<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Kurisu</title><description>Web 渗透与 AI 辅助攻防。</description><link>https://xycovo.com/</link><item><title>SRC 提交稿复盘：定级论证与实测写法</title><link>https://xycovo.com/posts/src-submission-craft-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/src-submission-craft-notes/</guid><description>三份提交稿复盘：三级链定级论证、OIDC 绕过报告结构与提交要点。</description><pubDate>Tue, 08 Sep 2026 16:00:00 GMT</pubDate></item><item><title>SRC 漏洞提交实战：EDUSRC、CNVD 的规则差与坑</title><link>https://xycovo.com/posts/src-platform-submission-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/src-platform-submission-notes/</guid><description>两个平台的规则差异、踩过的坑与提交门道。全文脱敏。</description><pubDate>Sat, 05 Sep 2026 13:30:00 GMT</pubDate></item><item><title>Apifox CDN 投毒应急：找回样本与 C2 定位</title><link>https://xycovo.com/posts/apifox-cdn-poisoning-ir/</link><guid isPermaLink="true">https://xycovo.com/posts/apifox-cdn-poisoning-ir/</guid><description>供应链投毒应急复盘：CDN 埋点 JS 被注入窃密代码，用 Wayback 找回样本、反混淆载荷并定位 C2。</description><pubDate>Tue, 01 Sep 2026 23:00:45 GMT</pubDate></item><item><title>高校 SRC 实战：教育行业攻击面测绘与漏洞模式</title><link>https://xycovo.com/posts/edusrc-recon-vuln-patterns/</link><guid isPermaLink="true">https://xycovo.com/posts/edusrc-recon-vuln-patterns/</guid><description>一周 7 所高校授权目标的侦察复盘：国产教育软件指纹图谱、五类高频漏洞模式与 WAF 封禁对抗。全文脱敏。</description><pubDate>Wed, 26 Aug 2026 20:00:00 GMT</pubDate></item><item><title>挖矿木马应急：ld.so.preload 隐藏进程溯源</title><link>https://xycovo.com/posts/mining-trojan-ir-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/mining-trojan-ir-notes/</guid><description>CPU 99% 但 top 看不到进程：busybox top、@reboot、ld.so.preload 三层排查。</description><pubDate>Fri, 21 Aug 2026 13:30:49 GMT</pubDate></item><item><title>应急响应复盘：阿里云入侵排查到 AKSK 接管</title><link>https://xycovo.com/posts/ir-and-pentest-case-review/</link><guid isPermaLink="true">https://xycovo.com/posts/ir-and-pentest-case-review/</guid><description>一次阿里云入侵应急的完整排查（时间线定位、三份日志、grep 挖马）、应急流程标准、AKSK 泄露攻击链拆解与密码喷洒。</description><pubDate>Sun, 09 Aug 2026 21:30:05 GMT</pubDate></item><item><title>第一个过审漏洞：短信平台密钥泄露</title><link>https://xycovo.com/posts/first-vuln-sms-key/</link><guid isPermaLink="true">https://xycovo.com/posts/first-vuln-sms-key/</guid><description>从接口审计发现短信平台凭据泄露，到无害验证、提交过审的完整记录。已脱敏。</description><pubDate>Thu, 06 Aug 2026 22:30:00 GMT</pubDate></item><item><title>六环链调试：从盲注读到 RCE 写入</title><link>https://xycovo.com/posts/six-chain-preauth-rce-debug-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/six-chain-preauth-rce-debug-notes/</guid><description>WordPress 源码级调试：缓存投毒、oEmbed、Customizer、REST 重入六环链复盘。</description><pubDate>Fri, 24 Jul 2026 13:45:04 GMT</pubDate></item><item><title>AI Agent 渗透测试：MCP 协议与工具调用</title><link>https://xycovo.com/posts/ai-agent-pentest-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/ai-agent-pentest-notes/</guid><description>拆解 AI Agent 三大组件、MCP 协议的能力边界与上下文膨胀问题，以及 AI 辅助前端逆向与密码喷洒的实战链路。</description><pubDate>Fri, 17 Jul 2026 11:00:43 GMT</pubDate></item><item><title>App 与小程序渗透：抓包、证书绑定绕过与反编译</title><link>https://xycovo.com/posts/app-miniprogram-pentest-primer/</link><guid isPermaLink="true">https://xycovo.com/posts/app-miniprogram-pentest-primer/</guid><description>App 与小程序渗透：抓包失败的原理、证书绑定绕过手法与反编译挖凭据。</description><pubDate>Tue, 07 Jul 2026 21:30:57 GMT</pubDate></item><item><title>一次真实渗透测试的完整流程</title><link>https://xycovo.com/posts/real-pentest-workflow/</link><guid isPermaLink="true">https://xycovo.com/posts/real-pentest-workflow/</guid><description>授权渗透固化下来的七阶段流程：授权先行、信息收集占一半工作量、无害验证、报告闭环。