<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <author>
    <name>Echoin</name>
  </author>
  <generator uri="https://hexo.io/">Hexo</generator>
  <id>https://echoin.xyz/</id>
  <link href="https://echoin.xyz/" rel="alternate"/>
  <link href="https://echoin.xyz/atom.xml" rel="self"/>
  <rights>All rights reserved 2026, Echoin</rights>
  <subtitle>Web安全 · 渗透测试 · CTF · 靶场</subtitle>
  <title>Echoin 的博客</title>
  <updated>2026-08-14T08:00:19.102Z</updated>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="CTF wp" scheme="https://echoin.xyz/categories/CTF-wp/"/>
    <category term="CTF" scheme="https://echoin.xyz/tags/CTF/"/>
    <category term="SSRF" scheme="https://echoin.xyz/tags/SSRF/"/>
    <category term="hardlink" scheme="https://echoin.xyz/tags/hardlink/"/>
    <id>https://echoin.xyz/2026/08/14/ctf-mlops-ssrf-hardlink/</id>
    <link href="https://echoin.xyz/2026/08/14/ctf-mlops-ssrf-hardlink/"/>
    <published>2026-08-14T15:30:00.000Z</published>
    <summary>mlops - URL解析差异SSRF + hardlink恢复缺陷 + 配置文件注入</summary>
    <title>mlops - URL解析差异SSRF + hardlink恢复缺陷 + 配置文件注入</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="CTF wp" scheme="https://echoin.xyz/categories/CTF-wp/"/>
    <category term="CTF" scheme="https://echoin.xyz/tags/CTF/"/>
    <category term="HTTP请求走私" scheme="https://echoin.xyz/tags/HTTP%E8%AF%B7%E6%B1%82%E8%B5%B0%E7%A7%81/"/>
    <id>https://echoin.xyz/2026/08/14/ctf-go-to-php-http-smuggling/</id>
    <link href="https://echoin.xyz/2026/08/14/ctf-go-to-php-http-smuggling/"/>
    <published>2026-08-14T15:15:00.000Z</published>
    <summary>go to php - HTTP 请求走私</summary>
    <title>go to php - HTTP 请求走私</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="CTF wp" scheme="https://echoin.xyz/categories/CTF-wp/"/>
    <category term="CTF" scheme="https://echoin.xyz/tags/CTF/"/>
    <category term="XSS" scheme="https://echoin.xyz/tags/XSS/"/>
    <category term="Admin Bot" scheme="https://echoin.xyz/tags/Admin-Bot/"/>
    <id>https://echoin.xyz/2026/08/14/ctf-stored-xss-admin-bot/</id>
    <link href="https://echoin.xyz/2026/08/14/ctf-stored-xss-admin-bot/"/>
    <published>2026-08-14T15:00:00.000Z</published>
    <summary>存储型 XSS 注入 + Admin Bot 提权 + XSS 外带</summary>
    <title>存储型 XSS 注入 + Admin Bot 提权 + XSS 外带</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="NanoCorp" scheme="https://echoin.xyz/tags/NanoCorp/"/>
    <id>https://echoin.xyz/2026/08/14/htb-nanocorp/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-nanocorp/"/>
    <published>2026-08-14T14:00:00.000Z</published>
    <summary>HTB NanoCorp 靶场 Writeup</summary>
    <title>HTB NanoCorp 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="Garfield" scheme="https://echoin.xyz/tags/Garfield/"/>
    <id>https://echoin.xyz/2026/08/14/htb-garfield/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-garfield/"/>
    <published>2026-08-14T13:45:00.000Z</published>
    <summary>HTB Garfield 靶场 Writeup</summary>
    <title>HTB Garfield 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="WingData" scheme="https://echoin.xyz/tags/WingData/"/>
    <id>https://echoin.xyz/2026/08/14/htb-wingdata/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-wingdata/"/>
    <published>2026-08-14T13:30:00.000Z</published>
    <summary>HTB WingData 靶场 Writeup</summary>
    <title>HTB WingData 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="Three" scheme="https://echoin.xyz/tags/Three/"/>
    <id>https://echoin.xyz/2026/08/14/htb-three/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-three/"/>
