 13:21:19 +0800"
},
{
"title": "Exposor:一款基于互联网搜索引擎实现的统一语法网络侦查工具",
"link": "https://www.freebuf.com/sectool/419004.html",
"description": "Exposor是一款功能强大的网络侦查工具,支持广大研究人员使用统一语法来检测网络中的安全威胁。",
"body": "<h2 id=\"h2-1\">关于Exposor</h2><p>Exposor是一款功能强大的网络侦查工具,该工具基于互联网搜索引擎实现其功能,支持广大研究人员使用统一语法来检测网络中的安全威胁。</p><p><img src=\"https://image.3001.net/images/20250103/1735880146_67776dd204e38df0c1826.png!small\" wid",
"category": "工具",
"pubDate": "Fri, 03 Jan 2025 12:58:29 +0800"
},
{
"title": "日本最大的移动运营商因DDoS攻击导致服务中断",
"link": "https://www.freebuf.com/news/418992.html",
"description": "NTT Docomo当地时间1月2日表示,一次DDoS网络攻击导致运营中断,网站和一些服务在宕机大半天后才逐渐恢复。",
"body": "<p>日本最大的移动运营商 NTT Docomo Inc. 当地时间1月2日表示,一次分布式拒绝服务 (DDoS) 网络攻击导致运营中断,网站和一些服务在宕机大半天后才逐渐恢复。</p><p><img src=\"https://image.3001.net/images/20250103/1735874913_677759613048fcfd644c0.png!small\" width=\"690\"",
"category": "资讯",
"pubDate": "Fri, 03 Jan 2025 11:26:47 +0800"
},
{
"title": "用户集体起诉Siri“偷听”",
"link": "https://www.freebuf.com/news/418989.html",
"description": "苹果公司同意支付9500万美元现金,以和解一项拟议的集体诉讼,该诉讼声称其Siri语音助手侵犯了用户的隐私。",
"body": "<p>1月3日消息,科技巨头苹果公司同意支付9500万美元现金,以和解一项拟议的集体诉讼,该诉讼声称其Siri语音助手侵犯了用户的隐私。这份和解协议涵盖了2014年9月17日至2024年12月31日期间使用Siri的美国用户,涉及数千万人。</p><p>每位参与诉讼的用户最多可为5台Siri设备申请赔偿,每台设备最高可获得20美元。此外,苹果公司需在六个月内永久删除2019年10月前收集的Siri",
"category": "资讯",
"pubDate": "Fri, 03 Jan 2025 11:17:16 +0800"
},
{
"title": "黑客滥用AWS泄露的信息进行云狩猎",
"link": "https://www.freebuf.com/news/418985.html",
"description": "名为“EC2 Grouper”的黑客组织,近年来一直在利用AWS工具以及泄露的凭证对云环境展开狩猎型攻击。",
"body": "<p>名为“EC2 Grouper”的黑客组织,近年来一直在利用AWS工具以及泄露的凭证对云环境展开狩猎型攻击。在过去的数年里,这个相当活跃的威胁行为主体在数十个客户环境中被发现,这使其成为网络安全专家追踪的最活跃的组织之一。</p><p><img src=\"https://image.3001.net/images/20250103/1735874034_677755f204ca51a03dc1",
"category": "资讯",
"pubDate": "Fri, 03 Jan 2025 11:10:50 +0800"
},
{
"title": "超过300万台未加密的邮件服务器暴露",
"link": "https://www.freebuf.com/news/418975.html",
"description": "超过300万台未启用TLS加密的POP3和IMAP邮件服务器暴露在互联网上,容易受到网络嗅探攻击。",
"body": "<p>目前,超过300万台未启用TLS加密的POP3和IMAP邮件服务器暴露在互联网上,容易受到网络嗅探攻击。</p><p>IMAP和POP3是访问邮件服务器上邮件的两种方式。IMAP适用于从多个设备(如手机和笔记本电脑)查看邮件,因为它会将邮件保留在服务器上并在设备间同步。而POP3则会将邮件从服务器下载,使其仅能从下载的设备访问。</p><p><img src=\"https://image.3",
"category": "资讯",
"pubDate": "Fri, 03 Jan 2025 10:22:53 +0800"
},
{
"title": "CertiK Hack3D: Web3.0 年度安全报告(2024)",
"link": "https://www.freebuf.com/articles/paper/418966.html",
"description": "2024年Web3.0领域因安全事件导致的总损失超过23.63亿美元,同比增幅达31.61%。全年共发生760起安全事件,其中网络钓鱼和私钥泄露是两大主要攻击手段。",
"body": "<p><img src=\"https://image.3001.net/images/20250102/1735830965_6776adb5bccea4626f7a7.jpg!small\" alt=\"2024Web3.0 安全年度报告 (1).jpg\" /></p><h1><strong>摘要</strong></h1><ul><li><p>2024年,Web3.0行业共发生760起链上安全事件",
"category": "安全报告",
"pubDate": "Thu, 02 Jan 2025 23:16:05 +0800"
},
{
"title": "shiro-core 框架分析",
"link": "https://www.freebuf.com/articles/web/413356.html",
"description": "shiro-core 框架分析",
"body": "<h1>shiro-core</h1><p>本篇文章只阐述最核心内容,从整体描述shiro-core,目的是能在研究shiro的漏洞时有一个全局观,因此不可能涉及全部细节。</p><ul><li><p><a href=\"https://shiro.apache.org/introduction.html\">Introduction to Apache Shiro | Apache Shiro</a",
"title": "NGINX 安全分析:CVE‑2026‑42945 漏洞解析",
"link": "https://www.freebuf.com/articles/web/481861.html",
"description": "该漏洞在 NGINX 源代码中存在 长达 18 年之久,波及几十亿请求路径和数百万服务实例。",
"body": "<h2 id=\"h2-1\">一、背景简介:互联网核心组件的历史性缺陷</h2><p>NGINX 是全球部署最广泛的高性能 HTTP 服务器、反向代理和负载均衡器,承载无数网站、API、微服务等关键业务。2026 年安全界爆出一个震惊业界的漏洞——<strong>CVE‑2026‑42945</strong>,该漏洞在 NGINX 源代码中存在 <strong>长达 18 年</strong>之久,",
"category": "Web安全",
"pubDate": "Thu, 02 Jan 2025 20:40:16 +0800"
"pubDate": "Wed, 20 May 2026 11:19:25 +0800"
},
{
"title": "FreeBuf早报 | 作者辟谣7-Zip存零日漏洞;法国多地网站遭遇黑客攻击",
"link": "https://www.freebuf.com/news/418936.html",
"description": "12月31日,法国多个城镇和省份的网站无法访问。此前,一个黑客团体声称发动网络攻击,以报复法国支持乌克兰。",
"body": "<h2 id=\"h2-1\">全球动态</h2><h3 id=\"h3-1\">1. 美财政部称遭到“中国政府支持的黑客”攻击,中方回应</h3><p>中方一贯反对各种形式的黑客攻击,更反对出于政治目的散布针对中国的虚假信息。 【<a href=\"http://usa.people.com.cn/n1/2025/0102/c241376-40394097.html\"><u>阅读原文</u></a>】</",
"category": "资讯",
"pubDate": "Thu, 02 Jan 2025 15:45:09 +0800"
},
{
"title": "分享OAuth2.0原理及漏洞挖掘技巧案例分析",
"link": "https://www.freebuf.com/vuls/418923.html",
"description": "这篇文章主要是从一个简单的案例来开头,然后后面讲OAuth2.0原理以及相关的一些相关知识。",
"body": "<h2 id=\"h2-1\">0x1 前言</h2><h3 id=\"h3-1\">一、浅谈</h3><p>不知道师傅们平常有没有碰到就是在登录比如说百度时,登录页面有需要使用一段第三方社交媒体的账户(QQ、微博、微信)登录的情况,而这种大多数都是使用OAuth 2.0框架构建的。</p><p>然而再挖掘SRC的过程中,在听别的师傅讲课听到关于这方面的只是,这次特地来学习OAuth2.0原理及漏洞挖掘技",
"title": "组件投毒预警:atool npm 维护者账户被接管,317个包遭凭证蠕虫攻击",
"link": "https://www.freebuf.com/articles/vuls/481859.html",
"description": "此次受影响的软件包覆盖面极广,既包括前端开发中的高频基础依赖,也包括大量企业常用的数据可视化与图分析组件。",
"body": "<h1 id=\"activity-name\"><span>事件概述</span></h1><p id=\"js_content\"></p><p>近日,安全玻璃盒供应链安全威胁情报中心检测到npm生态爆发一起高危供应链投毒事件。公开情报显示,npm账户 <strong>atool(i@hust.cc)</strong>于 <strong>2026 年 5 月 19 日</strong>被攻击者劫持,随",
"category": "漏洞",
"pubDate": "Thu, 02 Jan 2025 13:40:21 +0800"
"pubDate": "Wed, 20 May 2026 11:11:09 +0800"
},
{
"title": "新的“DoubleClickjacking”漏洞可绕过网站的劫持保护",
"link": "https://www.freebuf.com/news/418913.html",
"description": "该漏洞通过利用双击操作来推动点击劫持攻击及账户接管,几乎波及所有大型网站。",
"body": "<p>安全专家揭示了一种新型的“普遍存在的基于时间的漏洞”,该漏洞通过利用双击操作来推动点击劫持攻击及账户接管,几乎波及所有大型网站。这一技术已被安全研究员Paulos Yibelo命名为“DoubleClickjacking”。</p><p><img src=\"https://image.3001.net/images/20250102/1735789931_67760d6b5512ab30e8",
"title": "职等你来,同花顺招聘安全工程师",
"link": "https://www.freebuf.com/articles/481850.html",
"description": "职等你来,同花顺招聘安全工程师",
"body": "<h2 class=\"tinymce-p\" id=\"h2-1\">招聘岗位</h2><h3 id=\"h3-1\">基础安全工程师/专家 (30-90K)</h3><p class=\"tinymce-p\"><strong>岗位职责:</strong></p><p class=\"tinymce-p\">1.负责公司基础信息系统安全建设。以黑客视角对基础设施进行安全风险识别与评估,并给出安全加固建议;</p>",
"category": "安全招聘",
"pubDate": "Wed, 20 May 2026 10:06:54 +0800"
},
{
"title": "CVE Lite CLI:开源依赖项漏洞扫描工具",
"link": "https://www.freebuf.com/articles/development/481895.html",
"description": "\"开源工具CVE Lite CLI让依赖漏洞扫描提前到开发终端,秒级定位高危风险!\"",
"body": "\n<p>在 JavaScript 和 TypeScript 项目中,依赖项漏洞扫描长期以来都处于开发管道的末端。开发者提交拉取请求后,持续集成系统开始运行,安全扫描器返回一系列 CVE 编号,而此时开发者往往需要花费数小时甚至数天时间来处理这些漏洞。作为 OWASP 官方认证的孵化项目,CVE Lite CLI 将这项检查工作提前到了开发者终端阶段。</p>\n<p>这款由 Sonu Kapoor ",
"category": "开发安全",
"pubDate": "Wed, 20 May 2026 06:00:59 +0800"
},
{
"title": "华为0Day漏洞被指导致2025年卢森堡全国通信瘫痪",
"link": "https://www.freebuf.com/articles/ics-articles/481893.html",
"description": "华为0Day漏洞致卢森堡全国通信瘫痪,漏洞未修复仍存隐患!",
"body": "\n<p><img src=\"https://image.3001.net/images/20260520/1779260600782542_674120c2a01844d08d096249af3caf3f.jpg!small\" alt=\"\"></p>\n<h2>华为路由器0Day漏洞引发卢森堡全国通信中断</h2>\n<p>2025年7月23日,卢森堡遭遇全国性通信中断事件,据调查由华为企业路由器中一",
"category": "关基安全",
"pubDate": "Wed, 20 May 2026 05:30:04 +0800"
},
{
"title": "GitHub 遭入侵:员工设备遭恶意扩展攻击致内部源码仓库泄露",
"link": "https://www.freebuf.com/articles/database/481971.html",
"description": "GitHub员工遭恶意扩展攻击,3800个内部源码仓库泄露!",
"body": "\n<p><img src=\"https://image.3001.net/images/20260520/1779280305659712_201420402a6c414ea57c5a7ab5e56403.webp!small\" alt=\"\"></p>\n<p>2026年5月20日,GitHub通过系列官方声明证实,其检测到某员工设备因安装恶意Visual Studio Code扩展而遭入侵,导致内",
"category": "数据安全",
"pubDate": "Wed, 20 May 2026 04:47:29 +0800"
},
{
"title": "AI Agent 安全:自动化工作流时如何规避提示注入与数据泄露风险",
"link": "https://www.freebuf.com/articles/ai-security/481829.html",
"description": "AI Agent权限越大风险越高,提示注入可致数据泄露!",
"body": "<p class=\"tinymce-p\"><img src=\"https://image.3001.net/images/20260520/1779246191_6a0d246fa6e1d68d408d0.jpg!small\" width=\"690\" height=\"388\" alt=\"\" />AI Agent 安全始于一个简单事实:Agent 权限越大,其访问控制就需越严格。仅能总结文档的 AI",
"category": "AI安全",
"pubDate": "Tue, 19 May 2026 21:13:08 +0800"
},
{
"title": "FreeBuf早报 | Mythos Preview 实现自动化漏洞研究中 PoC 漏洞利用链构建;n8n漏洞使自动化节点面临完整RCE风险",
"link": "https://www.freebuf.com/news/481732.html",
"description": "AI模型可自动构建漏洞利用链,安全边界面临重构。",
"body": "<h2 id=\"h2-1\">全球网安事件速递</h2><h3 id=\"h3-1\">1. Mythos Preview 实现自动化漏洞研究中 PoC 漏洞利用链构建</h3><p>Anthropic的AI模型Mythos Preview实现突破,能串联漏洞生成可验证的PoC利用链,填补漏洞发现与利用间的技术鸿沟。需定制化框架优化结果,但安全防护仍需额外措施,凸显攻防时间窗缩短的紧迫性。【<a hre",
"category": "资讯",
"pubDate": "Thu, 02 Jan 2025 11:46:14 +0800"
"pubDate": "Tue, 19 May 2026 18:17:06 +0800"
},
{
"title": "至少35个Chrome扩展被劫持,新细节揭示了黑客的攻击手法",
"link": "https://www.freebuf.com/news/418912.html",
"description": "近期,黑客针对多个Chrome扩展程序进行了攻击,数十万用户受到影响。随着调查的深入,一些攻击活动细节也得到了披露。",
"body": "<p>据BleepingComputer消息,近期,黑客针对多个Chrome扩展程序进行了攻击,数十万用户受到影响。随着调查的深入,一些攻击活动细节也得到了披露。</p><p>根据最新调查,攻击导致至少 35 个扩展程序被植入数据窃取代码,较之前的初步怀疑数量直接翻倍,其中包括来自网络安全公司 Cyberhaven 的扩展。尽管最初的报道集中在 Cyberhaven 的安全扩展上,但随后的调查显示",
"category": "资讯",
"pubDate": "Thu, 02 Jan 2025 11:41:04 +0800"
"title": "DirtyDecrypt Linux 内核漏洞 PoC 利用代码公开",
"link": "https://www.freebuf.com/articles/system/481812.html",
"description": "高危漏洞DirtyDecrypt曝光!Linux本地提权风险加剧,容器逃逸威胁企业安全。",
"body": "\n<p><img src=\"https://image.3001.net/images/20260520/1779213934717431_fbd338cb0e024d0ba4f1d28e73d86e72.webp!small\" alt=\"\"></p>\n<p>针对一个被命名为 DirtyDecrypt(亦被追踪为 DirtyCBC)的高危 Linux 内核本地提权漏洞的概念验证(PoC)利用代码已",
"category": "系统安全",
"pubDate": "Tue, 19 May 2026 17:18:30 +0800"
},
{
"title": "Windows 曝9.8分漏洞,已有PoC及利用情况",
"link": "https://www.freebuf.com/news/418909.html",
"description": "CVE - 2024 - 49112属于远程代码执行(RCE)漏洞,会对包括域控制器(DC)在内的Windows服务器产生影响。",
"body": "<p>SafeBreach Labs的研究人员发布了关于Windows轻量级目录访问协议(LDAP)的一个关键漏洞的概念验证(PoC)和漏洞利用方法,该漏洞编号为CVE - 2024 - 49112。微软在2024年12月10日的补丁星期二更新中披露了此漏洞,其CVSS严重性评分高达9.8。</p><p>CVE - 2024 - 49112属于远程代码执行(RCE)漏洞,会对包括域控制器(DC)在",
"category": "资讯",
"pubDate": "Thu, 02 Jan 2025 11:29:58 +0800"
"title": "威胁情报落地的三大SOC战术",
"link": "https://www.freebuf.com/articles/es/481821.html",
"description": "被动安全难抵风险累积,三大SOC战术让威胁情报落地提速!",
"body": "\n<p><img src=\"https://image.3001.net/images/20260520/1779217503385468_e8ec77053d1742bcb9a4f775553f99f9.webp!small\" alt=\"3 SOC Tactics for Threat Intelligence\"></p>\n<p>数据泄露事件可能只会上头条一天,但其造成的损害却会持续数年。关键业",
"category": "企业安全",
"pubDate": "Tue, 19 May 2026 17:12:12 +0800"
},
{
"title": "记一次CNVD证书的挖掘方式",
"link": "https://www.freebuf.com/articles/web/418887.html",
"description": "越权漏洞,用户能够修改或访问其他用户(包括管理员)的数据或权限。",
"body": "<h2 id=\"h2-1\">漏洞挖掘背景</h2><p>在Fofa上随便逛逛 突然看到了某某系统 好奇就点了进去</p><h2 id=\"h2-2\">漏洞发现与利用步骤</h2><p><img src=\"https://image.3001.net/images/20250101/1735726269_677514bde6b4ee044cf72.png!small?1735726271056\" al",
"category": "Web安全",
"pubDate": "Wed, 01 Jan 2025 18:33:17 +0800"
"title": "新型钓鱼点击:OAuth授权如何绕过多因素认证",
"link": "https://www.freebuf.com/articles/ai-security/481770.html",
"description": "OAuth钓鱼攻击绕过MFA窃取企业数据,刷新令牌成黑客新武器!",
"body": "\n<p><img src=\"https://image.3001.net/images/20260519/1779195846621043_1d6c880720b84255aa9dbabb26ac1bf0.jpg!small\" alt=\"image\"></p>\n<p>2026年2月,名为EvilTokens的钓鱼即服务(PhaaS)平台开始运作。短短五周内,该平台就成功入侵了五个国家超过340家微",
"category": "AI安全",
"pubDate": "Tue, 19 May 2026 17:00:00 +0800"
},
{
"title": "漏洞分析 | Apache Struts文件上传漏洞(CVE-2024-53677)",
"link": "https://www.freebuf.com/vuls/418881.html",
"description": "目前该漏洞POC状态已在互联网公开",
"body": "<h2 id=\"h2-1\">漏洞概述</h2><p>Apache Struts是美国阿帕奇(Apache)基金会的一个开源项目,是一套用于创建企业级Java Web应用的开源MVC框架。</p><p>近期,网宿安全演武实验室监测到Apache Struts在特定条件下,存在文件上传漏洞(网宿评分:高危、CVSS 3.0 评分:8.1):</p><p>攻击者可以操纵文件上传参数来实现路径遍历,在某些",
"title": "Pwn2Own Berlin 2026落幕:0Day漏洞奖金总额达130万美元",
"link": "https://www.freebuf.com/articles/481792.html",
"description": "Pwn2Own柏林赛狂揽47个0Day,奖金近130万美元!",
"body": "<p><img src=\"https://image.3001.net/images/20260520/1779245390_6a0d214e84c1e53d92ea6.jpg!small\" width=\"690\" height=\"388\" alt=\"\" /></p><p>2026年5月16日,备受期待的Pwn2Own Berlin 2026黑客大赛在OffensiveCon会议期间经过三天激烈角",
"category": "技术",
"pubDate": "Tue, 19 May 2026 15:59:01 +0800"
},
{
"title": "Orchid Security安全报告:三分之二非人类账户处于失控状态",
"link": "https://www.freebuf.com/articles/es/481795.html",
"description": "&quot;企业身份暗物质失控,AI时代埋下致命隐患!&quot;",
"body": "<p><img src=\"https://image.3001.net/images/20260520/1779207353112015_f86eae1a3ccd4966a6209094af950edf.webp!small\" alt=\"\" /></p><p><strong>美国纽约,2026年5月19日,CyberNewswire电</strong><strong>新研究表明身份暗物质持续扩张,",
"category": "企业安全",
"pubDate": "Tue, 19 May 2026 15:37:57 +0800"
},
{
"title": "GitHub缩减漏洞赏金计划,提醒用户安全责任需共担",
"link": "https://www.freebuf.com/articles/ai-security/481793.html",
"description": "GitHub因AI垃圾报告泛滥缩减漏洞赏金,警告用户需自担安全风险。",
"body": "\n<h2>代码托管平台呼吁研究者减少AI生成的低质报告</h2>\n<p><img src=\"https://image.3001.net/images/20260520/1779207203294546_1db731e7b91849f687c029395a13791e.jpg!small\" alt=\"通过GitHub供应链发起的攻击\"></p>\n<p>面对漏洞赏金计划提交量的激增,GitHub正对",
"category": "AI安全",
"pubDate": "Tue, 19 May 2026 15:28:48 +0800"
},
{
"title": "Apache Flink 高危漏洞可导致远程代码执行攻击",
"link": "https://www.freebuf.com/articles/database/481799.html",
"description": "高危漏洞!Apache Flink SQL注入可致集群沦陷,速升级!",
"body": "\n<p><img src=\"https://image.3001.net/images/20260520/1779207728416657_85c769744ebd4e9ba16508b0f2df642c.webp!small\" alt=\"\"></p>\n<p>Apache Flink 近日披露一个编号为 CVE-2026-35194 的高危漏洞,该漏洞通过平台代码生成引擎中的 SQL 注入缺陷,使",
"category": "数据安全",
"pubDate": "Tue, 19 May 2026 15:03:10 +0800"
},
{
"title": "Linux应急响应入侵排查篇",
"link": "https://www.freebuf.com/articles/defense/481696.html",
"description": "在日常安全运营中,Linux 服务器被入侵是非常常见的应急场景。",
"body": "<p>在日常安全运营中,Linux 服务器被入侵是非常常见的应急场景。攻击者通过弱口令、Web 漏洞、组件漏洞、密钥泄露等方式进入主机,随后进行提权、植入后门、横向移动、挖矿、代理转发或数据窃取。</p><h2 id=\"h2-1\"><strong>一、Linux入侵排查思路</strong></h2><p><strong>1.系统信息收集</strong></p><p>主要是收集系统的版本内核信息",
"category": "攻防演练",
"pubDate": "Tue, 19 May 2026 15:01:07 +0800"
},
{
"title": "攻击者利用Cloudflare存储节点从被入侵网络窃取文件",
"link": "https://www.freebuf.com/articles/database/481791.html",
"description": "攻击者利用Cloudflare存储节点窃取政府企业数据,定制化工具规避检测。",
"body": "<p><img src=\"https://image.3001.net/images/20260519/1779203091162279_635083f446bd4b7e9241ec9f5e05ffb4.webp!small\" alt=\"\" /></p><p>攻击者发现了一种从被入侵网络静默窃取数据的新方法——这次他们隐藏在人们熟悉的Cloudflare服务背后。安全研究人员发现一起针对性入侵行动",
"category": "数据安全",
"pubDate": "Tue, 19 May 2026 14:01:55 +0800"
},
{
"title": "CVE-2026-42945 深度解析 NGINX Rift :潜伏18年的堆溢出漏洞分析与防御指南",
"link": "https://www.freebuf.com/articles/vuls/481654.html",
"description": "NGINX Rift漏洞极其罕见地在 NGINX 的核心源码库中潜伏了大约 18 年之久。据溯源分析,该缺陷最早在 2008 年左右的提交中被引入。",
"body": "<p>在全球互联网基础设施的底层架构中,NGINX 凭借其极致的异步非阻塞事件驱动模型和极低的内存消耗,长期占据着 Web 服务器、反向代理、负载均衡器以及 API 网关领域的统治地位。NGINX的安全性影响全球数以千万计在线服务。2026年5月13日,一项被正式命名为 “NGINX Rift” 的严重内存破坏漏洞(CVE-2026-42945)的公开披露,在网络安全业界引发了强烈的震动。</p>",
"category": "漏洞",
"pubDate": "Tue, 31 Dec 2024 19:47:46 +0800"
"pubDate": "Tue, 19 May 2026 09:33:04 +0800"
}
]

