Aggregator

本文记录了 HackTheBox 靶机 OneTwoSeven 的完整渗透过程。攻击链从端口扫描与 Web 信息搜集开始，发现目标开放 SSH、HTTP 以及仅允许本地访问的 60080 管理端口。随后利用 SFTP 提供的软链接功能绕过目录限制，读取系统敏感文件与 Vim swap 文件，恢复后台登录源码并获得管理员凭据。通过 SSH 本地端口转发访问内部管理后台后，进一步分析插件管理逻辑，利用

Эксперимент физиков доказал, что экстремальные космические процессы можно изучать на лабораторном столе.

A vulnerability was found in Tenda CH22 1.0.0.1 and classified as critical. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. This vulnerability is reported as CVE-2026-15543. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability has been found in will-moss Isaiah up to 1.36.9 and classified as critical. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. This vulnerability is documented as CVE-2026-15542. The attack can be initiated remotely. There is not any exploit available. The pull request to fix this issue awaits acceptance.

A vulnerability, which was classified as critical, was found in will-moss Isaiah up to 1.36.9. The impacted element is the function Server.Handle of the file app/server/server/server.go of the component Master Websocket Handler. Executing a manipulation of the argument Agent can lead to missing authorization. This vulnerability is registered as CVE-2026-15541. It is possible to launch the attack remotely. No exploit is available. The pull request to fix this issue awaits acceptance.

Submit #855077 / VDB-377893

pwn的一点心得体会

Submit #855075 / VDB-377892

很荣幸可以主导这个比赛pwn方向的命题，结合核心知识点进行了命题

测试用的Android实体机借给朋友了，所以就打算在Android Studio上搭建一套最新的APP渗透环境。