https://gugesay.com/blog 骨哥说事公众号首发地 zh-CN undefined (Guge) undefined (Guge) Tue, 07 May 2024 01:38:25 GMT https://gugesay.com/blog/10秒以内窃取你的telegram帐户 https://gugesay.com/blog/10秒以内窃取你的telegram帐户 undefined Tue, 07 May 2024 01:38:25 GMT undefined (Guge) bugbountytelegram白帽故事 https://gugesay.com/blog/2023 Microsoft Office XSS https://gugesay.com/blog/2023 Microsoft Office XSS undefined Sat, 07 Oct 2023 01:38:14 GMT undefined (Guge) bugbountyMSRCOfficeXSS白帽故事 https://gugesay.com/blog/2023 年十佳 Web 黑客技术 https://gugesay.com/blog/2023 年十佳 Web 黑客技术 undefined Wed, 28 Feb 2024 08:38:11 GMT undefined (Guge) bugbounty漏洞白帽故事 https://gugesay.com/blog/2026年重点关注的3类高价值漏洞 https://gugesay.com/blog/2026年重点关注的3类高价值漏洞 undefined Sat, 10 Jan 2026 02:27:52 GMT undefined (Guge) bugbounty漏洞白帽故事 https://gugesay.com/blog/2222bypass-waf https://gugesay.com/blog/2222bypass-waf undefined Mon, 02 May 2022 05:25:10 GMT undefined (Guge) bugbountybypassWAF白帽故事 https://gugesay.com/blog/23k：验证绕过文件上传任意文件覆盖 https://gugesay.com/blog/23k：验证绕过文件上传任意文件覆盖 undefined Thu, 03 Nov 2022 22:25:13 GMT undefined (Guge) bugbountybypass白帽故事 https://gugesay.com/blog/30000美元赏金事件 https://gugesay.com/blog/30000美元赏金事件 undefined Tue, 06 Jun 2023 07:47:35 GMT undefined (Guge) bugbounty白帽故事 https://gugesay.com/blog/40000！如何从路径遍历升级rce！ https://gugesay.com/blog/40000！如何从路径遍历升级rce！ undefined Fri, 17 Jan 2025 06:34:57 GMT undefined (Guge) bugbountyrce白帽故事路径遍历 https://gugesay.com/blog/ai黑客：chatgpt中的高级api攻击 https://gugesay.com/blog/ai黑客：chatgpt中的高级api攻击 undefined Sun, 26 May 2024 04:24:44 GMT undefined (Guge) APIbugbountychatgpthttp请求走私白帽故事 https://gugesay.com/blog/ai黑客：使用-chatgpt-在浏览器中挖掘-xxe https://gugesay.com/blog/ai黑客：使用-chatgpt-在浏览器中挖掘-xxe undefined Tue, 28 May 2024 01:27:32 GMT undefined (Guge) bugbountyChromeSafarixxe白帽故事 https://gugesay.com/blog/api-黑客 https://gugesay.com/blog/api-黑客 undefined Wed, 30 Aug 2023 07:13:40 GMT undefined (Guge) APIbugbounty白帽故事 https://gugesay.com/blog/burpsuite-intruder-自动化测试反射型-xss https://gugesay.com/blog/burpsuite-intruder-自动化测试反射型-xss undefined Sat, 18 Jun 2022 07:36:31 GMT undefined (Guge) bugbountyburpsuiteXSS白帽故事 https://gugesay.com/blog/chrome-新的xss攻击向量：cve-2023-5480 https://gugesay.com/blog/chrome-新的xss攻击向量：cve-2023-5480 undefined Tue, 30 Jan 2024 01:51:56 GMT undefined (Guge) bugbountyChromeCVEXSS白帽故事 https://gugesay.com/blog/citrix滴血：cve-2023-4966-泄漏citrix会话token https://gugesay.com/blog/citrix滴血：cve-2023-4966-泄漏citrix会话token undefined Wed, 01 Nov 2023 03:18:10 GMT undefined (Guge) bugbountyCitrixCVE白帽故事 https://gugesay.com/blog/csgo-从0到0day！ https://gugesay.com/blog/csgo-从0到0day！ undefined Sun, 13 Aug 2023 06:53:06 GMT undefined (Guge) bugbountyCS:GO白帽故事 https://gugesay.com/blog/cve-2022-38627：通过sqlite注入破坏整个企业大楼之旅 https://gugesay.com/blog/cve-2022-38627：通过sqlite注入破坏整个企业大楼之旅 undefined Tue, 07 Feb 2023 01:50:17 GMT undefined (Guge) bugbountyCVE白帽故事 https://gugesay.com/blog/cve-2022-4908：使用导航-api-绕过-chrome-sop https://gugesay.com/blog/cve-2022-4908：使用导航-api-绕过-chrome-sop undefined Tue, 17 Oct 2023 08:30:09 GMT undefined (Guge) bugbountyChromeSOP白帽故事 https://gugesay.com/blog/cve-2023-36934：moveit-transfer-sql注入分析 https://gugesay.com/blog/cve-2023-36934：moveit-transfer-sql注入分析 undefined Tue, 18 Jul 2023 02:20:48 GMT undefined (Guge) bugbountyCVEsqli白帽故事 https://gugesay.com/blog/git泄露搜索语法 https://gugesay.com/blog/git泄露搜索语法 undefined Tue, 31 Aug 2021 04:06:03 GMT undefined (Guge) bugbountygithub白帽故事 https://gugesay.com/blog/gmail-中的-html-表单注入漏洞 https://gugesay.com/blog/gmail-中的-html-表单注入漏洞 undefined Wed, 18 Sep 2024 14:18:30 GMT undefined (Guge) bugbountyGmail白帽故事 https://gugesay.com/blog/graphql黑客：如何使用简单的探测查询找到1000漏洞 https://gugesay.com/blog/graphql黑客：如何使用简单的探测查询找到1000漏洞 undefined Mon, 16 Oct 2023 07:01:30 GMT undefined (Guge) bugbountyGraphQL白帽故事 https://gugesay.com/blog/hackerone上top5的开放重定向漏洞 https://gugesay.com/blog/hackerone上top5的开放重定向漏洞 undefined Fri, 16 Aug 2024 06:50:52 GMT undefined (Guge) bugbountyhackeroneXSS开放重定向白帽故事 https://gugesay.com/blog/hello-lucee-让我们再次黑掉apple～ https://gugesay.com/blog/hello-lucee-让我们再次黑掉apple～ undefined Wed, 21 Feb 2024 07:24:50 GMT undefined (Guge) ApplebugbountyLuceerce白帽故事 https://gugesay.com/blog/idor之如何打破订阅限制 https://gugesay.com/blog/idor之如何打破订阅限制 undefined Wed, 21 Aug 2024 01:48:17 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/iis欢迎页的安全隐患：从源代码到lfi的攻防之道 https://gugesay.com/blog/iis欢迎页的安全隐患：从源代码到lfi的攻防之道 undefined Mon, 02 Sep 2024 01:25:52 GMT undefined (Guge) bugbountyIISLFI白帽故事 https://gugesay.com/blog/lfi-从高危升级为严重 https://gugesay.com/blog/lfi-从高危升级为严重 undefined Fri, 22 Sep 2023 09:29:40 GMT undefined (Guge) bugbountyLFI白帽故事 https://gugesay.com/blog/odt文件漏洞利用 https://gugesay.com/blog/odt文件漏洞利用 undefined Thu, 01 Aug 2024 02:37:25 GMT undefined (Guge) bugbounty白帽故事 https://gugesay.com/blog/svg对pdf转换时的ssrf攻击 https://gugesay.com/blog/svg对pdf转换时的ssrf攻击 