Custom Encoder Implementation for AntSword
Implementing custom encoders in AntSword requires separating encryption and decryption logic across two layers. This approach enhances security by using parameterized payload transmission. The core syntax follows:
/**
* @param {String} pwd Connection password
* @param {Array} data Payload array before processing
* @return {Array} Processed p ...
Posted on Mon, 22 Jun 2026 18:25:37 +0000 by StefanRSA
Internal Network Domain Penetration via ThinkPHP 3 Log Disclosure and Webshell Deployment
Information Gathering
Target IP: 192.168.0.104
Port Scanning
Perform full port scanning using masscan for speed, followed by detailed nmap scanning of open ports:
masscan -p 1-65535 192.168.0.104 --rate=1000
Ports 445, 3389, and 80 indicate a Windows server with MySQL database. Web service runs on port 80, displaying a PHPStudy default page.
D ...
Posted on Sun, 14 Jun 2026 17:05:00 +0000 by sgs
Web Application File Upload Vulnerabilities
1 File Upload Vulnerability Overview
File upload functionality is a common feature in virtually all web applications and server-client systems. Users need to upload images for articles and blog posts, profile pictures, or various files to cloud storage services. If servers lack proper filtering mechanisms, allowing webshells, executable files, ...
Posted on Thu, 14 May 2026 07:14:53 +0000 by Jacquelyn L. Ja
Exploiting File Upload Vulnerabilities: Webshell Deployment and Bypass Techniques
HTTP Request Methods and Data TransmissionWhen clients interact with web servers, HTTP/HTTPS protocols facilitate the exchange of request and response messages. The primary methods for transmitting data are GET and POST.GET Request: Parameters are appended to the URL as query strings, separated by ampersands (e.g., http://target.org/api?user=ad ...
Posted on Sat, 09 May 2026 05:47:51 +0000 by west4me