Deploying to gh-pages from @ 40aed63e0d 🚀
This commit is contained in:
qwqdanchun
parent
d8d83520fe
commit
eca527472c
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="这次是标题党了，主要还是记录一下自己在使用Appdomain中遇到的一点小坑 前情提要我一直很喜欢使用C#制作一些工具，或者制作一些技术的poc，在测试杀软对行为的拦截时为了避免频繁文件落地，都是使用对一个C#远控添加插件的方式测试的。 最常用的插件加载方式就是Assembly.Load了，使用过的都会发现这种方式可以加载不能卸载，用Procexp之类的软件可以很方便的查看进程内的Assembly">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-02-17T01:29:19.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.523Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.651Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content=".Net">
|
||||
<meta property="article:tag" content="Appdomain">
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="某大型活动还有一段时间，但是总会有很多新工具出现，想用但不敢用该怎么办，还是需要先了解下常见的源码投毒方式吧 方法1.代码带毒直接在代码中实现一个后门，常见的操作包括但不限于在程序启动时，按钮点击时，程序结束时等位置添加恶意代码。常见恶意代码为反向shell或各式各样的shellcode加载器 对于visual studio等编译器，不会在项目中显示未包含文件的代码，但是如果引用到了，依然会编译进">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-05-09T07:12:17.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.523Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.651Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="Backdoor">
|
||||
<meta property="article:tag" content="BlueTeam">
|
||||
|
|
@ -507,8 +507,8 @@
|
|||
<article class="post-next col-6">
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1">
|
||||
<span class="hidden-mobile">Pillager开发记录-1</span>
|
||||
<a href="/Telegram_Forensics/" title="Telegram取证相关的记录">
|
||||
<span class="hidden-mobile">Telegram取证相关的记录</span>
|
||||
<span class="visible-mobile">下一篇</span>
|
||||
<i class="iconfont icon-arrowright"></i>
|
||||
</a>
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="早在疫情期间就经历了好久的线上考试，最近又遇到了类似的需求，正好就写写相关的东西吧。为了防止暴露是哪几款软件，文中就不放图了，只是说说方法。 逆向相关目前遇到过的主流是C#/Electron的程序，也有部分C++的程序。 C#的可以直接用DnSpy查看代码并修改 Electron的可以解包asar查看代码，修改后也可以打包替换回去 C++的一般IDA辅助分析后，可以手动跳过部分函数或判断">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-03-16T05:30:29.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.523Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.651Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content=".Net">
|
||||
<meta property="article:tag" content="Crack">
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="突发奇想的一个思路，不太好用就发出来玩玩吧 背景知识目录挂载subst是Windows自带的一个工具，可以将文件目录挂载为磁盘，但是重启后不会继续挂载了。 如果想长期挂载，需要修改注册表 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices。 https://learn.microsoft.com/en-us/windo">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-02-27T09:49:45.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.523Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.651Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="Bypass">
|
||||
<meta property="article:tag" content="360">
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="首先感谢Zy143L大佬进行的PCB板的设计和制作。 特点 附带tf卡槽，可自选是否附带储存空间 使用CH552单片机，方便上手 通用G2版型，方便购买或定制外壳 带有USBHUB，可以同时作为U盘和可编程USB控制设备使用 带有霍尔开关，用于控制烧写，也可用于连接后的控制开关，即使加壳也不影响后续烧写 成本低廉，适合大批量使用 使用方法1.准备环境Windows系统，安装Arduino IDE">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-09-06T10:47:22.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.531Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.659Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="USB">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
|
|
@ -489,6 +489,12 @@
|
|||
<article class="post-prev col-6">
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1">
|
||||
<i class="iconfont icon-arrowleft"></i>
|
||||
<span class="hidden-mobile">Pillager开发记录-1</span>
|
||||
<span class="visible-mobile">上一篇</span>
|
||||
</a>
|
||||
|
||||
</article>
|
||||
<article class="post-next col-6">
|
||||
