rss.xml

<?xml version='1.0' encoding='UTF-8'?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
<channel>
<title>SUMSEC</title>
<link>https://sumsec.me</link>
<description>像清水一般清澈透明</description>
<docs>http://www.rssboard.org/rss-specification</docs>
<generator>BlogPapers generate_feed_and_sitemap.py</generator>
<language>zh-CN</language>
<lastBuildDate>Tue, 21 Jul 2026 08:47:27 +0000</lastBuildDate>
<atom:link href="https://sumsec.me/resources/rss.xml" rel="self" type="application/rss+xml"/>
<item>
<title>AI Agent 工程的必然演进：CLI、Skills、Harness 与 Loop</title>
<link>https://sumsec.me/2026/ai-agent-engineering-evolution.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/ai-agent-engineering-evolution.html</guid>
<pubDate>Sat, 18 Jul 2026 12:00:47 +0000</pubDate>
</item>
<item>
<title>在 AGI 降临前，先给 AI 开一条&quot;脑内弹幕&quot;通道</title>
<link>https://sumsec.me/2026/agi-inner-commentary-channel.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/agi-inner-commentary-channel.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>一篇博文，三种时间：网页幻灯与 Remotion 动效的交付逻辑</title>
<link>https://sumsec.me/2026/blog-slides-remotion-delivery-timeline.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/blog-slides-remotion-delivery-timeline.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>AI 时代 ShiroAttack2 5.x：修改了什么</title>
<link>https://sumsec.me/2026/shiroattack2-5-ai-era-changes.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/shiroattack2-5-ai-era-changes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Agent 越改越乱之后，我用评测和轨迹把它拉回来了</title>
<link>https://sumsec.me/2026/skill-evolution-results-trace.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/skill-evolution-results-trace.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>🔍 别让大模型&quot;想太多&quot;：SKILL开发中的语义陷阱与抗幻觉设计</title>
<link>https://sumsec.me/2026/skill-semantic-traps-anti-hallucination.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/skill-semantic-traps-anti-hallucination.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>谁能想到，电视遥控器竟成了 Vibe Coding 神器</title>
<link>https://sumsec.me/2026/tv-remote-vibe-coding.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/tv-remote-vibe-coding.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>2022 年年度总结</title>
<link>https://sumsec.me/2022/2022-annual-review.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/2022-annual-review.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL与AST之间联系</title>
<link>https://sumsec.me/2022/codeql-and-ast.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/codeql-and-ast.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL初见Shiro550</title>
<link>https://sumsec.me/2022/codeql-first-look-shiro550.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/codeql-first-look-shiro550.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL与Shiro550碰撞</title>
<link>https://sumsec.me/2022/codeql-meets-shiro550.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/codeql-meets-shiro550.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL Usage Tricks</title>
<link>https://sumsec.me/2022/codeql-practical-usage-tricks.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/codeql-practical-usage-tricks.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CVE-2022-22980 Mongodb SpEL</title>
<link>https://sumsec.me/2022/cve-2022-22980-mongodb-spel.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/cve-2022-22980-mongodb-spel.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CVE-2022-33891 Apache Spark shell command injection</title>
<link>https://sumsec.me/2022/cve-2022-33891-apache-spark-shell-command-injection.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/cve-2022-33891-apache-spark-shell-command-injection.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>GitHub Java CodeQL CTF</title>
<link>https://sumsec.me/2022/github-java-codeql-ctf.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/github-java-codeql-ctf.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>论如何优雅注入 Java 内存马</title>
<link>https://sumsec.me/2022/java-memory-shell-injection.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/java-memory-shell-injection.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Java加载动态链接库方式</title>
<link>https://sumsec.me/2022/java-native-library-loading.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/java-native-library-loading.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Java-Swing-To-RCE-漏洞分析</title>
<link>https://sumsec.me/2022/java-swing-rce-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/java-swing-rce-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>kubernetes-goat学习笔记</title>
<link>https://sumsec.me/2022/kubernetes-goat-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/kubernetes-goat-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Log4j2 漏洞分析</title>
<link>https://sumsec.me/2022/log4j2-vulnerability-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/log4j2-vulnerability-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>正则匹配配置不当</title>
<link>https://sumsec.me/2022/regex-misconfiguration.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/regex-misconfiguration.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>shiro反序列化漏洞攻击拓展面--修改key</title>
