72 lines
4.2 KiB
JSON
72 lines
4.2 KiB
JSON
[
|
||
{
|
||
"guid": "https://forum.butian.net/share/4870",
|
||
"title": "XXL-Job GlueFactory classCache 跨任务类残留漏洞",
|
||
"description": "XXL-Job GlueFactory classCache 跨任务类残留漏洞",
|
||
"source": "subject",
|
||
"pubDate": "2026-05-12 09:00:01"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4860",
|
||
"title": "ActiveMQ CVE-2026-34197 漏洞分析与利用详解",
|
||
"description": "来学习一下这个据说由 ai 大人发现的存在 13 年之久的漏洞。",
|
||
"source": "subject",
|
||
"pubDate": "2026-05-11 09:00:03"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4813",
|
||
"title": "BADUSB的制作以及关于解决BADUSB输入法和大小写问题",
|
||
"description": "现在有很多badusb制作的相关文章，以及解决输入法问题的文章，但是我没能找到能够使badusb在所有情况都能成功运行的方法，经过我的研究，我发现了以下的方法能够让badusb在所有情况下都能使用。",
|
||
"source": "subject",
|
||
"pubDate": "2026-05-08 09:00:01"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4851",
|
||
"title": "从POC到EXP：从0基础到v8 CVE-2021-38003复现",
|
||
"description": "从POC到EXP：从0基础到v8 CVE-2021-38003复现",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-29 15:17:30"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4843",
|
||
"title": "Psexec是怎么工作的？Psexec与官方服务端组件PsexeSvc.exe的交互",
|
||
"description": "本文详细讲解psexec时怎么和PsexeSvc.exe交互，初始化，然后建立互相通讯的管道的，以及psexec和PsexeSvc.exe交互实现的python实现，最后讲解了psexec防御技巧。",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-24 09:00:01"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4841",
|
||
"title": "Android移动安全第六章_UI欺骗与钓鱼",
|
||
"description": "Android 的窗口系统允许多个 App 的界面叠加显示，这个设计本身是为了多任务体验，但也给 UI 欺骗提供了条件",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-23 09:56:31"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4840",
|
||
"title": "Android移动安全第五章_WebView安全",
|
||
"description": "前四章围绕 Android 原生组件展开，这一章进入 Web 领域——WebView 把浏览器引擎嵌入了 App，也把 Web 的攻击面带了进来。",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-17 09:00:00"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4842",
|
||
"title": "【病毒分析】深度剖析粉丝投稿：海莲花APT超级间谍组织最新免杀样本（从白加黑落地到定制化RUST远控）",
|
||
"description": "一、背景概述与海莲花组织简介\n在深入剖析本次的恶意样本之前，我们有必要先了解本次攻击事件的幕后黑手：海莲花(Ocean Lotus)，在安全业界也被称为 APT32 或 Canvas Assassin。\n自 2012 年首次...",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-14 09:36:01"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4836",
|
||
"title": "Vue新攻击面-动态路由实战狩猎",
|
||
"description": "本文实战案例通过学习0xsdeo师傅文章学习而来,建议通读0xsdeo师傅公众号文章了解动态路由这一攻击面，分享一部分简单基础场景Hook案例，简单的调试往往能打开更多的攻击面。",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-14 09:30:10"
|
||
},
|
||
{
|
||
"guid": "https://forum.butian.net/share/4835",
|
||
"title": "「JavaWeb审计盲点」List 集合误区：批量操作下的权限逃逸",
|
||
"description": "本文将深入剖析 List 集合在批量查询、批量更新、批量导出等场景下的典型越权模式。这些风险并非源于明显的代码缺陷，而是藏在\"合理的业务逻辑\"与\"容器特性的误用\"之间——属于最难被自动化工具发现、却最易被攻击者利用的 Corner Case。",
|
||
"source": "subject",
|
||
"pubDate": "2026-04-09 09:00:01"
|
||
}
|
||
] |