http://wechat.doonsec.com/MzkzMDgyMTM1Ng.xmlThe latest security articles about WeChat official accountzh-CNThu, 19 Feb 2026 00:45:16 GMTPyRSS2Gen-1.1.0http://blogs.law.harvard.edu/tech/rsshttp://wechat.doonsec.com/http://wechat.doonsec.com/static/front/img/doonsec_bak3.pnghttps://mp.weixin.qq.com/s/4q_Gz2YZGgouOk9x0zukFQ这是一波来自大年初一的更新黑晶黑晶2026-02-17T16:32:06https://mp.weixin.qq.com/s/-mjgLvuaCQQnWeNx--Zh9g去学吧，我把知识都放在这个网站了黑晶黑晶2026-01-29T18:31:37https://mp.weixin.qq.com/s/iEbVsbsq5iA_neUb894h7Q让我大调查一下你们黑晶黑晶2026-01-15T20:32:35https://mp.weixin.qq.com/s/wuBd9BTsNU-7WL7AwW-SdA为什么你的截屏老是截不全黑晶黑晶2026-01-13T19:30:55https://mp.weixin.qq.com/s/_QBnzFM__YnCS5ry8sbgPwBlackCat 小小的更新一下黑晶黑晶2026-01-11T08:01:37https://mp.weixin.qq.com/s/mm9JWb4DE7Yh-sYCPMLjOw先占个坑，正在猛猛开发黑晶黑晶2026-01-02T15:10:21https://mp.weixin.qq.com/s/pBzs0W_QTXxuBZaKUojp-QClaude Code入门食用指南黑晶黑晶2025-12-30T19:38:39https://mp.weixin.qq.com/s/hjiYFfmJ6DkzzOYv67UBew这个行业现状好像全世界都差不多？黑晶黑晶2025-12-22T18:33:39https://mp.weixin.qq.com/s/EZ3aFJyaqFKwZ3tg9JX-ogAI Coding的红温时刻黑晶黑晶2025-12-08T20:35:26https://mp.weixin.qq.com/s/GhP___bYvPJf5g_5f8KodQ好奇现在学习新东西都是通过什么途径黑晶黑晶2025-12-04T18:57:04https://mp.weixin.qq.com/s/G3lbZAct9ZN8d8ceS6lSRQ历时两天半，BlackCat终于搞定黑晶黑晶2025-12-03T19:21:24https://mp.weixin.qq.com/s/dO79eEsSxNV0xqEppKZaPQAI练习生之C2开发日记（一）黑晶黑晶2025-12-01T20:57:07https://mp.weixin.qq.com/s/fZTG1csMRImSsO6nilPEHgwindows下利用进程克隆实现 EDR 规避摘要黑晶黑晶2025-11-24T19:45:27https://mp.weixin.qq.com/s/IBxix2UOFdCdzF1Jr1p2TQ假如让AI来设计C2会怎么样黑晶黑晶2025-11-18T19:34:08https://mp.weixin.qq.com/s/d9bCxH-jaajvW6djTUqiTgEDR对抗从入门到入狱之八：操作系统启动链的守门人 —— ELAM驱动黑晶黑晶2025-11-11T08:01:29https://mp.weixin.qq.com/s/yBKNTn0BQQ6Ess2r_4chxAEDR对抗从入门到入狱之七: 反病毒扫描器的前世今生与YARA规则深度剖析黑晶黑晶2025-10-30T08:00:39https://mp.weixin.qq.com/s/zfrcK7FW3ShFxzd-0BAi6gEDR对抗从入门到入狱之六: Event Tracing for Windows (ETW) 深度剖析黑晶黑晶2025-10-27T18:51:52https://mp.weixin.qq.com/s/ueXRWtpcN_CtPRYgT-OjXAEDR对抗从入门到入狱之五：网络过滤黑晶黑晶2025-10-25T13:31:40https://mp.weixin.qq.com/s/YqhRYYlMNz_be3TAfcw1UAEDR对抗从入门到入狱之四: 微过滤深度剖析与文件系统监控黑晶黑晶2025-10-23T19:08:27https://mp.weixin.qq.com/s/aKgSBXOabMbpB8QUMQUUMQEDR对抗从入门到入狱之三: Image Load 监控与注册表回调黑晶黑晶2025-10-22T19:03:39https://mp.weixin.qq.com/s/HAF-Fi9Jzx0wx5N52Z484AEDR对抗从入门到入狱之二: 回调机制黑晶黑晶2025-10-21T20:29:37https://mp.weixin.qq.com/s/4dHjjpZAP2PkOiqtIngvgQEDR对抗从入门到入狱: Hook原理与对抗黑晶黑晶2025-10-20T21:36:00https://mp.weixin.qq.com/s/focPKaQnzLA8Fk-z2CeaWQ如何用“程序入口点”玩进程注入黑晶黑晶2025-10-16T19:33:49https://mp.weixin.qq.com/s/uswWbdBGKM6oDgBdqwuGkAWindows Bootkit 与 Rootkit 概述黑晶黑晶2025-10-13T20:40:53https://mp.weixin.qq.com/s/VVmDDPcChtWF_yA-zv47zQ还在手搓免杀？