File diff suppressed because it is too large Load Diff

View File

@ -4,65 +4,5 @@
"published_at": "2021-11-01T08:54:13Z",
"author": "BeichenDream",
"keyword": "BeichenDream/Godzilla"
},
{
"link": "https://github.com/rebeyond/Behinder/releases/tag/Behinder_v4.1%E3%80%90t00ls%E4%B8%93%E7%89%88%E3%80%91",
"published_at": "2023-08-24T11:31:46Z",
"author": "rebeyond",
"keyword": "rebeyond/Behinder"
},
{
"link": "https://github.com/AntSwordProject/antSword/releases/tag/2.1.15",
"published_at": "2022-07-17T05:52:54Z",
"author": "Medicean",
"keyword": "AntSwordProject/antSword"
},
{
"link": "https://github.com/gentilkiwi/mimikatz/releases/tag/2.2.0-20220919",
"published_at": "2022-09-19T15:55:03Z",
"author": "gentilkiwi",
"keyword": "gentilkiwi/mimikatz"
},
{
"link": "https://github.com/ehang-io/nps/releases/tag/v0.26.10",
"published_at": "2021-04-08T06:32:17Z",
"author": "ffdfgdfg",
"keyword": "ehang-io/nps"
},
{
"link": "https://github.com/chaitin/xray/releases/tag/xpoc-0.1.0",
"published_at": "2024-07-19T11:12:29Z",
"author": "Jarcis-cy",
"keyword": "chaitin/xray"
},
{
"link": "https://github.com/FunnyWolf/pystinger/releases/tag/v1.6",
"published_at": "2021-03-30T13:47:07Z",
"author": "FunnyWolf",
"keyword": "FunnyWolf/pystinger"
},
{
"link": "https://github.com/L-codes/Neo-reGeorg/releases/tag/v5.2.0",
"published_at": "2024-01-16T06:39:11Z",
"author": "L-codes",
"keyword": "L-codes/Neo-reGeorg"
},
{
"link": "https://github.com/shadow1ng/fscan/releases/tag/2.0.0-build1",
"published_at": "2024-12-19T15:11:24Z",
"author": "shadow1ng",
"keyword": "shadow1ng/fscan"
},
{
"link": "https://github.com/SafeGroceryStore/MDUT/releases/tag/v2.1.1",
"published_at": "2022-06-22T13:11:44Z",
"author": "Ch1ngg",
"keyword": "SafeGroceryStore/MDUT"
},
{
"link": "https://github.com/wy876/POC/releases/tag/POC20241228",
"published_at": "2024-12-29T09:00:56Z",
"author": "wy876",
"keyword": "wy876/POC"
}
]

View File

@ -7,113 +7,5 @@
"author": "beichen",
"link_2": "https://github.com/BeichenDream/Godzilla/commit/a5558e6c37139ebb0b7b4491dc3ea7ce8d8f9e49",
"keyword": "BeichenDream/Godzilla"
},
{
"link": "https://api.github.com/rebeyond/Behinder",
"name": "rebeyond/Behinder",
"updated_at": "2023-08-15T14:28:52Z",
"description": "Create SECURITY.md",
"author": "rebeyond",
"link_2": "https://github.com/rebeyond/Behinder/commit/2e2817ae70462a02281c8d96d4cd44c19e5c55b0",
"keyword": "rebeyond/Behinder"
},
{
"link": "https://api.github.com/AntSwordProject/antSword",
"name": "AntSwordProject/antSword",
"updated_at": "2023-07-15T02:53:39Z",
"description": "(Fix: Modules/Database) 修正 PHP4 类型数据管理模块打不开的问题",
"author": "Medicean",
"link_2": "https://github.com/AntSwordProject/antSword/commit/6112ab2c3f6dceda68421cf02ca2dc43a940a01f",
"keyword": "AntSwordProject/antSword"
},
{
"link": "https://api.github.com/yhy0/github-cve-monitor",
"name": "yhy0/github-cve-monitor",
"updated_at": "2023-02-14T07:02:19Z",
"description": "修复黑名单,之前搞成没三分钟清零了,抱歉",
"author": "yhy",
"link_2": "https://github.com/yhy0/github-cve-monitor/commit/570b0645f8f51706d984ff9ba97e0a79d733bf66",
"keyword": "yhy0/github-cve-monitor"
},
{
"link": "https://api.github.com/gentilkiwi/mimikatz",
"name": "gentilkiwi/mimikatz",
"updated_at": "2024-01-05T09:06:47Z",
"description": "Merge pull request #439 from chunhualiu/master\n\n[change] Convert pointer to DWORD_PTR first to eliminate compile warning",
"author": "Benjamin DELPY",
"link_2": "https://github.com/gentilkiwi/mimikatz/commit/0c611b1445b22327fcc7defab2c09b63b4f59804",
"keyword": "gentilkiwi/mimikatz"
},
{
"link": "https://api.github.com/ehang-io/nps",
"name": "ehang-io/nps",
"updated_at": "2021-10-09T07:18:41Z",
"description": "Merge pull request #866 from freeoa/master\n\nadd build to apple silicon(M1)",
"author": "he liu",
"link_2": "https://github.com/ehang-io/nps/commit/ab648d6f0c618c690a7a79948a7ebd686e1cdafc",
"keyword": "ehang-io/nps"
},
{
"link": "https://api.github.com/chaitin/xray",
"name": "chaitin/xray",
"updated_at": "2024-08-16T07:18:55Z",
"description": "[add] 更新客服信息",
"author": "Jarcis-cy",
"link_2": "https://github.com/chaitin/xray/commit/aee9f9cecc3d49a1842a33c38b96af35a7d90168",
"keyword": "chaitin/xray"
},
{
"link": "https://api.github.com/FunnyWolf/pystinger",
"name": "FunnyWolf/pystinger",
"updated_at": "2021-09-29T13:13:36Z",
"description": "Optimize code execution process",
"author": "FunnyWolf",
"link_2": "https://github.com/FunnyWolf/pystinger/commit/8502983a6ae24f99c1ec8a8310f61eda4ed31684",
"keyword": "FunnyWolf/pystinger"
},
{
"link": "https://api.github.com/L-codes/Neo-reGeorg",
"name": "L-codes/Neo-reGeorg",
"updated_at": "2024-09-23T09:12:45Z",
"description": "fix #100",
"author": "L",
"link_2": "https://github.com/L-codes/Neo-reGeorg/commit/9945dce310de26ac7c0c90054584aeef89c58d07",
"keyword": "L-codes/Neo-reGeorg"
},
{
"link": "https://api.github.com/shadow1ng/fscan",
"name": "shadow1ng/fscan",
"updated_at": "2024-12-19T15:09:06Z",
"description": "Update release.yml",
"author": "影舞者",
"link_2": "https://github.com/shadow1ng/fscan/commit/9ee51a96d8a22342feeef6ae2211e500a65c3917",
"keyword": "shadow1ng/fscan"
},
{
"link": "https://api.github.com/SafeGroceryStore/MDUT",
"name": "SafeGroceryStore/MDUT",
"updated_at": "2023-09-22T04:28:28Z",
"description": "Update ShellUtil.java",
"author": "金枪银矛小霸王",
"link_2": "https://github.com/SafeGroceryStore/MDUT/commit/d9af1b1c645cc309787a45ad833d645123855f91",
"keyword": "SafeGroceryStore/MDUT"
},
{
"link": "https://api.github.com/Vme18000yuan/FreePOC",
"name": "Vme18000yuan/FreePOC",
"updated_at": "2024-07-02T13:28:19Z",
"description": "Add files via upload",
"author": "Vme18000yuan",
"link_2": "https://github.com/Vme18000yuan/FreePOC/commit/7511d7967781b5ae770c62b52a4c3c2930d19a79",
"keyword": "Vme18000yuan/FreePOC"
},
{
"link": "https://api.github.com/wy876/POC",
"name": "wy876/POC",
"updated_at": "2025-01-04T06:15:34Z",
"description": "README.md",
"author": "wy876",
"link_2": "https://github.com/wy876/POC/commit/d6a2a1e8cfb5db7059511fe5b02745327bd25efe",
"keyword": "wy876/POC"
}
]

