<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0"><channel><title>Doonsec's feed</title><link>http://wechat.doonsec.com/MzkwNjczOTQwOA.xml</link><description>The latest security articles about WeChat official account</description><language>zh-CN</language><lastBuildDate>Thu, 19 Mar 2026 10:39:37 GMT</lastBuildDate><generator>PyRSS2Gen-1.1.0</generator><docs>http://blogs.law.harvard.edu/tech/rss</docs><image><url>http://wechat.doonsec.com/</url><title>Doonsec</title><link>http://wechat.doonsec.com/static/front/img/doonsec_bak3.png</link></image><item><title>完全分离源码 支持域前置 | 基于frp 过卡巴斯基、360核晶、defender、火绒的xlfrc v2.2发布！</title><link>https://mp.weixin.qq.com/s/a5eJD74h6o62_e4bOlRJog</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-19T00:01:07</pubDate></item><item><title>工具推荐 | AI自动化JS逆向！一键调试前端JS，自动提取加解密算法与密钥</title><link>https://mp.weixin.qq.com/s/ZCcCIzZ7fx4PlMIEIVdxcw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-16T00:00:23</pubDate></item><item><title>工具推荐 | 完美平替Proxifier 开源跨平台的ProxyBridge：透明代理神器</title><link>https://mp.weixin.qq.com/s/Iz7Z4fKpdaioZVsNiqyvig</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-13T00:02:05</pubDate></item><item><title>工具推荐 | Fir-Proxy 图形化界面，智能轮换，稳定高速的HTTP/SOCKS5代理池</title><link>https://mp.weixin.qq.com/s/S8HBMVeBRbuU0IXdafRy7g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-12T00:00:53</pubDate></item><item><title>全新Web UI与Wails客户端版本，代码完全自主开发 | GoCobalt Strike 2.1正式发布！</title><link>https://mp.weixin.qq.com/s/JKd3-efH40WVdXZOKEVmew</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-11T00:01:24</pubDate></item><item><title>2026沈阳深蓝一轮HW招录启动！</title><link>https://mp.weixin.qq.com/s/Y8Xxjhv-1C25yYggeApwBQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-10T10:30:49</pubDate></item><item><title>工具推荐 | 数据库直连神器MDUT二开加强版</title><link>https://mp.weixin.qq.com/s/mzMLZTp4HnlIyoYXHAzVuA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-09T00:00:36</pubDate></item><item><title>攻防演练神器 | 一键检测Struts2/Shiro/Log4j等主流漏洞</title><link>https://mp.weixin.qq.com/s/O9o2hDkJ7R2y2gdQsvkcuw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-06T00:01:10</pubDate></item><item><title>工具推荐 | 1200+协议、30000+指纹！QScan重新定义资产扫描效率</title><link>https://mp.weixin.qq.com/s/FZwTVJNNZxFBwNVVE8lIDg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-05T00:00:34</pubDate></item><item><title>工具推荐 | OSS存储桶的漏洞扫描工具，目前支持阿里云、腾讯云、华为云、AWS S3</title><link>https://mp.weixin.qq.com/s/lDCxmZDuUWvlRRAuJOvdIg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-04T00:01:01</pubDate></item><item><title>工具推荐 | 470+漏洞一键检测！专为国内主流OA打造的漏洞检测利器</title><link>https://mp.weixin.qq.com/s/RN-_gyA1e5TSSAryfESclg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-03T00:00:45</pubDate></item><item><title>工具推荐 | 已发现数十个真实漏洞！AIxVuln自动化漏洞挖掘系统，让安全研究事半功倍</title><link>https://mp.weixin.qq.com/s/L1hcJLP_91-N6_aM7pMn8w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-03-02T00:02:27</pubDate></item><item><title>工具推荐 | Burp_Parsing深度扫描HTTP响应，自动化提取与验证未公开API接口</title><link>https://mp.weixin.qq.com/s/lYn2zeBc_lLc9tWdlzMwMA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-28T00:01:12</pubDate></item><item><title>开工特惠 | ApiHunter智能参数填充+自动跑接口： API 接口漏洞检测工具</title><link>https://mp.weixin.qq.com/s/0qB4Augj9nYLZ2ZIBHMPzA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-27T00:01:08</pubDate></item><item><title>开工特惠 | 星落安全2025：我们的成绩单 | 2026：新征程启航</title><link>https://mp.weixin.qq.com/s/wRUBjYIYLDP6QIx9ycIhtQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-26T00:00:25</pubDate></item><item><title>工具推荐 | HeapDump敏感信息图形化提取工具</title><link>https://mp.weixin.qq.com/s/3FzJQL7HDAZ7XKBgjtNH4Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-11T00:01:15</pubDate></item><item><title>工具推荐 | JeecgBoot 全场景漏洞检测工具，覆盖 20+ 高危漏洞</title><link>https://mp.weixin.qq.com/s/SDiOpqKX5JESztfDhi2diw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-10T00:00:57</pubDate></item><item><title>支持全平台 | 星落安全内部工具箱1.2.1：图形化界面，专业能力触手可及</title><link>https://mp.weixin.qq.com/s/trZzQ0Hgnct0aUfr6iKVRA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-09T00:01:26</pubDate></item><item><title>工具推荐 | WinDump：后渗透利器，一键自动化收集内网资产与凭据</title><link>https://mp.weixin.qq.com/s/15OkXDPAkgwbcwBYM9S0og</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-06T00:01:20</pubDate></item><item><title>工具推荐 | API剑 - 全自动深度 收集各种响应中的API接口</title><link>https://mp.weixin.qq.com/s/zdEk7p_F48iFkpZ263LFSg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-05T00:00:34</pubDate></item><item><title>工具推荐 | CyberStrikeAI Go语言构建的AI原生安全测试平台，集成百款工具与智能编排</title><link>https://mp.weixin.qq.com/s/W1MXh19Rv2DVUGJnAc9_lw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-04T00:01:07</pubDate></item><item><title>工具推荐 | 自动检测Vue框架 绕过Vue.js 站点路由守卫 一键发现隐藏资产与未授权漏洞</title><link>https://mp.weixin.qq.com/s/7bAdr0D8OhCnEkZA48LsvA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-03T00:00:42</pubDate></item><item><title>工具推荐 | 企业级漏洞扫描与资产测绘平台 4引擎协同 Nuclei+Xray+GoPOC+YamlPOC</title><link>https://mp.weixin.qq.com/s/cxZCNawyZaB9dyBsgv8b0w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-02-02T00:00:21</pubDate></item><item><title>C语言构建 | 替代frp 过卡巴斯基、360、火绒、defender的xlfrc v2.1发布！