Doonsec's feed

Doonsec's feedhttp://wechat.doonsec.com/MzkzNTUwNTg2Ng.xmlThe latest security articles about WeChat official accountzh-CNTue, 08 Jul 2025 17:03:11 GMTPyRSS2Gen-1.1.0http://blogs.law.harvard.edu/tech/rsshttp://wechat.doonsec.com/Doonsechttp://wechat.doonsec.com/static/front/img/doonsec_bak3.png供应链攻击某src某游戏控制台https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485570&idx=1&sn=2664f1ddd617def13780979a5a30fdf3久违的实战文章HW专项行动小组HW专项行动小组2025-07-08T15:04:33Windows命令执行场景下落地文件的常见方法https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485534&idx=1&sn=965510532c48f2610001136d57f67e79HW专项行动小组HW专项行动小组2025-07-02T15:11:49平台激励计划https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485481&idx=1&sn=43bb93610883999ca91d390287b65df2你是否曾遇到这样的苦恼？平时HVV期间，为了攻防演练等仅使用过一两次的 0day 漏洞，如今却在提交给某些HW专项行动小组HW专项行动小组2025-04-16T22:14:11点击劫持与双击劫持https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485479&idx=1&sn=6086c9a3c256df6bb971fc5a86f652e4双击劫持，你水洞的好帮手（HW专项行动小组HW专项行动小组2025-02-18T17:10:27Tips | 提取java应用内存从而直接获取明文密码和配置信息的方法https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485459&idx=1&sn=4a26fdf1aa1fa2a78e5f831f9e744ac6吊打密文HW专项行动小组HW专项行动小组2025-02-15T22:45:1027.悬于开发者和安全研究人员头顶的剑 | 一类漏洞让Visual Studio项目变得不再可信https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485449&idx=1&sn=0cfe6e2a85924d8a102415d7347cc805喜欢搞.NET安全研究的小朋友们你们好呀，我是Visual Studio 1Click反序列化漏洞HW专项行动小组HW专项行动小组2025-01-17T14:06:4325.net安全学习特别篇之给ysoserial.net贡献pluginshttps://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485409&idx=1&sn=0a0d1997919d50f182ed959f002b1226HW专项行动小组HW专项行动小组2024-12-07T19:30:1224.学习ysoserial.net的plugins第三弹https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485368&idx=1&sn=202562c801678511127cdd30c038de29HW专项行动小组HW专项行动小组2024-12-06T21:31:0123.学习ysoserial.net的plugins第二弹（Resx以及实战应用）https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485343&idx=1&sn=e01654462b6a5b5f3e76939a3921a7fbHW专项行动小组HW专项行动小组2024-11-28T20:37:3822.学习ysoserial.net的plugins第一弹https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485285&idx=1&sn=a25c6f8124beb15ef267a9b80c15fdd5HW专项行动小组HW专项行动小组2024-11-27T18:02:5621.从Altserialization到SessionState反序列化再到SQL Server数据库隔山打牛https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485236&idx=1&sn=65010bc45f6ba79efff81182d6e59441HW专项行动小组HW专项行动小组2024-11-26T13:23:345.ASP.NET HttpModule型内存马https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485174&idx=1&sn=2ec8f13e30fe4f0a388c1c96524bd3e7HW专项行动小组HW专项行动小组2024-11-24T20:15:544.ASP.NET VirtualPath型内存马https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485145&idx=1&sn=95a28d024e2f193b2400fe2db4dd3dabHW专项行动小组HW专项行动小组2024-11-22T19:16:203.ASP.NET HttpListener型内存马https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485121&idx=1&sn=b48987c93023e727c19519cea89055ccHW专项行动小组HW专项行动小组2024-11-19T15:14:272.ASP.NET Route型内存马https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485100&idx=1&sn=9ae88340de14c8e139af1d3ab48ff111HW专项行动小组HW专项行动小组2024-11-17T14:03:121.ASP.NET MVC Filter型内存马https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485067&idx=1&sn=6cee624c06e5defa05e4a749e0ce3d31HW专项行动小组HW专项行动小组2024-11-15T14:48:1118.补充以前没学到的链子以及BinaryFormatter序列化数据特征https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485043&idx=1&sn=dfd968914df9df8ecea6272988b7bd30HW专项行动小组HW专项行动小组2024-11-04T23:43:5417.SerializationBinder安全问题与DataSetTypeSpoof链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247485018&idx=1&sn=094f2cccd855d3cdf694c3f262ee58f4HW专项行动小组HW专项行动小组2024-11-03T14:20:2316.whitepaper-net-deser补充学习（Json.Net后篇）https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484992&idx=1&sn=5d98c1ee9dac2b19a675e53888e28f5eHW专项行动小组HW专项行动小组2024-11-02T14:22:2915.Json.Net反序列化点（中篇）以及更多相关链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484970&idx=1&sn=7c53fb985b1eb1902e8f16744e28f086HW专项行动小组HW专项行动小组2024-11-01T11:46:3914.1.ObjRef链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484949&idx=1&sn=c9b5070ae4ad7095ff238dca93bd1143HW专项行动小组HW专项行动小组2024-10-31T16:59:0914.net