</description><pubDate>Mon, 22 Jun 2026 09:30:00 GMT</pubDate></item><item><title>React2Shell：从 Thenable 到 WAF 绕过</title><link>https://xycovo.com/posts/react2shell-vulnerability-series/</link><guid isPermaLink="true">https://xycovo.com/posts/react2shell-vulnerability-series/</guid><description>RSC 远程代码执行解析：Thenable 概念、Flight 协议与 unicode/大包 WAF 绕过。</description><pubDate>Sat, 20 Jun 2026 13:15:34 GMT</pubDate></item><item><title>框架漏洞选题：WordPress、ThinkPHP 与织梦</title><link>https://xycovo.com/posts/cms-framework-vuln-landscape/</link><guid isPermaLink="true">https://xycovo.com/posts/cms-framework-vuln-landscape/</guid><description>从 WordPress、ThinkPHP 到织梦：老洞的实战概率与「打常见框架还是打新 CVE」的判断。</description><pubDate>Mon, 08 Jun 2026 23:00:29 GMT</pubDate></item><item><title>SRC 信息收集自动化工具：从 2 小时到 30 分钟</title><link>https://xycovo.com/posts/src-recon-tool-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/src-recon-tool-notes/</guid><description>Python 信息收集流水线：编排 OneForAll/FOFA/Hunter 与 YAML POC 引擎。</description><pubDate>Tue, 02 Jun 2026 15:15:00 GMT</pubDate></item><item><title>SQL 注入没死：pgx 协议层走私查询</title><link>https://xycovo.com/posts/sql-smuggling-pgx-cve-2024-27304/</link><guid isPermaLink="true">https://xycovo.com/posts/sql-smuggling-pgx-cve-2024-27304/</guid><description>DEF CON 32 议题复现：pgx 驱动 2^32 长度溢出实现协议层查询走私。</description><pubDate>Fri, 22 May 2026 10:45:03 GMT</pubDate></item><item><title>FreeMarker 模板注入与积木报表 CVE-2023-4450</title><link>https://xycovo.com/posts/freemarker-ssti-and-jimureport-cve/</link><guid isPermaLink="true">https://xycovo.com/posts/freemarker-ssti-and-jimureport-cve/</guid><description>FreeMarker SSTI：视图名解析、内存模板遮蔽与积木报表未授权 RCE 的代码级分析。</description><pubDate>Wed, 06 May 2026 16:00:04 GMT</pubDate></item><item><title>MSF 与 Cobalt Strike：框架结构与团队服务部署</title><link>https://xycovo.com/posts/msf-cs-framework-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/msf-cs-framework-notes/</guid><description>MSF 模块体系与 SMB 利用流程、CS 的 Team Server/Beacon 架构与部署细节。</description><pubDate>Sat, 25 Apr 2026 16:15:52 GMT</pubDate></item><item><title>PHP 审计靶场：call_user_func 与一句话马</title><link>https://xycovo.com/posts/daiqile-audit-walkthrough/</link><guid isPermaLink="true">https://xycovo.com/posts/daiqile-audit-walkthrough/</guid><description>PHP 代码审计靶场复盘：call_user_func 可控性、一句话马形态与 .git 泄露源码恢复。</description><pubDate>Wed, 15 Apr 2026 13:30:00 GMT</pubDate></item><item><title>Windows 提权：内核、服务、DLL 劫持与凭证滥用</title><link>https://xycovo.com/posts/windows-privilege-escalation-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/windows-privilege-escalation-notes/</guid><description>账号与 ACL 体系、内核提权补丁查询、四类服务提权与 SAM 导出、Pass-the-Hash。</description><pubDate>Wed, 08 Apr 2026 15:00:24 GMT</pubDate></item><item><title>Linux 提权：SUID、计划任务与内核漏洞</title><link>https://xycovo.com/posts/linux-privilege-escalation-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/linux-privilege-escalation-notes/</guid><description>四类常规提权方法的真实成功率、内核提权的漏洞选型与补丁排查，以及「提权失败是常态」的排查心法。</description><pubDate>Wed, 01 Apr 2026 15:15:27 GMT</pubDate></item><item><title>雷池旧版本绕过与一次云告警攻防观察</title><link>https://xycovo.com/posts/safeline-bypass-and-cloud-alert-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/safeline-bypass-and-cloud-alert-notes/</guid><description>雷池 9.2.7 差异化绕过、「流量必须过雷池」的架构配置与端口映射坑，以及腾讯云告警背后的攻防案例。</description><pubDate>Sun, 22 Mar 2026 13:00:10 GMT</pubDate></item><item><title>PHP WebShell 免杀：查杀引擎原理与绕过手法</title><link>https://xycovo.com/posts/php-webshell-evasion-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/php-webshell-evasion-notes/</guid><description>静态/动态引擎的检测差异、污点追踪的两种中断方式、Session Handler 动态写入、函数别名与哈希碰撞对抗。