http://wechat.doonsec.com/Mzk2NDg3Mzk2OQ.xmlThe latest security articles about WeChat official accountzh-CNFri, 11 Jul 2025 23:40:05 GMTPyRSS2Gen-1.1.0http://blogs.law.harvard.edu/tech/rsshttp://wechat.doonsec.com/http://wechat.doonsec.com/static/front/img/doonsec_bak3.pnghttps://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483992&idx=1&sn=cbe726eeb0a99e1ccf93acbd787a8f12原型链污染漏洞及安全检测的方法介绍网空安全手札网空安全手札2025-07-11T18:01:17https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483967&idx=1&sn=948bd1b84c9d7111bb5e61747130efdb使用Dirty Vanity绕过EDR防护网空安全手札网空安全手札2025-05-14T19:15:11https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483955&idx=1&sn=36948425a2b752e46e251701ae0c9d16使用GhostTask实现篡改计划任务，植入隐藏后门。网空安全手札网空安全手札2025-04-29T20:30:14https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483950&idx=1&sn=f44c4eb12ab19c451a14e5437ff0a100绕过ETW篡改计划任务实现持久化网空安全手札网空安全手札2025-04-28T00:08:35https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483926&idx=1&sn=e08a8201fa29f7036f0c0217d786c06f通过重点介绍检索增强生成（RAG）来深入探讨这种漏洞在实际系统中的表现网空安全手札网空安全手札2025-04-21T21:31:46https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483914&idx=1&sn=bef301c686dcd29f9b693ed169b74e98本系列文章将探讨人工智能红队测试所面临的挑战，传统安全方法为何失效，以及打造一个超越人类专家的人工智能红队队员网空安全手札网空安全手札2025-04-21T08:01:08https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483906&idx=1&sn=b87286949f49d71f3445c1e9dcc9265b攻击者可能会通过与现有命令控制通道不同的协议来窃取数据。防守者可根据文中的技术验证实际的防护能力网空安全手札网空安全手札2025-04-18T00:15:44https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483902&idx=1&sn=76b8785c1cc70ee8df69a479a43d6cac红队人员可以利用WMIC绕过限制执行系统命令，蓝队人员可根据测试项对安全能力做检查网空安全手札网空安全手札2025-04-14T23:47:41https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483898&idx=1&sn=fa41bd2703ecf8ea821c275104c9c501WinPwn，主要用于自动化 Windows 系统内部渗透测试过程，涵盖侦察和利用阶段。网空安全手札网空安全手札2025-04-12T22:51:00https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483891&idx=1&sn=122dfb213e6f701e5ab05ce4bd76d4fb本文重点介绍通过DNS请求实现数据渗出，攻击者通过将数据作为子域名向服务端请求实现数据渗出，服务端对子域名做解析还原。企业可根据本文提供的样例做参考，检测自身对DNS数据渗出的防护能力。网空安全手札网空安全手札2025-04-11T21:49:08https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483887&idx=1&sn=f8c0b4b59b524f8fb4187022a62d3e5a红队人员可以利用伪装技术实现后门隐藏，蓝队也可借助本文检查是否能够识别对应的伪装技术网空安全手札网空安全手札2025-04-08T21:06:50https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483883&idx=1&sn=8033112b3f784599c8bd966689d31225Atomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-04-07T21:58:43https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483872&idx=1&sn=5c123d883cd040f8c2146fca44d9da8fAtomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-04-01T21:21:39https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483868&idx=1&sn=c01d6a8f4c47e1375b05ea70cca75650Atomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-03-27T23:24:32https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483859&idx=1&sn=5f162dc0c6591786d4ce3461732db3a0Atomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-03-26T22:16:04https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483855&idx=1&sn=12f58ad56b5f6b674b3513d480e4db72Atomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-03-25T23:41:22https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483851&idx=1&sn=165f2b81d81bd104b54fca8771e7f71cAtomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-03-24T23:36:39https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483846&idx=1&sn=de26adf12668c92e72bbce17f246f271Atomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-03-23T21:31:56https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483842&idx=1&sn=4517fa1c740d9f4a97aad6ce14c6027e逐步突破大语言模型限制网空安全手札网空安全手札2025-03-20T23:11:04https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483827&idx=1&sn=a8807a8139eff16461f39c5a4761e4f6Atomic Red Team™是一个映射到MITRE ATT\\x26amp;CK®框架的测试库。网空安全手札网空安全手札2025-03-19T23:20:50https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483823&idx=1&sn=10384908ebba7c3ceef13498d7cba52d大语言模型红队测试：分步测试指南网空安全手札网空安全手札2025-03-18T22:04:13https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483812&idx=1&sn=2cb446a38111625b37605684812763b7T1003.007 - 操作系统凭证转储：Proc文件系统网空安全手札网空安全手札2025-03-17T22:41:17https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483808&idx=1&sn=12cff563d906f9980f915918f10eafa3T1003.005、006 - 缓存的域凭证、DCSync网空安全手札网空安全手札2025-03-16T23:09:27https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483804&idx=1&sn=ae4b7d1c90c0247bc2826744c794203aT1003.003 - 操作系统凭证转储：NTDS网空安全手札网空安全手札2025-03-14T22:52:06https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483804&idx=2&sn=ad6bb3db18e89f524c6add65698a3b81T1003.004 - 操作系统凭证转储：LSA机密网空安全手札网空安全手札2025-03-14T22:52:06https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483798&idx=1&sn=c53023c59a59c6c01c2769b4b5bd6960T1003.002 - 操作系统凭证转储：安全账户管理器网空安全手札网空安全手札2025-03-13T20:49:42https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483794&idx=1&sn=36555b0b7f43d5f414a9c89ea94fe65a探索红队基础设施构建艺术 —《Red-Team-Infrastructure》网空安全手札网空安全手札2025-03-12T20:25:13https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483789&idx=1&sn=99aeef6dcc315c89c4c8bff2ba8c180d15 种绕过 PowerShell 执行策略的方法网空安全手札网空安全手札2025-03-11T20:48:55https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483743&idx=1&sn=1daa806051bb6e412047edcbd7c41e68T1003.001 - 操作系统凭证转储：LSASS进程内存网空安全手札网空安全手札2025-03-10T20:07:47https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483737&idx=1&sn=cfe1220ced21de3ca55646f8eef8d834Atomic Red Team：T1003 - 操作系统凭证转储网空安全手札网空安全手札2025-03-06T23:44:11https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483733&idx=1&sn=f184844b23a39f716270fbd3b5107928Jenkins CVE-2024-43044 漏洞分析网空安全手札网空安全手札2025-03-05T23:49:02https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483720&idx=1&sn=82ed4f652982a3b8ca72cdd512beb1dcAtomic Red Team™ T001.002网空安全手札网空安全手札2025-03-04T23:49:05https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483714&idx=1&sn=d7333efc033b369289224c614ded2ce1网空安全手札网空安全手札2025-02-28T20:53:34https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483665&idx=1&sn=6c92aa52c3024adb084d089dea219e0f破解 AI 的艺术：利用大型语言模型网空安全手札网空安全手札2025-02-24T23:17:01https://mp.weixin.qq.com/s?__biz=Mzk2NDg3Mzk2OQ==&mid=2247483653&idx=1&sn=2f7b069300d32f819a7fb71447e9427c云渗透测试（路线图）成长之路网空安全手札网空安全手札2025-02-23T23:25:28