https://baozongwi.xyz/categories/offensive-security/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/internal-network-egress/Tue, 28 Oct 2025 19:42:35 +0800https://baozongwi.xyz/p/internal-network-egress/请求支援https://baozongwi.xyz/p/kubernetes-remote-api-unauthorized/Wed, 01 Oct 2025 10:01:15 +0800https://baozongwi.xyz/p/kubernetes-remote-api-unauthorized/集群搭建让我红温🥵https://baozongwi.xyz/p/redis-unauthorized-access-exploit/Mon, 22 Sep 2025 20:24:20 +0800https://baozongwi.xyz/p/redis-unauthorized-access-exploit/经常打的redis，经常催的redis🤔https://baozongwi.xyz/p/docker-remote-api-unauthorized-access-exploit/Mon, 22 Sep 2025 20:20:51 +0800https://baozongwi.xyz/p/docker-remote-api-unauthorized-access-exploit/概念 一位大佬使用docker swarm管理docker集群的时候，发现了管理的docker 节点上会开放一个TCP端口2375，绑定在0.0.0.0上，http访问会返回 404 page not found，然后他研究了下，发现这是 Docker Remote API，可以执行docker命令，比如访问 …https://baozongwi.xyz/p/springautumn-cloudmirror--delegation/Thu, 28 Aug 2025 21:47:03 +0800https://baozongwi.xyz/p/springautumn-cloudmirror--delegation/easyCMS7.7.5、LocalSystem转储hash、DFSCoerce强制认证 + Kerberos 票据劫持、DCSynchttps://baozongwi.xyz/p/springautumn-cloudmirror-time/Tue, 26 Aug 2025 21:45:29 +0800https://baozongwi.xyz/p/springautumn-cloudmirror-time/CVE-2021-34371、ASREPRoast攻击、SIDHistory攻击https://baozongwi.xyz/p/spring-autumn-mirror-certify/Fri, 22 Aug 2025 17:48:09 +0800https://baozongwi.xyz/p/spring-autumn-mirror-certify/log4j、smb未授权、Kerberoasting攻击、ADCS ESC1https://baozongwi.xyz/p/springautumn-cloudmirror-magicrelay/Wed, 20 Aug 2025 17:39:42 +0800https://baozongwi.xyz/p/springautumn-cloudmirror-magicrelay/Redis利用DLL劫持、向日葵RCE、CVE-2022-26923、Pass-The-Certhttps://baozongwi.xyz/p/springautumn-cloudmirror-brute4road/Wed, 20 Aug 2025 13:30:44 +0800https://baozongwi.xyz/p/springautumn-cloudmirror-brute4road/Redis主从复制RCE、base64利用suid提权、CVE-2021-25003、FULL-S4U攻击https://baozongwi.xyz/p/chunqiu-cloud-mirror-tsclient/Mon, 11 Aug 2025 16:47:31 +0000https://baozongwi.xyz/p/chunqiu-cloud-mirror-tsclient/MDUT、SeImpersonatePrivilege提权、C2基础使用、进程注入、放大镜提权、SeDebugPrivilege权限利用