</description><pubDate>Tue, 10 Mar 2026 20:45:52 GMT</pubDate></item><item><title>PHP 8.4+ 绕过 disable_functions</title><link>https://xycovo.com/posts/php-disable-functions-bypass-2025/</link><guid isPermaLink="true">https://xycovo.com/posts/php-disable-functions-bypass-2025/</guid><description>两条新链：CURLOPT_SSLENGINE 加载 so 直达 libc、Pdo\Sqlite 加载扩展后门。</description><pubDate>Sun, 01 Mar 2026 21:00:48 GMT</pubDate></item><item><title>针对真实目标的 SQL 注入：打崩 WAF 正则</title><link>https://xycovo.com/posts/lfi-and-sqli-real-target/</link><guid isPermaLink="true">https://xycovo.com/posts/lfi-and-sqli-real-target/</guid><description>文件包含到 RCE 的脚本包（竞态、日志毒化）与真实目标注入的正则回溯绕过。</description><pubDate>Sun, 08 Feb 2026 14:30:19 GMT</pubDate></item><item><title>无字母数字 RCE：16 字符限制下的命令执行</title><link>https://xycovo.com/posts/non-alphanumeric-rce-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/non-alphanumeric-rce-notes/</guid><description>反引号执行、伪协议写文件、问号通配符匹配临时文件，以及 preg_replace /e 分组注入与参数点号转下划线的冷知识。</description><pubDate>Thu, 05 Feb 2026 21:30:57 GMT</pubDate></item><item><title>SQL 注入绕过手册：从空格逗号到雷池 WAF</title><link>https://xycovo.com/posts/sql-waf-bypass-handbook/</link><guid isPermaLink="true">https://xycovo.com/posts/sql-waf-bypass-handbook/</guid><description>五类基础绕过的等价替换、双写与内联注释的边界、正则回溯与十六进制子查询两个进阶手法。</description><pubDate>Thu, 29 Jan 2026 15:15:47 GMT</pubDate></item><item><title>PHP 反序列化进阶：Session 不一致与 phar</title><link>https://xycovo.com/posts/php-deserialization-advanced-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/php-deserialization-advanced-notes/</guid><description>Session 引擎不一致、phar 触发面、ThinkPHP 链节点与 INTO DUMPFILE 组合拳。</description><pubDate>Mon, 26 Jan 2026 14:00:34 GMT</pubDate></item><item><title>文件包含到 RCE：filter chain 与内网实战</title><link>https://xycovo.com/posts/lfi-to-rce-advanced-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/lfi-to-rce-advanced-notes/</guid><description>伪协议利用、Docker 里日志包含失效的坑、filter chain 无上传 RCE 与高校内网实战。</description><pubDate>Fri, 26 Dec 2025 09:15:51 GMT</pubDate></item><item><title>SSRF 深入利用：gopher 打 Redis 三板斧</title><link>https://xycovo.com/posts/ssrf-to-redis-rce-lab/</link><guid isPermaLink="true">https://xycovo.com/posts/ssrf-to-redis-rce-lab/</guid><description>gopher 打 Redis 三板斧、CRLF 劫持会话触发反序列化与 SSRF 打 FastCGI。</description><pubDate>Sat, 20 Dec 2025 15:00:34 GMT</pubDate></item><item><title>SQL 注入深挖：报错注入原理与盲注脚本化</title><link>https://xycovo.com/posts/sql-injection-deep-dive/</link><guid isPermaLink="true">https://xycovo.com/posts/sql-injection-deep-dive/</guid><description>报错注入原理、时间盲注脚本化、宽字节与二次注入的触发条件。</description><pubDate>Mon, 17 Nov 2025 22:15:17 GMT</pubDate></item><item><title>LNMP 源码编译与 DVWA 部署：踩过的坑</title><link>https://xycovo.com/posts/lnmp-dvwa-env-lab-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/lnmp-dvwa-env-lab-notes/</guid><description>源码编译 LNMP + DVWA 部署：防火墙/SELinux、Nginx/PHP-FPM 联动与 systemd 机制。</description><pubDate>Fri, 03 Oct 2025 09:00:18 GMT</pubDate></item><item><title>JeecgBoot 双防线 SQLi 绕过实战</title><link>https://xycovo.com/posts/jeecgboot-sqli-dual-defense-bypass/</link><guid isPermaLink="true">https://xycovo.com/posts/jeecgboot-sqli-dual-defense-bypass/</guid><description>在框架查重接口挖到注入：绕过应用黑名单与 Druid WallFilter 的布尔盲注构造。