<link>https://sumsec.me/2022/shiro-deserialization-key-modification.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/shiro-deserialization-key-modification.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Shiro后渗透拓展面</title>
<link>https://sumsec.me/2022/shiro-post-exploitation.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/shiro-post-exploitation.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>相似度算法调研</title>
<link>https://sumsec.me/2022/similarity-algorithm-research.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/similarity-algorithm-research.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Spring Boot RCE到内存马探索</title>
<link>https://sumsec.me/2022/spring-boot-rce-memory-shell.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/spring-boot-rce-memory-shell.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>SpringBoot Gateway EL表达式漏洞分析</title>
<link>https://sumsec.me/2022/spring-cloud-gateway-spel-rce-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/spring-cloud-gateway-spel-rce-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Spring-Framework-RCE-CVE-2022-22965漏洞分析</title>
<link>https://sumsec.me/2022/spring-framework-cve-2022-22965-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/spring-framework-cve-2022-22965-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>VMWare-Workspace-ONE-Access-Auth-Bypass</title>
<link>https://sumsec.me/2022/vmware-one-access-auth-bypass.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/vmware-one-access-auth-bypass.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Hack-Tools2Web</title>
<link>https://sumsec.me/2022/web-security-tools-collection.html</link>
<guid isPermaLink="true">https://sumsec.me/2022/web-security-tools-collection.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>2020年研究回顾总结</title>
<link>https://sumsec.me/2021/2020-research-review.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/2020-research-review.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>2021年度总结</title>
<link>https://sumsec.me/2021/2021-annual-review.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/2021-annual-review.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>BypassSuper使用介绍说明</title>
<link>https://sumsec.me/2021/bypasssuper-guide.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/bypasssuper-guide.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL Create OpenJdk/Jdk8 Database</title>
<link>https://sumsec.me/2021/codeql-create-openjdk-jdk8-database.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-create-openjdk-jdk8-database.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>从Java反序列化漏洞题看CodeQL数据流</title>
<link>https://sumsec.me/2021/codeql-data-flow-java-deserialization.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-data-flow-java-deserialization.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>PII泄露--用CodeQL识别日志中的PII数据</title>
<link>https://sumsec.me/2021/codeql-detect-pii-log-leaks.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-detect-pii-log-leaks.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Annotations in Java</title>
<link>https://sumsec.me/2021/codeql-java-annotations.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-annotations.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Abstract syntax tree classes for working with Java programs</title>
<link>https://sumsec.me/2021/codeql-java-ast-classes.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-ast-classes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Basic query for Java code</title>
<link>https://sumsec.me/2021/codeql-java-basic-query.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-basic-query.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Navigating the call graph</title>
<link>https://sumsec.me/2021/codeql-java-call-graph-navigation.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-call-graph-navigation.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Analyzing data flow in Java</title>
<link>https://sumsec.me/2021/codeql-java-data-flow-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-data-flow-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL library for Java</title>
<link>https://sumsec.me/2021/codeql-java-library.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-library.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Overflow-prone comparisons in Java</title>
<link>https://sumsec.me/2021/codeql-java-overflow-prone-comparisons.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-overflow-prone-comparisons.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Working with source locations</title>
<link>https://sumsec.me/2021/codeql-java-source-locations.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-source-locations.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CodeQL workshop for Java: Unsafe deserialization in Apache Struts</title>
<link>https://sumsec.me/2021/codeql-java-struts-unsafe-deserialization-workshop.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-struts-unsafe-deserialization-workshop.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Types in Java</title>
<link>https://sumsec.me/2021/codeql-java-types.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/codeql-java-types.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>自定义 ClassLoader 隔离运行不同版本jar包的方式</title>