undefined Fri, 28 May 2021 08:32:44 GMT undefined (Guge) bugbountyssrf白帽故事 https://gugesay.com/blog/swagger-ui-从xss到账户接管 https://gugesay.com/blog/swagger-ui-从xss到账户接管 undefined Tue, 24 May 2022 07:27:47 GMT undefined (Guge) bugbountySwaggerUIXSS白帽故事 https://gugesay.com/blog/web-缓存欺骗：在意想不到的地方发现漏洞 https://gugesay.com/blog/web-缓存欺骗：在意想不到的地方发现漏洞 undefined Wed, 13 Sep 2023 01:42:57 GMT undefined (Guge) bugbountyWeb缓存白帽故事 https://gugesay.com/blog/wps-office攻击细节披露 https://gugesay.com/blog/wps-office攻击细节披露 undefined Fri, 27 Sep 2024 01:08:50 GMT undefined (Guge) bugbountyWPS白帽故事 https://gugesay.com/blog/xss-waf绕过的一些基本思考 https://gugesay.com/blog/xss-waf绕过的一些基本思考 undefined Fri, 14 Jun 2024 11:55:58 GMT undefined (Guge) bugbountybypassXSS白帽故事 https://gugesay.com/blog/xss！一次对抗akamai-waf的经历 https://gugesay.com/blog/xss！一次对抗akamai-waf的经历 undefined Mon, 30 Oct 2023 03:27:49 GMT undefined (Guge) akamaibugbountybypassXSS未分类 https://gugesay.com/blog/【$20000】通过发送消息黑掉任意公司-cve-2021-34506 https://gugesay.com/blog/【$20000】通过发送消息黑掉任意公司-cve-2021-34506 undefined Sat, 28 Jan 2023 02:54:31 GMT undefined (Guge) bugbountyCVE白帽故事 https://gugesay.com/blog/【$40,000】AAD配置错误导致必应结果篡改与微软帐户接管 https://gugesay.com/blog/【$40,000】AAD配置错误导致必应结果篡改与微软帐户接管 undefined Sun, 13 Aug 2023 03:03:14 GMT undefined (Guge) AADbugbounty微软白帽故事 https://gugesay.com/blog/【10000】绕过github-html标签过滤 https://gugesay.com/blog/【10000】绕过github-html标签过滤 undefined Fri, 28 Oct 2022 01:41:04 GMT undefined (Guge) bugbountybypassgithub白帽故事 https://gugesay.com/blog/【1060】gitlab-html-注入漏洞 https://gugesay.com/blog/【1060】gitlab-html-注入漏洞 undefined Tue, 15 Oct 2024 09:20:37 GMT undefined (Guge) bugbountyGitlabhackeronehtml注入白帽故事 https://gugesay.com/blog/【20000】通过-devtools-实现-chrome-浏览器沙箱逃逸 https://gugesay.com/blog/【20000】通过-devtools-实现-chrome-浏览器沙箱逃逸 undefined Tue, 22 Oct 2024 04:01:04 GMT undefined (Guge) bugbountyChromeGoogle白帽故事 https://gugesay.com/blog/【2000】利用重置密码实现帐户接管 https://gugesay.com/blog/【2000】利用重置密码实现帐户接管 undefined Thu, 26 Sep 2024 07:58:09 GMT undefined (Guge) bugbountyidor白帽故事重置密码 https://gugesay.com/blog/【25300】绕过-facebook-双因素身份验证 https://gugesay.com/blog/【25300】绕过-facebook-双因素身份验证 undefined Wed, 23 Aug 2023 08:50:22 GMT undefined (Guge) 2FAbugbountyfacebook白帽故事 https://gugesay.com/blog/【3400】一次点击，攻击者轻松窃取用户余额！ https://gugesay.com/blog/【3400】一次点击，攻击者轻松窃取用户余额！ undefined Thu, 17 Aug 2023 08:27:48 GMT undefined (Guge) bugbountypaypal白帽故事 https://gugesay.com/blog/【50000】发现0day漏洞，渗透apple https://gugesay.com/blog/【50000】发现0day漏洞，渗透apple undefined Mon, 09 Jan 2023 16:00:02 GMT undefined (Guge) 0dayApplebugbounty白帽故事 https://gugesay.com/blog/【500】将dom-xss升级为存储型xss https://gugesay.com/blog/【500】将dom-xss升级为存储型xss undefined Mon, 25 Dec 2023 08:20:26 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/【6000】绕过apple-sso https://gugesay.com/blog/【6000】绕过apple-sso undefined Tue, 19 Apr 2022 06:40:21 GMT undefined (Guge) Applebugbountybypass白帽故事 https://gugesay.com/blog/【cve-2024-31747】microsoft-teams-电话锁定绕过利用 https://gugesay.com/blog/【cve-2024-31747】microsoft-teams-电话锁定绕过利用 undefined Wed, 15 May 2024 01:59:43 GMT undefined (Guge) bugbountybypassYealink白帽故事 https://gugesay.com/blog/【e300】打破逻辑：不安全的参数 https://gugesay.com/blog/【e300】打破逻辑：不安全的参数 undefined Tue, 30 Aug 2022 01:57:41 GMT undefined (Guge) bugbountybypass白帽故事 https://gugesay.com/blog/【奖金5000】将任意无主手机号码添加到我的facebook账户 https://gugesay.com/blog/【奖金5000】将任意无主手机号码添加到我的facebook账户 undefined Fri, 11 Feb 2022 02:19:05 GMT undefined (Guge) bugbountyfacebookidor白帽故事 https://gugesay.com/blog/【白帽故事】10000奖励：安卓平台adobe-acrobat-reader-rce漏洞 https://gugesay.com/blog/【白帽故事】10000奖励：安卓平台adobe-acrobat-reader-rce漏洞 undefined Mon, 14 Feb 2022 02:06:03 GMT undefined (Guge) A​dobeAndroidbugbounty白帽故事 https://gugesay.com/blog/【白帽故事】8000赏金奖励：opera浏览器从xss-到-rce https://gugesay.com/blog/【白帽故事】8000赏金奖励：opera浏览器从xss-到-rce undefined Tue, 18 Jan 2022 08:03:37 GMT undefined (Guge) bugbountyOperaXSS白帽故事 https://gugesay.com/blog/【赏金15000美元】通过监控调试模式实现-rce https://gugesay.com/blog/【赏金15000美元】通过监控调试模式实现-rce undefined Sat, 14 Sep 2024 08:35:58 GMT undefined (Guge) bugbountyLFIrce白帽故事调试模式 https://gugesay.com/blog/一则ssrf漏洞的故事 https://gugesay.com/blog/一则ssrf漏洞的故事 undefined Wed, 10 Jul 2024 07:55:30 GMT undefined (Guge) awsbugbountyssrf白帽故事 https://gugesay.com/blog/一周三步曲：从开放重定向到远程代码执行！ https://gugesay.com/blog/一周三步曲：从开放重定向到远程代码执行！ undefined Tue, 19 Mar 2024 14:28:56 GMT undefined (Guge) bugbountyrce白帽故事 https://gugesay.com/blog/一次有意思的otp绕过 https://gugesay.com/blog/一次有意思的otp绕过 undefined Wed, 22 Jun 2022 00:54:21 GMT undefined (Guge) bugbountybypassotp白帽故事 https://gugesay.com/blog/一次通过fuzz-api发现漏洞的旅程 https://gugesay.com/blog/一次通过fuzz-api发现漏洞的旅程 undefined Tue, 07 Nov 2023 04:22:24 GMT undefined (Guge) APIbugbounty白帽故事 https://gugesay.com/blog/一款公共交通票务移动app的xxe漏洞 https://gugesay.com/blog/一款公共交通票务移动app的xxe漏洞 undefined Tue, 10 Aug 2021 06:28:11 GMT