http://wechat.doonsec.com/Mzg3Mzg5MTc1OA.xmlThe latest security articles about WeChat official accountzh-CNFri, 27 Feb 2026 18:29:10 GMTPyRSS2Gen-1.1.0http://blogs.law.harvard.edu/tech/rsshttp://wechat.doonsec.com/http://wechat.doonsec.com/static/front/img/doonsec_bak3.pnghttps://mp.weixin.qq.com/s/yb0FNEOImFDp2TDqoXijgA青龙面板存在鉴权绕过：可获取面板账户密码、执行任意命令漏洞概述近日，发现青龙面板存在严重安全漏洞。Cloud Security labCloud Security lab2026-02-27T16:26:02https://mp.weixin.qq.com/s/PWSuIL5ltDJm18lycpZiZQCloud Security labCloud Security lab2026-01-30T09:31:03https://mp.weixin.qq.com/s/ph-Pnbnolmlx8kDATG3Y1wAI供应链攻击设想—mcp server投毒Cloud Security labCloud Security lab2026-01-23T14:45:31https://mp.weixin.qq.com/s/nWgYjrxGGX2qk-v8ML3ZUgCloud Security labCloud Security lab2025-12-11T11:36:52https://mp.weixin.qq.com/s/DR_77fXCrB7u5RqYshwV8w电信小伙伴给了两道ctf说帮忙看看，感觉挺有意思的，这里简单记录一下。Cloud Security labCloud Security lab2025-12-09T09:20:57https://mp.weixin.qq.com/s/LlYRfj09ePKY6k8FI_Illg电信的小伙伴给了两道ctf说帮忙看看，感觉挺有意思的，这里简单记录一下。Cloud Security labCloud Security lab2025-12-05T10:22:13https://mp.weixin.qq.com/s/h-K5GQcnarObuz2dpr7DPQCloud Security labCloud Security lab2025-12-01T09:20:32https://mp.weixin.qq.com/s/4pcSKdyOcy04-FV6TvGXrA服务器取证上篇文章已经讲过怎么仿真e01软件，不会的同学去公众号看一下。Cloud Security labCloud Security lab2025-11-19T09:30:21https://mp.weixin.qq.com/s/kAJOxlDVp3FEu0CW7xnqqQ题开局给到一个什么后缀也不是文件，也没说使用啥打开，这里简单讲一下，怎么将环境运行起来，再进行做题。Cloud Security labCloud Security lab2025-11-07T09:30:41https://mp.weixin.qq.com/s/nOLVqWKC2MejXSdZ2ji-eg最近遇到一个执行器默认token漏洞，但是不出网，无法直接反弹shell。也没找到调度中心面板，所以研究了下不出网利用及打filter内存马。Cloud Security labCloud Security lab2025-09-22T13:43:20https://mp.weixin.qq.com/s/aHNbVWTTJutQo7q7PTIOyw前两天，大师傅说，有个比赛让我看看，这里记录以下。Cloud Security labCloud Security lab2025-09-05T15:31:24https://mp.weixin.qq.com/s/2P6rhVUzM5IQeG__LG4EMQ《起因是一个基础的常识问题》Cloud Security labCloud Security lab2025-07-30T14:20:21https://mp.weixin.qq.com/s/8UOpNd-GQ_Am8fwHxjmD-A前言有小伙伴提议说，我们上个文章改了一下冰蝎的流量，但是在实际的应用中，我们打战肯定要先传木马落地，如果不能Cloud Security labCloud Security lab2025-07-21T09:00:39https://mp.weixin.qq.com/s/tPxzjVBqpJJ1JyD0EUeWwA最近学习了一下冰蝎和哥斯拉的二开，这里简单记录一下冰蝎二开的过程。Cloud Security labCloud Security lab2025-07-08T09:30:14https://mp.weixin.qq.com/s/1snp6zNXkxu3pp4j-VrMhQ拉练开始了，苕皮哥又出动了。先生大义，卧底到参演单位给好兄弟送分已经拿下面试初级？Cloud Security labCloud Security lab2025-07-02T15:00:37https://mp.weixin.qq.com/s/hYrXJHIcIiUKyMYysscY1ALLM Guard Agent项目地址https://github.com/qncosfh/llm-guardCloud Security labCloud Security lab2025-07-01T17:30:49https://mp.weixin.qq.com/s/4dDhad62s4FpY84SmJUy-wCloud Security labCloud Security lab2025-02-08T15:41:26https://mp.weixin.qq.com/s/1-aRbrzX5FzFo9Q0WtLergCloud Security labCloud Security lab2025-01-27T09:30:28https://mp.weixin.qq.com/s/Jr3HJcg97e7lsXonjH6XyQCloud Security labCloud Security lab2025-01-23T15:06:19https://mp.weixin.qq.com/s/VKv2EH3DcWkF85-4HNHxzgCloud Security labCloud Security lab2025-01-14T09:48:00https://mp.weixin.qq.com/s/izCosH9O6z4fhNVQdhabFw嘿，你丫瞅啥。要不要来我的妙妙屋？Cloud Security labCloud Security lab2025-01-06T15:09:27https://mp.weixin.qq.com/s/G5MduvgPRWH0Yyt1KOeGAACloud Security labCloud Security lab2024-12-13T11:28:40https://mp.weixin.qq.com/s/mRlMhi7Zy2fvCdvuQmJh2gCloud Security labCloud Security lab2024-11-14T14:09:24https://mp.weixin.qq.com/s/WZ4y_V8GjL3_JUmyU0Mhyw【漏洞复现】nacos_sqli_RCECloud Security labCloud Security lab2024-07-16T15:37:59https://mp.weixin.qq.com/s/RG2ki5e-XMDKadXPLYfDiAnuclei_poc编写Cloud Security labCloud Security lab2024-07-09T11:23:51https://mp.weixin.qq.com/s/W16zGTvpdFRAJrHrfGDe0w[禅道PMS] \\x26lt;*.12小版本_身份认证_绕过漏洞Cloud Security labCloud Security lab2024-04-27T17:34:23https://mp.weixin.qq.com/s/KvOpRN2_KmCqvCb6ypdgJA这个洞就到此为止，大家不要去搞破坏，自己本地搭环境玩一玩就行了。