View File

@ -1,605 +1,11 @@
[
{
"link": "https://github.com/su18/woodpecker-plugin-template",
"name": "woodpecker-plugin-template",
"created_at": "2024-12-13T08:47:27Z",
"description": "woodpecker-plugin-template",
"link": "https://github.com/su18/POC",
"name": "POC",
"created_at": "2023-01-08T01:56:47Z",
"description": "收集整理漏洞EXP/POC,大部分漏洞来源网络,目前收集整理了1400多个poc/exp,长期更新。",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/closure-compiler",
"name": "closure-compiler",
"created_at": "2024-12-08T05:13:17Z",
"description": "A JavaScript checker and optimizer.",
"author": "su18",
"language": "Java",
"keyword": "su18"
},
{
"link": "https://github.com/su18/CVE-2022-25845-In-Spring",
"name": "CVE-2022-25845-In-Spring",
"created_at": "2024-11-08T08:24:12Z",
"description": "CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/CTF-NetA",
"name": "CTF-NetA",
"created_at": "2024-10-09T07:46:31Z",
"description": "CTF-NetA是一款专门针对CTF比赛的网络流量分析工具,可以对常见的网络流量进行分析,快速自动获取flag。",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/jattach",
"name": "jattach",
"created_at": "2024-06-20T08:32:52Z",
"description": "JVM Dynamic Attach utility",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/java-memshell-generator",
"name": "java-memshell-generator",
"created_at": "2024-06-03T03:05:00Z",
"description": "一款支持高度自定义的 Java 内存马生成工具",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/ISC2022Code",
"name": "ISC2022Code",
"created_at": "2024-05-16T11:02:28Z",
"description": null,
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/playframework",
"name": "playframework",
"created_at": "2024-04-10T09:35:50Z",
"description": "The Community Maintained High Velocity Web Framework For Java and Scala.",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/ChatGPT-Next-Web",
"name": "ChatGPT-Next-Web",
"created_at": "2024-04-10T03:18:11Z",
"description": "A cross-platform ChatGPT/Gemini UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT/Gemini 应用。",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/su18/agentcrack",
"name": "agentcrack",
"created_at": "2023-11-28T04:39:41Z",
"description": "不那么一样的 Java Agent 内存马",
"author": "su18",
"language": null,
"keyword": "su18"
},
{
"link": "https://github.com/BeichenDream/EfsPotato",
"name": "EfsPotato",
"created_at": "2023-03-07T06:59:27Z",
"description": "Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).",
"author": "BeichenDream",
"language": "C#",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/GodzillaPayload",
"name": "GodzillaPayload",
"created_at": "2023-02-14T09:38:20Z",
"description": null,
"author": "BeichenDream",
"language": null,
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/SharpTinyArgParser",
"name": "SharpTinyArgParser",
"created_at": "2022-12-27T08:05:38Z",
"description": null,
"author": "BeichenDream",
"language": "C#",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/GodPotato",
"name": "GodPotato",
"created_at": "2022-12-23T14:37:00Z",
"description": null,
"author": "BeichenDream",
"language": "C#",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/JDR",
"name": "JDR",
"created_at": "2022-12-05T10:55:58Z",
"description": null,
"author": "BeichenDream",
"language": "Java",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/PrintNotifyPotato",
"name": "PrintNotifyPotato",
"created_at": "2022-12-02T06:21:02Z",
"description": "PrintNotifyPotato",
"author": "BeichenDream",
"language": "C#",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/HackBrowserData",
"name": "HackBrowserData",
"created_at": "2022-11-28T15:15:33Z",
"description": "Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。",
"author": "BeichenDream",
"language": "Go",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/GodzillaMemoryShellProject.NET",
"name": "GodzillaMemoryShellProject.NET",
"created_at": "2022-11-26T14:41:38Z",
"description": null,
"author": "BeichenDream",
"language": "C#",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/ISC2022Code",
"name": "ISC2022Code",
"created_at": "2022-08-02T06:06:34Z",
"description": null,
"author": "BeichenDream",
"language": "Java",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/BeichenDream/GodzillaMemoryShellProject",
"name": "GodzillaMemoryShellProject",
"created_at": "2022-07-14T17:34:48Z",
"description": null,
"author": "BeichenDream",
"language": "Java",
"keyword": "BeichenDream"
},
{
"link": "https://github.com/phith0n/conote-docs",
"name": "conote-docs",
"created_at": "2024-10-01T02:03:22Z",
"description": "redirect to https://conote.vulhub.org",
"author": "phith0n",
"language": "HTML",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/tls_proxy",
"name": "tls_proxy",
"created_at": "2024-08-16T13:34:29Z",
"description": "A lightweight reverse proxy server that converts TLS traffic to TCP, allowing secure communication between clients and upstream servers.",
"author": "phith0n",
"language": "Go",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/conote",
"name": "conote",
"created_at": "2024-08-11T18:30:09Z",
"description": "All in one cybersecurity utility platform.",
"author": "phith0n",
"language": "JavaScript",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/go_sampler",
"name": "go_sampler",
"created_at": "2023-11-24T10:06:01Z",
"description": "A sample for Go project",
"author": "phith0n",
"language": "Go",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/lo",
"name": "lo",
"created_at": "2023-11-22T11:34:35Z",
"description": "💥 A Lodash-style Go library based on Go 1.18+ Generics (map, filter, contains, find...)",
"author": "phith0n",
"language": null,
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/vueinfo",
"name": "vueinfo",
"created_at": "2023-08-28T10:55:48Z",
"description": "Extract website information from Vue",
"author": "phith0n",
"language": "JavaScript",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/goattribute",
"name": "goattribute",
"created_at": "2023-05-03T18:42:11Z",
"description": "goattribute is a lightweight Go library that allows you to set (and get) attributes of a struct dynamically, using dot notation (e.g., `a.b.c`).",
"author": "phith0n",
"language": "Go",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/vue3-cookiecutter",
"name": "vue3-cookiecutter",
"created_at": "2023-03-23T16:35:05Z",
"description": "template for vue3 + vite",
"author": "phith0n",
"language": "SCSS",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/race-condition-playground",
"name": "race-condition-playground",
"created_at": "2023-03-18T11:38:13Z",
"description": "Playground for Race Condition attack",
"author": "phith0n",
"language": "Python",
"keyword": "phith0n"
},
{
"link": "https://github.com/phith0n/gin",
"name": "gin",
"created_at": "2022-12-24T19:46:06Z",
"description": "Gin is a HTTP web framework written in Go (Golang). It features a Martini-like API with much better performance -- up to 40 times faster. If you need smashing performance, get yourself some Gin.",
"author": "phith0n",
"language": null,
"keyword": "phith0n"
},
{
"link": "https://github.com/zhzyker/microwaveo",
"name": "microwaveo",
"created_at": "2023-11-02T01:47:22Z",
"description": "将dll exe 等转成shellcode 最后输出exe 可定制加载器模板 支持白文件的捆绑 shellcode 加密",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/Dict",
"name": "Dict",
"created_at": "2023-09-12T05:16:27Z",
"description": "一些弱口令、fuzz字典",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/Research",
"name": "Research",
"created_at": "2023-07-28T10:14:20Z",
"description": "Research analysis",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/GobyVuls",
"name": "GobyVuls",
"created_at": "2023-04-07T02:49:25Z",
"description": "Vulnerabilities of Goby supported with exploitation.",
"author": "zhzyker",
"language": "Go",
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/titan",
"name": "titan",
"created_at": "2023-01-09T02:30:51Z",
"description": "Titan: A generic user defined reflective DLL for Cobalt Strike",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/debian-media-box",
"name": "debian-media-box",
"created_at": "2022-12-14T02:40:45Z",
"description": "“Debian 小药盒”,一个用来包装 Debian 安装介质的盒子设计和介绍用的说明书。",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/linux-exploit-suggester",
"name": "linux-exploit-suggester",
"created_at": "2022-09-29T03:10:04Z",
"description": "Linux privilege escalation auditing tool",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/Log4j2Passive",
"name": "Log4j2Passive",
"created_at": "2022-07-12T09:29:07Z",
"description": "Log4j2 RCE Passive Scanner plugin for BurpSuite",
"author": "zhzyker",
"language": "Java",
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/loading",
"name": "loading",
"created_at": "2022-07-01T00:56:40Z",
"description": "A collection of highly customisable loading bars for Go CLI apps.",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/zhzyker/JNDIExploit",
"name": "JNDIExploit",
"created_at": "2022-04-19T07:50:20Z",
"description": "对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改",
"author": "zhzyker",
"language": null,
"keyword": "zhzyker"
},
{
"link": "https://github.com/lijiejie/MisConfig_HTTP_Proxy_Scanner",
"name": "MisConfig_HTTP_Proxy_Scanner",
"created_at": "2023-04-17T11:50:13Z",
"description": "The scanner helps to scan misconfigured reverse proxy servers and misconfigured forward proxy servers",
"author": "lijiejie",
"language": "Python",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/EasyPen",
"name": "EasyPen",
"created_at": "2022-08-22T12:54:41Z",
"description": "EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation",
"author": "lijiejie",
"language": "JavaScript",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/lijiejie",
"name": "lijiejie",
"created_at": "2022-04-04T15:58:41Z",
"description": null,
"author": "lijiejie",
"language": null,
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/eyes.sh",
"name": "eyes.sh",
"created_at": "2022-03-31T14:41:00Z",
"description": "Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.",
"author": "lijiejie",
"language": "HTML",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/log4j2_vul_local_scanner",
"name": "log4j2_vul_local_scanner",
"created_at": "2021-12-20T12:07:41Z",
"description": "Log4j 漏洞本地检测脚本。 Scan all java processes on your host to check whether it's affected by log4j2 remote code execution vulnerability (CVE-2021-45046)",
"author": "lijiejie",
"language": "Python",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/swagger-exp",
"name": "swagger-exp",
"created_at": "2021-03-23T06:46:21Z",
"description": "A Swagger API Exploit",
"author": "lijiejie",
"language": "JavaScript",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/idea_exploit",
"name": "idea_exploit",
"created_at": "2019-05-29T12:21:46Z",
"description": "Gather sensitive information from (.idea) folder for pentesters",
"author": "lijiejie",
"language": "Python",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/struts2_045_scan",
"name": "struts2_045_scan",
"created_at": "2017-04-06T06:19:33Z",
"description": "Struts2-045 Scanner",
"author": "lijiejie",
"language": "Python",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/ds_store_exp",
"name": "ds_store_exp",
"created_at": "2017-01-24T11:48:50Z",
"description": "A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.",
"author": "lijiejie",
"language": "Python",
"keyword": "lijiejie"
},
{
"link": "https://github.com/lijiejie/BBScan",
"name": "BBScan",
"created_at": "2015-11-13T07:41:10Z",
"description": "A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers",
"author": "lijiejie",
"language": "Python",
"keyword": "lijiejie"
},
{
"link": "https://github.com/projectdiscovery/nuclei-templates-ai",
"name": "nuclei-templates-ai",
"created_at": "2024-12-04T01:46:51Z",
"description": "Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾",
"author": "projectdiscovery",
"language": null,
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/nuclei-templates-test",
"name": "nuclei-templates-test",
"created_at": "2024-11-18T10:30:37Z",
"description": "Nuclei Templates test",
"author": "projectdiscovery",
"language": null,
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/defcon32",
"name": "defcon32",
"created_at": "2024-08-10T20:20:33Z",
"description": "Defcon 32 Workshop setup and info",
"author": "projectdiscovery",
"language": null,
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/actions",
"name": "actions",
"created_at": "2024-08-01T17:26:30Z",
"description": "ProjectDiscovery's Composite Actions",
"author": "projectdiscovery",
"language": "Shell",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/goleak",
"name": "goleak",
"created_at": "2024-07-29T21:42:01Z",
"description": "Goroutine leak detector",
"author": "projectdiscovery",
"language": "Go",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/tunnelx",
"name": "tunnelx",
"created_at": "2024-07-12T15:19:31Z",
"description": "TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic.",
"author": "projectdiscovery",
"language": "Go",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/urlfinder",
"name": "urlfinder",
"created_at": "2024-04-30T13:41:12Z",
"description": "A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.",
"author": "projectdiscovery",
"language": "Go",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/machineid",
"name": "machineid",
"created_at": "2024-02-26T14:39:38Z",
"description": "Get the unique machine id of any host (without admin privileges)",
"author": "projectdiscovery",
"language": "Go",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/tldfinder",
"name": "tldfinder",
"created_at": "2024-01-30T16:27:23Z",
"description": "A streamlined tool for discovering private TLDs for security research.",
"author": "projectdiscovery",
"language": "Go",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/projectdiscovery/go-smb2",
"name": "go-smb2",
"created_at": "2024-01-29T17:49:59Z",
"description": "SMB2/3 client library written in Go.",
"author": "projectdiscovery",
"language": "Go",
"keyword": "projectdiscovery"
},
{
"link": "https://github.com/HavocFramework/community-plugins",
"name": "community-plugins",
"created_at": "2024-08-03T17:42:20Z",
"description": "Repository for community provided Havoc plugins",
"author": "HavocFramework",
"language": null,
"keyword": "HavocFramework"
},
{
"link": "https://github.com/HavocFramework/Website",
"name": "Website",
"created_at": "2022-11-17T18:45:29Z",
"description": "source for https://havocframework.com",
"author": "HavocFramework",
"language": "HTML",
"keyword": "HavocFramework"
},
{
"link": "https://github.com/HavocFramework/.github",
"name": ".github",
"created_at": "2022-09-30T16:01:23Z",
"description": null,
"author": "HavocFramework",
"language": null,
"keyword": "HavocFramework"
},
{
"link": "https://github.com/HavocFramework/havoc-py",
"name": "havoc-py",
"created_at": "2022-09-11T20:07:26Z",
"description": "Havoc python api",
"author": "HavocFramework",
"language": "Python",
"keyword": "HavocFramework"
},
{
"link": "https://github.com/HavocFramework/Havoc",
"name": "Havoc",
"created_at": "2022-09-11T13:21:16Z",
"description": "The Havoc Framework",
"author": "HavocFramework",
"language": "Go",
"keyword": "HavocFramework"
},
{
"link": "https://github.com/HavocFramework/Talon",
"name": "Talon",
"created_at": "2022-09-11T02:23:22Z",
"description": "(Demo) 3rd party agent for Havoc ",
"author": "HavocFramework",
"language": "C",
"keyword": "HavocFramework"
},
{
"link": "https://github.com/HavocFramework/Modules",
"name": "Modules",
"created_at": "2022-09-08T14:45:08Z",
"description": "Modules used by the Havoc Framework",
"author": "HavocFramework",
"language": "C",
"keyword": "HavocFramework"
}
]