时代变了黑晶黑晶2025-08-21T18:51:01https://mp.weixin.qq.com/s/6s6RJTR7oqhbVwkXHigSKwHijack Windows MareBackup 计划任务实现本地提权分析黑晶黑晶2025-06-23T20:04:17https://mp.weixin.qq.com/s/aNdfTg0VUGEo2JxBBwdXgQ红队研发：C2的心跳设计黑晶黑晶2025-06-10T20:49:58https://mp.weixin.qq.com/s/pOOr4peAogs86VNyusTy9w免杀：Win Defender特征定位辅助工具推荐黑晶黑晶2025-04-25T20:30:45https://mp.weixin.qq.com/s/GnxHWDGSeF5UpvD-pwMiEg红队C2研发日记2：C2 Server端的认证实现黑晶黑晶2025-04-17T20:58:20https://mp.weixin.qq.com/s/TWPaeRwkAUgO3YQ3GCnmxg用Avalonia UI构建远控界面黑晶黑晶2025-04-07T19:33:12https://mp.weixin.qq.com/s/xDDZfmnG0QVzguuKaKlzQQ红队开发：利用Golang突破ja3检测黑晶黑晶2025-03-10T19:33:55https://mp.weixin.qq.com/s/ZVrCXaC-alIupn7RdMQVgw红队C2数据通信之TLV模型黑晶黑晶2025-03-03T19:28:13https://mp.weixin.qq.com/s/r6xts2ea_KE59iXNcJzzYQ如何设计一个CobaltStrike的Job管理机制黑晶黑晶2025-02-21T19:35:47https://mp.weixin.qq.com/s/1NvhTgc3h6QpOeZqxJNOxw巧妙利用截屏窃取2FA认证码黑晶黑晶2025-02-13T19:26:24https://mp.weixin.qq.com/s/ZSh-S9QmfyUjaSPCAAjqEA红队研发：编写一个屏幕 Monitor 程序黑晶黑晶2025-02-10T18:54:46https://mp.weixin.qq.com/s/1QAlz649TnjRQ2bIOoL6OQ红队开发：让自己的Shellcode实现SMC黑晶黑晶2025-01-21T18:46:41https://mp.weixin.qq.com/s/xlOld2xDDUSghCjjSpU_aAWeb3智能合约：预言机（Oracle）使用入门黑晶黑晶2025-01-15T20:54:43https://mp.weixin.qq.com/s/LjByU3H_QMamP2KcJv28lw2025-01-07T20:35:30https://mp.weixin.qq.com/s/Uc10mSDsAY8Scl289_K2xA外网露出：新版 CobaltStrike 顶级免杀套件Arsenal kit黑晶黑晶2025-01-07T19:43:48https://mp.weixin.qq.com/s/wO0ce_fPisVXtCJGJCdNvw红队研发: 利用Xterm构建Web Terminal黑晶黑晶2025-01-04T21:13:18https://mp.weixin.qq.com/s/FlQfTOqNDVxL1HXwITG0pAWeb3 智能合约: Solidity 基础数据类型黑晶黑晶2025-01-03T19:59:56https://mp.weixin.qq.com/s/iqgnsvuh2x2H4eG3hbMDyQ权限维持漫谈，合理利用本地环境黑晶黑晶2025-01-01T15:28:39https://mp.weixin.qq.com/s/f5uRMeQy7lNse_IaGWv2VACore Impact 价值10000美金的专业红队工具黑晶黑晶2024-12-30T20:11:35https://mp.weixin.qq.com/s/sjrCwcBHwFv5-yp1J0B-aw新型 DCOM 