<link>https://sumsec.me/2021/custom-classloader-version-isolation.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/custom-classloader-version-isolation.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Fastjson回显</title>
<link>https://sumsec.me/2021/fastjson-echo.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/fastjson-echo.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Fastjson_Mysql_gadget复现</title>
<link>https://sumsec.me/2021/fastjson-mysql-gadget.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/fastjson-mysql-gadget.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>JNDI注入</title>
<link>https://sumsec.me/2021/jndi-injection.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/jndi-injection.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>记一次Log4j失败的Gadget挖掘记录</title>
<link>https://sumsec.me/2021/log4j-gadget-mining-failure.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/log4j-gadget-mining-failure.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>概述</title>
<link>https://sumsec.me/2021/shiro-550-deserialization-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/shiro-550-deserialization-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>一道shiro反序列化题目引发的思考</title>
<link>https://sumsec.me/2021/shiro-deserialization-challenge-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/shiro-deserialization-challenge-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>shiro-JRMP-gadget</title>
<link>https://sumsec.me/2021/shiro-jrmp-gadget-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/shiro-jrmp-gadget-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Tomcat通用回显学习笔记</title>
<link>https://sumsec.me/2021/tomcat-universal-echo.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/tomcat-universal-echo.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>前言</title>
<link>https://sumsec.me/2021/weblogic-cve-2020-2551-iiop-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/weblogic-cve-2020-2551-iiop-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>漏洞环境的搭建</title>
<link>https://sumsec.me/2021/weblogic-cve-2020-2551-iiop-reproduction.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/weblogic-cve-2020-2551-iiop-reproduction.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>修改ysoserial使其支持任意代码执行</title>
<link>https://sumsec.me/2021/ysoserial-arbitrary-code-execution.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/ysoserial-arbitrary-code-execution.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Ysoserial改造记录</title>
<link>https://sumsec.me/2021/ysoserial-refactoring-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/ysoserial-refactoring-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>2020网鼎杯---Java文件上传wp</title>
<link>https://sumsec.me/2020/2020-wangding-cup-java-file-upload.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/2020-wangding-cup-java-file-upload.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>bypass 学习笔记之绕安全狗bypass safedog</title>
<link>https://sumsec.me/2020/bypass-safedog-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/bypass-safedog-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CNVD-2020-10487(CVE-2020-1938)tomcat ajp 文件读取漏洞</title>
<link>https://sumsec.me/2020/cnvd-2020-10487-cve-2020-1938-tomcat-ajp-file-read.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/cnvd-2020-10487-cve-2020-1938-tomcat-ajp-file-read.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>漫谈Commons-Collections反序列化</title>
<link>https://sumsec.me/2020/commons-collections-deserialization.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/commons-collections-deserialization.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Skipped breakpoint because it happened inside debugger evaluation</title>
<link>https://sumsec.me/2020/debugger-evaluation-skipped-breakpoint.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/debugger-evaluation-skipped-breakpoint.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>逆向学习fastjson反序列化始</title>
<link>https://sumsec.me/2020/fastjson-deserialization-reversing.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/fastjson-deserialization-reversing.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>记一次面试题</title>
<link>https://sumsec.me/2020/interview-questions.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/interview-questions.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Java反序列化链回显解决方案</title>
<link>https://sumsec.me/2020/java-deserialization-echo-solution.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/java-deserialization-echo-solution.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>漫谈Java反序列化</title>
<link>https://sumsec.me/2020/java-deserialization.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/java-deserialization.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>从安全角度谈Java反射机制--序章</title>
<link>https://sumsec.me/2020/java-reflection-security-part-1.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/java-reflection-security-part-1.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>从安全角度谈Java反射机制--前章</title>
<link>https://sumsec.me/2020/java-reflection-security-part-2.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/java-reflection-security-part-2.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>从安全角度谈Java反射机制--终章</title>