View File

@ -1,122 +1,102 @@
[
{
"title": "安全通告 - 涉及华为全屋音乐系统产品的路径穿越漏洞",
"pubDate": "2024-12-11T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-ptvihhms-91f7c6fa-cn",
"description": null
"title": " 安全预警-华为E585设备web server模块漏洞 ",
"pubDate": "2026-03-25T16:27:29",
"link": "www.huawei.com/cn/psirt/security-advisories/2012/hw-198237"
},
{
"title": "安全通告 - 华为全屋音乐系统路径穿越漏洞",
"pubDate": "2024-06-19T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-ptvihhms-20747ba3-cn",
"description": null
"title": " 安全通告 - 华为PC产品存在认证绕过漏洞 ",
"pubDate": "2026-03-25T16:27:29",
"link": "www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-20250325-01-pc-cn"
},
{
"title": "安全通告 - 涉及部分华为家庭路由器的连接劫持漏洞",
"pubDate": "2024-06-19T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-chvishhr-d616b19e-cn",
"description": null
"title": " 安全通告 - 涉及华为全屋音乐系统产品的路径穿越漏洞 ",
"pubDate": "2026-03-25T16:27:27",
"link": "www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-ptvihhms-91f7c6fa-cn"
},
{
"title": "安全通告 - 涉及华为部分家庭路由产品的连接劫持漏洞",
"pubDate": "2024-04-24T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-chvishhr-d50dedde-cn",
"description": null
"title": " 安全预警 - 涉及华为部分产品的缓冲区错误漏洞 ",
"pubDate": "2026-03-25T16:27:26",
"link": "www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180418-01-enum-cn"
},
{
"title": "安全通告 - 涉及华为智能音箱部分产品的内存溢出漏洞",
"pubDate": "2024-04-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-samovishss-28e21e39-cn",
"description": null
"title": " 安全预警 - CPU漏洞“Meltdown”和“Spectre” ",
"pubDate": "2026-02-25T16:59:51",
"link": "www.huawei.com/cn/psirt/security-advisories/2018/huawei-sa-20180106-01-cpu-cn"
},
{
"title": "安全通告 - 涉及华为PC部分产品的内存缓冲区边界操作限制不当漏洞",
"pubDate": "2024-04-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn",
"description": null
"title": " 安全通告 - 涉及华为EnzoH产品的系统命令注入漏洞 ",
"pubDate": "2025-07-23T17:08:33",
"link": "www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-OCIViHEP-1bcbfffa"
},
{
"title": "安全通告 - 涉及华为终端PC部分产品接口权限控制不当的漏洞",
"pubDate": "2024-04-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-iiacviahpp-71ce77ee-cn",
"description": null
"title": " 安全通告 - 涉及华为EnzoH产品的系统命令注入漏洞 ",
"pubDate": "2025-07-23T15:28:50",
"link": "www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-OCIViHEP-cn"
},
{
"title": "安全通告 - 涉及华为终端PC部分产品异常条件检查不当的漏洞",
"pubDate": "2024-04-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvticfuoec-8ffde288-cn",
"description": null
"title": " 安全通告 - 涉及华为EnzoH产品的系统命令注入漏洞 ",
"pubDate": "2025-07-23T14:18:29",
"link": "www.huawei.com/cn/psirt/security-advisories/2025/huawei-sa-OCIViHEP-e73ab538"
},
{
"title": "安全通告 - 涉及华为终端PC部分产品对参数长度不一致的处理不当漏洞",
"pubDate": "2024-04-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-iholpiiahpp-0ab7d6db-cn",
"description": null
"title": " 安全预警 - 涉及部分华为产品的三个缓冲区溢出漏洞 ",
"pubDate": "2025-06-30T23:46:31",
"link": "www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171108-02-http-cn"
},
{
"title": "安全通告 - 涉及华为终端PC部分产品接口权限控制不当的漏洞",
"pubDate": "2024-04-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-voiiaciahpp-6376e0c7-cn",
"description": null
"title": " 安全预警 - 华为产品存在七层HTTP Chunked报文解析漏洞 ",
"pubDate": "2025-02-11T15:28:02",
"link": "www.huawei.com/cn/psirt/security-advisories/2016/huawei-sa-20160301-01-http-cn"
},
{
"title": "安全通告 - 涉及华为终端智慧屏部分产品的身份认证绕过漏洞",
"pubDate": "2023-12-06T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-ibvishssp-4bf951d4-cn",
"description": null
"title": " 安全预警 - 某些华为产品中的CGI应用安全漏洞 ",
"pubDate": "2025-02-10T11:01:55",
"link": "www.huawei.com/cn/psirt/security-advisories/2017/huawei-sa-20171129-01-httpproxy-cn"
},
{
"title": "安全通告 - 涉及华为路由器产品的流量劫持漏洞",
"pubDate": "2023-05-17T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-thvihr-7015cbae-cn",
"description": null
"title": " 安全预警 - 涉及华为部分产品的HTTP请求解析不一致漏洞 ",
"pubDate": "2025-02-10T11:01:17",
"link": "www.huawei.com/cn/psirt/security-advisories/2021/huawei-sa-20210120-01-http-cn"
},
{
"title": "安全通告 - 涉及华为某打印机产品的系统命令注入漏洞",
"pubDate": "2023-04-26T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-sciviahpp-6bcddec5-cn",
"description": null
"title": " 安全通告 - 华为某产品存在权限提升漏洞 ",
"pubDate": "2025-01-10T15:55:33",
"link": "www.huawei.com/cn/psirt/security-advisories/2022/huawei-sa-20220216-01-priesc-cn"
},
{
"title": "安全通告 - 涉及华为HiLink AI Life产品的身份认证绕过漏洞",
"pubDate": "2023-04-26T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-cn",
"description": null
"title": " 安全预警 – 华为E5756s产品存在WebUI接口鉴权机制不完善漏洞 ",
"pubDate": "2024-12-29T01:09:01",
"link": "www.huawei.com/cn/psirt/security-advisories/2015/hw-441176"
},
{
"title": "安全通告 - 涉及华为某打印机产品的对输入的错误解析类漏洞",
"pubDate": "2023-04-26T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-moivihp-2f201af9-cn",
"description": null
"title": " 安全预警 - FusionAccess产品缓冲区溢出漏洞 ",
"pubDate": "2024-12-29T01:09:01",
"link": "www.huawei.com/cn/psirt/security-advisories/2015/hw-453536"
},
{
"title": "安全通告 - 涉及华为某打印机产品的对输入的错误解析类漏洞",
"pubDate": "2023-04-26T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-moivihp-73cabdde-cn",
"description": null
"title": " 安全预警 - 华为移动宽带产品中存在的DoS安全漏洞 ",
"pubDate": "2024-12-29T01:08:10",
"link": "www.huawei.com/cn/psirt/security-advisories/2015/hw-450878"
},
{
"title": "安全通告 - 涉及华为某音箱产品的越界写入漏洞",
"pubDate": "2023-03-01T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-oobwviatp-89e403d4-cn",
"description": null
"title": " 安全预警 - 华为手机FRP绕过安全漏洞 ",
"pubDate": "2024-12-29T01:08:10",
"link": "www.huawei.com/cn/psirt/security-advisories/2016/huawei-sa-20161207-01-smartphone-cn"
},
{
"title": "关于E5573Cs-322产品存在拒绝服务漏洞的声明",
"pubDate": "2023-02-10T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-notices/2021/huawei-sn-20230210-01-dos-cn",
"description": null
"title": " 安全预警 - 华为FusionAccess的命令注入漏洞 ",
"pubDate": "2024-12-29T01:08:10",
"link": "www.huawei.com/cn/psirt/security-advisories/2016/huawei-sa-20161130-01-ldap-cn"
},
{
"title": "安全通告 - 涉及华为儿童智能手表(Simba-AL00)的身份认证绕过漏洞",
"pubDate": "2023-02-08T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-iabvithcswsa-c385b2dc-cn",
"description": null
"title": " 安全预警 - 华为WLAN AC产品存在mDNS消息处理不当漏洞 ",
"pubDate": "2024-12-29T01:08:10",
"link": "www.huawei.com/cn/psirt/security-advisories/2015/hw-453514"
},
{
"title": "安全通告 - 涉及华为全屋智能某软件的不正确的权限分配漏洞",
"pubDate": "2023-02-01T00:00:00",
"link": "//www.huawei.com/cn/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1556afc2-cn",
"description": null
"title": " 安全预警 - FusionAccess产品输入校验漏洞 ",
"pubDate": "2024-12-29T01:08:10",
"link": "www.huawei.com/cn/psirt/security-advisories/2015/hw-453538"
}
]

View File

@ -1,72 +1,72 @@
[
{
"guid": "https://forum.butian.net/share/3992",
"title": "一次窃取程序的恶意样本分析",
"description": "一次窃取程序的恶意样本分析",
"guid": "https://forum.butian.net/share/4870",
"title": "XXL-Job GlueFactory classCache 跨任务类残留漏洞",
"description": "XXL-Job GlueFactory classCache 跨任务类残留漏洞",
"source": "subject",
"pubDate": "2025-01-03 10:00:00"
"pubDate": "2026-05-12 09:00:01"
},
{
"guid": "https://forum.butian.net/share/3993",
"title": "Sodinokibi详细分析",
"description": "一、基本信息\r\nREvil,也被称为Sodinokibi或简称Sodin,它在2019年4月被首次发现。这种恶意软件会在感染了用户的电脑后加密文件,并删除任何留下的赎金提示信息。这些消息会告知受害者必须支付一...",
"guid": "https://forum.butian.net/share/4860",
"title": "ActiveMQ CVE-2026-34197 漏洞分析与利用详解",
"description": "来学习一下这个据说由 ai 大人发现的存在 13 年之久的漏洞。",
"source": "subject",
"pubDate": "2025-01-03 09:00:00"
"pubDate": "2026-05-11 09:00:03"
},
{
"guid": "https://forum.butian.net/share/4006",
"title": "代码审计 - MCMS v5.4.1 0day挖掘",
"description": "记一次 MCMS v5.4.1 代码审计,编号为 CVE-2024-42990&CVE-2024-42991。本文由笔者首发于先知社区的技术文章板块:https://xz.aliyun.com/t/16630",
"guid": "https://forum.butian.net/share/4813",
"title": "BADUSB的制作以及关于解决BADUSB输入法和大小写问题",
"description": "现在有很多badusb制作的相关文章,以及解决输入法问题的文章,但是我没能找到能够使badusb在所有情况都能成功运行的方法,经过我的研究,我发现了以下的方法能够让badusb在所有情况下都能使用。",
"source": "subject",
"pubDate": "2025-01-02 10:00:00"
"pubDate": "2026-05-08 09:00:01"
},
{
"guid": "https://forum.butian.net/share/3991",
"title": "lighttpd溢出漏洞构造ROP链",
"description": "前几天打了下强网杯决赛,想着分享一下思路",
"guid": "https://forum.butian.net/share/4851",
"title": "从POC到EXP:从0基础到v8 CVE-2021-38003复现",
"description": "从POC到EXP:从0基础到v8 CVE-2021-38003复现",
"source": "subject",
"pubDate": "2025-01-02 09:00:01"
"pubDate": "2026-04-29 15:17:30"
},
{
"guid": "https://forum.butian.net/share/4017",
"title": "文件读取漏洞实战利用",
"description": "实战场景下的两个任意文件读取漏洞利用。",
"guid": "https://forum.butian.net/share/4843",
"title": "Psexec是怎么工作的?Psexec与官方服务端组件PsexeSvc.exe的交互",
"description": "本文详细讲解psexec时怎么和PsexeSvc.exe交互,初始化,然后建立互相通讯的管道的,以及psexec和PsexeSvc.exe交互实现的python实现,最后讲解了psexec防御技巧。",
"source": "subject",
"pubDate": "2024-12-31 10:00:02"
"pubDate": "2026-04-24 09:00:01"
},
{
"guid": "https://forum.butian.net/share/3970",
"title": "挖矿病毒处置总结",
"description": "处理过的挖矿病毒隐藏自身的方式总结及处置方法总结",
"guid": "https://forum.butian.net/share/4841",
"title": "Android移动安全第六章_UI欺骗与钓鱼",
"description": "Android 的窗口系统允许多个 App 的界面叠加显示,这个设计本身是为了多任务体验,但也给 UI 欺骗提供了条件",
"source": "subject",
"pubDate": "2024-12-31 09:00:00"
"pubDate": "2026-04-23 09:56:31"
},
{
"guid": "https://forum.butian.net/share/3968",
"title": "一些vmpwn的详细总结",
"description": "总结一些常见vmpwn题的打法,数据越界泄露libc,通过偏移数据处理来得到危险函数地址等常见漏洞,会结合两道例题来进行讲解",
"guid": "https://forum.butian.net/share/4840",
"title": "Android移动安全第五章_WebView安全",
"description": "前四章围绕 Android 原生组件展开,这一章进入 Web 领域——WebView 把浏览器引擎嵌入了 App,也把 Web 的攻击面带了进来。",
"source": "subject",
"pubDate": "2024-12-30 10:00:01"
"pubDate": "2026-04-17 09:00:00"
},
{
"guid": "https://forum.butian.net/share/3955",
"title": "样本分析:formbook 恶意软件浅析",
"description": "样本\r\nIOC\r\nMD5:749dfc8bf52422ce77ed59a60c2f395e\r\nSHA1:d0593187a473a19564a67819050023c9144b30c2\r\nSHA256: 5c205cffc83f7be274773fb1c3aa356b29d97e4d62a83e79c5fd52eadc3ed695\r\n概述\r\n语言:C...",
"guid": "https://forum.butian.net/share/4842",
"title": "【病毒分析】深度剖析粉丝投稿:海莲花APT超级间谍组织最新免杀样本(从白加黑落地到定制化RUST远控)",
"description": "一、背景概述与海莲花组织简介\n在深入剖析本次的恶意样本之前,我们有必要先了解本次攻击事件的幕后黑手:海莲花(Ocean Lotus),在安全业界也被称为 APT32 或 Canvas Assassin。\n自 2012 年首次...",
"source": "subject",
"pubDate": "2024-12-30 09:00:01"
"pubDate": "2026-04-14 09:36:01"
},
{
"guid": "https://forum.butian.net/share/4013",
"title": "Vulnserver.exe漏洞分析及利用",
"description": "本章为笔者在学习二进制安全过程中的学习记录,vulnserver为公开的二进制漏洞的练习程序,本章节的内容为vulnserver.exe的漏洞分析及复现,主要通过windbg和ida结合进行分析。因为vulnserver存在多种调试漏洞,本文主要使用trun参数进行漏洞分析及利用。",
"guid": "https://forum.butian.net/share/4836",
"title": "Vue新攻击面-动态路由实战狩猎",
"description": "本文实战案例通过学习0xsdeo师傅文章学习而来,建议通读0xsdeo师傅公众号文章了解动态路由这一攻击面,分享一部分简单基础场景Hook案例,简单的调试往往能打开更多的攻击面。",
"source": "subject",
"pubDate": "2024-12-27 10:00:01"
"pubDate": "2026-04-14 09:30:10"
},
{
"guid": "https://forum.butian.net/share/3954",
"title": "ios下某浏览器小说去广告分析与Hook",
"description": "支持正版,从我做起,仅供学习!!",
"guid": "https://forum.butian.net/share/4835",
"title": "「JavaWeb审计盲点」List 集合误区:批量操作下的权限逃逸",
"description": "本文将深入剖析 List 集合在批量查询、批量更新、批量导出等场景下的典型越权模式。这些风险并非源于明显的代码缺陷,而是藏在\"合理的业务逻辑\"与\"容器特性的误用\"之间——属于最难被自动化工具发现、却最易被攻击者利用的 Corner Case。",
"source": "subject",
"pubDate": "2024-12-27 09:00:02"
"pubDate": "2026-04-09 09:00:01"
}
]

122
resources/JSON/seebug.json Normal file
View File

@ -0,0 +1,122 @@
[
{
"title": "GLiGuard:面向大语言模型安全防护的模式条件分类方法",
"link": "https://paper.seebug.org/3485",
"description": "作者:Urchade Zaratiana, Mary Newhauser, George Hurn-Maloney, Ash Lewis 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2605.07982v1 摘要 保障大语言模型(LLM)输出安全合规、符合政策要求,需要能跨多安全维度实时扩展的内容审核机制。然而,当前最优的安全护栏模型均基于70亿–27...",
"pubDate": "Mon, 11 May 2026 16:40:13 +0800",
"guid": "https://paper.seebug.org/3485",
"category": "AI安全"
},
{
"title": "基于大语言模型的 AI 智能体安全威胁与防御系统性综述——分层攻击面框架",
"link": "https://paper.seebug.org/3484",
"description": "作者:Kexin Chu 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/pdf/2604.23338v2 摘要 智能体AI系统可跨多会话规划、保留记忆、调用外部工具并与对等智能体协同,无状态大语言模型则不具备这些能力。现有安全分类体系按攻击类型(如提示注入、越狱)划分威胁,却未说明脆弱的架构组件或威胁显现的时间尺度。本文直接解决这些结构性问题,提出分层攻击面模型(...",
"pubDate": "Sat, 09 May 2026 16:53:56 +0800",
"guid": "https://paper.seebug.org/3484",
"category": "AI安全"
},
{
"title": "ReTokSync:面向生成式语言隐写的自同步分词消歧方法",
"link": "https://paper.seebug.org/3481",
"description": "作者:Yaofei Wang, Rui Wang, Weilong Pang等 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2604.25486v1 摘要 生成式语言隐写(GLS)通过将秘密信息嵌入自然语言生成过程实现隐蔽通信。然而在实际部署中,GLS易受分词歧义影响:相同的表层文本在接收端可能被重新分词为不同的token序列,破坏通信双方共享的解码状...",
"pubDate": "Fri, 08 May 2026 16:42:48 +0800",
"guid": "https://paper.seebug.org/3481",
"category": "AI安全"
},
{
"title": "素域 PINI:后量子 NTT 掩码的机器验证合成定理",
"link": "https://paper.seebug.org/3480",
"description": "作者:Ray Iskander,Khaled Kirah 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/abs/2604.25878v1 摘要 本文是后量子密码掩码数论变换(NTT)硬件形式化验证分析系列论文的第六篇。第一篇论文[1]建立了 QANARY 平台的结构依赖分析,第二篇论文[2]量化了部分 NTT 掩码下的安全裕度。布尔掩码的合成理论通过无干扰(NI)...",
"pubDate": "Wed, 06 May 2026 16:44:36 +0800",
"guid": "https://paper.seebug.org/3480",
"category": "AI安全"
},
{
"title": "Google DeepMind:AI 智能体陷阱",
"link": "https://paper.seebug.org/3479",
"description": "作者:Matija Franklin, Nenad Tomašev等 译者:知道创宇404实验室翻译组 原文链接:https://blog.qiaomu.ai/api/images/document/2026/04/603f0cae8cd8ab94-ai-agent-trap.pdf 摘要 自主AI智能体日益在网络中自主行动,它们面临一种全新挑战:信息环境本身。由此产生了一个关键安全漏洞,我们称之...",
"pubDate": "Fri, 24 Apr 2026 16:54:27 +0800",
"guid": "https://paper.seebug.org/3479",
"category": "AI安全"
},
{
"title": "合法终端管理软件遭滥用:疑似银狐攻击事件分析与溯源",
"link": "https://paper.seebug.org/3478",
"description": "作者:知道创宇高级威胁情报团队 一、事件概述 近期,我们在客户现场应急响应中排查到一起新型攻击事件。攻击者伪造常用工具安装包诱导执行,随即部署一款带有合法数字签名的终端管理软件。经技术溯源确认,该程序具备主机信息收集、远程控制等完整恶意能力,其 C2 基础设施与 “银狐” 高度关联。由于合法数字签名的天然 “免杀” 特性,该恶意程序可轻易绕过主流杀毒软件检测,实现隐蔽入侵与长期控制。 银狐简介 银...",
"pubDate": "Wed, 15 Apr 2026 03:31:00 +0800",
"guid": "https://paper.seebug.org/3478",
"category": "威胁情报"
},
{
"title": "SkillTrojan:针对基于技能的智能体系统的后门攻击",
"link": "https://paper.seebug.org/3477",
"description": "作者:Yunhao Feng, Yifan Ding, Yingshui Tan等 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2604.06811v1/https://arxiv.org/html/2604.06811v1 摘要 基于技能的智能体系统通过组合可复用技能完成复杂任务,在提升模块化与可扩展性的同时,引入了尚未被充分研究的安全攻击面。本文提...",
"pubDate": "Thu, 09 Apr 2026 08:26:00 +0800",
"guid": "https://paper.seebug.org/3477",
"category": "AI安全"
},
{
"title": "GUARD‑SLM:面向小语言模型、基于令牌激活的越狱攻击防御方法",
"link": "https://paper.seebug.org/3476",
"description": "作者:Md. Jueal Mia1, Joaquin Molto1, Yanzhao Wu1, M. Hadi Amini 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2603.28817v1/https://arxiv.org/html/2603.28817v1 摘要 小语言模型(SLM)正成为大语言模型(LLM)高效且经济可行的替代方案,在计算成本...",
"pubDate": "Fri, 03 Apr 2026 02:48:00 +0800",
"guid": "https://paper.seebug.org/3476",
"category": "AI安全"
},
{
"title": "静默颠覆:通过卫星系统供应链植入物实施的传感器欺骗攻击",
"link": "https://paper.seebug.org/3475",
"description": "作者:Jack Vanlyssel, Gruia-Catalin Roman, Afsah Anwar 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2603.10388v1/https://arxiv.org/html/2603.10388v1 摘要 欺骗攻击是地面系统最具破坏性的网络威胁之一,而在太空中这类威胁愈发危险——卫星难以在轨维修,且运营方依...",
"pubDate": "Tue, 24 Mar 2026 09:47:00 +0800",
"guid": "https://paper.seebug.org/3475",
"category": "AI安全"
},
{
"title": "增强网络入侵检测系统:一种抵御对抗攻击的多层集成方法",
"link": "https://paper.seebug.org/3474",
"description": "作者:Nasim Soltani, Shayan Nejadshamsi等 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2603.10413v1/https://arxiv.org/html/2603.10413v1 摘要 对抗样本会对机器学习(ML)算法构成严重威胁。若被用于操控基于机器学习的网络入侵检测系统(NIDS)行为,将危及网络安全。本研究旨...",
"pubDate": "Mon, 23 Mar 2026 08:31:00 +0800",
"guid": "https://paper.seebug.org/3474",
"category": "AI安全"
},
{
"title": "CUDA Agent:面向高性能 CUDA 内核生成的大规模智能体强化学习",
"link": "https://paper.seebug.org/3473",
"description": "作者:Weinan Dai, Hanlin Wu, Qiying Yu等 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2602.24286v1/https://arxiv.org/html/2602.24286v1 摘要 GPU内核优化是现代深度学习的基础,但仍是一项高度专业化的任务,需要深厚的硬件专业知识。尽管大语言模型(LLM)在通用编程任务中表现...",
"pubDate": "Tue, 17 Mar 2026 09:50:00 +0800",
"guid": "https://paper.seebug.org/3473",
"category": "AI安全"
},
{
"title": "Unmasking SilverFox’s New Trends: Decoding Evasion Tactics, Domain Impersonation, and Mass-Generated Fake Software",
"link": "https://paper.seebug.org/3472",
"description": "Author: Knownsec 404 Advanced Threat Intelligence Team I. Introduction SilverFox has become one of the most active cyber threats in recent years, targeting managerial and finance staff in organization...",
"pubDate": "Fri, 13 Mar 2026 08:30:00 +0800",
"guid": "https://paper.seebug.org/3472",
"category": "威胁情报"
},
{
"title": "基于图像的提示注入:通过视觉嵌入的对抗性指令劫持多模态大语言模型",
"link": "https://paper.seebug.org/3471",
"description": "作者:Neha Nagaraja, Lan Zhang, Zhilong Wang 译者:知道创宇404实验室翻译组 原文链接:https://arxiv.org/html/2603.03637v1/https://arxiv.org/html/2603.03637v1 摘要:多模态大语言模型(MLLMs)融合视觉与文本能力赋能各类应用,但这种融合也引入了新的安全漏洞。本文研究基于图像的提示注入(...",
"pubDate": "Wed, 11 Mar 2026 01:29:00 +0800",
"guid": "https://paper.seebug.org/3471",
"category": "AI安全"
},
{
"title": "虚假 OpenClaw 安装程序如何传播 GhostSocks 恶意软件",
"link": "https://paper.seebug.org/3470",
"description": "作者:Jai Minton, Ryan Dowd 原文链接:https://www.huntress.com/blog/openclaw-github-ghostsocks-infostealer/https://www.huntress.com/blog/openclaw-github-ghostsocks-infostealer 摘要 信息窃取型恶意软件是针对面向公众系统发起严重攻击的初始访问...",
"pubDate": "Tue, 10 Mar 2026 01:45:00 +0800",
"guid": "https://paper.seebug.org/3470",
"category": "情报分析"
},
{
"title": "当 AI Agent 拥有系统权限:OpenClaw 安全风险全景分析",
"link": "https://paper.seebug.org/3469",
"description": "作者:知道创宇积极防御实验室 完整的 OpenClaw 安全实践 Skill、自动化审计工具已在 GitHub 开源。项目地址:https://github.com/knownsec/openclaw-security/https://github.com/knownsec/openclaw-security 一、背景说明 随着 AI Agent 技术的快速演进,具备自动化决策与自主执行能力的开源...",
"pubDate": "Fri, 06 Mar 2026 07:34:00 +0800",
"guid": "https://paper.seebug.org/3469",
"category": "AI安全"
}
]

