Custom Encoder Implementation for AntSword

Implementing custom encoders in AntSword requires separating encryption and decryption logic across two layers. This approach enhances security by using parameterized payload transmission. The core syntax follows: /** * @param {String} pwd Connection password * @param {Array} data Payload array before processing * @return {Array} Processed p ...

Posted on Mon, 22 Jun 2026 18:25:37 +0000 by StefanRSA

Internal Network Domain Penetration via ThinkPHP 3 Log Disclosure and Webshell Deployment

Information Gathering Target IP: 192.168.0.104 Port Scanning Perform full port scanning using masscan for speed, followed by detailed nmap scanning of open ports: masscan -p 1-65535 192.168.0.104 --rate=1000 Ports 445, 3389, and 80 indicate a Windows server with MySQL database. Web service runs on port 80, displaying a PHPStudy default page. D ...

Posted on Sun, 14 Jun 2026 17:05:00 +0000 by sgs

Web Application File Upload Vulnerabilities

1 File Upload Vulnerability Overview File upload functionality is a common feature in virtually all web applications and server-client systems. Users need to upload images for articles and blog posts, profile pictures, or various files to cloud storage services. If servers lack proper filtering mechanisms, allowing webshells, executable files, ...

Posted on Thu, 14 May 2026 07:14:53 +0000 by Jacquelyn L. Ja

Exploiting File Upload Vulnerabilities: Webshell Deployment and Bypass Techniques

HTTP Request Methods and Data TransmissionWhen clients interact with web servers, HTTP/HTTPS protocols facilitate the exchange of request and response messages. The primary methods for transmitting data are GET and POST.GET Request: Parameters are appended to the URL as query strings, separated by ampersands (e.g., http://target.org/api?user=ad ...

Posted on Sat, 09 May 2026 05:47:51 +0000 by west4me