    <published>2026-08-14T13:15:00.000Z</published>
    <summary>HTB Three 靶场 Writeup</summary>
    <title>HTB Three 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="Kobold" scheme="https://echoin.xyz/tags/Kobold/"/>
    <id>https://echoin.xyz/2026/08/14/htb-kobold/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-kobold/"/>
    <published>2026-08-14T13:00:00.000Z</published>
    <summary>HTB Kobold 靶场 Writeup</summary>
    <title>HTB Kobold 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="Fires" scheme="https://echoin.xyz/tags/Fires/"/>
    <id>https://echoin.xyz/2026/08/14/htb-fires/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-fires/"/>
    <published>2026-08-14T12:45:00.000Z</published>
    <summary>HTB Fires 靶场 Writeup</summary>
    <title>HTB Fires 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="Facts" scheme="https://echoin.xyz/tags/Facts/"/>
    <id>https://echoin.xyz/2026/08/14/htb-facts/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-facts/"/>
    <published>2026-08-14T12:30:00.000Z</published>
    <summary>HTB Facts 靶场 Writeup</summary>
    <title>HTB Facts 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <category term="DevArea" scheme="https://echoin.xyz/tags/DevArea/"/>
    <id>https://echoin.xyz/2026/08/14/htb-devarea/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-devarea/"/>
    <published>2026-08-14T12:15:00.000Z</published>
    <summary>HTB DevArea 靶场 Writeup</summary>
    <title>HTB DevArea 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="Conversor" scheme="https://echoin.xyz/tags/Conversor/"/>
    <category term="靶场" scheme="https://echoin.xyz/tags/%E9%9D%B6%E5%9C%BA/"/>
    <id>https://echoin.xyz/2026/08/14/htb-conversor/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-conversor/"/>
    <published>2026-08-14T12:00:00.000Z</published>
    <summary>HTB Conversor 靶场 Writeup</summary>
    <title>HTB Conversor 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="渗透测试" scheme="https://echoin.xyz/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/"/>
    <category term="域渗透" scheme="https://echoin.xyz/tags/%E5%9F%9F%E6%B8%97%E9%80%8F/"/>
    <category term="NTLM Relay" scheme="https://echoin.xyz/tags/NTLM-Relay/"/>
    <category term="内网渗透" scheme="https://echoin.xyz/tags/%E5%86%85%E7%BD%91%E6%B8%97%E9%80%8F/"/>
    <id>https://echoin.xyz/2026/08/14/ntlm-relay/</id>
    <link href="https://echoin.xyz/2026/08/14/ntlm-relay/"/>
    <published>2026-08-14T11:30:00.000Z</published>
    <summary>攻击方式 - NTLM Relay（手法很多）</summary>
    <title>攻击方式 - NTLM Relay（手法很多）</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="Web安全" scheme="https://echoin.xyz/categories/Web%E5%AE%89%E5%85%A8/"/>
    <category term="SSRF" scheme="https://echoin.xyz/tags/SSRF/"/>
    <category term="服务端请求伪造" scheme="https://echoin.xyz/tags/%E6%9C%8D%E5%8A%A1%E7%AB%AF%E8%AF%B7%E6%B1%82%E4%BC%AA%E9%80%A0/"/>
    <category term="内网" scheme="https://echoin.xyz/tags/%E5%86%85%E7%BD%91/"/>
    <id>https://echoin.xyz/2026/08/14/ssrf/</id>
    <link href="https://echoin.xyz/2026/08/14/ssrf/"/>
    <published>2026-08-14T11:00:00.000Z</published>
    <summary>SSRF（服务端请求伪造）</summary>
    <title>SSRF（服务端请求伪造）</title>
    <updated>2026-08-14T08:00:19.104Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="靶场" scheme="https://echoin.xyz/categories/%E9%9D%B6%E5%9C%BA/"/>
    <category term="域渗透" scheme="https://echoin.xyz/tags/%E5%9F%9F%E6%B8%97%E9%80%8F/"/>
    <category term="HTB" scheme="https://echoin.xyz/tags/HTB/"/>
    <category term="Dante" scheme="https://echoin.xyz/tags/Dante/"/>