View File

@ -1,434 +1,434 @@
{
"银行测试": [
{
"title": "一家银行最多8个APP!功能交叉重叠,是时候该瘦身了……",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9pdEXg9ndAl0MFtGwjAIFDaUAVAjIQYEidaZuDz_arhmjmFoX0IJWAlK_RSsxC-a_WwYrBC0fq0DAIfm6-VjGxT7iUZUFc7ayCamV0DmBzbQJxrgA7VEQFXUdfP0PDPn4nyq8w87zG6V3DTSYGuHLzSPqO2bQJfCmUi4QowZHOUxe0WC6Sbi7DA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "“你想买理财产品的话,请先下载注册我们银行的APP.”每当走进银行,这样的场景极为常见.近年来,为了增加获客,手机APP成...",
"author": "中国网财经",
"pubDate": "2019-06-14 17:18:12"
},
{
"title": "美联储最新消息!要求银行多备“家底”,特别是→",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9kSSRXd1XFKPwocVVJreq6in3TeBwZ25Awfwv10-chlDmTojPRE7dlo1wYntkNWk2Bh8z94TkhgOu8C_ZPLG2OmAE2xubqILJygikaeFMks7LuDkq6vF4lAHrTHfSxy_FJQh1ZBUIvg45BqPoEhg_I4rMX8TnYP70PEJMcaYkMAACYioxHkzTmA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "扩大美联储年度银行压力测试范围等. 美国银行业游说团体:更高的资本要求将推升借贷成本今年3月以来,美国硅谷银行、签名银行...",
"author": "央视财经",
"pubDate": "2023-07-12 16:15:05"
},
{
"title": "工商银行福建自贸试验区平潭片区分行、福州分行、福州鼓楼支行被处罚 累计罚款130万元",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd96gjASBlwUFSqWrJq9alN4-cD8UKdfyYRmq92d8CN3CH0g3HWxZYWpx91CwKZQf3SmD133jeXS9hC2mzDL34Zuo8bNtdNkcws4MRmO4xmHoeLVGZTzAewMfnjvxIWNdB9yWSvDNh2HojXkNjQdMv7Kq6x9bZVTQhwdEyfatc_3ZajotuuiAmOIg..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd92DsyGSRG_IpsUaCADzWxXjZ8_3_TYeUdWXC7cZ6IQBGhTzP-Fh-wWVKwjgKGPtzmHuVPs0lo3amUzRBeyWsrJ7aKyyMiGla4pvThK55Q4WVaCNNPzSbPpReiuAiwOH9KbEh18KPQzkTGJlXXhCgvcWbAIfmoD-lQngZIX6YwnEejotuuiAmOIg..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "近日,福建省银保监局对工商银行福建自贸试验区平潭片区分行、福州分行、福州鼓楼支行开出罚单,罚款合计130万元,4名当事人被...",
"author": "观八闽",
"pubDate": "2022-02-22 15:30:56"
},
{
"title": "央行出手!支付宝们正式被“收编”了!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9ChmC_jRydxQnWP5xI0ohHv-rfwQuX5ncDx-0miHPf8dlE17ianZoX4mNlNXRqlmWhnN00FW01mQJ6Cq1_wcjAYgOP1R5cvAKAT1IsxuN43PU0aaIM5G9I4iMeicHsZmaWvJTr0FR9KydodjkDBa9gC1HBpiJyORkZiyUIOrzjX2q3X8EKMKOIA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9q7bb5rvJLvSK3xoKz0f873XbJWkJKAlk8lNHYmPWmHIlTLcgHtsDsWYEHu76vEk6vKC7eO0MGWTxV23GrIFx_hHbT3NqH1tJqO-jiSInhD0xCH8sleLVaGurGU6Gb5D2I1za94dA5pJgoLsy_TpvtYlVWDP6xrDDJ1K1cqA-1XI5eBgmN3LoYQ..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "根据央行要求,目前,已有20余家支付机构和银行完成了接入网联平台的工作.央行副行长范一飞此前曾强调,网联平台的目的即提高...",
"author": "人民网",
"pubDate": "2017-10-17 11:43:30"
},
{
"title": "美联储最新消息!要求银行多备“家底”,特别是→",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9BPIo8QLoEC_lu8ScaJKxGD9-S8LsNyq7vhHn8WWk2filE7c5ZGkw1anPy5RoRMOOlXXEFpWD2-z4uzbjvbThRtFLBq6sqoGAJvvqQJrhGRvkyoIUFinrOSHMqyTBAhaAFtP89LGcHXY_lnpd9I5uHN1NMiWi3-nXU3s-y5L509bm0CtGSSkZQQ..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"description": "扩大美联储年度银行压力测试范围等. 美国银行业游说团体:更高的资本要求将推升借贷成本今年3月以来,美国硅谷银行、签名银行...",
"author": "央视财经",
"pubDate": "2023-07-12 16:15:05"
},
{
"title": "平安银行、宁波银行等试水支付宝信用卡取现功能,缘何引发舆论争议?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9RzvTwRtWYY46SVdzi5AK7vdYtVIWxOxZDKCkSE_i9yyqMMZ20cZ1tet8xLzKyroEO77zXjakm4E3k7tbo1snKjWXKtdWcFdt26OsIF4Ogndp24w1YN_8XQJSaYhp-sotUP3nDUA-XmPK_uM8XOFLwFtxtKAK1D2MJV1GTpNItLf1AfaFW2DefQ..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"description": "话题#微信支付宝测试信用卡取现#与#有银行试水信用卡取现:年利率超18%#分别登上微博、头条热搜榜.(来源:人民众云)(来源...",
"author": "人民网舆情数据中心",
"pubDate": "2022-08-31 19:55:10"
},
{
"title": "支付宝微信拉响警报!40多家银行联合起来,要“抢”你手机",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9ChmC_jRydxQnWP5xI0ohHv-rfwQuX5ncDx-0miHPf8dlE17ianZoX1kv60Nl9NUocyG5omBgAzqyhSXI3oGv5MBVM7XsbV8--xNXP0IDjc51i4F8EWCyrCbsgIKyI2dqFslqoXQHyBbuzxSAZWAGtDRe_KXOlvVhQtlGooQ6xYr6zvkPgoArRQ..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"description": "招商银行等全国性商业银行,另有近60家商业银行正在加紧测试并即将开通,年内其他主要银行也将基本实现全部开通.受理方面,全...",
"author": "人民网",
"pubDate": "2017-05-29 08:02:43"
},
{
"title": "美国又一银行倒闭!美联储怎么办?中国受影响大吗?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9ItfcIcKoWlLm8Rr_34Fda7N0QENXqvUdpC8uDCUMyP3o8kt-vjbwvo2jDC738B-2xWbdEKfY1O6EZpU8fDyyy7-FVN_6GvWw2wVnWCV_xKj180rrEYdldMUAvPcTu1jIlcL4-eY0sAdHck81TMJpkYwOOxFnW03FOTV2DXA7Hpte0WC6Sbi7DA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"description": "规定资产超过500亿美元的银行必须参加美联储年度压力测试,旨在通过更严格监管避免2008年国际金融危机重演.特朗普上台后,将...",
"author": "新华网思客",
"pubDate": "2023-05-05 13:51:35"
},
{
"title": "银行月榜:大行拼命玩“七夕”,微博为何失宠了?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9RzvTwRtWYY46SVdzi5AK7vdYtVIWxOxZDKCkSE_i9yyqMMZ20cZ1ten6BVrWcbLSaeG0DGxoah32zYL2R28r8t_uFYTgU5UCXDV-fA0eAtaVLxBnrPQwq9dyFJC5MTAQPUh92kuYx0dz_OkgxIVMN4NNG14Jxnxyi0p0l5-cLjSE8RsmObDbtQ..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"description": "新媒体管家中国银行业新媒体8月排行榜,进入总榜TOP10的银行分别是:中国工商银行、中国银行、中国建设银行、上海浦东发展银...",
"author": "人民网舆情数据中心",
"pubDate": "2017-09-14 08:16:46"
},
{
"title": "【月榜】12月银行新媒体:工行成功问鼎 上海银行挤进前10",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsVOz8NzTUl--VgrFeYQugDlpmUNjkvxgvOqXyesYm_zYIpLvlCDM0AmAb0chvsD2fNyhCa8My6Bb-qjlExxIFttyhUQaZsCVtv3xb71Sa6r9ZTma9nR-jBnBcq7_vYLV53c1tpARGY_wMmV95nnREF-XH7MSZGz6MxI276v7hj8etuA22uSlmmQLGdQeR7pI3SJgbbWFN17kjfqrSL_2PJVIhAsjXs3f_DlIopi7j_Sok8JIrH16vSVXuSIe89MhwiZqwg0yoRFw.&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DM67_A4ZyUtWNjS29GSUUdOVgrFeYQugDlpmUNjkvxgvOqXyesYm_zYIpLvlCDM0AmAb0chvsD2fNyhCa8My6Bb-qjlExxIFttyhUQaZsCVtv3xb71Sa6r9ZTma9nR-jBnBcq7_vYLV53c1tpARGY_wMmV95nnREF-XH7MSZGz6MxI276v7hj8etuA22uSlmmQLGdQeR7pI30zjJyWTb8ve3hOTaUWGAKQSSqPOKFzMb59qkpZokx0ZWOKbIAfIeFgs_J6eeUEqgiZqwg0yoRFw.&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "本榜单共对部分国内银行12月份的新媒体综合能力进行考核,涵盖包括政策性银行、邮政储蓄银行、国有商业银行、股份制商业银行、...",
"author": "人民网舆情数据中心",
"pubDate": "2017-01-12 17:06:08"
},
{
"title": "警惕 犯罪分子用美容卡到ATM机就能提走你银行卡里的钱 还有这事?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsVOz8NzTUl--VgrFeYQugDhBEf4EF8oKrfbCgxSgKqyUQcR05EK0k2hs0mar4IMdiYNuh71rRq0c8vtA-WXRH5TNIk2koF_4gcbjtzha5D27Z5Ex1_ZWZybngqsDxgDgrhQ7fIpmsTTEAmms046vdata00huqHG2Z4m7y8WmQnSlissa5-yfF6Tcjc8o-otmMnQlnLeioc3teHPGFtZgtcE_sh7rSSEZnor6LNsNpWEvD3_mwMlEdhex-WGqPYDE1iZqwg0yoRFw.&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"description": "近日,广西玉林警方破获了一起银行卡系列诈骗案,打掉了一个专门伪造银行卡的犯罪团伙.直到案件破获时,很多受害者还不知道自...",
"author": "央视新闻",
"pubDate": "2017-01-14 16:40:10"
"title": "美国又一银行倒闭!美联储怎么办?中国受影响大吗?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9iK6yh5BoAP74YcvTbAISl09faYhCoZ6ixT6OaOLLO-Od3-sksaq_FuMZbAS1pr7piJLaKPmmduT93DIwHBvIbfsfu1uD6IdG4Izaa99FFHqj9nBaOTEYVlF08YEBgu7JK3Z1zB4V7A1iVhxRV84rHsXt5UrKtBe_Y5CWXzP-6I5hWLv6O878UA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "规定资产超过500亿美元的银行必须参加美联储年度压力测试,旨在通过更严格监管避免2008年国际金融危机重演.特朗普上台后,将...",
"author": "新华网思客",
"pubDate": "2023-05-05 13:51:35"
},
{
"title": "平安银行、宁波银行等试水支付宝信用卡取现功能,缘何引发舆论争议?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9RTmWOTzPtO2QUxKefz_jTLdWo1zgRnumPikcYLZ6jDt9-qQbRkrXfptbTmetMSkyBD5ioxN_S6CbWy5YCzvOj27TqpvHQLGiHyNQzwr6qZapRqC9eQqKa6eTCj-HnfsMQt6sDIvda6or_QhcUgy3nr3ktZnMYrdzJNds3P0Ny7089kyxDwoXvg..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "话题#微信支付宝测试信用卡取现#与#有银行试水信用卡取现:年利率超18%#分别登上微博、头条热搜榜.(来源:人民众云)(来源...",
"author": "人民网舆情数据中心",
"pubDate": "2022-08-31 19:55:10"
},
{
"title": "银行月榜:大行拼命玩“七夕”,微博为何失宠了?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9RTmWOTzPtO2QUxKefz_jTLdWo1zgRnumPikcYLZ6jDt9-qQbRkrXfpjCLQwsCzeoEWJ5DF3O-WaS7TUgOXZwPBNU0EmEGj2uxm78mUpQHV3_PfGBIbkcxGIXzt4WCKlOQzIGm8cOPEsH66egDXj6V1zeIuDHPGxR8mJ44HgdRhWfxjh3za6jWA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "新媒体管家中国银行业新媒体8月排行榜,进入总榜TOP10的银行分别是:中国工商银行、中国银行、中国建设银行、上海浦东发展银...",
"author": "人民网舆情数据中心",
"pubDate": "2017-09-14 08:16:46"
},
{
"title": "一周内连续三家美国银行“爆雷”!会否演变成金融危机?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzfegY6xsXbjVVHQhd8dqH4VqXa8Fplpd9ItfcIcKoWlLm8Rr_34Fda7N0QENXqvUdpC8uDCUMyP3o8kt-vjbwvoTmS2wQM2YPMe_Od8CN0h0ZTRrI1bsRi36o3NVnPdCQTe1qvLMqw08cOLg_T2JYwTORyotNYWVo_hvRaFd77uhDl-6mCphnALHU6q1SG-UuWYSWBra5Nsg6Ebq8fk9diw..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=16291AF9651EED2AA6A18D514F2F3056A72B87A3677AA0E4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9iK6yh5BoAP74YcvTbAISl09faYhCoZ6ixT6OaOLLO-Od3-sksaq_FmTCorCmgluiCWsdFKgk5Vkle2Ih7Wd0V8bmfqaeEGW9RjLipG7z9hr2vUkGAoeq3eHbD0wZGeAFfrNlSWv2QMXQ-pCrvz4TEjT4JnC393aZk1WKEvHaASO54z_tGSZTqA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "“压力测试本是帮助银行评估资产风险的有效手段,这(监管“松绑”)为硅谷银行的关闭埋下了伏笔.”新加坡国立大学客座教授白...",
"author": "新华网思客",
"pubDate": "2023-03-16 10:44:22"
},
{
"title": "今年银行保险业监管工作14大要点:坚决落实“房住不炒”要求 深入推进网络借贷专项整治……",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm2kBDeULUmLOBXo1ZuiEXYlqXa8Fplpd9pdEXg9ndAl0MFtGwjAIFDaUAVAjIQYEidaZuDz_arhmjmFoX0IJWAo7QIapaZ1Sx9ZuArSRudDqn9cxsOGZ6tfWGmuOgkaOrGnMGa3UGTG8vMTfg97W7xuc8XiTa07E18w8wYkc_C0qH_tcz6jvIMvfLZFDBpGmZjcr1tqMu3SWE8RsmObDbtQ..&type=2&query=%E9%93%B6%E8%A1%8C%E6%B5%8B%E8%AF%95&token=BE5ED0431334522DF1F7A0D953F35271F28573016A0C650E",
"description": "稳妥处置高风险机构,压实各方责任,全力做好协调、配合和政策指导.继续拆解影子银行,特别要大力压降高风险影子银行业务,防止死灰复燃.坚决落实“房住不炒”要求,严格执行授信集中度等监管规则,严防信贷资金违规流入房地产领域.",
"author": "中国网财经",
"pubDate": "2020-01-12 13:33:01"
}
],
"APP逆向": [
{
"title": "路飞爬虫开发App逆向第八期share",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9l40l5MWzjtbsbsR6eNCWCFc2fBtcWxYi1RScM2JNWvWAbXS2wSQe0vsRQxnJ7FxpS7-Hly9zOKbAYIy9riVzrmGRJgS4PuGQmbXjaxbg2fDzhk0fzVTRilh1Dg5i4BYm9iLOcV7xnhleHYIRY1mnBfK97YnmvOAU-mai6i3jnIE6Ebq8fk9diw..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "关注以上公众号,后台回复 课程 即可领取哦~有路飞爬虫开发App逆向第八期share路飞爬虫开发App逆向第八期share### 路飞爬虫开...",