<link>https://sumsec.me/2020/java-reflection-security-part-3.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/java-reflection-security-part-3.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>一篇文章读懂Java代码审计之XXE</title>
<link>https://sumsec.me/2020/java-xxe-code-audit.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/java-xxe-code-audit.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>一次意外的代码审计----JfinalCMS审计</title>
<link>https://sumsec.me/2020/jfinalcms-code-audit.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/jfinalcms-code-audit.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>JDSRC安全课笔记</title>
<link>https://sumsec.me/2020/jsrc-security-course-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/jsrc-security-course-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>春眠不觉晓，RCE知多少？</title>
<link>https://sumsec.me/2020/rce-overview.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/rce-overview.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>白头搔更短，SSTI惹人心！</title>
<link>https://sumsec.me/2020/ssti-overview.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/ssti-overview.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Windows Terminal 配置文件</title>
<link>https://sumsec.me/2020/windows-terminal-config.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/windows-terminal-config.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>小楼昨夜又春风，你知ysoserial-Gadget-URLDNS多少？</title>
<link>https://sumsec.me/2020/ysoserial-urldns-gadget.html</link>
<guid isPermaLink="true">https://sumsec.me/2020/ysoserial-urldns-gadget.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>回望1920 AND 畅想2020</title>
<link>https://sumsec.me/2019/2019-review-and-2020-outlook.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/2019-review-and-2020-outlook.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>About Me 关于我</title>
<link>https://sumsec.me/2019/about-me.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/about-me.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Apache Flink任意Jar包上传导致远程代码执行</title>
<link>https://sumsec.me/2019/apache-flink-arbitrary-jar-upload-rce.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/apache-flink-arbitrary-jar-upload-rce.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>【漏洞复现】Apache Solr 模板注入远程命令执行</title>
<link>https://sumsec.me/2019/apache-solr-template-injection-rce.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/apache-solr-template-injection-rce.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>惊现CVE-2019-0708 EXP惊醒睡梦中的安全圈</title>
<link>https://sumsec.me/2019/cve-2019-0708-bluekeep-exploit.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/cve-2019-0708-bluekeep-exploit.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CVE-2019-1388 UAC提权复现</title>
<link>https://sumsec.me/2019/cve-2019-1388-uac-privilege-escalation.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/cve-2019-1388-uac-privilege-escalation.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>CVE-2019-16097 || Harbor任意管理员注册漏洞复现</title>
<link>https://sumsec.me/2019/cve-2019-16097-harbor-admin-registration.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/cve-2019-16097-harbor-admin-registration.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>网络安全现状与未来蓝图||建立高效的网络安全体系</title>
<link>https://sumsec.me/2019/cybersecurity-current-state-and-future.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/cybersecurity-current-state-and-future.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>不为人知的黑科技||双十一薅羊毛正确姿势</title>
<link>https://sumsec.me/2019/double-eleven-discount-technique.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/double-eleven-discount-technique.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>记一次Nessus无法启动问题--Corrupt Database</title>
<link>https://sumsec.me/2019/nessus-corrupt-database-fix.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/nessus-corrupt-database-fix.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>从翻邮箱发现钓鱼站到钓鱼系统通杀注入</title>
<link>https://sumsec.me/2019/phishing-platform-sql-injection.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/phishing-platform-sql-injection.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>记一次渗透学习||钓鱼网站渗透</title>
<link>https://sumsec.me/2019/phishing-site-penetration-test.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/phishing-site-penetration-test.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>python脚本之批量查询网站权重2.0</title>
<link>https://sumsec.me/2019/python-batch-website-weight-query-v2.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/python-batch-website-weight-query-v2.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>python脚本之批量查询网站权重</title>
<link>https://sumsec.me/2019/python-batch-website-weight-query.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/python-batch-website-weight-query.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Python加密shellcode免杀</title>
<link>https://sumsec.me/2019/python-shellcode-antivirus-evasion.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/python-shellcode-antivirus-evasion.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>【实战技巧】sqlmap不为人知的骚操作</title>
