AI & Agents
One-Year Review of My Computer (Cybersecurity) Studies
从零基础小白，到打 CTF、做 AI 安全、进大厂实习、正式入职——这是我从 2025 年 7 月到 2026 年 7 月，学网络安全整整一年的真实记录。
// Archives
Month: August 2026
Browse all posts by date.
Deep Dives
HTB-Blackfield: From SMB Enumeration to Memory Forensics, Crafting a Lethal Exploit Chain to the Domain Controller
本文详细记录了对Hack The Box靶机Blackfield的完整渗透过程。攻击者从基础的Nmap端口扫描起步，通过SMB共享枚举提取潜在用户名，结合AS-REP Roasting攻破未启用预认证的support账户。借助BloodHound分析域内关系，利用ForceChangePassword权限接管audit2020账户，进而访问到存有LSASS进程内存转储的forensic共享。通过P
Cybersecurity
Read This Before You Buy That TV Streaming Stick
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming…
Cybersecurity
HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka.…
Cybersecurity
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central…
By month
- October 2026 (75)
- September 2026 (8)
- August 2026 (5)
- July 2026 (6)