</title><link>https://mp.weixin.qq.com/s/QTfmS40Dm54mcHFtGsjHUQ</link><description>支持多层代理(2级，3级)\\x0d\\x0a重构通讯协议，支持socks账户密码认证\\x0d\\x0a基于EW重构，分离windows，linux代码\\x0d\\x0a减少程序体积 windows/linux 1MB</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-30T00:01:25</pubDate></item><item><title>工具推荐 | SwaggerHound自动化检测 Swagger API 接口未授权访问漏洞</title><link>https://mp.weixin.qq.com/s/5CwxcNPSXjUZydxWsVLdPg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-29T00:01:24</pubDate></item><item><title>工具推荐 | TsojanScan v2.0：BurpSuite 2026版专属漏洞扫描插件</title><link>https://mp.weixin.qq.com/s/R5d_gcewBpWi9q2L56gvUw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-28T00:01:40</pubDate></item><item><title>工具推荐 | 最新开源GeoServer 综合漏洞利用工具</title><link>https://mp.weixin.qq.com/s/kudyPukl1z8uJq-yCqT08w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-27T00:01:00</pubDate></item><item><title>工具推荐 | 一款Shiro反序列化漏洞一站式综合利用工具</title><link>https://mp.weixin.qq.com/s/5xJHAkUPkVRozgbRVbpsMg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-26T00:00:58</pubDate></item><item><title>新增全新Web UI版本，操作与管理全面升级 | GoCobalt Strike 2.0正式发布！</title><link>https://mp.weixin.qq.com/s/0gk6S0Nakk54TiwLs0SGog</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-23T00:00:18</pubDate></item><item><title>工具推荐 | 图形化后渗透信息/密码/凭证收集工具</title><link>https://mp.weixin.qq.com/s/IQc7KGcRDws2vMHfvXfRPA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-22T00:00:30</pubDate></item><item><title>工具推荐 | Swagger API漏洞自动化填充参数利用工具</title><link>https://mp.weixin.qq.com/s/qF1TAKWiTC11SS3kGaefkw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-21T00:00:27</pubDate></item><item><title>从资产发现到漏洞利用：一款工具搞定渗透测试全流程</title><link>https://mp.weixin.qq.com/s/52AoQONvgN2nyDVOsfhjtw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-20T00:01:09</pubDate></item><item><title>工具推荐 | 最新开源信息收集综合工具</title><link>https://mp.weixin.qq.com/s/4Kf0GltW4f6ahoOt2Q97xg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-19T00:00:40</pubDate></item><item><title>重磅发布 | 星落安全内部工具箱1.2：图形化界面，专业能力触手可及</title><link>https://mp.weixin.qq.com/s/dpMyrWd7SEM9DObyx2blsQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-16T00:01:28</pubDate></item><item><title>工具推荐 | 专攻微信小程序，自动解包、提取api接口与敏感信息</title><link>https://mp.weixin.qq.com/s/0VOc9Xj64PGorOY0yg6ebQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-15T00:01:15</pubDate></item><item><title>工具推荐 | 开源Shiro图形化漏洞综合利用工具</title><link>https://mp.weixin.qq.com/s/T3EB0nqxrR-GjClrTOVjhQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-14T00:01:37</pubDate></item><item><title>工具推荐 | 一款专为高价值系统设计的后渗透工具</title><link>https://mp.weixin.qq.com/s/4vX8FCprohXcx1iKTYCE5g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-13T00:00:43</pubDate></item><item><title>效率提升90% | 这款资产收集工具让漏洞挖掘更轻松</title><link>https://mp.weixin.qq.com/s/eJ_u0qKb2REo0LwJhT8pIg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-12T00:01:18</pubDate></item><item><title>红队利器 | 高精度重点资产指纹识别工具</title><link>https://mp.weixin.qq.com/s/RxPgd5Qslba_HuGT8W9-qw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-09T00:00:26</pubDate></item><item><title>安全测试效率翻倍！自动化资产测绘+漏洞扫描</title><link>https://mp.weixin.qq.com/s/9fBFQxdUxFoRMJNDe-l2Lw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-08T00:00:39</pubDate></item><item><title>新型webshell免杀 | 哥斯拉 Websocket型 webshell</title><link>https://mp.weixin.qq.com/s/Qefh79HEI7WQUtnKXec9Xg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-07T00:00:32</pubDate></item><item><title>Linux一句话上线 + 上线提醒机器人 + 全新BOF SleepMask 对标Cobalt Strike4.9.1 | Cobalt Strike 1.9正式发布！</title><link>https://mp.weixin.qq.com/s/vVkKi4GOEp1k_Gv_gZGhnQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-06T00:01:19</pubDate></item><item><title>工具推荐 | 快速探测可能存在SQL注入漏洞</title><link>https://mp.weixin.qq.com/s/OYIn0In5xKYicHeUcKYxLg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-05T00:00:32</pubDate></item><item><title>工具推荐 | 最新Nacos漏洞综合利用工具</title><link>https://mp.weixin.qq.com/s/BCzplfBwuT6Qg88E4xu7CQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2026-01-04T00:01:02</pubDate></item><item><title>指纹识别+漏洞扫描+路径绕过 | RVScan让你的Burp Suite如虎添翼</title><link>https://mp.weixin.qq.com/s/9g-WoLH0pRZ63OKRw1uHRQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-31T00:01:01</pubDate></item><item><title>攻防演练神器 | 一键检测Struts2/Shiro/Log4j等主流漏洞</title><link>https://mp.weixin.qq.com/s/xXuLfpJpTuBySusPiUobEQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-30T00:01:24</pubDate></item><item><title>蓝队福音！这款Windows溯源工具，AI一键分析，新手也能快速上手</title><link>https://mp.weixin.qq.com/s/9R0sSObmQO7c86yIdIl5-w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-29T00:00:28</pubDate></item><item><title>新增网段可达探测xa0|xa0基于fscanxa0过360核晶、火绒的xlscanxa0v1.8xa0发布！</title><link>https://mp.weixin.qq.com/s/fkoe2RD0xvN6gZjTPPOawQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-26T00:36:39</pubDate></item><item><title>工具推荐 | 专注云存储桶遍历、未授权等漏洞浏览器检测插件</title><link>https://mp.weixin.qq.com/s/y9hke4td4EVLqJYjKEDV7Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-25T00:01:38</pubDate></item><item><title>工具推荐 | 目标做最全面完善的API挖掘工具</title><link>https://mp.weixin.qq.com/s/KhGNblLWLjVKkNheRKu_IA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-24T00:00:49</pubDate></item><item><title>Google插件推荐 | 一键解析页面JS，内置AI分析，效率飙升</title><link>https://mp.weixin.qq.com/s/0jq644yIl1A9WQ-nOIQ2nw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-23T00:01:14</pubDate></item><item><title>新增内存执行Fscan | 高速屏幕 | 交互式Shell Cobaltstrike1.8正式发布!