</description><pubDate>Fri, 12 Sep 2025 13:45:44 GMT</pubDate></item><item><title>从指纹到 0day：反搜泄露源码的白盒审计工作流</title><link>https://xycovo.com/posts/source-driven-0day-hunting-workflow/</link><guid isPermaLink="true">https://xycovo.com/posts/source-driven-0day-hunting-workflow/</guid><description>指纹提取、源码狩猎、批量落地、五路并行审计、实例判定——靠这套流程挖到了通用型 0day。</description><pubDate>Wed, 27 Aug 2025 09:15:43 GMT</pubDate></item><item><title>安全知识工程：38 个仓库全量学习与笔记体系</title><link>https://xycovo.com/posts/security-knowledge-engineering/</link><guid isPermaLink="true">https://xycovo.com/posts/security-knowledge-engineering/</guid><description>把 38 个安全仓库、数千份文档读完并提炼成 58 篇结构化笔记的完整方法论：全量学习流水线、精读纪律与 AI 辅助机制。</description><pubDate>Wed, 13 Aug 2025 11:45:01 GMT</pubDate></item><item><title>安全防御实战：雷池 WAF + 蜜罐 + 主机加固</title><link>https://xycovo.com/posts/security-defense-blue-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/security-defense-blue-notes/</guid><description>蓝队视角：雷池部署与拦截分析、HFish 蜜罐告警研判、Linux 主机加固清单与 WebShell 检测思路。</description><pubDate>Tue, 29 Jul 2025 20:45:57 GMT</pubDate></item><item><title>Xdebug 单步跟踪 ThinkPHP 反序列化链</title><link>https://xycovo.com/posts/php-xdebug-debug-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/php-xdebug-debug-notes/</guid><description>phpStudy 配 Xdebug、VSCode 监听 9000，单步跟踪 ThinkPHP 反序列化链。</description><pubDate>Thu, 17 Jul 2025 11:15:29 GMT</pubDate></item><item><title>WAF 绕过与免杀：从规则原理到雷池实战</title><link>https://xycovo.com/posts/waf-bypass-evasion-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/waf-bypass-evasion-notes/</guid><description>自己的服务器挂雷池 WAF + 蜜罐：一边当防守方看拦截日志，一边拿自己的站练绕过。</description><pubDate>Sat, 21 Jun 2025 20:45:48 GMT</pubDate></item><item><title>Java 反序列化：CC6 链、Shiro 与冰蝎内存马</title><link>https://xycovo.com/posts/java-deserialization-cc6-shiro/</link><guid isPermaLink="true">https://xycovo.com/posts/java-deserialization-cc6-shiro/</guid><description>从序列化机制到 CC6 链原理、Shiro 硬编码密钥利用与冰蝎内存马的注入与查杀。</description><pubDate>Thu, 05 Jun 2025 13:15:02 GMT</pubDate></item><item><title>PHP 反序列化深入：POP 链构造思路与绕过手法</title><link>https://xycovo.com/posts/php-deserialization-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/php-deserialization-notes/</guid><description>魔术方法如何串成 POP 链、phar 反序列化、__wakeup 绕过、字符逃逸与审计找链思路。</description><pubDate>Tue, 27 May 2025 15:30:43 GMT</pubDate></item><item><title>Next.js CVE-2025-29927：中间件认证绕过复现</title><link>https://xycovo.com/posts/nextjs-cve-2025-29927/</link><guid isPermaLink="true">https://xycovo.com/posts/nextjs-cve-2025-29927/</guid><description>x-middleware-subrequest 请求头绕过 middleware 鉴权，导致未授权访问受保护路由。</description><pubDate>Thu, 10 Apr 2025 22:00:10 GMT</pubDate></item><item><title>Vulnhub DC-1 完整渗透：从信息收集到提权</title><link>https://xycovo.com/posts/vulnhub-dc1-writeup/</link><guid isPermaLink="true">https://xycovo.com/posts/vulnhub-dc1-writeup/</guid><description>DC-1 全流程：信息收集 → Drupalgeddon2（CVE-2018-7600）→ SUID find 提权。</description><pubDate>Tue, 01 Apr 2025 14:45:09 GMT</pubDate></item><item><title>Cacti CVE-2022-46169：认证绕过与命令注入复现</title><link>https://xycovo.com/posts/cacti-cve-2022-46169/</link><guid isPermaLink="true">https://xycovo.com/posts/cacti-cve-2022-46169/</guid><description>复现 Cacti 认证绕过 + 命令注入（CVE-2022-46169），含完整利用链与修复方案。</description><pubDate>Mon, 24 Mar 2025 23:30:24 GMT</pubDate></item><item><title>SSTI 模板注入：检测、利用与修复</title><link>https://xycovo.com/posts/ssti-template-injection/</link><guid isPermaLink="true">https://xycovo.com/posts/ssti-template-injection/</guid><description>Jinja2/Twig 检测、利用链构造、无回显 OOB 探测与修复方案。