remoting安全问题（未完结）https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484933&idx=1&sn=6489d6263afbf6a7abfc23d6d83f5d05HW专项行动小组HW专项行动小组2024-10-30T13:26:0713.Fastjson（.NET）反序列化点后篇https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484868&idx=1&sn=a4d5291fe796880bfc1edfc8afa770edHW专项行动小组HW专项行动小组2024-10-29T19:47:2112.Fastjson（.NET）反序列化点前篇https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484826&idx=1&sn=5a66b82c3c646014d9170f20d3278a40HW专项行动小组HW专项行动小组2024-10-28T22:11:3011.Json.Net反序列化点（前篇）以及XamlImageInfo、GetterSecurityException相关链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484815&idx=1&sn=752bdb72b6d885894a9c9b5d15eda3a8HW专项行动小组HW专项行动小组2024-10-27T20:13:16双供应链拿一个目标https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484740&idx=1&sn=e1e79980f6cd3f38c96011d8da35dbe2HW专项行动小组HW专项行动小组2024-10-26T21:45:4410.JavaScriptSerializer反序列化点https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484712&idx=1&sn=bae92f37643eec004c1702036059e07cHW专项行动小组HW专项行动小组2024-10-25T13:22:429.DataContractJsonSerializer反序列化点https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484684&idx=1&sn=953e12cfd96a205e0dcef2b47cd7e82dHW专项行动小组HW专项行动小组2024-10-24T18:53:498.NetDataContractSerializer反序列化点以及PSObject链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484658&idx=1&sn=5fbefbd85085378c181642343b1a82d6HW专项行动小组HW专项行动小组2024-10-21T12:07:407.DataContractSerializer反序列化点以及相关链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484634&idx=1&sn=827f9b0da490f99ee1b093d78db5f6e8HW专项行动小组HW专项行动小组2024-10-18T15:20:19公众号创建交流群啦！！！https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484613&idx=1&sn=9ccfb22d088e5ec5cf076046e292b457HW专项行动小组HW专项行动小组2024-10-15T18:06:496.ViewState安全问题全解（万字长文）https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484605&idx=1&sn=e40ab30b6317c78b7889c13faf780151万字解析src、代码审计、红队等不同场景下的ViewState安全问题HW专项行动小组HW专项行动小组2024-10-14T13:45:155.ToolboxItemContainer、RolePrincipal、WindowsPrincipal链以及一些反序列化特性https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484475&idx=1&sn=fa7241fac9a4944355baccc8ee108257HW专项行动小组HW专项行动小组2024-10-13T12:18:464.LosFormatter反序列化点+一些反序列化链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484455&idx=1&sn=1fc6cef052776d5c595544fca0547b86HW专项行动小组HW专项行动小组2024-10-12T11:05:42从druid一路杀到云控制台https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484387&idx=1&sn=ad32e81309c2f43b6dfcf39ce918efbfHW专项行动小组HW专项行动小组2024-10-11T10:59:563.SoapFormatter反序列化点以及ActivitySurrogateSelector相关链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484365&idx=1&sn=c35c56e4fd57706ff7f8c1f52c9147c8HW专项行动小组HW专项行动小组2024-10-10T13:50:301.XmlSerializer反序列化点以及ObjectDataProvider链https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484178&idx=1&sn=21fa3634af61a8f8a850a0c09a092745.NET危险系列正式连载！！！HW专项行动小组HW专项行动小组2024-10-08T18:05:41一次简单的私活https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484128&idx=1&sn=d9f4f3d9ed807015932a1daf08c8e878实战文章集合开始啦！！！HW专项行动小组HW专项行动小组2024-09-30T22:16:16一些提高密码喷洒与爆破出货率的小技巧https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484097&idx=1&sn=9c29031c2a2457930097ee0fc41faecfHW专项行动小组HW专项行动小组2024-09-23T14:45:16postMessage造成的各种安全问题https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484056&idx=1&sn=b7b02e2ec44911b4591dcfb6688dd77cpostMessage造成的各种安全问题HW专项行动小组HW专项行动小组2024-09-19T23:22:42实战中获取JS文件的各种场景https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484034&idx=1&sn=d3276c8342642cedc104deaeaebd4349HW专项行动小组HW专项行动小组2024-09-14T22:27:34ClickHouse数据库安全问题初探https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247484011&idx=1&sn=ce8f07f0e1421b1c1b626c3560161d06HW专项行动小组HW专项行动小组2024-09-12T22:20:24爆破及喷洒过程中与常见限制机制的对抗思路https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247483954&idx=1&sn=87cf4b9408ea0b6e745080d450ede616还在因为爆破时遇到的验证码而感到烦恼吗？快来学习击败它的武林秘籍HW专项行动小组HW专项行动小组2024-09-09T21:30:03应该如何寻找参数的蛛丝马迹？https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247483882&idx=1&sn=7bec8923088f61f371bcd425f3067956HW专项行动小组HW专项行动小组2024-09-07T22:35:34从一个奇葩的JWT解密问题到Github 10K star组件的设计缺陷！！！https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247483829&idx=1&sn=98ba26bf06336e540eaeb3394e7fe789为何你的JWT密钥总是爆不出来？原因终于找到了HW专项行动小组HW专项行动小组2024-09-03T15:29:26我们需要从JS文件里提取哪些信息？https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247483787&idx=1&sn=446ff47f8d3d702ecacbaa84ad1d4236学懂JS接口安全，一个系列就够啦！！！HW专项行动小组HW专项行动小组2024-09-01T20:52:06某金融src的一次较复杂攻击链进入后台https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247483754&idx=1&sn=aadd74eccee53d08dded4e183f9b778aJS接口安全之路合集开始啦！后续将分享在不同场景下，都有哪些方法、工具、思路去获取js文件，比如登录点场景、后台场景、SSO场景、Webpack场景、目录以及JS文件FUZZ场景、小程序解包场景等等，全程免费！！！欢迎各位师傅关注HW专项行动小组HW专项行动小组2024-08-29T17:29:49记某次护网中对HIS系统的审计https://mp.weixin.qq.com/s?__biz=MzkzNTUwNTg2Ng==&mid=2247483706&idx=1&sn=6418215da015f3c8fd4aa4848e89703f如何优雅的拿下医疗单位靶标系统HW专项行动小组HW专项行动小组2024-08-26T22:55:18