</title><link>https://mp.weixin.qq.com/s/JzsD3VG084kmc9lAlLvRGQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-22T00:01:58</pubDate></item><item><title>工具推荐 | 让 Burp Suite 代理切换实现全自动化</title><link>https://mp.weixin.qq.com/s/QPUgQNd2YJNBBeU5EHWWRA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-19T00:01:18</pubDate></item><item><title>Burp插件 | SQL注入检测效率翻倍，一键配置自动化检测</title><link>https://mp.weixin.qq.com/s/joKj9JBpc0YVjUGnlB50cQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-18T00:00:44</pubDate></item><item><title>工具推荐 | 最新redis图形化漏洞利用工具</title><link>https://mp.weixin.qq.com/s/AZvozrzOaSQ8_0SyM0AU0Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-17T00:00:29</pubDate></item><item><title>工具推荐 | 网络空间资产测绘、ICP备案、天眼查股权结构图、IP138域名解析与IP反查、外部HTTP调用与小程序反编译</title><link>https://mp.weixin.qq.com/s/gHWU2YgC_MlXYShglfcZKA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-16T00:00:33</pubDate></item><item><title>工具推荐 | 开源免费全平台图形化抓包神器</title><link>https://mp.weixin.qq.com/s/qr9HCTVoH30ICQ8456Y7SQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-15T00:00:23</pubDate></item><item><title>全平台Socks5代理 | GO重构服务端 | 支持Linux上线 | Cobaltstrike1.7正式发布!</title><link>https://mp.weixin.qq.com/s/JNgffaQWGcxHGC9Tib90Eg</link><description>全平台socks5代理\\x0d\\x0ago语言重构服务端CobaltStrike1.7发布\\x0d\\x0a支持Linux、mac生成上线\\x0d\\x0a去除原有Cobaltstirke常见特征</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-12T00:00:27</pubDate></item><item><title>新增内网网段探测xa0|xa0基于fscanxa0过360核晶、火绒的xlscanxa0v1.7xa0发布！</title><link>https://mp.weixin.qq.com/s/-UHiwNnBVxuH7LnQbsFp9g</link><description>新增内网可达网段探测功能\\x0d\\x0a新增后渗透信息收集功能\\x0d\\x0a新增 浏览器相关信息获取功能\\x0d\\x0a新增数据库/远程连接工具信息获取功能\\x0d\\x0a新增Todesk/向日葵账号密码提取功能\\x0d\\x0a新增导出Lsass 内存功能</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-11T00:00:17</pubDate></item><item><title>工具推荐 | 数据库直连神器MDUT二开加强版</title><link>https://mp.weixin.qq.com/s/FhdgDcz8x7Hjk5CnPwGJ5w</link><description>通过简单的配置即可通过数据库执行系统命令、文件管理等操作</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-10T00:01:00</pubDate></item><item><title>工具推荐 | ebpf 一种新型内核马/WebShell技术</title><link>https://mp.weixin.qq.com/s/7xV8yTRTIm9T9BOVg3o9qA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-09T00:00:15</pubDate></item><item><title>工具推荐 | 图形化渗透测试辅助工具</title><link>https://mp.weixin.qq.com/s/iS7XOsl6AdTeyVW0r_IU2A</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-08T00:00:43</pubDate></item><item><title>GO重构服务端 | 支持Linux上线 | 全新版本Cobaltstrike1.6正式发布!</title><link>https://mp.weixin.qq.com/s/diKNHvVg6z2y9laONeAzUg</link><description>go语言重构服务端CobaltStrike1.6正式发布\\x0d\\x0a支持Linux、mac上线\\x0d\\x0a去除原有Cobaltstirke常见特征</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-05T00:00:44</pubDate></item><item><title>Burp神器插件 | 让加密流量测试如明文般简单高效</title><link>https://mp.weixin.qq.com/s/K4f_7d8phwyh7HvqRl-Jog</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-04T00:00:44</pubDate></item><item><title>工具推荐 | Burpsuite漏洞扫描检测插件</title><link>https://mp.weixin.qq.com/s/nj7EHzjlMmPbuax1-Y6qQg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-03T00:00:58</pubDate></item><item><title>星球优惠 | 最新RCE命令无回显利用工具</title><link>https://mp.weixin.qq.com/s/LhsR4fRw8PztsyunE9Mbrw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-02T00:00:21</pubDate></item><item><title>GO重构服务端 | 支持Linux上线 | 全新版本Cobaltstrike1.6预发布!</title><link>https://mp.weixin.qq.com/s/IJoY9y7aRAqybodW7DeDrQ</link><description>go语言重构服务端CobaltStrike1.6发布\\x0d\\x0a支持Linux、mac上线\\x0d\\x0a去除原有Cobaltstirke常见特征</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-12-01T00:10:58</pubDate></item><item><title>工具推荐 | 更优雅的nignx内存马后门</title><link>https://mp.weixin.qq.com/s/I5JT0k1676tUZg6nI98tBA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-28T00:00:56</pubDate></item><item><title>工具推荐 | 一款专为高价值系统设计的后渗透工具</title><link>https://mp.weixin.qq.com/s/NjVbsJL_lDH140zQGQE-Zw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-27T00:01:38</pubDate></item><item><title>攻防演练神器 | 一键检测Struts2/Shiro/Log4j等主流漏洞</title><link>https://mp.weixin.qq.com/s/NHAcIkxQbKXPigQB9u5FGg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-26T00:00:20</pubDate></item><item><title>工具推荐 | 自动化快速收集内网配置文件信息</title><link>https://mp.weixin.qq.com/s/0MukwXD7D75668AEkE22yg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-25T00:00:40</pubDate></item><item><title>红队新思路 | 利用SQL注入漏洞直接加载Cobalt Strike</title><link>https://mp.weixin.qq.com/s/NHLfKAM6r6dYEFeDPZAJ4A</link><description>过360核晶、火绒 行为无拦截。