Cloud Security labCloud Security lab2024-04-22T15:35:37https://mp.weixin.qq.com/s/keWYMOu5SIFZ-AsdGb9mpQ[kkFileView]4.2.0-4.4.0任意文件上传上传getshellCloud Security labCloud Security lab2024-04-19T12:26:21https://mp.weixin.qq.com/s/rAHXMrP2WfmeDKzD9Opo9Q闲来无事，互联网上偶然看到一个代码片段。代码如下：一眼看过去，这不妥妥的可以未授权。测试了一番后，存在存储型XSS。Cloud Security labCloud Security lab2024-02-27T15:27:11https://mp.weixin.qq.com/s/mU5Ee85824WsYYPAdiY7Egapp抓不到数据？换个打开方式试试！Cloud Security labCloud Security lab2024-01-13T17:57:11https://mp.weixin.qq.com/s/0Y56gc_kKaCIdFvwJ1anJw原文地址：https://b1tg.github.io/post/cve-2023-38831-winrarCloud Security labCloud Security lab2023-12-23T21:51:23https://mp.weixin.qq.com/s/YuDD0MT9hEqnAgKL2Z0tsQ未授权访问特定接口可下载敏感信息Config.xml 查看到用户账号密码等敏感信息_____________Cloud Security labCloud Security lab2023-12-12T16:29:25https://mp.weixin.qq.com/s/gtmV3HKdwbCPwt_RAetysQ雷池（SafeLine）是长亭科技耗时近 10 年打造的 WAF，由长亭独创的智能语义分析算法驱动。雷池与开Cloud Security labCloud Security lab2023-12-05T15:35:09https://mp.weixin.qq.com/s/dOXRKJapNf_AEsAiyOWLVw登录ChatGPT后，访问https://chat.openai.com/?model=gpt-4-gizmCloud Security labCloud Security lab2023-11-16T15:15:23https://mp.weixin.qq.com/s/0sYXiVqj5yIQezS5mqoIlg什么是JWT？JSON网络令牌（JWT）是一种用于在系统之间发送加密签名的JSON数据的标准化格式。从理论上Cloud Security labCloud Security lab2023-08-08T13:24:10https://mp.weixin.qq.com/s/RUJ58fkIe_3Fr5Ll3NowIgmitmproxy（https://mitmproxy.org/）：MITM 的 proxy，MITCloud Security labCloud Security lab2023-08-01T22:06:40https://mp.weixin.qq.com/s/XlfL2vbY6TydvBHVo-y6UAnullCloud Security labCloud Security lab2023-07-28T16:07:28https://mp.weixin.qq.com/s/e7EQ5fwT80lDQCTDr8no7gCloud Security labCloud Security lab2023-07-25T23:00:46https://mp.weixin.qq.com/s/rgNQV0CdfQJjWECfwsMPFQ[邮件安全] 0x01签名验证Cloud Security labCloud Security lab2023-07-13T13:14:25https://mp.weixin.qq.com/s/hbtKtLuwe1UJfTU4T0YCYAnginxWebUI 远程命令执行漏洞Cloud Security labCloud Security lab2023-07-12T11:31:33https://mp.weixin.qq.com/s/j7t6f4uAqKvTtNIYUpWoWwnull\\x0anull\\x0adoneCloud Security labCloud Security lab2023-07-11T11:43:00https://mp.weixin.qq.com/s/qLl7-Nom0FOUXbYO5v0Iyw0x00 前言FOFA: app=\\x26quot;畅捷通-TPlus\\x26quot; 使用量:10W畅捷通T+这套系Cloud Security labCloud Security lab2023-07-10T10:35:29https://mp.weixin.qq.com/s/ryseA_Lw5CWC4SdTZD7P9Anull。。。\\x0anull。。。\\x0adone！！！Cloud Security labCloud Security lab2023-07-07T09:27:16https://mp.weixin.qq.com/s/WYVG36lr0dv3k43d3jo6NQ某次面试某云安全厂商，被问到的一个问题让我大脑停止了转动。讲一下fastjson？心想，肯定先做个介绍吗，我Cloud Security labCloud Security lab2023-02-20T13:10:10https://mp.weixin.qq.com/s/JikbvbRqEgpQMRyL9VlI4g一般的网络通信，需要先建立TCP链接，然后进行通讯。但是在实际的网络环境中，通常存在各种边界设备、软/硬件防Cloud Security labCloud Security lab2023-02-16T12:10:49https://mp.weixin.qq.com/s/DxM1KfuH5efQopWE64FNDg相信大多数从事it行业的人都听过base编码/解码。base编/解码系列主要分为base16、base32、Cloud Security labCloud Security lab2023-02-08T14:40:44https://mp.weixin.qq.com/s/joO-XRLt4hLqQGZHiOUcZA闲来无事，看了下Go黑帽子渗透测试编程之道。简单记录下…………Cloud Security labCloud Security lab2023-01-10T16:20:29https://mp.weixin.qq.com/s/i0wDyttFmA3nGlLyuHSf2A概念: 作为一个接触安全时间不久的小小白,我对\\x26quot;免杀\\x26quot;这门技术很感兴趣。今天就站在新手的角度和大家聊一聊如何Cloud Security labCloud Security lab2023-01-09T14:26:20