undefined (Guge) bugbountyxxe白帽故事 https://gugesay.com/blog/一起全账户接管漏洞案例 https://gugesay.com/blog/一起全账户接管漏洞案例 undefined Fri, 03 Nov 2023 02:07:54 GMT undefined (Guge) bugbounty白帽故事 https://gugesay.com/blog/三角测量行动：最后的（硬件）谜团 https://gugesay.com/blog/三角测量行动：最后的（硬件）谜团 undefined Wed, 03 Jan 2024 05:32:24 GMT undefined (Guge) 0dayApplebugbounty白帽故事 https://gugesay.com/blog/五种用来挖掘API端点的方法 https://gugesay.com/blog/五种用来挖掘API端点的方法 undefined Sun, 14 Apr 2024 02:44:51 GMT undefined (Guge) API endpointbugbounty工具白帽故事 https://gugesay.com/blog/从-wayback-machine-到-aws-元数据：5-分钟内发现生产系统中的-ssrf https://gugesay.com/blog/从-wayback-machine-到-aws-元数据：5-分钟内发现生产系统中的-ssrf undefined Wed, 18 Dec 2024 01:05:27 GMT undefined (Guge) bugbountyssrf白帽故事 https://gugesay.com/blog/从LFI到RCE https://gugesay.com/blog/从LFI到RCE undefined Mon, 20 Nov 2023 02:38:43 GMT undefined (Guge) bugbountyLFIrce白帽故事 https://gugesay.com/blog/从adobe的vip赏金计划中获得近50000美元奖励的故事 https://gugesay.com/blog/从adobe的vip赏金计划中获得近50000美元奖励的故事 undefined Tue, 02 Jan 2024 09:52:37 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/从js代码审计到graphql利用的管理账户接管 https://gugesay.com/blog/从js代码审计到graphql利用的管理账户接管 undefined Thu, 05 Dec 2024 04:11:41 GMT undefined (Guge) bugbountyGraphQLJS白帽故事 https://gugesay.com/blog/从self-xss-到账户接管 https://gugesay.com/blog/从self-xss-到账户接管 undefined Fri, 22 Dec 2023 06:54:44 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/从youtube演示视频获得启发，通过sql注入成功拿下4324漏洞 https://gugesay.com/blog/从youtube演示视频获得启发，通过sql注入成功拿下4324漏洞 undefined Tue, 03 Jan 2023 07:25:47 GMT undefined (Guge) bugbountysqliyoutube白帽故事 https://gugesay.com/blog/价值-1000-美元的账户接管 https://gugesay.com/blog/价值-1000-美元的账户接管 undefined Wed, 24 Aug 2022 02:58:27 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/价值-3500-美元的管理面板绕过漏洞 https://gugesay.com/blog/价值-3500-美元的管理面板绕过漏洞 undefined Tue, 20 Aug 2024 08:23:36 GMT undefined (Guge) bugbountybypass白帽故事 https://gugesay.com/blog/任意chatgpt-帐户接管-利用通配符进行网络缓存欺骗 https://gugesay.com/blog/任意chatgpt-帐户接管-利用通配符进行网络缓存欺骗 undefined Sun, 18 Feb 2024 01:28:13 GMT undefined (Guge) bugbountychatgpt帐户接管白帽故事 https://gugesay.com/blog/使用-aquatone-配合狩猎 https://gugesay.com/blog/使用-aquatone-配合狩猎 undefined Sun, 13 Aug 2023 05:45:58 GMT undefined (Guge) Aquatonebugbounty白帽故事 https://gugesay.com/blog/使用-google-脚本资源绕过-portswigger上的-csp https://gugesay.com/blog/使用-google-脚本资源绕过-portswigger上的-csp undefined Tue, 27 Feb 2024 07:46:07 GMT undefined (Guge) bugbountybypasscspXSS白帽故事 