\\x0d\\x0aSQL注入加载shellcode上线cobaltstrike</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-24T00:00:20</pubDate></item><item><title>效率翻倍 | Slack红队工程师的轻量化渗透工具箱</title><link>https://mp.weixin.qq.com/s/DNgQaybF3d-oxP3gPUOE6Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-21T00:01:02</pubDate></item><item><title>工具推荐 | 一款开源全方位扫描工具</title><link>https://mp.weixin.qq.com/s/VB80Rw8TN09JbC-nvH7QCA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-20T00:01:01</pubDate></item><item><title>工具推荐 | 一款专为检测和分析 SQL 注入漏洞而设计的插件</title><link>https://mp.weixin.qq.com/s/poqv3b_OaoSKifAa4jZMxg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-19T00:01:27</pubDate></item><item><title>工具推荐 | 开源网络摄像头漏洞扫描工具</title><link>https://mp.weixin.qq.com/s/jGBOrA1MTViq60t6nQRiRA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-18T00:00:32</pubDate></item><item><title>工具推荐 | 快速探测可能存在SQL注入漏洞</title><link>https://mp.weixin.qq.com/s/SWFQqx4RV9kDXcDyMbvYPQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-17T00:00:42</pubDate></item><item><title>指纹识别+漏洞扫描+路径绕过 | RVScan让你的Burp Suite如虎添翼</title><link>https://mp.weixin.qq.com/s/dznVFdA_qMgAMaoK7zQNHg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-14T00:00:39</pubDate></item><item><title>工具推荐 | 最新开源Nmap图形化扫描工具</title><link>https://mp.weixin.qq.com/s/BzEQ_LOU1dm5tKw83EjPbQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-13T00:00:37</pubDate></item><item><title>BurpSuite插件 | 一款轻量级的OSS漏洞被动扫描插件</title><link>https://mp.weixin.qq.com/s/TGomFhlehmCII4hl2iusQw</link><description>点击上方蓝字关注我们现在只对常读和星标的公众号才展示大图推送，建议大家能把星落安全团队“设为星标”，否则可能就</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-12T00:01:42</pubDate></item><item><title>双十一特惠 | 移动端&amp;WEB资产信息收集神器，红队效率翻倍指南</title><link>https://mp.weixin.qq.com/s/nuB5EZkcMZbXaaKiZE1roA</link><description>时隔半年纷传双十一特惠活动，\\x0d\\x0a错过在等一年！</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-11T00:01:57</pubDate></item><item><title>工具推荐 | HeapDump敏感信息图形化提取工具</title><link>https://mp.weixin.qq.com/s/SV-aosBnhEeOy_nbB2WqPA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-10T00:01:03</pubDate></item><item><title>工具推荐 | 最新Nacos综合漏洞利用工具</title><link>https://mp.weixin.qq.com/s/1uyCrln6cCz5_zhh7NDAWw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-07T00:01:33</pubDate></item><item><title>新增网段可达探测xa0|xa0基于fscanxa0过360核晶、火绒的xlscanxa0v1.7xa0发布！</title><link>https://mp.weixin.qq.com/s/u604odDaM2EVdoNnOS0LpQ</link><description>新增内网可达网段探测功能\\x0d\\x0a新增后渗透信息收集功能\\x0d\\x0a新增 浏览器相关信息获取功能\\x0d\\x0a新增数据库/远程连接工具信息获取功能\\x0d\\x0a新增Todesk/向日葵账号密码提取功能\\x0d\\x0a新增导出Lsass 内存功能</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-06T00:00:41</pubDate></item><item><title>支持主流平台 | 最新OSS 存储桶漏洞扫描工具</title><link>https://mp.weixin.qq.com/s/FtZlSgA4oiSBGD6urccmkg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-05T00:00:56</pubDate></item><item><title>新型webshell免杀 | 哥斯拉 Websocket型 webshell</title><link>https://mp.weixin.qq.com/s/bZ-8HXPzefIbd12SWJA7xQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-04T00:00:45</pubDate></item><item><title>从资产发现到漏洞利用: 一款工具轻松搞定</title><link>https://mp.weixin.qq.com/s/IumKhoI7eBVGJZN26MQ5rA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-11-03T00:00:32</pubDate></item><item><title>工具推荐 | TestNet资产管理信息收集系统</title><link>https://mp.weixin.qq.com/s/hGdvLCMwT92XG6rOXK8hpg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-31T00:00:22</pubDate></item><item><title>工具推荐 | 一款免费的AI代码审计扫描器</title><link>https://mp.weixin.qq.com/s/utXeGrji6q4zVEQxWb4I5w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-30T00:01:38</pubDate></item><item><title>工具推荐 | fastjson一键命令执行检测工具</title><link>https://mp.weixin.qq.com/s/hLTANlxlUXbgamV3iY9FAw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-29T00:01:14</pubDate></item><item><title>工具推荐  | 自动化找白文件，提升免杀效率，实现降本增效</title><link>https://mp.weixin.qq.com/s/J3BkyZQNcnK03atK2PMhpA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-28T00:00:31</pubDate></item><item><title>干货 | 3分钟带你学会白加黑上线CobaltStrike通杀主流杀软</title><link>https://mp.weixin.qq.com/s/dU33z52F1pdXvNx2fzJMsQ</link><description>白加黑上线CobaltStrike通杀主流杀软\\x0d\\x0a过360、过火绒。</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-27T00:01:23</pubDate></item><item><title>安全测试效率翻倍！自动化资产测绘+漏洞扫描</title><link>https://mp.weixin.qq.com/s/0aObHf-5e3dGQa35DPoWPQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-24T00:00:51</pubDate></item><item><title>工具推荐 | 移动端&amp;WEB资产信息收集神器，红队效率翻倍指南</title><link>https://mp.weixin.qq.com/s/1tg0OceghYVZNqBdMBpWTQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-23T00:01:20</pubDate></item><item><title>工具推荐 | 高效便捷的图形化Nuclei GUI POC管理工具</title><link>https://mp.weixin.qq.com/s/CTXT-I1FjHXZWSwh-LN4TQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-22T00:01:26</pubDate></item><item><title>工具推荐 | 最新开源多人协作红队渗透框架</title><link>https://mp.weixin.qq.com/s/skAUR6LkUe5DCZo0OuPN0g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-21T00:00:41</pubDate></item><item><title>工具推荐 | 图形化后渗透信息/密码/凭证收集工具</title><link>https://mp.weixin.qq.com/s/x9TQwjk5Z49VwWwr8lfKww</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-20T00:00:28</pubDate></item><item><title>工具推荐 | Swagger API漏洞自动化填充参数利用工具</title><link>https://mp.weixin.qq.com/s/tGktUByQqS1DaAC5mrai_w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-17T00:01:07</pubDate></item><item><title>加载器免杀 | 过360核晶、火绒、defender上线CS、运行mimikatz xlanyloader 1.8发布!