"author": "小马找课呀",
"pubDate": "2025-01-01 05:11:41"
},
{
"title": "一文了解安卓APP逆向分析与保护机制",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9OA-y9C60IE-npO37WN82TlW0SZ-ySzWn45G6zLFp6I1yj4loMO3bfj3humpwptDRbEJyjNDsbawLqlyDY2crnuCOeWpl1fqHvMk7rssIzzTHnmoiXrmqTp4VL2r66onxNjLT3YKAkrhiStrVU8t3sgukCyJGd2TBXVadmu6l5TOE8RsmObDbtQ..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "安卓APP逆向保护作为开发工作中的重要内容,一直是网易云易盾致力于提供的应用服务.“后续,我们将在SO加密保护方面进行更...",
"author": "FreeBuf",
"pubDate": "2018-03-31 18:12:34"
},
{
"title": "AndroidApp常见逆向工具和使用技巧",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsSr0UegHo_8eVgrFeYQugDrGFFTyF4j-fIHKmKiWmh_gT1RIk9nIJTomqza81rARJOjZaCXpGyzZr8ZRNe7_PnoyTi_CaSvQnwfm9fgyvvBMGMaUdyBm9-rIkYKlAX-Dj9vW8_i_qrPyk_5Ok-VIGL8Puv9ti7dcGDU1CviXYnFzuSNq_fyLpgrGOxwXysI1AEZKkSu6ctdDFCQQgOOwZapcVyAZ3I_PY9VtKigBfXGyg4kpWQffwFHw4vjE6ADUXiZqwg0yoRFw.&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DM67_A4ZyUtWmCJmK-NkDquVgrFeYQugDrGFFTyF4j-fIHKmKiWmh_gT1RIk9nIJTomqza81rARJOjZaCXpGyzZr8ZRNe7_PnoyTi_CaSvQnwfm9fgyvvBMGMaUdyBm9-rIkYKlAX-Dj9vW8_i_qrPyk_5Ok-VIGL8Puv9ti7dcGDU1CviXYnFzuSNq_fyLpgrGOxwXysI1A--DSxMMJW25afjsDce3vzUf0ZWGpHETSFtzMifQSoswdDq99Pz1VF6H9R5UfwiN_iZqwg0yoRFw.&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "前言本文将主要介绍个人在AndroidApp逆向分析时常用到的一些工具和小技巧.说起Android 逆向,就不得不提到常用的逆向分析神...",
"author": "黑白之道",
"pubDate": "2016-10-26 10:17:15"
},
{
"title": "FlutterAPP逆向实践",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9XaFRr9-KEoQ7epe88ZjBhpKdFNuZ0flx7uWdPvFHT6FLj96Ft5D40pAhJXVi62Fu1OBlqLeQHR6pl7E3Onhe8_KSuYpfoz-nMx6NQN5gvmlwBN2BLnvKNFfgGoVFfvji05X42WeTRJbLWq-d9wNbSveee96zYAzf4ZcQ3sDhmpbdrgozfSg6bw..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "本文为看雪论坛优秀文章看雪论坛作者ID:Imyang很长一段时间对于Flutter的app逆向都比较头疼,它不像纯Java app那样可以使用jadx-...",
"author": "看雪学苑",
"pubDate": "2022-07-21 17:59:03"
"title": "谭见君出席软件学院“东软杯”APP逆向需求分析推导大赛闭幕式",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9De0Y8bN4i9SrnBIRRcm6c_f5WCpyix4nOO7L143gLdjzPpwCAIkMT-G8Z9A6QWvPuaF0kah3b41cdiexXKEwxHMjhWcV4RXP_52qCKLnmnJjWgg02cVk_6guVxEzYq3v6OrUqIw5kLSJPAlv1u9Thcj3ZyHuDbO3IJw4bjp4woruL0unUdKkuw..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "谭见君出席闭幕式并讲话谭见君为获奖选手颁奖5月18日,软件学院“东软杯”APP逆向需求分析推导大赛决赛在暮云校区多功能报告...",
"author": "湖南科技职业学院",
"pubDate": "2022-05-21 10:45:30"
},
{
"title": "APP逆向神器之Frida【Android初级篇】",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9_j6j2UQN-vxChK1eOjr0eV4x0Gr7qGfxyJYT1IO9o92OYF_6hIhsjJKE2v5sJLkZQ9POZalNGJgbHBCqMNLOw2ax_tV8iR35g8jJjvvwlC3av3PGngcOQN8XSGpD-AWTkLIzjJ7_lWPAOTdf6aFmfPo5_F-iNt59bA7SDsc8rvcYJSSFPgfogQ..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9Um9LoRcJ2c6bWBOPEm93GIq9eqha8sVHt99jw-hKwLaMh4p8E9vReeYSjlH-JhMx7KoT7EVlXJ2ThpgFZtz8cGm2AXM6hPS0a9M7Xk6EjUC7U7SzdWzUfUysoOsplbfh3CYP74cCg52jf8_plgoJ3qRuBASIScaEu1nKI6sRIkGTJmCU1UgHwQ..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "说到逆向APP,很多人首先想到的都是反编译,但是单看反编译出来的代码很难得知某个函数在被调用时所传入的参数和它返回的值,...",
"author": "NightTeam",
"pubDate": "2019-07-03 09:00:11"
},
{
"title": "APP逆向sign签名算法:Python实战指南",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9Z2uQi14zjGFECgple0Il5-1K8SLax84YfVaqkNMacaLrG1rkvGbndY6sEGVytRQ2Xa9okGtxlAiFdqvEtLdW8rbW9xGCpXc-0hrzlDs5UvWb91zgNMTb1rkzPqK4FbfdwKi3bykgC3WcITmV9kKf9MJmAnpcRK7rN62zqqL31VVS6t2rFt2rnA..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "在APP逆向分析领域,sign签名算法无疑是一个核心且复杂的话题.今天,咱们就来聊聊这个话题,话不多说,直接进入正题.环境准...",
"author": "雷雷讲py",
"pubDate": "2025-01-03 09:40:29"
"title": "《Ghidra操作手册》带你玩转软件逆向!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9pH7yDGgPpdSc9Kmj0ISIFr4YX24DxEtuAXwJNMdevlPmxqxs9qSDBDGcKxFYn_UFhitQAqKjqGyFsf7oG-y4dQycFTWcgM9YlusdB53J5I5i1MEOTwX3ViGlb21bIvyImDvgKoOQEYi5RriXXL7Ckh5UM_XTW8C76veTtFDxn8qfxjh3za6jWA..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "Ghidra作为一个由美国国家安全局(NSA)开发的免费和开源的逆向工程工具,在去年的RSA正式发布,包含了一整套功能齐全的高级...",
"author": "看雪学苑",
"pubDate": "2020-12-10 17:58:43"
},
{
"title": "某文APP逆向抓取分析",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9Qik4Bv1BdhGxuGMxUzDpjTHOHAh2qfSAh3Krx_VuApSoTdBPktWaIA3Epnk8GTJMeXFCVhhtbySJLh6_XpknCTNSZNDBWubXlcGZvix282X7mCdrMEP3WRC6Pd_oeSUHGhU87R4ma3wJvots1NbSZ5qCC1EK-lgfPTVgeIFcOgPYl_Q5RRZQjg..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9OAp3DAUa5NEW-FehEPeDTNs-hlBr-6OscAB_vFeS6XPzA229oxAOJZK3u9bd8B16ArHkhr-11ozXszusUJMj8opeiqmxLyV7rMUm_B-kmDcGpUN67vTzwwXUWl8HuVzkP4c_84-w-dGIDCJaEVyvn9NwDclmJOBpqQYWz-BTCchQ_LeJW-Rhtg..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "逆向app一定要多练习,这样才能在实践中找到自己的不懂之处,才能够成长.好啦,今天的逆向小文章就到此结束啦,童鞋们下篇文...",
"author": "猿人学Python",
"pubDate": "2020-05-07 20:19:43"
},
{
"title": "抖音APP逆向:附带抓包与6神算法探索",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd951tlle8LxESo-zDlqxSX6pocMxwkvRmnDq000DCRO83Wk9wH2pxzKNciYPpIcdmE5dl9P8Paw_x58MkIGEcJw3juWkEMf3Hfa2tGfX7oJGkopviLeKN6p0Qsf5Pjq5lQJ440gcqIG3P92dCjJKmIEw71YhhkAfJptZjnqDZ-9WctPujwwRB2Pw..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "走进抖音APP逆向的世界,结合抓包技术和传说中的“6神算法”,一起揭开其神秘面纱.环境准备:基础工具搭建重点内容:安装必...",
"author": "彪哥in讲py",
"pubDate": "2025-01-03 13:10:22"
"title": "FlutterAPP逆向实践",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9pH7yDGgPpdSc9Kmj0ISIFr4YX24DxEtuAXwJNMdevlPmxqxs9qSDBNaweevaRNIl25kxGHMd-i4cTRUiUjy__HJiruX-odxDVwS-46YSCIBu8y0dStxaM5kjdHfu9IPv1mI530ZZcseK9CuOPHKHW78PxljgTttTHe_OOoPortnzAjcIGepUqA..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "本文为看雪论坛优秀文章看雪论坛作者ID:Imyang很长一段时间对于Flutter的app逆向都比较头疼,它不像纯Java app那样可以使用jadx-...",
"author": "看雪学苑",
"pubDate": "2022-07-21 17:59:03"
},
{
"title": "APP逆向工具清单",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd951tlle8LxESo-zDlqxSX6pocMxwkvRmnDq000DCRO83Wk9wH2pxzKEQotIC1WeYHE8IYVGBIMwjYX9eBY-oL5HUkRlYI-PnA1yRFHhpHP7Sm7W-AWObVBA3hV_7JOu-4Bl_kDMDYSBKlyTq-ojDhmiIxLICWVTQxzYYD-Z4gXxIGX_iHL9MadA..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "嘿,各位热爱编程的小伙伴们,今天咱们来聊聊APP逆向的那些事儿.给大家整理一份实用的APP逆向工具清单.一、环境准备篇重点...",
"author": "彪哥in讲py",
"pubDate": "2025-01-03 13:10:22"
"title": "APP爬虫|frida-某资讯app逆向过程",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9kVA-Zru5h9eMF4W3N9jcahsspGJmkuPYXmYlxrkKYYjmttrfiJSYhTVT7TC6Ly3liu1lqN9YO9v4QsB14VzuV8i7YjiTPvva5D_HGrhQYZu37Qdzl4Uu0bdlFH0lEbRtp62CkGx6hNU_V_ZXGNFy0vm8I0WjuLSC7cG81iKsDVD1AfaFW2DefQ..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "查壳第一步,先别急着反编译,现在很多反爬都升级了,一般都进行了加壳,所以先用查壳工具进行查壳 下面使用查壳工具 ApkScan-PKID 查下目标 app 的采用了什么加固,结果如下: 知道加固的方式了,接下来就是脱壳了!脱壳方法:使用 FRIDA-DEXDump 进行脱壳获得 dex 文件jadx 使用 jadx 打开 dex 文件,并根据抓包路径(v3/newsFlash)进行搜索.结果如下,点击进去",
"author": "未闻Code",
"pubDate": "2020-05-07 23:04:07"
},
{
"title": "对某数藏类app逆向安全分析",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzAR6XDQQibTJVHQhd8dqH4VqXa8Fplpd9GiViCKgEh3hp7ZlMSpKeIxQIvdCmAeOoiCEAYw2fNdPDoAUxw7Sq0DjCePM34mg90eQZy34NnNqcQj5B9QyHOBprivnuY9SDKs905S9kj1Tnh4hFQDNN_v8e06kIiEF_i9uWMfyA3VvPejxQjlknYq3DhADG6xVBsJgDwHp2pAz2CsG6-xMgzQ..&type=2&query=APP%E9%80%86%E5%90%91&token=16294B5FBEC330F77B7A568A95A70A6C7CD387FE677AA0EA",
"description": "对uni-app开发的某app逆向分析不过今天这个app有点不同,我感觉是值得记录的,所以准备再写一篇有关这个的分析首先,打开这个...",
"author": "编角料",
"pubDate": "2023-03-10 18:32:22"
"title": "APP逆向系列(四)",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9PaJ6YaQsKcLwMDixlKP4g_drqq8GHiLaWu7zxOaTzqUbxQ-em_v1zbw3ck-XQ40J3f1A1kAllXHOMYuwc3nhSsmwSvGP4StNAsoJNM6sIa2_V_GBRJf0Evhx1HjWRyXd5HcG5khaAndVQIc2HxLnjKElnfETkmFeYMRyE8sAFV5Ae0f8bRARvQ..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "(三)APP逆向系列学习(二)APP逆向系列(一)本文仅用于技术讨论与学习,利用此文所提供的信息而造成的任何直接或者间接的...",
"author": "呼啦啦安全",
"pubDate": "2024-04-24 11:06:43"
},
{
"title": "​APP逆向系列(一)",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9PaJ6YaQsKcLwMDixlKP4g_drqq8GHiLaWu7zxOaTzqUbxQ-em_v1zRvaB-hF2JmYejgyaqkuU1DUX8X-7c5yRDw9zUuKpaFpxAZdtkc840x78y4vxJQHXu7nZlKBAgU2akIkwVy5RibjVICLHOYbauRDBd5bNZ7PirJFZ_PzhQzy08OLTBhW0A..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "APP逆向系列(一)最近在解决APP逆向问题,之前都是不系统的学习,知道工具,知道hook,但是跟某些金融比起来还是差点意思...",
"author": "呼啦啦安全",
"pubDate": "2024-04-14 11:12:10"
},
{
"title": "APP逆向之SO必备分析手法",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm-6YnhadtZbuBXo1ZuiEXYlqXa8Fplpd9Es2salmYLRz-DYOWJRpZwcpKuMl7x2dpgE03FdTMd6jOV_4vhApN3pusTcutSkRvkp5j7wSU1c1idepjMpcPMbwkrnYyDCcMB1WhSg89If8yD1LH3lO_r3aQZnWr_WjECtWG5m6G5ULoP2CrUqIM3o16EQTJyraXmw7ci0MOsfO54z_tGSZTqA..&type=2&query=APP%E9%80%86%E5%90%91&token=BE5EEB2CAC88ED914D481F66EC14C5264E7BD42B6A0C6514",
"description": "APP逆向过程中,需要对dex文件和elf文件进行分析,又因现在各APP都有各种代码保护手法,因此都需要进行动态分析.今天就分享...",
"author": "编码安全",
"pubDate": "2023-04-07 08:31:00"
}
],
"渗透测试": [
{
"title": "200万年薪!人民网这个岗位等你来!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9ChmC_jRydxQnWP5xI0ohHv-rfwQuX5ncDx-0miHPf8dlE17ianZoX8qGwPH3KbbcOfd5INLRfVOxfp1RmFDjWiC5AESW6uBQt1ARzykp6WnXPJqVHomGyuI1e2brDBsJsJAkCE6fFpUM_dvx1Fbs1R1ahyanbhhtQnaAWuchNYhOJBjQH7pCxQ..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9q7bb5rvJLvSK3xoKz0f873XbJWkJKAlk8lNHYmPWmHIlTLcgHtsDsSCvgDIjNXvCN7BvR_7MnlnGc3P3Q5IsPB3VKloDjq-SHVtnrobho9gvDPepbJEi2OJgSoYM0AblDN_2l-h-wWUryKxMqbP6iuwNfv2B-gkVEKwjFmQJ9xDS-e4Yz84xMA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "服务器及应用进行渗透测试等信息安全相关工作;3、关注最新的安全动态和漏洞信息,及时修复业务系统相关漏洞.任职资格:1、全...",
"author": "人民网",
"pubDate": "2018-08-03 15:22:17"
},
{