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="2022年过的真的很快啊，一转眼就2023了，本来想着元旦的时候，搞一点东西分享出来，但是因为太忙没有腾出时间，那就只好赶着春节前夕，水一点文章了。 CobaltStrike简介CobaltStrike是一套商业化的C2框架，提供了较好的兼容性和可扩展性，也因此成为了目前红队中最为广泛使用的C2。但是因为使用广泛，其特征也被大量采集，并用于识别beacon及TeamServer，这里我就简单的把自">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-01-21T15:59:59.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="CobaltStrike">
|
||||
<meta property="article:tag" content="Modify">
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="起源一年多以前，Jonas L在推特首次提出了这个注入方法，并在评论区提出了一些可能的利用方法。半年前，有人在GitHub发布了一份Poc，某种程度上进行了对注入方案的验证。 原理控制台程序，会有一个对应的Code Page，也就是代码页，这个东西是字符代码的一个映射，每个控制台对应两个代码页，一个输入一个输出。 大部分Code Page都是nls文件，但是看到有一部分是dll文件，确切地说是5开">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2022-11-25T13:03:31.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="Injection">
|
||||
<meta property="article:tag" content="CodePage">
|
||||
|
|
|
|||
|
|
@ -23,8 +23,8 @@
|
|||
<meta property="og:site_name" content="簞純's Blog">
|
||||
<meta property="og:description" content="今年上半年，在开发 CobaltStrike 插件期间，没用遇到合适且长期更新的信息收集工具，便决定自己制作一款，也就有了Pillager项目。 这款工具旨在收集机器上浏览器，聊天软件，已经其他常用工具的凭证、记录等敏感信息，从而进行进一步的后渗透工作。 思路的确定最初的想法只是为了制作一个小巧简介的 BOF ，但是后期研究发现使用 BOF 开发并不合适，综合考虑下选择了使用C#开发。进而就要考虑">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-04-14T21:40:56.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:published_time" content="2023-11-09T19:22:25.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="Forensics">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
|
|
@ -226,8 +226,8 @@
|
|||
|
||||
<span class="post-meta">
|
||||
<i class="iconfont icon-date-fill" aria-hidden="true"></i>
|
||||
<time datetime="2023-04-15 05:40" pubdate>
|
||||
2023年4月15日 凌晨
|
||||
<time datetime="2023-11-10 03:22" pubdate>
|
||||
2023年11月10日 凌晨
|
||||
</time>
|
||||
</span>
|
||||
|
||||
|
|
@ -321,19 +321,19 @@
|
|||
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1"
|
||||
<a href="/Telegram_Forensics/" title="Telegram取证相关的记录"
|
||||
class="list-group-item list-group-item-action
|
||||
active">
|
||||
<span class="category-post">Pillager开发记录-1</span>
|
||||
">
|
||||
<span class="category-post">Telegram取证相关的记录</span>
|
||||
</a>
|
||||
|
||||
|
||||
|
||||
|
||||
<a href="/Telegram_Forensics/" title="Telegram取证相关的记录"
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1"
|
||||
class="list-group-item list-group-item-action
|
||||
">
|
||||
<span class="category-post">Telegram取证相关的记录</span>
|
||||
active">
|
||||
<span class="category-post">Pillager开发记录-1</span>
|
||||
</a>
|
||||
|
||||
|
||||
|
|
@ -439,7 +439,7 @@
|
|||
|
||||
<div class="license-meta-item license-meta-date">
|
||||
<div>发布于</div>
|
||||
<div>2023年4月15日</div>
|
||||
<div>2023年11月10日</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
|
@ -482,18 +482,12 @@
|
|||
<article class="post-prev col-6">
|
||||
|
||||
|
||||
<a href="/Backdoor_In_Source/" title="红队工具的投毒相关">
|
||||
<i class="iconfont icon-arrowleft"></i>
|
||||
<span class="hidden-mobile">红队工具的投毒相关</span>
|
||||
<span class="visible-mobile">上一篇</span>
|
||||
</a>
|
||||
|
||||
</article>
|
||||
<article class="post-next col-6">
|
||||
|
||||
|
||||
<a href="/Telegram_Forensics/" title="Telegram取证相关的记录">
|
||||
<span class="hidden-mobile">Telegram取证相关的记录</span>
|
||||
<a href="/Ch552_USBHUB/" title="可编程USB控制设备">
|
||||
<span class="hidden-mobile">可编程USB控制设备</span>
|
||||
<span class="visible-mobile">下一篇</span>
|
||||
<i class="iconfont icon-arrowright"></i>
|
||||
</a>
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="概述CVE-2021-1675 / CVE-2021-34527 这两个洞本质上就是一个洞，只是因为修复的问题分配了两个编号。具体的漏洞分析就不赘述了，很早就有人发过，没必要炒冷饭，这里只总结下实际使用时可能出现的问题，以及很多poc中不会提到的细节 复现攻击环境注意事项1.域相关目标机器为域内Windows Server机器时，攻击机必须为同一域内的机器；目标机器为非域环境Window">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2022-11-12T19:34:50.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="0/N Day">
