Fortify白盒神器20.1.1破解版,附license
感谢Mannix提供文件。0x01什么是fortify它又能干些什么？fottify 全名叫：Fortify SCA ，是HP的产品 ，是一个静态的、白盒的软件源代码安全测试工具。它通过内置的五大主要分析引擎：数据流、语义、结构、控制流、配置流等对应用软件的源代码进行 ...
ZIP压缩包解压密码爆破Python脚本
import itertools import string import zipfile import asyncio def save(name,data): with open(f'{name}.txt', 'a', encoding='utf-8') as f: f.write(data + 'n') async def try_extract_zip_async(zip_file, password ...
Understanding LB:get_current_routing() in FortiADC
Introduction to LB:get_current_routing()The LB:get_current_routing() function plays a crucial role in FortiADC, particularly for those looking to optimize traffic management through precise backend allocations. In this blog post, ...
Confluence CVE-2023-22515漏洞复现
前言参考链接：https://mp.weixin.qq.com/s?__biz=MzkxMzM3NjMxOQ==&mid=2247483685&idx=1&sn=54b435180042beb9b709d1553bc3f5ab&chksm=c17fd475f6085d634f1c529148f7f825400ffe899c51e181193e6bdf7cbd5d01c4697557104a&mpshare=1&scene=1&srcid=1 ...
Understanding and Configuring FortiAnalyzer Log Mail-Domain Settings
In the realm of network security and data management, logs are the backbone of monitoring and analysis. FortiAnalyzer offers a comprehensive suite of settings to ensure that logs are appropriately configured and managed. One cruc ...
Hikari源码分析 – AntiHook
一实现原理该PASS主要提供了三大功能，分别是inlinehook的检测、Runtime保护以及防止借助符号重绑定攻击：1.检测和中断潜在的内联hook：通过分析目标程序中的指令序列，该Pass可以识别可能的hook代码，即那些可能被攻击者植入用以控制程序行为的代 ...
How to Add a Country Group in FortiSIEM for Optimized Resource Management
Introduction FortiSIEM is an industry leader in security information and event management, offering a comprehensive system for overseeing security, performance, and compliance. One crucial aspect of managing FortiSIEM's resource ...
BigAnt Server 0-day Vulnerability Let Attackers Execute Malicious Code Via File Uploads
A critical zero-day vulnerability in BigAntSoft’s BigAnt Server (CVE-2025-0364) allows unauthenticated attackers to execute arbitrary code on affected systems through a chain of SaaS registration abuses and PHP file uploads. ...
DLL转shellcode研究
昨天重新看到了dll转shellcode的文章想分析一下原理，所以有了这篇文章。 实现DLL加载两个方法1.从DIRECTORY_ENTRY_EXPORT寻找ReflectiveLoader函数，修补之后利用该函数加载DLL2.实现一段LoadPE的shellcode，DLL跟在后面 DLL加载原理 启动一个可 ...
关于这几天cs进程里的特征和网上的一些bypass
参考链接https://adamsvoboda.net/sleeping-with-a-mask-on-cobaltstrike/https://mp.weixin.qq.com/s/mh8iYU6lQohsVrINM2uvCghttps://www.arashparsa.com/hook-heaps-and-live-free/ 过程首先cs上线进程注入个进程 使用ProcessHacker定位到SleepE ...