</title><link>https://mp.weixin.qq.com/s/LTR8I25azUsMgTPu8FTXaA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-16T00:00:47</pubDate></item><item><title>工具推荐 | 临兵漏洞自动化扫描系统</title><link>https://mp.weixin.qq.com/s/syxDaY7NwFoA78tQKLnF0g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-15T00:02:05</pubDate></item><item><title>Burpsuite插件 |  快速查找API接口敏感信息</title><link>https://mp.weixin.qq.com/s/Z0sARiTr0d0d7YolMVrvog</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-14T00:01:18</pubDate></item><item><title>工具推荐 | 一款替代Frp完美消除网络特征的内网穿透神器</title><link>https://mp.weixin.qq.com/s/hEaPy74-qZHW4DZXK7sP8A</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-13T00:00:37</pubDate></item><item><title>工具推荐 | Webshell自动化流量解密分析工具</title><link>https://mp.weixin.qq.com/s/MPvgL0QuPBBY6EwujGM7rw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-11T00:00:57</pubDate></item><item><title>含源码 | 一体式免杀加载器代码研究分析</title><link>https://mp.weixin.qq.com/s/ScamSgvw6J4xPpgGZnddMg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-10T00:01:14</pubDate></item><item><title>加量不加价 | 星落免杀第二期，助你打造专属免杀武器库</title><link>https://mp.weixin.qq.com/s/Ngb25UgDX2CgXExwkxcZHA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-10-09T00:00:53</pubDate></item><item><title>红队利器 | 高精度重点资产指纹识别工具</title><link>https://mp.weixin.qq.com/s/TLcrRo2PHS4h2XJKVg1Gew</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-30T00:00:24</pubDate></item><item><title>工具推荐 | 适用于以APP病毒分析、APP漏洞挖掘、红队渗透测试的移动端辅助分析工具</title><link>https://mp.weixin.qq.com/s/PBVb8mACp-o5tgLCoTAQBg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-29T00:01:59</pubDate></item><item><title>工具推荐 | 哥斯拉一键注入suo5内存马插件</title><link>https://mp.weixin.qq.com/s/UAwBjy8eGSJ2CK-9bifPUg</link><description>Suo5MemShell一款哥斯拉后渗透插件\\x0d\\x0a支持一键注入suo5内存马</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-26T00:01:47</pubDate></item><item><title>工具推荐 | 多协议Gadget生成与内存马注入工具</title><link>https://mp.weixin.qq.com/s/KmOwYOG8hpvuW7-nSSs3dA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-25T00:00:41</pubDate></item><item><title>Burp神器插件 | 让加密流量测试如明文般简单高效</title><link>https://mp.weixin.qq.com/s/efjq4CqWahGSNvvpuzfIfA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-24T00:01:02</pubDate></item><item><title>渗透测试必备 | 24种403绕过方法完整利用脚本</title><link>https://mp.weixin.qq.com/s/9ah7EdD8VJ_rRg2CDEp4Aw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-23T00:01:24</pubDate></item><item><title>工具推荐 | 从流量包匹配敏感信息的渗透神器</title><link>https://mp.weixin.qq.com/s/QTJsqG-fsheuEF0WgfGZfQ</link><description>点击上方蓝字关注我们现在只对常读和星标的公众号才展示大图推送，建议大家能把星落安全团队“设为星标”，否则可能就</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-22T00:00:54</pubDate></item><item><title>支持 Linux/Mac 多架构上线 | Cobaltstrike4.9.1星落专版1.5正式发布!</title><link>https://mp.weixin.qq.com/s/0aJnJniPSw56VsF19UbnUA</link><description>CobaltStrike4.9.1星落专版1.5正式发布！\\x0d\\x0a支持Linux Mac amd64 arm64上线\\x0d\\x0ago语言全新架构</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-19T00:01:06</pubDate></item><item><title>工具推荐 | 红队行动下的重点资产指纹识别工具</title><link>https://mp.weixin.qq.com/s/mgsS2ClyLikpvr4mLTL6OA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-18T00:00:18</pubDate></item><item><title>独家BOF插件 | 无文件落地+内存执行一键关闭Defender</title><link>https://mp.weixin.qq.com/s/TrPXiRR6b2Izgy_bem3dsA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-17T00:01:18</pubDate></item><item><title>工具推荐 | 最新RCE命令无回显利用工具</title><link>https://mp.weixin.qq.com/s/9B0jTHAIZ5WVRInnl5v2xA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-16T00:01:40</pubDate></item><item><title>工具推荐 | 一款免费的AI代码审计扫描器</title><link>https://mp.weixin.qq.com/s/oqEcdbjIOtz9G_QCkLtrag</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-15T00:00:38</pubDate></item><item><title>Go语言重构 | 基于Neo-reGeorg过D盾、安全狗、360、火绒的Xl-Neoreg v1.2已发布！</title><link>https://mp.weixin.qq.com/s/JKrPMYSzsraLdifygOOcIQ</link><description>全平台免杀Webshell代理工具\\x0d\\x0a单文件跨平台使用\\x0d\\x0a无需环境依赖，彻底告别Python部署烦恼</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-12T00:01:02</pubDate></item><item><title>工具推荐 | HeapDump敏感信息图形化提取工具</title><link>https://mp.weixin.qq.com/s/rVZi40ERO2RH5Nxhyh2tVw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-11T00:00:40</pubDate></item><item><title>工具推荐 | 最好用最智能最可控的目录Fuzz工具</title><link>https://mp.weixin.qq.com/s/5T_gFfD1WcLmLswg_fJF0Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-10T00:00:18</pubDate></item><item><title>FScan 极速分析器 | 告别手动整理，批量处理扫描结果，打点快如闪电！</title><link>https://mp.weixin.qq.com/s/IpbiM2JNDs3slrWo__mqDQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-09T00:01:13</pubDate></item><item><title>shellcode上线 内存执行Fscan | 开源Rshell多协议C2框架深度实战评测</title><link>https://mp.weixin.qq.com/s/hI5fcMdt2-_K7ODA8DzlFw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-08T00:00:35</pubDate></item><item><title>内置免杀模块 | 基于suo5二开 过D盾、安全狗、360、火绒的xlsuo5 v1.1已发布！</title><link>https://mp.weixin.qq.com/s/ECDF96_HTPKatKl7Y7psLg</link><description>支持图形化免杀生成 \\x0d\\x0a支持图形化自定义连接密码</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-05T00:00:53</pubDate></item><item><title>新增最新POCxa0|xa0基于fscanxa0过360核晶、火绒的xlscanxa0v1.6xa0发布！</title><link>https://mp.weixin.qq.com/s/3AX4WmOdRjT0uIx0-9e-6g</link><description>新增后渗透信息收集功能\\x0d\\x0a新增 浏览器相关信息获取功能\\x0d\\x0a新增数据库/远程连接工具信息获取功能\\x0d\\x0a新增Todesk/向日葵账号密码提取功能\\x0d\\x0a新增导出Lsass 内存功能</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-04T00:00:34</pubDate></item><item><title>工具推荐 | 互联网资产综合扫描: 攻击面测绘终极指南</title><link>https://mp.weixin.qq.com/s/RdZcmaYguTPxO_UAuTI7RQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-03T00:01:27</pubDate></item><item><title>工具推荐 | 自动化资产测绘/漏洞扫描工具</title><link>https://mp.weixin.qq.com/s/MZPZxbpEH4q2pYMRXvGxbg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-02T00:00:33</pubDate></item><item><title>从资产发现到漏洞利用：一款工具搞定渗透测试全流程</title><link>https://mp.weixin.qq.com/s/84WhdgXo0SnYLu7lyxAX5A</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-09-01T00:01:25</pubDate></item><item><title>零检测！