<link>https://sumsec.me/2019/sqlmap-advanced-techniques.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/sqlmap-advanced-techniques.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>入门工具脚本之SQLMAP代理脚本</title>
<link>https://sumsec.me/2019/sqlmap-proxy-script.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/sqlmap-proxy-script.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Telegram机器人作为渗透测试框架</title>
<link>https://sumsec.me/2019/telegram-penetration-testing-framework.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/telegram-penetration-testing-framework.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>【墨者学院 】uWSGI 漏洞复现（CVE-2018-7490）</title>
<link>https://sumsec.me/2019/uwsgi-cve-2018-7490-reproduction.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/uwsgi-cve-2018-7490-reproduction.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>VM虚拟机无法安装vmtools解决|本程序需要您将此虚拟机上安装的操作系统更新到SP1</title>
<link>https://sumsec.me/2019/vmware-tools-windows-sp1-fix.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/vmware-tools-windows-sp1-fix.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>泛微ecology OA系统某接口存在数据库配置信息泄露漏洞exp-python</title>
<link>https://sumsec.me/2019/weaver-ecology-database-config-leak-exploit.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/weaver-ecology-database-config-leak-exploit.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>【漏洞复现】泛微ecology OA系统某接口存在数据库配置信息泄露漏洞</title>
<link>https://sumsec.me/2019/weaver-ecology-database-config-leak.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/weaver-ecology-database-config-leak.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>【漏洞预警】泛微e-cology OA系统远程代码执行漏洞及其复现</title>
<link>https://sumsec.me/2019/weaver-ecology-rce.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/weaver-ecology-rce.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>【漏洞预警】泛微OA WorkflowCenterTreeData接口注入漏洞(限oracle数据库)</title>
<link>https://sumsec.me/2019/weaver-workflowcentertreedata-sql-injection.html</link>
<guid isPermaLink="true">https://sumsec.me/2019/weaver-workflowcentertreedata-sql-injection.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>PL-3-Data Analysis Foundation</title>
<link>https://sumsec.me/PL/pl-data-analysis-foundation.html</link>
<guid isPermaLink="true">https://sumsec.me/PL/pl-data-analysis-foundation.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>PL-2-Data-Flow-Analysis</title>
<link>https://sumsec.me/PL/pl-data-flow-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/PL/pl-data-flow-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>PL-1-Intermediate-Representation</title>
<link>https://sumsec.me/PL/pl-intermediate-representation.html</link>
<guid isPermaLink="true">https://sumsec.me/PL/pl-intermediate-representation.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>PL-4-Interprocedural Analysis</title>
<link>https://sumsec.me/PL/pl-interprocedural-analysis.html</link>
<guid isPermaLink="true">https://sumsec.me/PL/pl-interprocedural-analysis.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>知识点面试题总结</title>
<link>https://sumsec.me/PL/program-analysis-interview-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/PL/program-analysis-interview-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>WALA使用和学习笔记</title>
<link>https://sumsec.me/PL/wala-learning-notes.html</link>
<guid isPermaLink="true">https://sumsec.me/PL/wala-learning-notes.html</guid>
<pubDate>Sat, 18 Jul 2026 08:05:58 +0000</pubDate>
</item>
<item>
<title>Aliases</title>
<link>https://sumsec.me/2021/aliases.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/aliases.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Expression</title>
<link>https://sumsec.me/2021/expressions.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/expressions.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Formulas</title>
<link>https://sumsec.me/2021/formulas.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/formulas.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Javadoc</title>
<link>https://sumsec.me/2021/javadoc.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/javadoc.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Modules</title>
<link>https://sumsec.me/2021/modules.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/modules.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Predicates</title>
<link>https://sumsec.me/2021/predicates.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/predicates.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Queries</title>
<link>https://sumsec.me/2021/queries.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/queries.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Type</title>
<link>https://sumsec.me/2021/type.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/type.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>Variables</title>
<link>https://sumsec.me/2021/variables.html</link>
<guid isPermaLink="true">https://sumsec.me/2021/variables.html</guid>
<pubDate>Fri, 17 Jul 2026 14:14:20 +0000</pubDate>
</item>
<item>
<title>模型人人都能用，什么才是你能带走的？我的答案是一个可进化的SKILL库</title>
<link>https://sumsec.me/2026/why-personal-agent-skills-repo.html</link>
<guid isPermaLink="true">https://sumsec.me/2026/why-personal-agent-skills-repo.html</guid>
<pubDate>Mon, 25 May 2026 05:27:13 +0000</pubDate>
</item>
</channel></rss>