|
||||
<meta property="article:tag" content="PrintNightmare">
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="因为各种原因，接触了一些场景要对Telegram进行信息收集，这里就记录下基本思路，只涉及Windows的官方客户端 1.关于tdata正常安装的Telegram会安装至 %appdata%\Telegram Desktop，在这个目录中 modules文件夹存放了一个D3D的dll，tdata文件夹存放所有数据，unins000.exe/unins000.dat文件是卸载相关，Updater.e">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-04-14T21:40:56.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta property="article:tag" content="Forensics">
|
||||
<meta property="article:tag" content="Telegram">
|
||||
|
|
@ -322,19 +322,19 @@
|
|||
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1"
|
||||
<a href="/Telegram_Forensics/" title="Telegram取证相关的记录"
|
||||
class="list-group-item list-group-item-action
|
||||
">
|
||||
<span class="category-post">Pillager开发记录-1</span>
|
||||
active">
|
||||
<span class="category-post">Telegram取证相关的记录</span>
|
||||
</a>
|
||||
|
||||
|
||||
|
||||
|
||||
<a href="/Telegram_Forensics/" title="Telegram取证相关的记录"
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1"
|
||||
class="list-group-item list-group-item-action
|
||||
active">
|
||||
<span class="category-post">Telegram取证相关的记录</span>
|
||||
">
|
||||
<span class="category-post">Pillager开发记录-1</span>
|
||||
</a>
|
||||
|
||||
|
||||
|
|
@ -499,9 +499,9 @@
|
|||
<article class="post-prev col-6">
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" title="Pillager开发记录-1">
|
||||
<a href="/Backdoor_In_Source/" title="红队工具的投毒相关">
|
||||
<i class="iconfont icon-arrowleft"></i>
|
||||
<span class="hidden-mobile">Pillager开发记录-1</span>
|
||||
<span class="hidden-mobile">红队工具的投毒相关</span>
|
||||
<span class="visible-mobile">上一篇</span>
|
||||
</a>
|
||||
|
||||
|
|
|
|||
|
|
@ -23,8 +23,8 @@
|
|||
<meta property="og:site_name" content="簞純's Blog">
|
||||
<meta property="og:description" content="这里是簞純，一个单纯的日常生产bug再debug的菜鸡红队安全开发，目前主要做Windows下的二进制方向开发 ID：簞純 / qwqdanchun Tag：伪技术宅，干饭人，老二次元，佛系，咕咕咕，夜猫子 QQ聊天群：814084837">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:published_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
|
||||
|
|
|
|||
|
|
@ -235,12 +235,6 @@
|
|||
|
||||
<p class="h5">2023</p>
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
||||
<a href="/Telegram_Forensics/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<div class="list-group-item-title">Telegram取证相关的记录</div>
|
||||
|
|
|
|||
|
|
@ -0,0 +1,391 @@
|
|||
|
||||
|
||||
<!DOCTYPE html>
|
||||
<html lang="zh-CN" data-default-color-scheme=auto>
|
||||
|
||||
|
||||
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<link rel="apple-touch-icon" sizes="76x76" href="/img/favicon.ico">
|
||||
<link rel="icon" href="/img/favicon.ico">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=5.0, shrink-to-fit=no">
|
||||
<meta http-equiv="x-ua-compatible" content="ie=edge">
|
||||
|
||||
<meta name="theme-color" content="#2f4154">
|
||||
<meta name="author" content="qwqdanchun">
|
||||
<meta name="keywords" content="">
|
||||
|
||||
<meta property="og:type" content="website">
|
||||
<meta property="og:title" content="归档">
|
||||
<meta property="og:url" content="https://blog.qwqdanchun.com/archives/2023/11/index.html">
|
||||
<meta property="og:site_name" content="簞純's Blog">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
|
||||
|
||||
<meta name="referrer" content="no-referrer-when-downgrade">
|
||||
|
||||
|
||||
<title>归档 - 簞純's Blog</title>
|
||||
|
||||
<link rel="stylesheet" href="https://lib.baomitu.com/twitter-bootstrap/4.6.1/css/bootstrap.min.css" />