史上最强Shellcode自解密免杀编码器实战</title><link>https://mp.weixin.qq.com/s/Sw3hvKUT2PlIkwOVjzGpFQ</link><description>SGN内存自解密混淆工具</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-29T00:01:07</pubDate></item><item><title>全网首发 | 全新图形化哥斯拉免杀 过D盾、安全狗、360 XlByPassGodzilla已发布！</title><link>https://mp.weixin.qq.com/s/XZl9UJl7RDoysgTKpsrufg</link><description>星落安全内部免杀工具箱1.0来袭！\\x0d\\x0a全新图形化哥斯拉免杀生成！</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-28T00:01:41</pubDate></item><item><title>工具推荐 | 一款基于fuzz的waf绕过渗透工具</title><link>https://mp.weixin.qq.com/s/WXVPo376ECvChfyby0KEmQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-27T00:00:43</pubDate></item><item><title>一键搞定 | Fine集成资产测绘+ICP备案+股权分析+端口扫描+指纹识别+小程序检测</title><link>https://mp.weixin.qq.com/s/GZ3uXrctrTzPR0VTnjPPUQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-26T00:01:41</pubDate></item><item><title>平替Vshell | 开源Rshell新增Socks5代理，多协议C2框架深度实战评测</title><link>https://mp.weixin.qq.com/s/yKFksEYnXn2Hw4BtujsBwQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-25T00:00:40</pubDate></item><item><title>蚁剑 | 哥斯拉免杀 过雷池、D盾、安全狗的 XlByPassWAF v1.3已更新！</title><link>https://mp.weixin.qq.com/s/G20yx6mm8q58OqRY9IB12Q</link><description>新增ASHX类型 | 免杀Webshell\\x0d\\x0a过雷池、D盾、安全狗等WAF \\x0d\\x0a蚁剑 | 哥斯拉免杀</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-22T00:01:00</pubDate></item><item><title>BurpSuite插件 | 一款轻量级的OSS漏洞被动扫描插件</title><link>https://mp.weixin.qq.com/s/qM11RMH59KfHO7vlqOmTrw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-21T00:01:43</pubDate></item><item><title>Vshell强力平替 | 深度评测开源跨平台多协议C2框架Rshell</title><link>https://mp.weixin.qq.com/s/0ihuG_48gC6KSsP_SSOXsQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-20T00:01:08</pubDate></item><item><title>KILL杀软合集 | 一键击溃天擎 火绒6.0 Defender</title><link>https://mp.weixin.qq.com/s/vNu3VUp9EItm8MLZj_S3zA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-19T00:00:12</pubDate></item><item><title>新型webshell免杀 | 哥斯拉 Websocket型 webshell</title><link>https://mp.weixin.qq.com/s/RKgqAnlkPjpcCroTMw1HEQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-18T00:00:30</pubDate></item><item><title>效率翻倍 | Slack红队工程师的轻量化渗透工具箱</title><link>https://mp.weixin.qq.com/s/ZVpE9v0TYjkbNjlo8Vo3Nw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-15T00:00:54</pubDate></item><item><title>一周年优惠 | 最新内网渗透全流程技巧汇总</title><link>https://mp.weixin.qq.com/s/X_KalboDYNCcEi-ApIWc3g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-14T00:00:38</pubDate></item><item><title>支持Linux上线+Go语言重构 | Cobaltstrike4.9.1星落专版1.4正式发布!</title><link>https://mp.weixin.qq.com/s/4NJ7PJbdz9dJM_gi-OMMww</link><description>CobaltStrike4.9.1星落专版1.4正式发布！\\x0d\\x0a支持Linux https上线\\x0d\\x0ago语言全新架构</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-13T00:00:48</pubDate></item><item><title>C语言构建 | 替代frp 过卡巴斯基、360、火绒、defender的xlfrc v2.0发布！</title><link>https://mp.weixin.qq.com/s/6UQVw6_DLdCyrNLZmkHHPQ</link><description>支持多层代理(2级，3级)\\x0d\\x0a基于EW重构，分离windows，linux代码\\x0d\\x0a减少程序体积 windows/linux 1MB</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-12T00:00:58</pubDate></item><item><title>重大泄露 | CobaltStrike Beacon 源代码公开</title><link>https://mp.weixin.qq.com/s/OAJwxxmepc2klCQ1nZ-sTg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-11T00:00:33</pubDate></item><item><title>红队新思路 | 利用SQL注入漏洞直接加载Cobalt Strike</title><link>https://mp.weixin.qq.com/s/13G11WJ2Ss-khGt3vLm_VA</link><description>过360核晶、火绒 行为无拦截。\\x0d\\x0aSQL注入加载shellcode上线cobaltstrike</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-08T00:00:28</pubDate></item><item><title>工具推荐 | 自动化资产测绘/漏洞扫描工具</title><link>https://mp.weixin.qq.com/s/hqpcUMUOakCgQRndUgjZJQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-07T00:01:48</pubDate></item><item><title>万能加载器1.7 | 过360核晶、火绒、defender上线CS、运行mimikatz XlAnyLoader正式发布!</title><link>https://mp.weixin.qq.com/s/_QUf7VnEyxL79eeFduZsfA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-06T00:01:02</pubDate></item><item><title>工具推荐 | 最新RCE命令无回显利用工具</title><link>https://mp.weixin.qq.com/s/B6TcC5EkwdpKzXZOIf0oSw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-05T00:00:22</pubDate></item><item><title>工具推荐 | 目标做最全面完善的API挖掘工具</title><link>https://mp.weixin.qq.com/s/t_hoCH3jT0AmxhHhv7uCgg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-04T00:00:26</pubDate></item><item><title>内置免杀模块 | 基于suo5二开 过D盾、安全狗、360、火绒的xlsuo5 v1.1已发布！</title><link>https://mp.weixin.qq.com/s/IBHxrA7Za10-uvnlAFEt1w</link><description>支持图形化免杀生成 \\x0d\\x0a支持图形化自定义连接密码</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-08-01T00:00:59</pubDate></item><item><title>工具详解 |  哥斯拉+suo5内存马组合拳击穿防御</title><link>https://mp.weixin.qq.com/s/UyFF13UaNjBDmyqXl0bd8Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-31T00:03:06</pubDate></item><item><title>新增杀软对抗 | 最新CobaltStrike后渗透信息收集插件1.2发布！</title><link>https://mp.weixin.qq.com/s/sNtgMcOnD_UysFdpoDGrVg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-30T00:00:27</pubDate></item><item><title>工具推荐 | 轻量级被动扫描器，助力资产风险发现</title><link>https://mp.weixin.qq.com/s/FBPPUh_HZj-RDXT8RUM2Fw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-29T00:01:28</pubDate></item><item><title>工具推荐 | 自动化快速收集内网配置文件信息</title><link>https://mp.weixin.qq.com/s/l2rzgmfhNs1JLzMTziGzXw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-28T00:00:12</pubDate></item><item><title>万能加载器 | 过360核晶、火绒、defender上线CS、运行mimikatz XlAnyLoader 1.6正式发布!