    <category term="红队" scheme="https://echoin.xyz/tags/%E7%BA%A2%E9%98%9F/"/>
    <id>https://echoin.xyz/2026/08/14/htb-dante/</id>
    <link href="https://echoin.xyz/2026/08/14/htb-dante/"/>
    <published>2026-08-14T09:00:00.000Z</published>
    <summary>HTB Dante 靶场 Writeup</summary>
    <title>HTB Dante 靶场 Writeup</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="渗透测试" scheme="https://echoin.xyz/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/"/>
    <category term="Kerberos" scheme="https://echoin.xyz/tags/Kerberos/"/>
    <category term="域渗透" scheme="https://echoin.xyz/tags/%E5%9F%9F%E6%B8%97%E9%80%8F/"/>
    <category term="Bronze Bit" scheme="https://echoin.xyz/tags/Bronze-Bit/"/>
    <id>https://echoin.xyz/2026/08/14/kerberos-bronze-bit/</id>
    <link href="https://echoin.xyz/2026/08/14/kerberos-bronze-bit/"/>
    <published>2026-08-14T08:00:00.000Z</published>
    <summary>Kerberos Bronze Bit 委派绕过漏洞原理与利用</summary>
    <title>攻击方式 - Kerberos Bronze Bit</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="渗透测试" scheme="https://echoin.xyz/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/"/>
    <category term="Kerberos" scheme="https://echoin.xyz/tags/Kerberos/"/>
    <category term="域渗透" scheme="https://echoin.xyz/tags/%E5%9F%9F%E6%B8%97%E9%80%8F/"/>
    <category term="Kerberoasting" scheme="https://echoin.xyz/tags/Kerberoasting/"/>
    <id>https://echoin.xyz/2026/08/14/kerberoasting/</id>
    <link href="https://echoin.xyz/2026/08/14/kerberoasting/"/>
    <published>2026-08-14T07:30:00.000Z</published>
    <summary>Kerberoasting 获取服务票据并离线爆破密码的方法</summary>
    <title>攻击方式 - Kerberoasting</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="渗透测试" scheme="https://echoin.xyz/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/"/>
    <category term="AS-REP Roasting" scheme="https://echoin.xyz/tags/AS-REP-Roasting/"/>
    <category term="Kerberos" scheme="https://echoin.xyz/tags/Kerberos/"/>
    <category term="域渗透" scheme="https://echoin.xyz/tags/%E5%9F%9F%E6%B8%97%E9%80%8F/"/>
    <id>https://echoin.xyz/2026/08/14/as-rep-roasting/</id>
    <link href="https://echoin.xyz/2026/08/14/as-rep-roasting/"/>
    <published>2026-08-14T07:00:00.000Z</published>
    <summary>针对关闭 Kerberos 预认证域用户的离线密码攻击</summary>
    <title>攻击方式 - AS-REP Roasting</title>
    <updated>2026-08-14T08:00:19.102Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="Web安全" scheme="https://echoin.xyz/categories/Web%E5%AE%89%E5%85%A8/"/>
    <category term="HTTP请求走私" scheme="https://echoin.xyz/tags/HTTP%E8%AF%B7%E6%B1%82%E8%B5%B0%E7%A7%81/"/>
    <id>https://echoin.xyz/2026/08/14/http-request-smuggling/</id>
    <link href="https://echoin.xyz/2026/08/14/http-request-smuggling/"/>
    <published>2026-08-14T06:30:00.000Z</published>
    <summary>HTTP请求走私漏洞原理、类型与利用方式</summary>
    <title>HTTP 请求走私</title>
    <updated>2026-08-14T08:00:19.103Z</updated>
  </entry>
  <entry>
    <author>
      <name>Echoin</name>
    </author>
    <category term="Web安全" scheme="https://echoin.xyz/categories/Web%E5%AE%89%E5%85%A8/"/>
    <category term="XSS" scheme="https://echoin.xyz/tags/XSS/"/>
    <category term="跨站脚本" scheme="https://echoin.xyz/tags/%E8%B7%A8%E7%AB%99%E8%84%9A%E6%9C%AC/"/>
    <id>https://echoin.xyz/2026/08/14/xss/</id>
    <link href="https://echoin.xyz/2026/08/14/xss/"/>
    <published>2026-08-14T06:00:00.000Z</published>
    <summary>XSS跨站脚本攻击原理、审计路径与利用打法</summary>
    <title>XSS 跨站脚本攻击</title>
    <updated>2026-08-14T08:00:19.104Z</updated>
  </entry>
</feed>