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<!-- 主题依赖的图标库，不要自行修改 -->
|
||||
<!-- Do not modify the link that theme dependent icons -->
|
||||
|
||||
<link rel="stylesheet" href="//at.alicdn.com/t/font_1749284_hj8rtnfg7um.css">
|
||||
|
||||
|
||||
|
||||
<link rel="stylesheet" href="//at.alicdn.com/t/font_1736178_lbnruvf0jn.css">
|
||||
|
||||
|
||||
<link rel="stylesheet" href="/css/main.css" />
|
||||
|
||||
|
||||
<link id="highlight-css" rel="stylesheet" href="/css/highlight.css" />
|
||||
|
||||
<link id="highlight-css-dark" rel="stylesheet" href="/css/highlight-dark.css" />
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<script id="fluid-configs">
|
||||
var Fluid = window.Fluid || {};
|
||||
Fluid.ctx = Object.assign({}, Fluid.ctx)
|
||||
var CONFIG = {"hostname":"blog.qwqdanchun.com","root":"/","version":"1.9.3","typing":{"enable":true,"typeSpeed":70,"cursorChar":"_","loop":false,"scope":[]},"anchorjs":{"enable":true,"element":"h1,h2,h3,h4,h5,h6","placement":"left","visible":"hover","icon":""},"progressbar":{"enable":true,"height_px":3,"color":"#29d","options":{"showSpinner":false,"trickleSpeed":100}},"code_language":{"enable":true,"default":"TEXT"},"copy_btn":true,"image_caption":{"enable":true},"image_zoom":{"enable":true,"img_url_replace":["",""]},"toc":{"enable":true,"placement":"right","headingSelector":"h1,h2,h3,h4,h5,h6","collapseDepth":0},"lazyload":{"enable":true,"loading_img":"/img/loading.gif","onlypost":false,"offset_factor":2},"web_analytics":{"enable":false,"follow_dnt":true,"baidu":null,"google":null,"gtag":null,"tencent":{"sid":null,"cid":null},"woyaola":null,"cnzz":null,"leancloud":{"app_id":null,"app_key":null,"server_url":null,"path":"window.location.pathname","ignore_local":false}},"search_path":"/local-search.xml"};
|
||||
|
||||
if (CONFIG.web_analytics.follow_dnt) {
|
||||
var dntVal = navigator.doNotTrack || window.doNotTrack || navigator.msDoNotTrack;
|
||||
Fluid.ctx.dnt = dntVal && (dntVal.startsWith('1') || dntVal.startsWith('yes') || dntVal.startsWith('on'));
|
||||
}
|
||||
</script>
|
||||
<script src="/js/utils.js" ></script>
|
||||
<script src="/js/color-schema.js" ></script>
|
||||
|
||||
|
||||
|
||||
|
||||
<meta name="generator" content="Hexo 6.3.0"></head>
|
||||
|
||||
|
||||
<body>
|
||||
|
||||
|
||||
<header>
|
||||
|
||||
|
||||
<div class="header-inner" style="height: 60vh;">
|
||||
<nav id="navbar" class="navbar fixed-top navbar-expand-lg navbar-dark scrolling-navbar">
|
||||
<div class="container">
|
||||
<a class="navbar-brand" href="/">
|
||||
<strong>簞純's Blog</strong>
|
||||
</a>
|
||||
|
||||
<button id="navbar-toggler-btn" class="navbar-toggler" type="button" data-toggle="collapse"
|
||||
data-target="#navbarSupportedContent"
|
||||
aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
|
||||
<div class="animated-icon"><span></span><span></span><span></span></div>
|
||||
</button>
|
||||
|
||||
<!-- Collapsible content -->
|
||||
<div class="collapse navbar-collapse" id="navbarSupportedContent">
|
||||
<ul class="navbar-nav ml-auto text-center">
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/">
|
||||
<i class="iconfont icon-home-fill"></i>
|
||||
首页
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/archives/">
|
||||
<i class="iconfont icon-archive-fill"></i>
|
||||
归档
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/categories/">
|
||||
<i class="iconfont icon-category-fill"></i>
|
||||
分类
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/tags/">
|
||||
<i class="iconfont icon-tags-fill"></i>
|
||||
标签
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/about/">
|
||||
<i class="iconfont icon-user-fill"></i>
|
||||
关于
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<li class="nav-item">