"title": "人社部拟新增10个新职业,看看自己能干点啥",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9dZOej61YtrTs2h1vajWyLvKQP6bKmphmX2eNGeMCIj9cimnvgL6vCF4lh-VxQl2-B2l1KbtoyjAjcti6Ew5yPemwVke2fiYQ1b2--6hUi0rnBgUnzvAraGWPflbRRq_Cer5174dgOFyK__WHtse0Kf33KGmbqhX4RMGQt_DwgyBAe0f8bRARvQ..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9_BudKFrNUVL8Zi0SVz-y_XaUWOp453_IXrqlsyeJ8hosLRVvo1NamsdvDCdBieOjxorb3LBx6HWn7NU7WxsYOSSibJWyERlnmFML1niH65iHYk-o9mlgWhja0bfhoxVu0Z9yQz_TRt8oiXiRScQUm80sCC_4PuEeEdiAC6zU6Ma54z_tGSZTqA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "直播销售员信息安全测试员通过对评测目标的网络和系统进行渗透测试,发现安全问题并提出改进建议,使网络和系统免受恶意攻击的...",
"author": "人民网海南频道",
"pubDate": "2020-05-13 14:27:12"
},
{
"title": "人社部拟新增10个新职业,网友疯狂@李佳琦",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9yqANqy1938L51J_hADGBd2j_l8m6t8PLYRM_vyu7d4C4j7fgu7qyEbyKNsVZmQ_w-0XFIQ-86tJ-HHXGTHqdg2anqADrkPn0cVOskaayMVL5-xGg-X7mHy4O_yxdSkZltM7gTekuSO34mUe805RTuOr2i0Axz6vtmhL42d8dGNOq3X8EKMKOIA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "信息安全测试员通过对评测目标的网络和系统进行渗透测试,发现安全问题并提出改进建议,使网络和系统免受恶意攻击的人员.社群...",
"author": "光明网",
"pubDate": "2020-05-12 18:12:17"
},
{
"title": "“徐玉玉案”涉案19岁黑客杜天禹受审 获刑6年",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9PqQlcuvFN9g_bqeJ5QbmnFYukolAkRoQx0xYBeMcYYfmYhi8e3rtj7iNCfeiK5HlQDI2bw8Osk9rxaMLLJwXsQphT_kRDliL7scQtccwCZHS-mTRty1p96RW6EiR-yQysa0_N306GbPD4ev3QkpZXZ2tgMs5FpOKxlWWwy28zbM6Ebq8fk9diw..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9gRZHb_IYvKoV3z1vHPPsEkUQj6hXRj8CTI4cOxg9kFwCxlKHaRUDsQdP0IpAUitl1_Oyl3-aXyYLO57mKgU1FzKbHwsDKe2XUCVuJgnHSha0_GHENy003rb7zPje6ZrOPAyxdaQkdur9cuF9LAoAbLgKaRSGVNhY0vpe2GICNkZf_71bqkOtiw..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "他成为了一家公司的渗透测试程序技术员,“职责就是测试网站的漏洞,提出修复建议”,每月工资六七千元. 杜天禹业余时间经常...",
"author": "新华网",
"pubDate": "2017-08-24 14:13:15"
},
{
"title": "中新网招新了!打工人,速来!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9wS1-G8W9o-dL0JnQBeYzqIiA8EPSwmklDhtUOAJ_gaxnBlMl-tw95bALxp9cqLooLYczvhrvkAT24s-4JDW_cGN6DcrYgusOEMtZ7fwAigRz1xdN1W7kAnUlIVB0i6u2MT3T0lmG-EXTxO655c74o6kCwZJL8l1weOMKobcj_NQSYTqT4eyLmA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9t8wVvv5BP4IAWNmJPMmxoSge4nYYsXx85OdkCQGDhWxfaXR_mCEcaVYTEZ5vLqwpqaMtSB1p-ge6H1V8-7Ljrais4kOmgHjuWoUQR7IKFKhmN8HfQQ8rX_2EQ5rRmX9jCiNLzPb6_QCGdop8-4Ck7gTgRCmKN-4PugAFO8M_5NDuL0unUdKkuw..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "具备独立开展渗透测试的能力;2、熟悉常见Web和移动安全漏洞分析与防范,包括SQL注入、XSS、CSRF等OWASPTOP10 安全风...",
"author": "中国新闻网",
"pubDate": "2020-11-03 15:52:39"
},
{
"title": "人社部拟新增10个新职业,网友疯狂@李佳琦",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9TZnKhlrYzz2C1Nz4XB2uPAU7INirf6N-EPFi35x_DyDQQ2U_N0i2TTSVXCM-RaBIngebSx1NYTMxIp8fIEf4GllEl1P12oBM0SDJmQOtTYix88S5OWkRiuo1Uqih0dC41ndhrPQ6j07RVVxMWkSNvVEw-HEGSL7N7xWZGQs8WB5535pjGOOjYg..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"description": "信息安全测试员通过对评测目标的网络和系统进行渗透测试,发现安全问题并提出改进建议,使网络和系统免受恶意攻击的人员.社群...",
"author": "光明网",
"pubDate": "2020-05-12 18:12:17"
},
{
"title": "撒贝宁惊现滑雪场!硬核测评来了→",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9BPIo8QLoEC_lu8ScaJKxGD9-S8LsNyq7vhHn8WWk2filE7c5ZGkw1by27scDSV9q6BoNp03By_ohkFhfL-9FAgQb7YxWHsEklzyKl78FV8v5UgPr4DyomQ0W08nr1Ts_5vL6-ETYerjVPoYai4WW49pAWUQqAwWLYiM6jy4dt_9S6t2rFt2rnA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"description": "试纸放入衣服内并进入淋水装置水珠在衣服面料表层滑过却始终无法渗透入小撒身上的羽绒服实验结束测验试纸整洁如新严苛如撒贝宁...",
"author": "央视财经",
"pubDate": "2022-12-30 15:14:23"
},
{
"title": "柠檬“上海户口、百万房补”?你也不是没有机会!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9ChmC_jRydxQnWP5xI0ohHv-rfwQuX5ncDx-0miHPf8dlE17ianZoX8qGBPQpmJmF1rRfrn5fJly2VvqaQ-XpG8Wpb2_-zIn6bxmOMqxLrTQLOuuanB1sYdZvgaEPHUQ_udxLIzJIJaLSwU6OPy1lUa_pYMPu4R-tVumWS8jpVoy54z_tGSZTqA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"description": "信息安全攻防渗透测试和信息审核评估成为网络安全维护的关键环节,此次发布的5个工种里,信息安全测试员、互联网信息审核员的...",
"author": "人民网",
"pubDate": "2020-07-10 19:38:53"
},
{
"title": "【提醒】妹子们注意!上海消保委测试了40款知名面膜,结果...",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9BPIo8QLoEC_lu8ScaJKxGD9-S8LsNyq7vhHn8WWk2filE7c5ZGkw1TQOwn5G3LPFoeGO5WCEDfZNe6QZL1NIGM0VeHsxA5urCoIoQbUY1J-3cRF2qAGGnslLQ8KcPQcAuul1a1w-R5AvAZlJ2xqETo2iEl62_XqAsadlOaPc61ktPujwwRB2Pw..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9kSSRXd1XFKPwocVVJreq6in3TeBwZ25Awfwv10-chlDmTojPRE7dlufUmQp_3KKVhaoiOsNRZWKgfsXArXNS0POrK_TL2RLws5NS7HXpLxYLXZvPklYqrYBi03cTINcjQjZ09ebdc6loVurVs0Z8RXIbfi52KKhlQ8NMhLpmnoDy08OLTBhW0A..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "4小时保湿功效分别进行了测试.全部样品均通过激素筛查今年6月国家药品监督管理局通告了27批次不合格化妆品,其中多批次为面膜...",
"author": "央视财经",
"pubDate": "2018-10-09 06:45:24"
},
{
"title": "李佳琦们要“转正”了!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9ChmC_jRydxQnWP5xI0ohHv-rfwQuX5ncDx-0miHPf8dlE17ianZoX2XNLJWGVtZrGSPoWA-po6Axj2CrwLkI6W7csg2ZrMwZt17z5yDXX6HQdz7ZfgPmpTjMhPRO7p-QXldvSR8sNIdXOd-6aVKXHM3nV99G0kF_8Ut3OBNuY5TFcvUoAZZH7Q..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"description": "信息安全测试员通过对评测目标的网络和系统进行渗透测试,发现安全问题并提出改进建议,使网络和系统免受恶意攻击的人员.社群...",
"author": "人民网",
"pubDate": "2020-05-12 19:02:37"
"title": "妹子们注意!上海消保委测试了40款知名面膜,结果是……",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9gRZHb_IYvKoV3z1vHPPsEkUQj6hXRj8CTI4cOxg9kFwCxlKHaRUDsV2T-P2fNT5d6JHZhmx5J57GgNNMlKF7vmTFjlTR0KqU9kVrWO7tklEjvpukAH1xsj2TTJQ4VNv06xHditO7BK9seWwJIPbUxSGyUogoZl_B6oiXqp6OII8tPujwwRB2Pw..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "4小时保湿功效分别进行了测试.1全部样品均通过激素筛查今年6月国家药品监督管理局通告了27批次不合格化妆品,其中多批次为面...",
"author": "新华网",
"pubDate": "2018-10-06 16:53:48"
},
{
"title": "撒贝宁现身滑雪场,硬核测评“小汉堡”",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11Kz4N0T500wuWVVHQhd8dqH4VqXa8Fplpd9QCpjvSjbD4VMiHiS6Jej9mDQtM6tDHgU2NR9YST4vm3iEQ4bmE2yk02M3hB3ZKMTnrW9eSQrLikycRLGkWlNpmLZ98gC2Oyx-bbMkKG0AcpkRnl6tX9H2npHvM8XU8Z6eP1WRk_fhw4cVHe0mMGuVfTg_etL_psPgGv70ysPZXq54z_tGSZTqA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=162979FF5520D3149791BD6E7DB4B59098767161677AA0EF",
"description": "层滑过却始终无法渗透入小撒身上的羽绒服实验结束测验试纸整洁如新严苛如小撒也对极光小汉堡的防水性能刮目相看防水测试100分...",
"author": "央视新闻",
"pubDate": "2022-12-30 18:03:44"
"title": "柠檬“上海户口、百万房补”?你也不是没有机会!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9q7bb5rvJLvSK3xoKz0f873XbJWkJKAlk8lNHYmPWmHIlTLcgHtsDsf-i9RrYDE4FxiKlITF5Cymw3D7FGVhM1JvvvNHlecC-K5HcHjq6DBxXTATO08mfJ6BTbYIW26cqTSiDsEsIDYKF8dhCYdu_tJJld0niy-k84kaFk_qfFgE5eBgmN3LoYQ..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "信息安全攻防渗透测试和信息审核评估成为网络安全维护的关键环节,此次发布的5个工种里,信息安全测试员、互联网信息审核员的...",
"author": "人民网",
"pubDate": "2020-07-10 19:38:53"
},
{
"title": "撒贝宁惊现滑雪场!硬核测评来了→",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9kSSRXd1XFKPwocVVJreq6in3TeBwZ25Awfwv10-chlDmTojPRE7dlkr6FILP_YkSSANqrCW0Bs3M2LwfIxcGHgxwGzbjf69sJwmPM6dRaV3xpE5Ndbf4yLvcqO2y0OmTEmdSNHrrU8sTYN5ljlhRytmKAmbIkJPG4puaT310AI-rCDCayYmfpA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "试纸放入衣服内并进入淋水装置水珠在衣服面料表层滑过却始终无法渗透入小撒身上的羽绒服实验结束测验试纸整洁如新严苛如撒贝宁...",
"author": "央视财经",
"pubDate": "2022-12-30 15:14:23"
},
{
"title": "半天卖出几十万支!啥东西这么火?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmBHnJaXMTZl-BXo1ZuiEXYlqXa8Fplpd9gRZHb_IYvKoV3z1vHPPsEkUQj6hXRj8CTI4cOxg9kFwCxlKHaRUDsRm3ZqpcbcqRST3h_kVp4P6i_gu9xYR64pghsn0fWorutQ5qnYkXKRUD1tvmKz4RhQ9tGA6LOXDLz_2fXvbN7jo7pN4PQYqXKy1dq1dNBbmlSbs5xCEJbx9e0WC6Sbi7DA..&type=2&query=%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95&token=BE5F060F6347225E8284D3A923334AD982C02D236A0C651A",
"description": "相较于欧美国家30%至40%的渗透率,拥有很大的提升空间.陈涛说:“面对14亿人口的大市场,未来很长一段时间都是机遇期.”...",
"author": "新华网",
"pubDate": "2019-08-16 06:30:28"
}
],
"手机银行漏洞": [
{
"title": "什么操作?一男子发现银行网银端漏洞,存50元取50万,收获3000万",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzPsmEBqaCsyRVHQhd8dqH4VqXa8Fplpd9fPAEaSpFXxfae8BDlsMpqKDKzXpikguf1JnIOJ71rS9T6B1Ci9_KDPzxj-onF2fZdPfhdIcXYHOVkKtxCkFd_bh9rAkkbR7uxY-OzvxNEhvEQ3sVetUAFgB5hfnp7hwbeS5SeRmQq0lv-OfuKRSevGmV4sGsvp54P435H_cIa_sCYioxHkzTmA..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmnO5_-fwwO7iBXo1ZuiEXYlqXa8Fplpd9xS6-kHiaTCowA77By_0GgzsjkZM1Tcfldte0jwJd8K8-23Xrai8SvfWUGDkO7H934itqN6i7Fn79Ry4398IZPEFIHmFIe0yT6kZwwn95-o8zy9qxB3-HD7M6Vc0oJCEkRw89kttEmWXpzMK6Mc0AqC1cjZFNMnAzNxdIYIJzFj1FkDr8IT4KYw..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "他发现上海某银行的网银有漏洞,可以修改定期存单金额和贷款金额,比如存款改成50元,贷款改成50万,就能套现50万.半年内他...",
"author": "木火通明",
"pubDate": "2019-04-23 21:42:11"
},
{
"title": "银行手机app存重大漏洞,用户分166笔套取资金300万未被发现",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzPsmEBqaCsyRVHQhd8dqH4VqXa8Fplpd9ijJxckBNMIw2ONIiAAgQD0orZTwt52sxaQbBLPhNvKiwLwJEB2b8RPJNpWJsPOhDh0JfRVCw0pPHMt0_TuGoNx0Na-eMRsMPacmnLJzQCS_ZsH4040sKCA-L9rfXZZe8viuVGrdaHndRxZSm-4Kf-p229-kDQ-v09MbXGF3_9EnS-e4Yz84xMA..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"description": "银行app存重大漏洞判决书显示,朱某系平顶山银行用户,为了更方便的使用各类业务,朱某在手机上下载了平顶山银行app,绑定了...",
"author": "支付百科",
"pubDate": "2020-03-19 19:33:50"
},
{
"title": "手机银行漏洞:五行代码可转走银行250亿美元存款",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsLGDvFRcq-KmVgrFeYQugDkbox_qHQILDSiF38SaauBfqy2K3HYei7upHkg-JUbg6cdKGl9uj14eWOwHcT_M6tCJqbi9mD7ihv-AKW45ZJaJjKVEYPEpjr3vMz_imG_YfMjZ6IcYXkYeyysg7Ep5txHE-1kFTdXu0k1i_7a7Piw-SzdHavYB6ZE67RWhLBFYsuEt3jaJd8_4YrAqrUNSCl45ZS13pkM7BPtp4uoFW7hbK7RW_-gzNADKbpYdWefeyiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DM67_A4ZyUtWKv9O-vbqZkSVgrFeYQugDkbox_qHQILDSiF38SaauBfqy2K3HYei7upHkg-JUbg6cdKGl9uj14eWOwHcT_M6tCJqbi9mD7ihv-AKW45ZJaJjKVEYPEpjr3vMz_imG_YfMjZ6IcYXkYeyysg7Ep5txHE-1kFTdXu0k1i_7a7Piw-SzdHavYB6ZE67RWhLBFYs_xxZ2uzzreuGBRQx62m1JJ2WBjvbuZtDA_L3xOB-CVpX8jpB056yYS1zW0eetIqyiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "一名安全研究员发现印度一家大银行手机应用存在漏洞,可使他轻松偷走250亿美元.去年年末,安全研究员萨提亚·普拉卡什在一家...",