</description><pubDate>Mon, 10 Mar 2025 22:45:48 GMT</pubDate></item><item><title>ThinkPHP 5.1.37 反序列化链复现</title><link>https://xycovo.com/posts/thinkphp-5137-deserialization/</link><guid isPermaLink="true">https://xycovo.com/posts/thinkphp-5137-deserialization/</guid><description>在自建靶场复现 ThinkPHP 5.1.x 反序列化，从源码审计 POP 链构造到命令执行全流程与修复建议。</description><pubDate>Sat, 01 Mar 2025 10:45:00 GMT</pubDate></item><item><title>渗透测试 Skills 体系设计</title><link>https://xycovo.com/posts/pentest-skills-system/</link><guid isPermaLink="true">https://xycovo.com/posts/pentest-skills-system/</guid><description>把渗透方法论固化成可调用的 Skills：三层架构、AI 双引擎驱动、攻击面自动路由与核心原则。</description><pubDate>Thu, 20 Feb 2025 09:00:23 GMT</pubDate></item><item><title>渗透测试综合实战</title><link>https://xycovo.com/posts/sec-basic-12-final/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-12-final/</guid><description>从信息收集到 Getshell 的完整链路演练，附 AWVS / AppScan / Xray 使用体验。</description><pubDate>Wed, 29 Jan 2025 16:30:51 GMT</pubDate></item><item><title>Cobalt Strike 后渗透</title><link>https://xycovo.com/posts/sec-basic-11-cobalt-strike/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-11-cobalt-strike/</guid><description>CS 服务端/客户端架构、监听器与 Beacon、提权与横向移动基础。</description><pubDate>Wed, 22 Jan 2025 11:30:07 GMT</pubDate></item><item><title>Metasploit 渗透框架</title><link>https://xycovo.com/posts/sec-basic-10-metasploit/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-10-metasploit/</guid><description>MSF 模块体系、ms17-010 实战、Meterpreter 后渗透与木马生成。</description><pubDate>Sat, 11 Jan 2025 16:15:38 GMT</pubDate></item><item><title>XSS、文件上传、CSRF 与越权：Web 漏洞攻防链</title><link>https://xycovo.com/posts/xss-upload-csrf-idor-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/xss-upload-csrf-idor-notes/</guid><description>XSS 三类区别、图片马与文件包含配合、一句话马原理、CSRF 与越权复现。</description><pubDate>Sun, 05 Jan 2025 15:30:00 GMT</pubDate></item><item><title>暴力破解与弱口令</title><link>https://xycovo.com/posts/sec-basic-09-brute-force/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-09-brute-force/</guid><description>Burp Intruder 四种攻击模式，表单/验证码/Token 场景下的爆破与绕过。</description><pubDate>Sun, 29 Dec 2024 10:30:09 GMT</pubDate></item><item><title>CSRF 与越权漏洞</title><link>https://xycovo.com/posts/sec-basic-08-csrf-idor/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-08-csrf-idor/</guid><description>CSRF 改密演示与 token 防护，水平/垂直越权在 Pikachu 的实战演示。</description><pubDate>Wed, 18 Dec 2024 14:45:53 GMT</pubDate></item><item><title>命令执行与代码执行</title><link>https://xycovo.com/posts/sec-basic-07-command-exec/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-07-command-exec/</guid><description>命令拼接符、系统命令注入与代码注入的区别及过滤绕过思路。</description><pubDate>Tue, 10 Dec 2024 13:45:56 GMT</pubDate></item><item><title>XSS-Labs 靶场全关卡通关</title><link>https://xycovo.com/posts/xss-labs-walkthrough/</link><guid isPermaLink="true">https://xycovo.com/posts/xss-labs-walkthrough/</guid><description>每关的过滤点、输出上下文与 Payload 构造思路。</description><pubDate>Thu, 05 Dec 2024 21:15:00 GMT</pubDate></item><item><title>文件包含漏洞（LFI/RFI）</title><link>https://xycovo.com/posts/sec-basic-06-file-inclusion/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-06-file-inclusion/</guid><description>本地/远程包含原理，php://filter 伪协议读源码与日志包含 Getshell。</description><pubDate>Mon, 25 Nov 2024 11:30:40 GMT</pubDate></item><item><title>文件上传漏洞</title><link>https://xycovo.com/posts/sec-basic-05-file-upload/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-05-file-upload/</guid><description>客户端/服务端校验绕过、图片马制作与解析、%00 截断与二次渲染。