|
||||
<a class="nav-link" href="/links/">
|
||||
<i class="iconfont icon-link-fill"></i>
|
||||
友链
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
<li class="nav-item" id="search-btn">
|
||||
<a class="nav-link" target="_self" href="javascript:;" data-toggle="modal" data-target="#modalSearch" aria-label="Search">
|
||||
<i class="iconfont icon-search"></i>
|
||||
</a>
|
||||
</li>
|
||||
|
||||
|
||||
|
||||
<li class="nav-item" id="color-toggle-btn">
|
||||
<a class="nav-link" target="_self" href="javascript:;" aria-label="Color Toggle"> <i
|
||||
class="iconfont icon-dark" id="color-toggle-icon"></i> </a>
|
||||
</li>
|
||||
|
||||
</ul>
|
||||
</div>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
|
||||
|
||||
<div id="banner" class="banner" parallax=true
|
||||
style="background: url('/img/default.png') no-repeat center center; background-size: cover;">
|
||||
<div class="full-bg-img">
|
||||
<div class="mask flex-center" style="background-color: rgba(0, 0, 0, 0.3)">
|
||||
<div class="banner-text text-center fade-in-up">
|
||||
<div class="h2">
|
||||
|
||||
<span id="subtitle" data-typed-text="归档"></span>
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
</header>
|
||||
|
||||
<main>
|
||||
|
||||
<div class="container nopadding-x-md">
|
||||
<div id="board"
|
||||
>
|
||||
|
||||
<div class="container">
|
||||
<div class="row">
|
||||
<div class="col-12 col-md-10 m-auto">
|
||||
|
||||
|
||||
<div class="list-group">
|
||||
<p class="h4">共计 11 篇文章</p>
|
||||
<hr>
|
||||
|
||||
|
||||
|
||||
|
||||
<p class="h5">2023</p>
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>11-10</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
<a id="scroll-top-button" aria-label="TOP" href="#" role="button">
|
||||
<i class="iconfont icon-arrowup" aria-hidden="true"></i>
|
||||
</a>
|
||||
|
||||
|
||||
|
||||
<div class="modal fade" id="modalSearch" tabindex="-1" role="dialog" aria-labelledby="ModalLabel"
|
||||
aria-hidden="true">
|
||||
<div class="modal-dialog modal-dialog-scrollable modal-lg" role="document">
|
||||
<div class="modal-content">
|
||||
<div class="modal-header text-center">
|
||||
<h4 class="modal-title w-100 font-weight-bold">搜索</h4>
|
||||
<button type="button" id="local-search-close" class="close" data-dismiss="modal" aria-label="Close">
|
||||
<span aria-hidden="true">×</span>
|
||||
</button>
|
||||
</div>
|
||||
<div class="modal-body mx-3">
|
||||
<div class="md-form mb-5">
|
||||
<input type="text" id="local-search-input" class="form-control validate">
|
||||
<label data-error="x" data-success="v" for="local-search-input">关键词</label>
|
||||
</div>
|
||||
<div class="list-group" id="local-search-result"></div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
|
||||
</main>
|
||||
|
||||
<footer>
|
||||
<div class="footer-inner">
|
||||
|
||||
<div class="footer-content">
|
||||
<a href="https://hexo.io" target="_blank" rel="nofollow noopener"><span>Hexo</span></a> <i class="iconfont icon-love"></i> <a href="https://github.com/fluid-dev/hexo-theme-fluid" target="_blank" rel="nofollow noopener"><span>Fluid</span></a>
|
||||
</div>
|
||||
|
||||
|
||||
<div class="statistics">
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<span id="busuanzi_container_site_pv" style="display: none">
|
||||
总访问量
|
||||
<span id="busuanzi_value_site_pv"></span>
|
||||
次
|
||||
</span>
|
||||
|
||||
|
||||
<span id="busuanzi_container_site_uv" style="display: none">
|
||||
总访客数
|
||||
<span id="busuanzi_value_site_uv"></span>
|
||||
人
|
||||
</span>
|
||||
|
||||
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
|
||||
|
||||
</div>
|
||||
|
||||
</footer>
|
||||
|
||||
<!-- Scripts -->
|
||||