"author": "安全牛",
"pubDate": "2016-05-19 11:48:56"
},
{
"title": "黑客攻击发现:多家手机银行APP存漏洞",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsLGDvFRcq-KmVgrFeYQugDpII3pXlhB4cu4QQVVNjVmAappCK6q5S16c49JwWaZSxh6K1ZbFnBuvxOAGz10wsWDCGOVaVbb4pV_vNEfPvSlDh69B_ygeCeHyP2pP4-9OYzmM9EgVrwn3UJ9paHwZeQ8yY46If-pFETSS-0YEV8fETpKlqv5RkewRoBiPd-aG9_A1AQX6nXlQnF4S0o79mYUL5Owo7YEYZVEwoF7uCZkq0QzDzxkcKxqO__hkw14kXiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"description": "手机银行存在的漏洞让人担忧.参赛队伍介绍说,通过对国内20家银行提供给消费者的、基于安卓系统的20个手机银行APP进行攻击...",
"author": "E安全",
"pubDate": "2016-09-05 11:36:23"
},
{
"title": "某银行手机APP现支付漏洞3天被盗刷40多万",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsLGDvFRcq-KmVgrFeYQugDt6m0Zx5D-v1Rwjk3P2iLUhEZ-LRrvFkVfsvQ7RvizarNGtYcShVf1nwcLufi6L-Gk7jKfOPejPKPrq1E8X8xtcLtMuSAR7jeYn91RFWK5aCBjj3TewmabqUEL84ZxANtI9op8YjndHKzRF4Q4i9YVEPKrHFAjjttHYqLtFFSwSzG3_-b7D05fUkhS2dCV9OXNE36jCXDB9M-os7L6Y-eOqtKNvldU87WWYxXAeTlg8hiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"description": "银行手机APP新上线的支付功能被人发现了漏洞,3天内数十名客户的信用卡遭盗刷,共损失40余万元!银行立即停止这项支付功能,...",
"author": "支付界",
"pubDate": "2016-06-16 09:00:18"
},
{
"title": "警惕!手机银行APP也会存在高危漏洞",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsLGDvFRcq-KmVgrFeYQugDtWJbbJ5gmKdyIb1BwsnXrNcyHcjzrvJNVi8JqrNdaI95E24oXpjz7s0tde0UUnVQU2wSvBGSiqEcBJf6JtGOEEuTsHBXh_3zfXPq_UwJRT6DOmgAA8E1-31epqYloXWzrX1ue8j2gDrpYPwWiONnLh_fKqELnf6cslD4qCPNdksj3rJsloDZaWdhg33lCtO23AQAsZ3q6lwX4133lbIo7gy8Ms0DOToTvctecQCZ7xPiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DM67_A4ZyUtWKv9O-vbqZkSVgrFeYQugDtWJbbJ5gmKdyIb1BwsnXrNcyHcjzrvJNVi8JqrNdaI95E24oXpjz7s0tde0UUnVQU2wSvBGSiqEcBJf6JtGOEEuTsHBXh_3zfXPq_UwJRT6DOmgAA8E1-31epqYloXWzrX1ue8j2gDrpYPwWiONnLh_fKqELnf6cslD4qCPNdksL-oJo_zX2AVlHsZ9HUcDxA4KMzKg6W2kg7GzPwsCPdecnJJC9gOogZVnnHdKxpBjiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "实验室的工程师通过实验发现此次测试的手机银行APP普遍存在高危漏洞,用户在进行转账交易时,黑客能够通过一定的技术手段劫持...",
"author": "中国信通院CAICT",
"pubDate": "2017-03-15 14:13:34"
},
{
"title": "部分三星手机指纹安全漏洞爆发 中国银行:App已关停",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzPsmEBqaCsyRVHQhd8dqH4VqXa8Fplpd91yEjxg5etkiY8I05ZkcFL0nIvEBF5_g8o5RMTX_iAs_nm-9XiQA7EEJyd5Wg-dEJPcPyEw422pVmwHvWHUB7VYNk0yk9Ml3Vjx6cvMXlqGD4F4UGOt0mlHgopCQEf0bqYIOMiBW9fSZ-FnGfFUMCXFzVDPQXS5-M9_-pIgBW-HzuL0unUdKkuw..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"description": "两款手机和Tab S6平板指纹识别存在漏洞问题,中国银行决定关闭手机银行(包括境内版个人手机银行、境外版个人手机银行企业手机...",
"author": "银行科技研究社",
"pubDate": "2019-10-23 12:18:17"
"title": "豆包手机漏洞,银行验证码被盗?官方回应:已修复,但有黑公关!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmnO5_-fwwO7iBXo1ZuiEXYlqXa8Fplpd9M4tgUerhYHA1tmZx77XSR9h02j9xgh5RQr6xe1NsJAy2XFPjRWGvpz5eeDx38Z4_0VvbAPrDJi62jaG5yxp0Z52y7S_MnYZw_P7G_PNQeLv7xgD8iALXvnCzc3E1yA8T0TeOshwf-GuIWV7jSG35QPRiTFnufhmH1RjVJUry4pVhlgeRt7bSzA..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "从而进行手机银行的登录.这条视频也被豆包手机助手官方刷到了,今天给出相关回应.对于网传的漏洞视频,给出的答案是,需要用...",
"author": "ITheat热点科技",
"pubDate": "2026-02-27 20:52:48"
},
{
"title": "有人利用手机银行漏洞疯狂作案30余起,崇仁人警惕!……",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzPsmEBqaCsyRVHQhd8dqH4VqXa8Fplpd9kt_cpR-bPG0kD5wAUBIu0u1JVtacfwh98Ugm3ehSMzall6cemiDIOpPJV_E4tHnkDTbC92YPHQBUNCg5TK7X2a-hwy2T-6cnlIIV_Ql6oF2m0MvkUIKrecDciQZHEvrGK_zxjqYk9ms3MZX_VAzzRUmHHdwhzXvTZXgH5Qd66kNf_71bqkOtiw..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"title": "某银行手机APP现支付漏洞3天被盗刷40多万",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DM67_A4ZyUtWKv9O-vbqZkSVgrFeYQugDt6m0Zx5D-v1Rwjk3P2iLUhEZ-LRrvFkVfsvQ7RvizarNGtYcShVf1nwcLufi6L-Gk7jKfOPejPKPrq1E8X8xtcLtMuSAR7jeYn91RFWK5aCBjj3TewmabqUEL84ZxANtI9op8YjndHKzRF4Q4i9YVEPKrHFAjjttHYqLtFFSwSzsnQ72geaq1WaPKNtc0tTwdAasj5gBV8MViz6fSDOFH9--toGj4OEJh7EXN0eFbLdiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "银行手机APP新上线的支付功能被人发现了漏洞,3天内数十名客户的信用卡遭盗刷,共损失40余万元!银行立即停止这项支付功能,...",
"author": "支付界",
"pubDate": "2016-06-16 09:00:18"
},
{
"title": "警惕!有人利用手机银行漏洞,在我市疯狂作案30余起...",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmnO5_-fwwO7iBXo1ZuiEXYlqXa8Fplpd95N0hDnoSAZ5iyJqwD0uHDR1z9OA8QEfozNOawBP2cIGpKPpUH7jusxbvvGKEtuAXJ6NxQMj3vmiD6ouRwJ_2_mSyAtt_Bm6d_t97rW4HlyioT2D2MiOdl39BY3cUb4AnH8UBkR4al_dA82xX2AakPzT2ORzBhlbm7z15fJGsqcx535pjGOOjYg..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "支付货款受害人手机接收到了到账信息可是到银行查询却未实际到账怀疑被诈骗刑侦大队民警接报后立即展开调查经民警努力追捕犯罪...",
"author": "乐享崇仁",
"pubDate": "2019-09-12 22:35:10"
"author": "赣州公安",
"pubDate": "2019-09-11 18:44:52"
},
{
"title": "警惕!有人利用手机银行漏洞疯狂作案30余起……",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzPsmEBqaCsyRVHQhd8dqH4VqXa8Fplpd99mlF0A7yMALXW7mwfuxq-UcFznooBU5xpthqQqLOe2puE2gTOnKFcqv5h0LNpDTBlArlMgHctDJ8Qa6StRv7o5Zmz8hcmHa9AL1Abj0GMaA_LUDUi-VqaDCw8EW_IlnKo8UDKQVWW1XljufB1jPsn46FOcDw8ZTogywAZbCis970OK9DLfgmPA..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmnO5_-fwwO7iBXo1ZuiEXYlqXa8Fplpd9ACTVoyFhzEGg0TuhwFzcDfaqbPmiXungPWM19_7q63rNw_I0Y203S8MpL3F3roWYGDq-aFYmgREDo4NS29N2MS45hRAarSHgXD2UIL8HKxRSAyYDGBVJHvk8_XCPJ039Yv_fzFRuEYkQNJdbQQlFoEb49c6u-BoUfFZjIjhpofq54z_tGSZTqA..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "行账号但受害人手机仍能接收到银行预转账信息此时受害人误认为钱款已到账实际上手机银行端比对银行账号错误后该笔银行转账会退...",
"author": "玉山生活",
"pubDate": "2019-09-15 17:21:04"
},
{
"title": "【警惕】当心!手机绑定银行卡,这个安全漏洞很危险!",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DPTsYJCZ05jsLGDvFRcq-KmVgrFeYQugDibtzWmjNxBtVVQdk0bYDh2I2V0fYBaY4964c3qVs00IYi0PRrVDUG0VsiyakpaPjz8b6EcO6e4sFMZtp7TY0cgI6qFbWRY287fuiHWKVHhAtJWPn9orQQizCy_pnEt8HKVEgJk6G2t6oGqCkbVU5bZOZ-9hS32ygSLff1YnhUUagADWgAB_8d3tAGKyj45KEoeIpC-s0dCPCKrXYMy4_9_3ytPzCl-d1qcPmS2LY4JjiZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629A88F8CF705C34E4965B8A432B7EE4F2B56FC677AA0F4",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6ft3wfAVofsP5Peu-UiA4DM67_A4ZyUtWKv9O-vbqZkSVgrFeYQugDibtzWmjNxBtVVQdk0bYDh2I2V0fYBaY4964c3qVs00IYi0PRrVDUG0VsiyakpaPjz8b6EcO6e4sFMZtp7TY0cgI6qFbWRY287fuiHWKVHhAtJWPn9orQQizCy_pnEt8HKVEgJk6G2t6oGqCkbVU5bZOZ-9hS32ygSLff1YnhUUanWR-u-TkFmGqzaHeX5_Gqo4zkNru1DHVDqFKlfDCR7JWY6kBy4JeK8mSOfmA-5LviZqwg0yoRFw.&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "手机丢失后先做6件事↓↓↓01致电运营商挂失手机号02致电银行冻结手机网银网络时代,这点特别重要!重要!重要!03手机绑定过支...",
"author": "集宁佰事通",
"pubDate": "2017-01-20 11:26:29"
},
{
"title": "三星手机“指纹密码”现漏洞!已遭银行及微信支付宝禁用",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmnO5_-fwwO7iBXo1ZuiEXYlqXa8Fplpd93uAnvIKzlh3dhdZMs8aTyuMB0YrBrbnwnQdo1vAC1hOTEw6xwmD1tCnhOe8aLod-auXBKU-P1aYuItSdc4VulW6Wsl8Npxc3SWXHEtwh-bNafcot1QfNAiDcReZc32yTluEkv284-7JmNHCQl5w8aStuM5NihgnnITxON--z1krI3OTRHYU2og..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "10两款手机和Tab S6平板指纹识别存在漏洞.为保障用户登录安全,中国银行手机银行已暂时关闭该型号手机的指纹登录功能;其他...",
"author": "POS圈支付网",
"pubDate": "2019-10-24 14:56:29"
},
{
"title": "浅析某城商行手机银行水平授权漏洞问题",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjmnO5_-fwwO7iBXo1ZuiEXYlqXa8Fplpd9XCYZVB00ChGLDzm4BQnzGGoDlL8sMJjWKsXFkR7ZnKSgh_1hS-hQVC55RrDXu8JWl_UFETuVQacVeAgs3E_UjIv52jOLNhu2KI0NC0jZx-Y3OVJDV_FmlU54B8pdttkarjYLZeqfp63uZXT8QMYDQw0fr8vmLw1P1lE8505ZRLMCYioxHkzTmA..&type=2&query=%E6%89%8B%E6%9C%BA%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F21182D09700FD0C99DFB72D7B308D0D939D06A0C651F",
"description": "也导致此城商行从2019年1月18日至今一直关闭手机银行APP软件中Ⅱ、Ⅲ类账户开户链接功能.-问题原因分析-水平越权缺陷漏洞是...",
"author": "51Testing软件测试网",
"pubDate": "2022-10-12 12:01:01"
}
],
"银行漏洞": [
{
"title": "银行漏洞改存单,50元变身50万,半年骗取3000万!这是什么骚操作?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzYjR1BHNH9h5VHQhd8dqH4VqXa8Fplpd98XvXEKD25NX6fFkj6ypfZpEleWRT0-zrb0y2ksPWB0hCZa5M_GffioYP7XWySX2IgoOYoA_VtEygDb2d8ClozWAWyKDgpj-KuEqOSQhN2q72Q7l755R7slClKCTTWKS1YOfrh1pswOKaugDOWbuRrlAU04b1nGqdry6eRJDZAHLy08OLTBhW0A..&type=2&query=%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629D9746C16E422AEA884594560B9EFAFBE2198677AA0F9",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS-hu52OowZjm_KYv-7Ob39CBXo1ZuiEXYlqXa8Fplpd9NvihChU_ODqHdz6s5l5kv90A-ZWlAjz5Wc4QY9GbN2kSbbkWTHbaTeR6-aqIuu_SpAooZWCExCyLQsw6q8VCbdDVjVDoXJIXAwzQX7kJyim-yHag3nnU24F6iNAs37ZWN2rX4vu0ru1kwDgcSESGVO4Nt5wM5d5gX4wRK20SPqSq3X8EKMKOIA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=BE5F3BBA6247205E8087D3AB23DF6F1081CF56F26A0C6525",
"description": "犯罪嫌疑人马某最终如实交代了他利用银行漏洞进行贷款诈骗的行为.那么他又是如何发现银行这一漏洞的呢?据犯罪嫌疑人马某交代...",
"author": "测试届的LV",
"pubDate": "2019-06-10 08:18:15"
},
{
"title": "银行漏洞还是储户大意?招行贵宾客户竟然这样被“套路”",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzYjR1BHNH9h5VHQhd8dqH4VqXa8Fplpd9the489nMZTrRM-XiN0wAJS0Ym_01yhUvKd6BHAvqjaLdvSGG1CxgULZG3ha2ETji1FdSP89up2VoDTzKeVNubwaoDcVsKVAwif_kcwLnQPRw5kFShQkUkNc-BP7LNPAhoZmr7jsEJ0DxmcFnVYFC_LDTGB6n0XrwP-BiVSFG9nvy08OLTBhW0A..&type=2&query=%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629D9746C16E422AEA884594560B9EFAFBE2198677AA0F9",
"description": "正规渠道转出资金银行漏洞还是储户大意?为何李某等人的账户会在其不知情的情况下顺利被他人支取出资金?交易过程中的银行短信...",
"author": "新浪财经",
"pubDate": "2020-07-21 15:52:31"
},
{
"title": "银行漏洞丢钱,中移动花式收费,谁来给我们一个交代?",
"link": "https://weixin.sogou.com/link?url=dn9a_-gY295K0Rci_xozVXfdMkSQTLW6cwJThYulHEtVjXrGTiVgS3RIfFrW11KzYjR1BHNH9h5VHQhd8dqH4VqXa8Fplpd9YglTSPBY73UVBVfCyPBM__Gf5YGPS_Bj7SfT1EIH8IyvVr34PjFWfrKthy01X3LANqhKMiac9lptbpW1SwKDvAlRs9QsbW-se_0WCpsQtg0PCxoVK31JriHyCvT02s3dYfQYplz82Nmg5_a2bLQwgBlfCxFmYnIi3wWLVbag0bhhlgeRt7bSzA..&type=2&query=%E9%93%B6%E8%A1%8C%E6%BC%8F%E6%B4%9E&token=1629D9746C16E422AEA884594560B9EFAFBE2198677AA0F9",
<