</description><pubDate>Fri, 15 Nov 2024 15:30:44 GMT</pubDate></item><item><title>XSS 跨站脚本攻击</title><link>https://xycovo.com/posts/sec-basic-04-xss/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-04-xss/</guid><description>反射型/存储型 XSS 原理、Payload 构造与 Cookie 窃取演示。</description><pubDate>Sat, 09 Nov 2024 22:30:35 GMT</pubDate></item><item><title>SQL 进阶与 sqlmap</title><link>https://xycovo.com/posts/sec-basic-03-sqlmap/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-03-sqlmap/</guid><description>宽字节注入原理与验证，sqlmap GET/POST 注入与拖库全流程。</description><pubDate>Tue, 22 Oct 2024 14:15:34 GMT</pubDate></item><item><title>HTTPS 与 TLS：加密、哈希、编码到底差在哪</title><link>https://xycovo.com/posts/https-tls-encryption-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/https-tls-encryption-notes/</guid><description>加密/哈希/编码的区别、CA-PKI 防中间人，以及 Burp 抓 HTTPS 为什么要装证书。</description><pubDate>Mon, 14 Oct 2024 21:30:00 GMT</pubDate></item><item><title>SQL 基础</title><link>https://xycovo.com/posts/sec-basic-02-sql-basics/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-02-sql-basics/</guid><description>注入前置知识：库表操作、联合查询、注释符与闭合，SQLi-Labs 入门。</description><pubDate>Mon, 07 Oct 2024 20:00:18 GMT</pubDate></item><item><title>渗透入门：法规红线、HTTP 协议与 Burp 抓包</title><link>https://xycovo.com/posts/web-pentest-first-steps-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/web-pentest-first-steps-notes/</guid><description>法规红线、POC/EXP 术语辨析、URL 与 DNS 解析、Burp 代理配置与信息收集起点。</description><pubDate>Fri, 27 Sep 2024 20:15:00 GMT</pubDate></item><item><title>渗透测试流程与信息收集</title><link>https://xycovo.com/posts/sec-basic-01-recon/</link><guid isPermaLink="true">https://xycovo.com/posts/sec-basic-01-recon/</guid><description>七阶段流程，whois/Nmap/目录扫描/Google 语法四类信息收集实操。</description><pubDate>Sun, 22 Sep 2024 20:30:19 GMT</pubDate></item><item><title>云服务器部署雷池 WAF + HFish 蜜罐全记录</title><link>https://xycovo.com/posts/safeline-hfish-deploy/</link><guid isPermaLink="true">https://xycovo.com/posts/safeline-hfish-deploy/</guid><description>2 核 2G 云服务器上用 Docker 部署 SafeLine 社区版与 HFish 蜜罐的完整过程。</description><pubDate>Tue, 10 Sep 2024 21:00:38 GMT</pubDate></item><item><title>RHCSA 系统管理要点</title><link>https://xycovo.com/posts/rhcsa-notes-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/rhcsa-notes-guide/</guid><description>RHEL 环境下 RHCSA 认证要点：系统基础、文件管理、用户权限、网络存储与进程服务。</description><pubDate>Fri, 23 Aug 2024 10:30:20 GMT</pubDate></item><item><title>Ansible 自动化运维</title><link>https://xycovo.com/posts/ansible-automation-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/ansible-automation-guide/</guid><description>RHEL 环境下 Ansible 实操：Inventory 管理、Playbook 编写、变量与循环条件控制。</description><pubDate>Fri, 16 Aug 2024 13:30:38 GMT</pubDate></item><item><title>路由策略</title><link>https://xycovo.com/posts/route-policy-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/route-policy-guide/</guid><description>控制层与数据层流量、ACL/前缀列表抓取路由、Filter-Policy 过滤与 Route-Policy 修改路由属性。</description><pubDate>Tue, 06 Aug 2024 23:15:16 GMT</pubDate></item><item><title>OSPF 进阶</title><link>https://xycovo.com/posts/ospf-advanced-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/ospf-advanced-guide/</guid><description>六种 LSA 类型、五种报文格式、特殊区域优化、不规则区域方案与选路原则。</description><pubDate>Sun, 04 Aug 2024 23:15:16 GMT</pubDate></item><item><title>Burp Suite 实战：暴力破解、重放与 HTTPS 抓包</title><link>https://xycovo.com/posts/burpsuite-intruder-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/burpsuite-intruder-notes/</guid><description>Intruder 暴破、Repeater 重放、HTTPS 抓包证书配置与 DirBuster 目录扫描流程。