https://gugesay.com/blog/使用ai大模型打造模糊测试工具 https://gugesay.com/blog/使用ai大模型打造模糊测试工具 undefined Sun, 07 Apr 2024 01:37:39 GMT undefined (Guge) bugbountyfuzzLLMs白帽故事 https://gugesay.com/blog/使用工具快速发现-ssrf、lfi、xss https://gugesay.com/blog/使用工具快速发现-ssrf、lfi、xss undefined Tue, 29 Aug 2023 03:15:33 GMT undefined (Guge) bugbountyLFIssrfXSS工具白帽故事 https://gugesay.com/blog/入侵高露洁智能牙刷 https://gugesay.com/blog/入侵高露洁智能牙刷 undefined Fri, 26 Apr 2024 01:54:22 GMT undefined (Guge) bugbountyIoT智能牙刷白帽故事 https://gugesay.com/blog/具有邀请功能的账户劫持思路 https://gugesay.com/blog/具有邀请功能的账户劫持思路 undefined Thu, 30 Nov 2023 02:14:12 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/凭借一手apple-存储xss赚取5000美元的故事 https://gugesay.com/blog/凭借一手apple-存储xss赚取5000美元的故事 undefined Thu, 18 Apr 2024 16:00:49 GMT undefined (Guge) ApplebugbountyXSS白帽故事 https://gugesay.com/blog/创新拳法：漏洞链的艺术 https://gugesay.com/blog/创新拳法：漏洞链的艺术 undefined Wed, 10 Jan 2024 04:23:03 GMT undefined (Guge) bugbounty白帽故事 https://gugesay.com/blog/利用-github-最大化你的漏洞数量-2 https://gugesay.com/blog/利用-github-最大化你的漏洞数量-2 undefined Sun, 13 Aug 2023 07:38:31 GMT undefined (Guge) bugbountygithub白帽故事 https://gugesay.com/blog/利用-youtube-窃取文件 https://gugesay.com/blog/利用-youtube-窃取文件 undefined Tue, 24 Sep 2024 09:53:47 GMT undefined (Guge) bugbountyGoogleyoutube白帽故事 https://gugesay.com/blog/利用param-miner挖掘基于缓存中毒的xss漏洞 https://gugesay.com/blog/利用param-miner挖掘基于缓存中毒的xss漏洞 undefined Fri, 10 Feb 2023 02:46:30 GMT undefined (Guge) bugbountyXSS工具白帽故事 https://gugesay.com/blog/利用关键-0day-xxe-漏洞实现全面-ssrf-攻击 https://gugesay.com/blog/利用关键-0day-xxe-漏洞实现全面-ssrf-攻击 undefined Wed, 13 Dec 2023 01:27:41 GMT undefined (Guge) bugbountyssrf白帽故事 https://gugesay.com/blog/利用出色的侦察能力获得-2000-美元赏金 https://gugesay.com/blog/利用出色的侦察能力获得-2000-美元赏金 undefined Tue, 30 Jul 2024 01:12:03 GMT undefined (Guge) bugbounty白帽故事 https://gugesay.com/blog/利用工具从cloudflare中发现源ip https://gugesay.com/blog/利用工具从cloudflare中发现源ip undefined Thu, 25 Jan 2024 08:29:30 GMT undefined (Guge) bugbounty工具白帽故事 https://gugesay.com/blog/利用开放式重定向、2fa-绕过等漏洞获取1600赏金奖励 https://gugesay.com/blog/利用开放式重定向、2fa-绕过等漏洞获取1600赏金奖励 undefined Tue, 27 Aug 2024 01:21:42 GMT undefined (Guge) 2FA bypassbugbounty开放重定向白帽故事 https://gugesay.com/blog/利用非云-ssrf-获得更多乐趣和赏金 https://gugesay.com/blog/利用非云-ssrf-获得更多乐趣和赏金 undefined Sun, 13 Aug 2023 00:48:20 GMT undefined (Guge) bugbountyssrf白帽故事 https://gugesay.com/blog/发现facebook-ssrf，收获31500美元赏金的故事 