<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[B_l_a_nk的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/B_l_a_nk</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; B_l_a_nk]]></copyright><item><title><![CDATA[Gobuster工具详解]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/135109164</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/135109164</guid><author>B_l_a_nk</author><pubDate>Wed, 20 Dec 2023 15:25:22 +0800</pubDate><description><![CDATA[主要介绍gobuster的安装及使用方法，分别介绍各种模式的详细介绍
docker运行gobuster的使用方法]]></description><category></category></item><item><title><![CDATA[Whatweb简单使用]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134592213</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134592213</guid><author>B_l_a_nk</author><pubDate>Fri, 24 Nov 2023 10:10:55 +0800</pubDate><description><![CDATA[主要记录一下whatweb的相关知识及使用方法]]></description><category></category></item><item><title><![CDATA[Vulhub靶场-KIOPTRIX: LEVEL 1.1]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134494202</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134494202</guid><author>B_l_a_nk</author><pubDate>Sun, 19 Nov 2023 19:33:09 +0800</pubDate><description><![CDATA[万能秘密，命令执行，内核漏洞提权]]></description><category></category></item><item><title><![CDATA[Vulhub靶场-KIOPTRIX: LEVEL 1]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134483333</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134483333</guid><author>B_l_a_nk</author><pubDate>Sat, 18 Nov 2023 20:44:15 +0800</pubDate><description><![CDATA[Vulhub靶场-KIOPTRIX: LEVEL 1
mod_ssl缓冲区溢出漏洞
Samba远程代码执行漏洞]]></description><category></category></item><item><title><![CDATA[NACOS搭建及相关漏洞复现]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134114336</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/134114336</guid><author>B_l_a_nk</author><pubDate>Mon, 30 Oct 2023 11:04:54 +0800</pubDate><description><![CDATA[身份认证绕过漏洞 (QVD-2023-6271)
Nacos权限认证绕过(CVE-2021-29441)
信息泄露]]></description><category></category></item><item><title><![CDATA[tcpwrapper杂谈]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/133904870</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/133904870</guid><author>B_l_a_nk</author><pubDate>Wed, 18 Oct 2023 14:14:37 +0800</pubDate><description><![CDATA[本文为作者自己对tcpwrapper的思想斗争，感兴趣可以看一看。]]></description><category></category></item><item><title><![CDATA[服务攻防第七十八天（2023）]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/133853915</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/133853915</guid><author>B_l_a_nk</author><pubDate>Mon, 16 Oct 2023 10:56:01 +0800</pubDate><description><![CDATA[1、数据库-Redis-未授权RCE&CVE
2、数据库-Couchdb-未授权RCE&CVE
3、数据库-H2database-未授权RCE&CVE]]></description><category></category></item><item><title><![CDATA[MAT安装及报错提示JAVA版本过低解决]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/133787431</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/133787431</guid><author>B_l_a_nk</author><pubDate>Thu, 12 Oct 2023 11:42:37 +0800</pubDate><description><![CDATA[MAT工具下载，启动报错提示JAVA版本过低解决。]]></description><category></category></item><item><title><![CDATA[Web攻防第五十四天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132994583</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132994583</guid><author>B_l_a_nk</author><pubDate>Mon, 18 Sep 2023 20:11:21 +0800</pubDate><description><![CDATA[1、子域名接管-检测&探针&利用
2、COSP跨域资源-检测&探针&利用
3、JSONP跨域回调-检测&探针&利用]]></description><category></category></item><item><title><![CDATA[Web攻防第五十三天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132994517</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132994517</guid><author>B_l_a_nk</author><pubDate>Mon, 18 Sep 2023 20:06:56 +0800</pubDate><description><![CDATA[1、CRLF注入-原理&检测&利用
2、URL重定向-原理&检测&利用
3、Web拒绝服务-原理&检测&利用]]></description><category></category></item><item><title><![CDATA[Web攻防第五十二天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132994326</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132994326</guid><author>B_l_a_nk</author><pubDate>Mon, 18 Sep 2023 20:02:06 +0800</pubDate><description><![CDATA[1、弱口令安全&配置&初始化等
2、弱口令对象&Web&服务&应用等
3、弱口令字典&查询&列表&列表等]]></description><category></category></item><item><title><![CDATA[Web攻防第五十一天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132948305</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132948305</guid><author>B_l_a_nk</author><pubDate>Sun, 17 Sep 2023 18:06:59 +0800</pubDate><description><![CDATA[1、找回密码逻辑机制-回显&验证码&指向
2、验证码验证安全机制-爆破&复用&识别
3、找回密码-客户端回显&Response状态值&修改重定向
4、验证码技术-验证码爆破，验证码复用，验证码识别等]]></description><category></category></item><item><title><![CDATA[Web攻防第五十天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132866275</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132866275</guid><author>B_l_a_nk</author><pubDate>Wed, 13 Sep 2023 22:41:13 +0800</pubDate><description><![CDATA[通用漏洞&购买支付逻辑&数据篡改&请求重放&接口替换]]></description><category></category></item><item><title><![CDATA[内网安全第一百四十一天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132412905</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132412905</guid><author>B_l_a_nk</author><pubDate>Mon, 21 Aug 2023 18:17:35 +0800</pubDate><description><![CDATA[1、权限维持-Windows-内网域环境
2、SSP&HOOK&SID&DSRM&Skeleton]]></description><category></category></item><item><title><![CDATA[内网安全第一百三十四天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132412064</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132412064</guid><author>B_l_a_nk</author><pubDate>Mon, 21 Aug 2023 17:17:11 +0800</pubDate><description><![CDATA[1、横向移动-NTLM-Relay To SMB
2、横向移动-NTLM-Inveigh Hash破解]]></description><category></category></item><item><title><![CDATA[内网安全第一百三十三天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132402683</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132402683</guid><author>B_l_a_nk</author><pubDate>Mon, 21 Aug 2023 10:23:22 +0800</pubDate><description><![CDATA[0、横向移动-系统漏洞-CVE-2017-0146
1、横向移动-域控提权-CVE-2014-6324
2、横向移动-域控提权-CVE-2020-1472
3、横向移动-域控提权-CVE-2021-42287
4、横向移动-域控提权-CVE-2022-26923]]></description><category></category></item><item><title><![CDATA[内网安全第一百三十二天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132303230</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132303230</guid><author>B_l_a_nk</author><pubDate>Tue, 15 Aug 2023 17:19:02 +0800</pubDate><description><![CDATA[1、横向移动-内网服务-Exchange
2、横向移动-无账户-Exchange-爆破
3、横向移动-有账户-Exchange-漏洞]]></description><category></category></item><item><title><![CDATA[内网安全第一百三十一天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132141003</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132141003</guid><author>B_l_a_nk</author><pubDate>Mon, 07 Aug 2023 10:24:34 +0800</pubDate><description><![CDATA[1、横向移动-RDP
2、横向移动-WinRS&WinRM
3、横向移动-SPN&Kerberos
域横向移动-RDP-明文&NTLM]]></description><category></category></item><item><title><![CDATA[内网安全第一百三十天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132057150</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/132057150</guid><author>B_l_a_nk</author><pubDate>Wed, 02 Aug 2023 10:52:45 +0800</pubDate><description><![CDATA[1、横向移动-PTH-NTLM
2、横向移动-PTK-AES256
3、横向移动-PTT-漏洞&内存]]></description><category></category></item><item><title><![CDATA[内网安全第一百二十九天]]></title><link>https://blog.youkuaiyun.com/B_l_a_nk/article/details/131955613</link><guid>https://blog.youkuaiyun.com/B_l_a_nk/article/details/131955613</guid><author>B_l_a_nk</author><pubDate>Thu, 27 Jul 2023 11:03:15 +0800</pubDate><description><![CDATA[1、横向移动-WMI&SMB协议篇
2、横向移动-Impacket套件&CS插件
3、横向移动-Proxychains&CrackMapExec]]></description><category></category></item></channel></rss>