</description><pubDate>Thu, 04 Jul 2024 15:00:10 GMT</pubDate></item><item><title>OSPF 动态路由</title><link>https://xycovo.com/posts/ospf-routing-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/ospf-routing-guide/</guid><description>邻居建立、LSA 类型、区域划分、DR/BDR 选举与华为设备配置。</description><pubDate>Fri, 21 Jun 2024 21:30:39 GMT</pubDate></item><item><title>VRRP 虚拟路由冗余</title><link>https://xycovo.com/posts/vrrp-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/vrrp-guide/</guid><description>Master/Backup 选举、抢占模式、上行链路监控与 VRRP+MSTP 组合方案。</description><pubDate>Sun, 09 Jun 2024 22:45:30 GMT</pubDate></item><item><title>Windows 与 Ubuntu 双环境 DVWA 靶场部署踩坑</title><link>https://xycovo.com/posts/dvwa-lnmp-lab-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/dvwa-lnmp-lab-notes/</guid><description>本地与虚拟机两套 DVWA 靶场部署，记录 PHP 版本兼容、MySQL 认证、Nginx 配置等 5 个坑。</description><pubDate>Thu, 23 May 2024 21:00:33 GMT</pubDate></item><item><title>phpStudy 一键搭建 DVWA 靶场</title><link>https://xycovo.com/posts/phpstudy-dvwa-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/phpstudy-dvwa-notes/</guid><description>端口冲突处理、数据库配置，以及 VMware + Ubuntu 的备选方案。</description><pubDate>Fri, 10 May 2024 13:00:28 GMT</pubDate></item><item><title>链路聚合</title><link>https://xycovo.com/posts/link-aggregation-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/link-aggregation-guide/</guid><description>手工模式与 LACP、华为 Eth-Trunk 配置、负载分担及二三层聚合实战。</description><pubDate>Wed, 01 May 2024 15:00:21 GMT</pubDate></item><item><title>生成树协议</title><link>https://xycovo.com/posts/spanning-tree-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/spanning-tree-guide/</guid><description>STP 防环原理、根桥选举、端口角色与状态机、RSTP/MSTP 及华为交换机配置。</description><pubDate>Wed, 17 Apr 2024 22:45:05 GMT</pubDate></item><item><title>Nmap 端口扫描实战</title><link>https://xycovo.com/posts/nmap-scanning-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/nmap-scanning-notes/</guid><description>-sS/-sT/-sU 常用选项、主机存活探测、服务版本识别与网段扫描实践。</description><pubDate>Sat, 06 Apr 2024 16:45:41 GMT</pubDate></item><item><title>园区网基础</title><link>https://xycovo.com/posts/campus-network-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/campus-network-guide/</guid><description>三层架构（接入/汇聚/核心）、二三层交换机区别及路由器角色。</description><pubDate>Thu, 21 Mar 2024 14:15:30 GMT</pubDate></item><item><title>TCP/IP 与 OSI 模型</title><link>https://xycovo.com/posts/tcpip-osi-model-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/tcpip-osi-model-guide/</guid><description>七层参考模型与 TCP/IP 四层模型对比、各层关键协议与封装解封装过程。</description><pubDate>Tue, 05 Mar 2024 23:00:22 GMT</pubDate></item><item><title>NFS 文件共享</title><link>https://xycovo.com/posts/nfs-export-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/nfs-export-guide/</guid><description>RHEL 环境下 NFS 配置：v3/v4 区别、/etc/exports、客户端挂载与 autofs 自动挂载。</description><pubDate>Mon, 26 Feb 2024 13:15:26 GMT</pubDate></item><item><title>网络基础与信息收集：HTTP、DNS 与 HTTPS</title><link>https://xycovo.com/posts/network-basics-and-recon/</link><guid isPermaLink="true">https://xycovo.com/posts/network-basics-and-recon/</guid><description>渗透测试法律红线、URL 与 HTTP 协议、DNS 解析过程、信息收集方法论与 HTTPS 加密机制。</description><pubDate>Fri, 16 Feb 2024 13:00:56 GMT</pubDate></item><item><title>Chronyd 时间同步</title><link>https://xycovo.com/posts/chronyd-time-server-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/chronyd-time-server-guide/</guid><description>RHEL 环境下 Chronyd 配置：chronyc 交互模式、服务端/客户端设置与同步状态检查。</description><pubDate>Fri, 09 Feb 2024 10:45:49 GMT</pubDate></item><item><title>Linux 计划任务</title><link>https://xycovo.com/posts/cron-scheduled-tasks-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/cron-scheduled-tasks-guide/</guid><description>at 一次性任务、crontab 周期任务、系统级 Cron 配置与 anacron 补救执行。</description><pubDate>Thu, 25 Jan 2024 16:00:10 GMT</pubDate></item><item><title>Firewalld 防火墙</title><link>https://xycovo.com/posts/firewalld-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/firewalld-guide/</guid><description>RHEL 环境下 Firewalld 配置：Zone、Service、Port 管理与富规则。</description><pubDate>Fri, 12 Jan 2024 11:30:04 GMT</pubDate></item><item><title>Kali Linux 入门</title><link>https://xycovo.com/posts/kali-linux-intro-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/kali-linux-intro-guide/</guid><description>Kali 下载、VMware 安装、中文汉化与桌面环境切换。</description><pubDate>Fri, 05 Jan 2024 20:15:43 GMT</pubDate></item><item><title>TCP 三次握手</title><link>https://xycovo.com/posts/tcp-handshake/</link><guid isPermaLink="true">https://xycovo.com/posts/tcp-handshake/</guid><description>三次握手与四次断开详解、状态变迁及 SYN Flood 防御机制。</description><pubDate>Sat, 23 Dec 2023 22:15:29 GMT</pubDate></item><item><title>NAT 实验</title><link>https://xycovo.com/posts/nat-experiment/</link><guid isPermaLink="true">https://xycovo.com/posts/nat-experiment/</guid><description>NAPT、EASY IP 与 NAT Server 配置，实现私网访问公网及公网访问内网服务。</description><pubDate>Fri, 08 Dec 2023 15:00:37 GMT</pubDate></item><item><title>RIP 实验</title><link>https://xycovo.com/posts/rip-experiment/</link><guid isPermaLink="true">https://xycovo.com/posts/rip-experiment/</guid><description>RIP v2 实验：IP 划分、环回配置、汇总路由与全网可达验证。</description><pubDate>Sun, 26 Nov 2023 13:15:12 GMT</pubDate></item><item><title>静态路由实验</title><link>https://xycovo.com/posts/static-routing/</link><guid isPermaLink="true">https://xycovo.com/posts/static-routing/</guid><description>基于 192.168.1.0/24 的网段划分、静态/缺省/黑洞路由及浮动静态路由配置。</description><pubDate>Sun, 12 Nov 2023 20:30:56 GMT</pubDate></item><item><title>JavaScript 基础</title><link>https://xycovo.com/posts/javascript-basics-guide/</link><guid isPermaLink="true">https://xycovo.com/posts/javascript-basics-guide/</guid><description>从变量、数据类型、运算符到函数与 DOM 操作的入门整理。</description><pubDate>Sun, 05 Nov 2023 22:30:05 GMT</pubDate></item><item><title>HTML 常用标签</title><link>https://xycovo.com/posts/html-tags/</link><guid isPermaLink="true">https://xycovo.com/posts/html-tags/</guid><description>表单、多媒体、超链接、表格等前端标签的用法与属性说明。</description><pubDate>Tue, 24 Oct 2023 21:00:28 GMT</pubDate></item><item><title>HTML 与 CSS 基础</title><link>https://xycovo.com/posts/html-css-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/html-css-notes/</guid><description>HTML 基础标签、CSS 选择器与常用样式属性整理。</description><pubDate>Sun, 15 Oct 2023 22:45:13 GMT</pubDate></item><item><title>Linux 常用命令</title><link>https://xycovo.com/posts/linux-commands-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/linux-commands-notes/</guid><description>文件操作、权限管理、vim、gcc 编译等常用命令备忘。</description><pubDate>Sat, 30 Sep 2023 21:00:18 GMT</pubDate></item><item><title>C 语言基础</title><link>https://xycovo.com/posts/c-language-notes/</link><guid isPermaLink="true">https://xycovo.com/posts/c-language-notes/</guid><description>从环境搭建、运算符、流程控制到指针与结构体的知识点整理。</description><pubDate>Wed, 20 Sep 2023 23:30:58 GMT</pubDate></item><item><title>VMware 安装 Ubuntu</title><link>https://xycovo.com/posts/ubuntu-vmware-setup/</link><guid isPermaLink="true">https://xycovo.com/posts/ubuntu-vmware-setup/</guid><description>在 VMware 上安装 Ubuntu 并配好 C 语言开发环境的过程记录。</description><pubDate>Sun, 10 Sep 2023 09:30:00 GMT</pubDate></item></channel></rss>