</title><link>https://mp.weixin.qq.com/s/eNeATPpKR38LXmbLUv_mSQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-25T00:00:33</pubDate></item><item><title>干货 | Go 1.21+版本Win7 完美运行解决方案</title><link>https://mp.weixin.qq.com/s/n2wSAmV9v054YT6Zj3Fxwg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-24T00:00:17</pubDate></item><item><title>新增最新POCxa0|xa0基于fscanxa0过360核晶、火绒的xlscanxa0v1.6xa0发布！</title><link>https://mp.weixin.qq.com/s/14oYUuYJUl1ZdozQPn2C7g</link><description>新增后渗透信息收集功能\\x0d\\x0a新增 浏览器相关信息获取功能\\x0d\\x0a新增数据库/远程连接工具信息获取功能\\x0d\\x0a新增Todesk/向日葵账号密码提取功能\\x0d\\x0a新增导出Lsass 内存功能</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-23T00:00:30</pubDate></item><item><title>安全测试效率翻倍！自动化资产测绘+漏洞扫描</title><link>https://mp.weixin.qq.com/s/vWQ0ItpOMp6L8LPdGAZmrw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-22T00:01:03</pubDate></item><item><title>工具推荐 | 开源免费全平台图形化抓包神器</title><link>https://mp.weixin.qq.com/s/Sc5ZUEIGtF6Pe7rIjuHu8w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-21T00:00:14</pubDate></item><item><title>Burp抓包被WAF拦截？这个插件一键修改JA3指纹！</title><link>https://mp.weixin.qq.com/s/pwfvPKGNJvEzZTpzGACRRA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-18T00:01:16</pubDate></item><item><title>新增后渗透模块 | 基于fscan 过360核晶、火绒的xlscan v1.5 发布！</title><link>https://mp.weixin.qq.com/s/DvexNy9tVTkVn0aLlg6W7Q</link><description>新增后渗透信息收集功能\\x0d\\x0a新增 浏览器相关信息获取功能\\x0d\\x0a新增数据库/远程连接工具信息获取功能\\x0d\\x0a新增Todesk/向日葵账号密码提取功能\\x0d\\x0a新增导出Lsass 内存功能</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-17T00:00:21</pubDate></item><item><title>工具推荐 | 一款快速、全面、易用的页面信息提取工具</title><link>https://mp.weixin.qq.com/s/8rnAlVYuasWMN11bxgFyHg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-16T00:00:44</pubDate></item><item><title>渗透测试必备 | BurpSuite高效SQL注入检测插件</title><link>https://mp.weixin.qq.com/s/25_qp3yrs06szIEcMy7dyQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-15T00:00:53</pubDate></item><item><title>红队利器 | 高精度重点资产指纹识别工具</title><link>https://mp.weixin.qq.com/s/CUaHYKX1wdsQnrxAkq6AyQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-14T00:02:21</pubDate></item><item><title>3秒横扫6.5万端口 | RustScan颠覆传统扫描速度极限</title><link>https://mp.weixin.qq.com/s/hhycvv4gSWOuenkHq-nmIA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-11T00:00:18</pubDate></item><item><title>工具推荐 | 最新云安全Ak/Sk利用工具v0.1.2</title><link>https://mp.weixin.qq.com/s/JLbiKzHdd8DWQuqzsKQcpg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-10T00:01:11</pubDate></item><item><title>杀软对抗 | 单文件一键击溃火绒6.0</title><link>https://mp.weixin.qq.com/s/jDK595gHYC6X_ib_gJVIAA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-09T00:03:43</pubDate></item><item><title>效率翻倍 | 集成化BurpSuite漏洞探测插件实战演示</title><link>https://mp.weixin.qq.com/s/54KJQr9CHrtBnTcvy8yDpA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-08T00:00:50</pubDate></item><item><title>效率提升90% | 这款资产收集工具让漏洞挖掘更轻松</title><link>https://mp.weixin.qq.com/s/eYnuG4mJwXQVzyMcOgZJ2g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-07T00:00:16</pubDate></item><item><title>超越传统Webshell | Nginx内存马免杀方案深度实践</title><link>https://mp.weixin.qq.com/s/17ATVdLcg86aUFldl3F8yg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-04T00:01:06</pubDate></item><item><title>独家BOF插件 | 无文件落地+内存执行一键关闭Defender</title><link>https://mp.weixin.qq.com/s/t2g3hxLW5PXbILas_TfTeA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-03T00:01:15</pubDate></item><item><title>告别手工测试 | BurpSuite插件快速定位SQL注入漏洞</title><link>https://mp.weixin.qq.com/s/du0M6Qh0KRMu8puNVUvViA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-02T00:00:43</pubDate></item><item><title>C语言构建 | 替代frp 过卡巴斯基、360、火绒、defender的xlfrc v2.0发布！</title><link>https://mp.weixin.qq.com/s/PV__lG_-t-8bE2MJksXbJg</link><description>支持多层代理(2级，3级)\\x0d\\x0a基于EW重构，分离windows，linux代码\\x0d\\x0a减少程序体积 windows/linux 1MB</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-07-01T00:00:53</pubDate></item><item><title>HW行动必备 | 移动端&amp;WEB资产信息收集神器，红队效率翻倍指南</title><link>https://mp.weixin.qq.com/s/PwPhTc3A_TBqpBL2DeF9Sw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-30T00:00:32</pubDate></item><item><title>干货 | 记一次VMware vCenter渗透过程</title><link>https://mp.weixin.qq.com/s/51glBKDzNTK4GVTtmkDG1g</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-27T00:01:23</pubDate></item><item><title>工具推荐 | 单兵作战渗透测试工具</title><link>https://mp.weixin.qq.com/s/LUNiSSrQdNGpAgvtJ12NqA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-26T00:01:09</pubDate></item><item><title>免杀工具 | 哥斯拉免杀 过D盾、安全狗、360 XlByPassGodzilla v1.4已更新！</title><link>https://mp.weixin.qq.com/s/eammeHO2GlKenBsUH_ssSw</link><description>哥斯拉免杀XlByPassGodzilla v1.4已更新\\x0d\\x0a过D盾、安全狗、360、火绒</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-25T00:01:17</pubDate></item><item><title>FScan 极速分析器 | 告别手动整理，批量处理扫描结果，打点快如闪电！</title><link>https://mp.weixin.qq.com/s/x6Kxdzhjh1ZLAzo83aNcog</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-24T00:01:21</pubDate></item><item><title>工具推荐 | 一款用于提取网页中敏感信息扩展插件</title><link>https://mp.weixin.qq.com/s/yW9shLu5jGxUkn5kLBod1Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-23T00:00:19</pubDate></item><item><title>免杀 | 过360核晶、火绒、defender上线CS、运行mimikatz的万能加载器XlAnyLoader 1.5正式发布!