横向移动攻击黑晶黑晶2024-12-28T19:48:19https://mp.weixin.qq.com/s/pPxOBlbtgnLJX0zKQ_iuuA部署属于自己的EDR对抗环境黑晶黑晶2024-12-26T20:50:16https://mp.weixin.qq.com/s/xSss0gOaCYayPtFUjRSRFA对抗杀软的父进程检测黑晶黑晶2024-12-23T22:05:12https://mp.weixin.qq.com/s/ufp8VNm6pU1AxQCL9fRtWwC#黑客编程必须掌握的知识 (下)黑晶黑晶2024-12-21T17:18:33https://mp.weixin.qq.com/s/9LULcqYbJHQBxLwyPQkPtA让数字x60杀软核晶失效的自适应模式黑晶黑晶2024-12-20T22:32:54https://mp.weixin.qq.com/s/vb8WA4mujKmrMAnZ1ZvXmQC#黑客编程必须掌握的知识 (上)黑晶黑晶2024-12-17T21:20:26https://mp.weixin.qq.com/s/_IZtB15kT89bAcud0xAsWw免杀 WindowsDefender 之特征码定位黑晶黑晶2024-12-14T15:48:38https://mp.weixin.qq.com/s/DnHbZ5-jm-zWVDqJGWACmA银狐木马：杀死核晶状态下的x60黑晶黑晶2024-12-12T21:39:19https://mp.weixin.qq.com/s/uYkuheKpSvVkmZ3T5tiGxg银狐木马：杀死核晶状态下的x60黑晶黑晶2024-12-12T21:31:14https://mp.weixin.qq.com/s/t-8hNjOMFNbMqQrksfHAKA银狐木马: 插件源码学习之本体上线模块黑晶黑晶2024-12-09T21:38:44https://mp.weixin.qq.com/s/K3oS3FYUUdmvHSTbVI56RgDLL回调注入机制-DllNotification Injection黑晶黑晶2024-12-08T21:13:51https://mp.weixin.qq.com/s/C15JSftLwBvVpFPnAQL2lQ银狐木马: 插件源码学习之文件系统黑晶黑晶2024-12-05T21:07:22https://mp.weixin.qq.com/s/0E3fSF8VZ7NvaK6Faopgww银狐木马: 插件源码学习之系统管理(下)黑晶黑晶2024-12-04T20:09:27https://mp.weixin.qq.com/s/Xo_cDiIpYJYDRI6xip85Sw银狐木马: 插件源码学习之系统管理(上)黑晶黑晶2024-12-03T20:09:32https://mp.weixin.qq.com/s/Y6iJEZQiaqeQhjz140Wn1A银狐木马: 插件源码学习之DDOS攻击黑晶黑晶2024-11-30T15:43:45https://mp.weixin.qq.com/s/asqNuvMUDEWL1R6x43-LUQ银狐木马: 插件源码学习之远程交谈黑晶黑晶2024-11-29T16:03:18https://mp.weixin.qq.com/s/TGGMcTRPFvJ_r49feBO5jg银狐木马: 插件源码学习之远程终端黑晶黑晶2024-11-27T20:29:16https://mp.weixin.qq.com/s/UjPA4k8a3gYmTaqvkXeebw银狐木马插件源码学习之注入管理黑晶黑晶2024-11-25T21:38:39https://mp.weixin.qq.com/s/W8JhfGHphMClJm2mo10bSQ硬件断点与AMSI扫描绕过黑晶黑晶2024-11-23T18:51:18https://mp.weixin.qq.com/s/wnq7Ho9jfy-NKwzZNZ_Png免杀基础：x64汇编\\x26amp;shellcode开发 第四部分黑晶黑晶2024-11-20T20:38:37https://mp.weixin.qq.com/s/-N-NGNQZDW-opNNXeIaDGA免杀中对shellcode加解密算法对熵的影响黑晶黑晶2024-11-19T21:19:54https://mp.weixin.qq.com/s/Yl_AVdliGYzLBwiVqM7ozw免杀基础：x64汇编\\x26amp;shellcode开发 第三部分黑晶黑晶2024-11-18T20:16:41https://mp.weixin.qq.com/s/0R4xjvHJHj_fbizU-06byg免杀基础：x64汇编\\x26amp;shellcode开发一黑晶黑晶2024-11-15T21:29:05https://mp.weixin.qq.com/s/RYhjNFNRCztsVEJoRBI3nw恶意软件开发第 9 部分 - 托管 CLR 和托管代码注入黑晶黑晶2024-11-11T20:57:16https://mp.weixin.qq.com/s/0avrK9MG77TPjaRBPoSzRw恶意软件开发第 8 部分 - COFF 注入和内存中执行黑晶黑晶2024-11-10T12:08:16https://mp.weixin.qq.com/s/dCg6EDLgZ3M5qIUXHpQByA恶意软件开发第四部分 - 反静态分析技巧黑晶黑晶2024-11-06T22:00:50