|
||||
<script src="https://lib.baomitu.com/nprogress/0.2.0/nprogress.min.js" ></script>
|
||||
<link rel="stylesheet" href="https://lib.baomitu.com/nprogress/0.2.0/nprogress.min.css" />
|
||||
|
||||
<script>
|
||||
NProgress.configure({"showSpinner":false,"trickleSpeed":100})
|
||||
NProgress.start()
|
||||
window.addEventListener('load', function() {
|
||||
NProgress.done();
|
||||
})
|
||||
</script>
|
||||
|
||||
|
||||
<script src="https://lib.baomitu.com/jquery/3.6.0/jquery.min.js" ></script>
|
||||
<script src="https://lib.baomitu.com/twitter-bootstrap/4.6.1/js/bootstrap.min.js" ></script>
|
||||
<script src="/js/events.js" ></script>
|
||||
<script src="/js/plugins.js" ></script>
|
||||
|
||||
|
||||
<script src="https://lib.baomitu.com/typed.js/2.0.12/typed.min.js" ></script>
|
||||
<script>
|
||||
(function (window, document) {
|
||||
var typing = Fluid.plugins.typing;
|
||||
var subtitle = document.getElementById('subtitle');
|
||||
if (!subtitle || !typing) {
|
||||
return;
|
||||
}
|
||||
var text = subtitle.getAttribute('data-typed-text');
|
||||
|
||||
typing(text);
|
||||
|
||||
})(window, document);
|
||||
</script>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<script src="/js/img-lazyload.js" ></script>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<script src="/js/local-search.js" ></script>
|
||||
|
||||
<script defer src="https://busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js" ></script>
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
<!-- 主题的启动项，将它保持在最底部 -->
|
||||
<!-- the boot of the theme, keep it at the bottom -->
|
||||
<script src="/js/boot.js" ></script>
|
||||
|
||||
|
||||
|
||||
|
||||
<noscript>
|
||||
<div class="noscript-warning">博客在允许 JavaScript 运行的环境下浏览效果更佳</div>
|
||||
</noscript>
|
||||
</body>
|
||||
</html>
|
||||
|
|
@ -235,6 +235,12 @@
|
|||
|
||||
<p class="h5">2023</p>
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>11-10</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
||||
<a href="/Ch552_USBHUB/" class="list-group-item list-group-item-action">
|
||||
<time>09-06</time>
|
||||
<div class="list-group-item-title">可编程USB控制设备</div>
|
||||
|
|
@ -247,12 +253,6 @@
|
|||
</a>
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
||||
<a href="/Telegram_Forensics/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<div class="list-group-item-title">Telegram取证相关的记录</div>
|
||||
|
|
|
|||
|
|
@ -235,6 +235,12 @@
|
|||
|
||||
<p class="h5">2023</p>
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>11-10</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
||||
<a href="/Ch552_USBHUB/" class="list-group-item list-group-item-action">
|
||||
<time>09-06</time>
|
||||
<div class="list-group-item-title">可编程USB控制设备</div>
|
||||
|
|
@ -247,12 +253,6 @@
|
|||
</a>
|
||||
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
||||
<a href="/Telegram_Forensics/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<div class="list-group-item-title">Telegram取证相关的记录</div>
|
||||
|
|
|
|||
|
|
@ -236,7 +236,7 @@
|
|||
<p class="h5">2023</p>
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<time>11-10</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
|
|
|||
|
|
@ -24,7 +24,7 @@
|
|||
<meta property="og:description" content="历时半个多月，删站的我又决定把博客搭起来了，这次从用了五年的Wordpress换成了Hexo，自动部署的纯静态博客似乎也是不错的 不过之前的文章没有保存了，很多都是早年写的东西，现在看来已经没有意义了 后面会尽量恢复记笔记的习惯，也就顺手更一些文章吧，希望我的文章可以帮到你">
|
||||
<meta property="og:locale" content="zh_CN">
|
||||
<meta property="article:published_time" content="2022-11-11T11:15:50.000Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:20:08.535Z">
|
||||
<meta property="article:modified_time" content="2023-11-09T19:23:22.663Z">
|
||||
