r3tr0's blog

【取证】k8s集群服务器

Posted on 2025-04-11 Edited on 2026-01-19 In note
Symbols count in article: 7.6k Reading time ≈ 7 mins.

k8s服务器取证相关知识

Posted on 2025-04-24 Edited on 2026-01-19 In note
Symbols count in article: 1k Reading time ≈ 1 mins.

逆向相关的取证分析

Posted on 2025-12-24 Edited on 2026-01-19 In note
Symbols count in article: 1.2k Reading time ≈ 1 mins.

docker逃逸相关内容

Posted on 2025-12-03 Edited on 2026-01-19 In note
Symbols count in article: 77 Reading time ≈ 1 mins.

该文章被加密，无法查看

Posted on 2025-11-26 Edited on 2026-01-19 In note
Symbols count in article: 3k Reading time ≈ 3 mins.

该文章被加密，无法查看

Posted on 2025-05-13 Edited on 2026-01-19 In article
Symbols count in article: 1.9k Reading time ≈ 2 mins.

An unpublished article

Posted on 2025-03-30 Edited on 2026-01-19 In note
Symbols count in article: 2.8k Reading time ≈ 3 mins.

用于记录渗透初期信息搜集阶段的常见姿势，包括：扫描（端口、子域名、目录等）

Posted on 2025-04-09 Edited on 2026-01-19 In writeup
Symbols count in article: 1.4k Reading time ≈ 1 mins.

Apache OFBiz这个漏洞是基于webtools/control/ProgramExport这个接口所产生的漏洞，该接口用于后台执行groovy代码，攻击者可以通过恶意的groovy代码实现任意命令执行

Posted on 2025-04-09 Edited on 2026-01-19 In writeup
Symbols count in article: 8.8k Reading time ≈ 8 mins.

WordPress 的 File Upload 插件在所有版本（包括 4.24.11）中都存在路径遍历漏洞，漏洞位于 `wfu_file_downloader.php` 文件中。这使得未经身份验证的攻击者可以读取或删除超出原定目录之外的文件。

Posted on 2025-12-10 Edited on 2026-01-19 In note
Symbols count in article: 5.9k Reading time ≈ 5 mins.

主要介绍了域渗透相关知识，如kerberos、黄金票据、约束委派等