</title><link>https://mp.weixin.qq.com/s/tyUE_A5JjXJ9-_l34ZJcjQ</link><description>过360核晶、火绒 、微软  xlanyloader1.5万能加载器发布</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-20T00:00:47</pubDate></item><item><title>工具推荐 | 一款全方位扫描工具</title><link>https://mp.weixin.qq.com/s/RDLDzc0t2vjx6mnN72wG0A</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-19T00:00:48</pubDate></item><item><title>插件推荐 | 哥斯拉一键注入正向代理suo5内存马</title><link>https://mp.weixin.qq.com/s/34fhUqHUkftCVoyE-7vMYQ</link><description>Suo5MemShell一款哥斯拉后渗透插件\\x0d\\x0a支持一键注入suo5内存马</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-18T00:00:19</pubDate></item><item><title>支持Linux上线 | Cobaltstrike4.9.1星落专版1.2正式发布!</title><link>https://mp.weixin.qq.com/s/kixwacj6azu_HYS-xiU_AQ</link><description>CobaltStrike4.9.1星落专版1.2正式发布！\\x0d\\x0a支持Linux上线，修复若干bug</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-17T00:01:46</pubDate></item><item><title>工具推荐 | 图形化后渗透信息/密码/凭证收集工具</title><link>https://mp.weixin.qq.com/s/Bij3hvDHQyQStzRwq8x0wQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-16T00:01:04</pubDate></item><item><title>补偿方案 | 关于纷传平台星落免杀相关问题说明</title><link>https://mp.weixin.qq.com/s/GAKlFqQF1D6nUAy6ra-HNg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-13T00:00:50</pubDate></item><item><title>C语言构建 | 替代frp 过卡巴斯基、360、火绒、defender的xlfrc v2.0发布！</title><link>https://mp.weixin.qq.com/s/usPHRhoIL_QIwIWKN9raeg</link><description>支持多层代理(2级，3级)\\x0d\\x0a基于EW重构，分离windows，linux代码\\x0d\\x0a减少程序体积 windows 1MB linux 50kb</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-12T00:00:16</pubDate></item><item><title>工具推荐 | 高效便捷的图形化Nuclei GUI POC管理工具</title><link>https://mp.weixin.qq.com/s/OxAjIuqwQpzi1ewAPuNrqw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-11T00:01:20</pubDate></item><item><title>工具推荐 | HeapDump敏感信息图形化提取工具</title><link>https://mp.weixin.qq.com/s/Mn6Ve-SC_7wVytOXuirGSQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-10T00:01:45</pubDate></item><item><title>工具推荐 | 最好用最智能最可控的目录爆破工具</title><link>https://mp.weixin.qq.com/s/P88_W8a8Mnn8dvp3L---Sw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-09T00:00:14</pubDate></item><item><title>免杀 | 原来SQL注入也可以绕过杀软执行shellcode上线CoblatStrike</title><link>https://mp.weixin.qq.com/s/uJjYaD-ChkCTa4j-ysPqXw</link><description>过360核晶、火绒 行为无拦截。\\x0d\\x0aSQL注入加载shellcode上线cobaltstrike</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-06T00:00:42</pubDate></item><item><title>工具推荐 | 全新支持跨平台内网横向渗透工具</title><link>https://mp.weixin.qq.com/s/Y4_HxS4m-zq-dyutzcpWww</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-05T00:00:35</pubDate></item><item><title>红队必学 | 手把手编译最新开源多人协作渗透C2工具AdaptixC2</title><link>https://mp.weixin.qq.com/s/MzTOi-3O8ymT4as1DTVL7Q</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-04T00:00:46</pubDate></item><item><title>工具推荐 | 自动化文件上传绕过WAF测试工具</title><link>https://mp.weixin.qq.com/s/pW8MYD9HaV84U12fN8PLRw</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-06-03T00:00:37</pubDate></item><item><title>端午节优惠 | 最新最全CobaltStrike后渗透信息收集插件</title><link>https://mp.weixin.qq.com/s/vGmNfgsKpdx6p9DqmkPNUQ</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-30T00:00:36</pubDate></item><item><title>工具推荐 | 微信小程序自动化辅助渗透脚本</title><link>https://mp.weixin.qq.com/s/VNto6Nbuz_szmrAw9TCOlg</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-29T00:00:42</pubDate></item><item><title>工具推荐 | 最新开源多人协作红队渗透C2工具</title><link>https://mp.weixin.qq.com/s/1RUX-avo1XtuyqNN3bLK3w</link><description>点击上方蓝字关注我们现在只对常读和星标的公众号才展示大图推送，建议大家能把星落安全团队“设为星标”，否则可能就</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-28T00:01:47</pubDate></item><item><title>C语言构建 | 替代frp 过卡巴斯基、360、火绒、defender的xlfrc v1.9发布！</title><link>https://mp.weixin.qq.com/s/cy3Smt1l3HVuTvuCjDiIlw</link><description>支持多层代理(2级，3级)\\x0d\\x0a基于EW重构，分离windows，linux代码\\x0d\\x0a减少程序体积 windows 1MB linux 50kb</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-27T00:00:55</pubDate></item><item><title>工具推荐 | Swagger API漏洞自动化填充参数利用工具</title><link>https://mp.weixin.qq.com/s/G3hC93xrbVWVAoDQq1YL5w</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-26T00:00:44</pubDate></item><item><title>工具推荐 | RCE命令无回显利用工具</title><link>https://mp.weixin.qq.com/s/KZNWzADYXTrX-jmjBM7ObA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-23T00:00:39</pubDate></item><item><title>谷安618秒杀，大额返现、免费送课等你来抢！！！</title><link>https://mp.weixin.qq.com/s/HIvdVdm8zPx45ALpu_8wNA</link><description>618送课啦谷安618！送1000个免费培训名额?</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-22T00:00:38</pubDate></item><item><title>CobaltStrike插件 | BOF获取todesk密码与解除锁屏工具</title><link>https://mp.weixin.qq.com/s/gsZjv0COFMMiKtr8tixjIA</link><description></description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-21T00:01:04</pubDate></item><item><title>【免杀】蚁剑 | 哥斯拉免杀 过雷池、D盾、安全狗的 XlByPassWAF v1.2已更新！</title><link>https://mp.weixin.qq.com/s/cnXAFE8gJGNOQ7AazkN3tw</link><description>新增ASHX类型 | 免杀Webshell\\x0d\\x0a过雷池、D盾、安全狗等WAF \\x0d\\x0a蚁剑 | 哥斯拉免杀</description><author>星落安全团队</author><category>星落安全团队</category><pubDate>2025-05-20T00:01:03</pubDate></item></channel></rss>