<meta property="article:author" content="qwqdanchun">
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
|
||||
|
|
|
|||
122
index.html
122
index.html
|
|
@ -231,6 +231,67 @@
|
|||
|
||||
|
||||
|
||||
<div class="row mx-auto index-card">
|
||||
|
||||
|
||||
<article class="col-12 col-md-12 mx-auto index-info">
|
||||
<h1 class="index-header">
|
||||
|
||||
<a href="/Pillager_Forensics_1/" target="_self">
|
||||
Pillager开发记录-1
|
||||
</a>
|
||||
</h1>
|
||||
|
||||
|
||||
<a class="index-excerpt index-excerpt__noimg" href="/Pillager_Forensics_1/" target="_self">
|
||||
<div>
|
||||
今年上半年，在开发 CobaltStrike 插件期间，没用遇到合适且长期更新的信息收集工具，便决定自己制作一款，也就有了Pillager项目。 这款工具旨在收集机器上浏览器，聊天软件，已经其他常用工具的凭证、记录等敏感信息，从而进行进一步的后渗透工作。 思路的确定最初的想法只是为了制作一个小巧简介的 BOF ，但是后期研究发现使用 BOF 开发并不合适，综合考虑下选择了使用C#开发。进而就要考虑
|
||||
</div>
|
||||
</a>
|
||||
|
||||
<div class="index-btm post-metas">
|
||||
|
||||
<div class="post-meta mr-3">
|
||||
<i class="iconfont icon-date"></i>
|
||||
<time datetime="2023-11-10 03:22" pubdate>
|
||||
2023-11-10
|
||||
</time>
|
||||
</div>
|
||||
|
||||
|
||||
<div class="post-meta mr-3 d-flex align-items-center">
|
||||
<i class="iconfont icon-category"></i>
|
||||
|
||||
|
||||
<span class="category-chains">
|
||||
|
||||
|
||||
|
||||
<span class="category-chain">
|
||||
|
||||
<a href="/categories/Forensics/" class="category-chain-item">Forensics</a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
<div class="post-meta">
|
||||
<i class="iconfont icon-tags"></i>
|
||||
|
||||
<a href="/tags/Forensics/">#Forensics</a>
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</article>
|
||||
</div>
|
||||
|
||||
<div class="row mx-auto index-card">
|
||||
|
||||
|
||||
|
|
@ -355,67 +416,6 @@
|
|||
</article>
|
||||
</div>
|
||||
|
||||
<div class="row mx-auto index-card">
|
||||
|
||||
|
||||
<article class="col-12 col-md-12 mx-auto index-info">
|
||||
<h1 class="index-header">
|
||||
|
||||
<a href="/Pillager_Forensics_1/" target="_self">
|
||||
Pillager开发记录-1
|
||||
</a>
|
||||
</h1>
|
||||
|
||||
|
||||
<a class="index-excerpt index-excerpt__noimg" href="/Pillager_Forensics_1/" target="_self">
|
||||
<div>
|
||||
今年上半年，在开发 CobaltStrike 插件期间，没用遇到合适且长期更新的信息收集工具，便决定自己制作一款，也就有了Pillager项目。 这款工具旨在收集机器上浏览器，聊天软件，已经其他常用工具的凭证、记录等敏感信息，从而进行进一步的后渗透工作。 思路的确定最初的想法只是为了制作一个小巧简介的 BOF ，但是后期研究发现使用 BOF 开发并不合适，综合考虑下选择了使用C#开发。进而就要考虑
|
||||
</div>
|
||||
</a>
|
||||
|
||||
<div class="index-btm post-metas">
|
||||
|
||||
<div class="post-meta mr-3">
|
||||
<i class="iconfont icon-date"></i>
|
||||
<time datetime="2023-04-15 05:40" pubdate>
|
||||
2023-04-15
|
||||
</time>
|
||||
</div>
|
||||
|
||||
|
||||
<div class="post-meta mr-3 d-flex align-items-center">
|
||||
<i class="iconfont icon-category"></i>
|
||||
|
||||
|
||||
<span class="category-chains">
|
||||
|
||||
|
||||
|
||||
<span class="category-chain">
|
||||
|
||||
<a href="/categories/Forensics/" class="category-chain-item">Forensics</a>
|
||||
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
|
||||
</span>
|
||||
|
||||
</div>
|
||||
|
||||
|
||||
<div class="post-meta">
|
||||
<i class="iconfont icon-tags"></i>
|
||||
|
||||
<a href="/tags/Forensics/">#Forensics</a>
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
</article>
|
||||
</div>
|
||||
|
||||
<div class="row mx-auto index-card">
|
||||
|
||||
|
||||
|
|
|
|||
File diff suppressed because one or more lines are too long
|
|
@ -240,7 +240,7 @@
|
|||
<p class="h5">2023</p>
|
||||
|
||||
<a href="/Pillager_Forensics_1/" class="list-group-item list-group-item-action">
|
||||
<time>04-15</time>
|
||||
<time>11-10</time>
|
||||
<div class="list-group-item-title">Pillager开发记录-1</div>
|
||||
</a>
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue