<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[T_Fire_of_Square的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/T_Fire_of_Square</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; T_Fire_of_Square]]></copyright><item><title><![CDATA[2025振兴杯-恶意程序分析-phpdream]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/158388416</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/158388416</guid><author>T_Fire_of_Square</author><pubDate>Wed, 25 Feb 2026 16:46:31 +0800</pubDate><description><![CDATA[摘要：本文分析了CHERNOVITE组织开发的PIPEDREAM工业控制系统恶意软件。通过IDA Pro逆向分析，在核心函数sub_140001B40中发现硬编码的AES-256解密密钥C110DD4FE9434147B92A5A1E3FDBF29A。该密钥被用于驱动操作和物理内存搜索，证实其作为统一解密密钥的功能。分析揭示了恶意软件的完整攻击链，包括加密初始化、驱动加载、内存搜索等阶段。最终确认flag为flag{C110DD4FE9434147B92A5A1E3FDBF29A}，并提出了防御建议，强调避]]></description><category></category></item><item><title><![CDATA[工控安全-2024振兴杯-被攻击的电机wp]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/158352085</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/158352085</guid><author>T_Fire_of_Square</author><pubDate>Tue, 24 Feb 2026 16:45:22 +0800</pubDate><description><![CDATA[摘要：本文分析了2024&quot;振兴杯&quot;网络安全竞赛中&quot;被攻击的电机&quot;题目。通过解析modbus/TCP协议流量，发现黑客通过功能码06（写单个保持寄存器）将电机转速从正常值3000转/分钟篡改为5000转/分钟。关键分析步骤包括：1)筛选写入单个寄存器的流量包；2)追踪寄存器114的数值变化；3)定位到序号9476的恶意数据包。最终确认异常转速值为5000转，对应的HEX数据作为flag提交。]]></description><category></category></item><item><title><![CDATA[CrewAI 扫描结果判断与自动迭代机制解析]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157940316</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157940316</guid><author>T_Fire_of_Square</author><pubDate>Tue, 10 Feb 2026 14:49:04 +0800</pubDate><description><![CDATA[鹅鹅鹅鹅鹅鹅鹅鹅鹅鹅鹅鹅]]></description><category></category></item><item><title><![CDATA[Crewai在进行扫描任务时的工具选择以及动态切换]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157940269</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157940269</guid><author>T_Fire_of_Square</author><pubDate>Tue, 10 Feb 2026 14:46:40 +0800</pubDate><description><![CDATA[嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎嘎]]></description><category></category></item><item><title><![CDATA[Crewai 挂载接入nmap的方法，让nmap扫描智能化]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157549937</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157549937</guid><author>T_Fire_of_Square</author><pubDate>Fri, 30 Jan 2026 15:53:44 +0800</pubDate><description><![CDATA[嗷嗷嗷嗷嗷嗷嗷嗷嗷]]></description><category></category></item><item><title><![CDATA[crewai 知识库针对信息安全应急演练的定位和使用]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157472107</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157472107</guid><author>T_Fire_of_Square</author><pubDate>Wed, 28 Jan 2026 15:48:03 +0800</pubDate><description><![CDATA[嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻嘻]]></description><category></category></item><item><title><![CDATA[crewai构建知识库的方式]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157472025</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157472025</guid><author>T_Fire_of_Square</author><pubDate>Wed, 28 Jan 2026 15:44:28 +0800</pubDate><description><![CDATA[桀桀桀桀桀桀桀桀桀桀桀桀桀桀桀桀桀桀桀桀]]></description><category></category></item><item><title><![CDATA[crewai进一步功能的实现]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157257296</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157257296</guid><author>T_Fire_of_Square</author><pubDate>Thu, 22 Jan 2026 16:53:21 +0800</pubDate><description><![CDATA[齁齁齁齁齁齁齁齁齁齁齁齁齁]]></description><category></category></item><item><title><![CDATA[crewai的进一步工具扩展]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157257232</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157257232</guid><author>T_Fire_of_Square</author><pubDate>Thu, 22 Jan 2026 16:50:31 +0800</pubDate><description><![CDATA[呱呱呱呱呱呱呱呱呱呱呱呱]]></description><category></category></item><item><title><![CDATA[CrewAI部署指南]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157218232</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157218232</guid><author>T_Fire_of_Square</author><pubDate>Wed, 21 Jan 2026 16:38:12 +0800</pubDate><description><![CDATA[咩咩咩咩咩咩咩咩]]></description><category></category></item><item><title><![CDATA[STRIX深度利用——扩展的可实现性]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157218125</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/157218125</guid><author>T_Fire_of_Square</author><pubDate>Wed, 21 Jan 2026 16:35:18 +0800</pubDate><description><![CDATA[哞哞哞哞哞哞哞哞哞]]></description><category></category></item><item><title><![CDATA[AI自动化渗透工具——STRIX部署指南]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/156762328</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/156762328</guid><author>T_Fire_of_Square</author><pubDate>Sun, 11 Jan 2026 21:32:11 +0800</pubDate><description><![CDATA[汪汪汪汪汪汪汪汪汪汪汪汪]]></description><category></category></item><item><title><![CDATA[Trendradar 部署指南]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/156754291</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/156754291</guid><author>T_Fire_of_Square</author><pubDate>Fri, 09 Jan 2026 11:02:58 +0800</pubDate><description><![CDATA[喵喵喵喵喵]]></description><category></category></item><item><title><![CDATA[利用Typora+github+Picgo自建图床]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/156754045</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/156754045</guid><author>T_Fire_of_Square</author><pubDate>Fri, 09 Jan 2026 10:45:14 +0800</pubDate><description><![CDATA[本文介绍了利用Typora、GitHub和PicGo搭建自动化图床的方法。首先说明使用GitHub的原因：Gitee不再支持个人图床，SM.MS关闭注册。具体步骤包括：1) 创建GitHub仓库并生成token；2) 安装配置PicGo，设置GitHub为默认图床并测试上传；3) 在Typora偏好设置中启用图片上传功能并验证。通过这套方案，用户可以实现Markdown文档中的图片自动上传至GitHub并生成URL链接，解决本地图片无法在博客网站显示的问题，提高写作效率。]]></description><category></category></item><item><title><![CDATA[初入堆的知识]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/144157567</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/144157567</guid><author>T_Fire_of_Square</author><pubDate>Sat, 30 Nov 2024 17:18:24 +0800</pubDate><description><![CDATA[堆是用malloc函数申请使用的。是虚拟地址空间的一块连续的线性区域，能够提供动态分配的内存，允许程序申请大小未知的内存，在用户与操作系统之间，作为动态内存管理的中间人，能够响应用户的申请内存请求，向操作系统申请内存，然后将返回给用户程序，管理用户所释放的内存，适时归还给操作系统。]]></description><category></category></item><item><title><![CDATA[Metasploit被控端与主控端的使用]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/143258855</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/143258855</guid><author>T_Fire_of_Square</author><pubDate>Sat, 26 Oct 2024 20:22:14 +0800</pubDate><description><![CDATA[首先我们先查看一下攻击机和靶机的ip地址攻击机ip：192.168.126.129靶机IP：125.217.53.83ps:后面电脑重启了，ip不一定对的上。]]></description><category></category></item><item><title><![CDATA[Python脚本检测笑脸漏洞]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/143169983</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/143169983</guid><author>T_Fire_of_Square</author><pubDate>Wed, 23 Oct 2024 08:15:22 +0800</pubDate><description><![CDATA[​        vsftpd2.3.4中在6200端口存在一个shell,使得任何人都可以进行连接，并且VSFTPD v2.3.4 服务，是以 root 权限运行的，最终我们提到的权限也是root；当连接带有vsftpd 2.3.4版本的服务器的21端口时，输入用户中带有“😃 ”,密码任意，因此也称为笑脸漏洞。]]></description><category></category></item><item><title><![CDATA[BUUCTF之Sandbox-bad]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/143025754</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/143025754</guid><author>T_Fire_of_Square</author><pubDate>Thu, 17 Oct 2024 18:34:42 +0800</pubDate><description><![CDATA[首先针对sandbox，我们需要有一个大概的认知，他是在一个代码执行环境下，脱离种种过滤和限制,最终成功拿到shell权限的过程,通常我们采用orw的方式来获取flag.orw全称only read write,只使用read write函数将flag读取并且打印，shellcode分为三个步骤简化为三句伪代码如下，主要需要将这三句C语言变成汇编代码对于函数的限制，只要通过两种方式来实现，第一种是采用prctl函数调用，第二种是使用seccomp库函数。对于这类限制，我们可以使用。]]></description><category></category></item><item><title><![CDATA[渗透测试作业3]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/142798519</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/142798519</guid><author>T_Fire_of_Square</author><pubDate>Wed, 09 Oct 2024 22:48:52 +0800</pubDate><description><![CDATA[首先我们需要知道的是因为qq为了保障消息的及时性，所以当两个设备在同一网域的时候，此时我们发的消息是不会经过保密的，这就给了我们很大的操作空间，那么接下来我会用两种方法来给大家展现一下如何在同一网络下，对QQ的信息进行抓包并且还原。我们把他另存为一个jpg的图片，我们把他放入010中分析，根据jpg文件的特性，他的文件头因该是FF D8，所以我们直接在010里搜索，查找。刚刚开头提过，当我们在同一网域下时，我们的ip地址是相同的，所以在流量抓包的，可以直接锁定我们的ip地址。ip.scr == 手机IP。]]></description><category></category></item><item><title><![CDATA[等保的理解]]></title><link>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/142751591</link><guid>https://blog.youkuaiyun.com/T_Fire_of_Square/article/details/142751591</guid><author>T_Fire_of_Square</author><pubDate>Tue, 08 Oct 2024 09:27:12 +0800</pubDate><description><![CDATA[等保（信息安全等级保护）是中国为加强网络安全而制定的一套安全保障体系，主要通过对信息系统进行分级管理来保护国家安全、经济安全和社会稳定。它将信息系统分为五个等级，等级越高，安全要求越严格。而2.0更加注重安全管理与技术结合，强调风险管理和动态防护。：2.0对五个等级进行了细化，增加了对信息系统生命周期管理和数据安全的要求。：2.0引入了更多现代化的安全技术，如云计算和大数据安全，适应新的网络环境。这样的体系不仅提高了信息系统的安全性，也为企业的安全管理提供了明确的指导。]]></description><category></category></item></channel></rss>