https://gugesay.com/blog/发现facebook-ssrf，收获31500美元赏金的故事 undefined Thu, 17 Oct 2024 13:32:35 GMT undefined (Guge) bugbountyfacebookssrf白帽故事 https://gugesay.com/blog/发现facebook-ssrf，收获31500美元赏金的故事【2】 https://gugesay.com/blog/发现facebook-ssrf，收获31500美元赏金的故事【2】 undefined Fri, 18 Oct 2024 01:21:03 GMT undefined (Guge) bugbountyfacebookssrf白帽故事 https://gugesay.com/blog/发现关键漏洞获得-4000-赏金奖励 https://gugesay.com/blog/发现关键漏洞获得-4000-赏金奖励 undefined Wed, 11 Dec 2024 01:17:11 GMT undefined (Guge) bugbountyidorsubdomain白帽故事 https://gugesay.com/blog/另一处xss！荣登微软msrc-2022-q3排行榜 https://gugesay.com/blog/另一处xss！荣登微软msrc-2022-q3排行榜 undefined Wed, 15 Feb 2023 16:00:07 GMT undefined (Guge) bugbountyXSS微软白帽故事 https://gugesay.com/blog/另一枚价值3133-7的google-idor漏洞 https://gugesay.com/blog/另一枚价值3133-7的google-idor漏洞 undefined Wed, 29 Sep 2021 02:11:32 GMT undefined (Guge) bugbountyGoogleidor白帽故事 https://gugesay.com/blog/各大云-accesskey-特征整理 https://gugesay.com/blog/各大云-accesskey-特征整理 undefined Thu, 07 Nov 2024 01:37:47 GMT undefined (Guge) AccessKeybugbountyHaE白帽故事 https://gugesay.com/blog/国外4大众测平台优缺点对比 https://gugesay.com/blog/国外4大众测平台优缺点对比 undefined Tue, 14 May 2024 01:45:30 GMT undefined (Guge) bugbountybugcrowdhackeroneIntigritiYeswehack白帽故事 https://gugesay.com/blog/国外一位白帽子2年来总结的10条经验 https://gugesay.com/blog/国外一位白帽子2年来总结的10条经验 undefined Mon, 27 Sep 2021 05:46:08 GMT undefined (Guge) bugbounty白帽故事经验 https://gugesay.com/blog/在-instagram-上查看任何人的私人电子邮件和生日 https://gugesay.com/blog/在-instagram-上查看任何人的私人电子邮件和生日 undefined Tue, 06 Aug 2024 01:24:46 GMT undefined (Guge) bugbountyInstagram白帽故事 https://gugesay.com/blog/在chatgpt中挖掘xss漏洞实现任意账户接管 https://gugesay.com/blog/在chatgpt中挖掘xss漏洞实现任意账户接管 undefined Fri, 23 Feb 2024 03:19:06 GMT undefined (Guge) bugbountychatgptXSS白帽故事 https://gugesay.com/blog/在outlook上寻找远程代码执行漏洞【部分】 https://gugesay.com/blog/在outlook上寻找远程代码执行漏洞【部分】 undefined Fri, 22 Mar 2024 16:00:48 GMT undefined (Guge) bugbountyoutlookrce白帽故事 https://gugesay.com/blog/在一个web网站中获得7000赏金奖励 https://gugesay.com/blog/在一个web网站中获得7000赏金奖励 undefined Wed, 27 Mar 2024 01:32:37 GMT undefined (Guge) bugbountyhackeronerceXSS白帽故事 https://gugesay.com/blog/在侦察阶段如何快速找到-rce https://gugesay.com/blog/在侦察阶段如何快速找到-rce undefined Wed, 22 May 2024 01:27:38 GMT undefined (Guge) Apachebugbountyrce白帽故事 https://gugesay.com/blog/在家用摄像头中利用-n-day https://gugesay.com/blog/在家用摄像头中利用-n-day undefined Fri, 07 Jun 2024 02:26:50 GMT undefined (Guge) bugbounty白帽故事 https://gugesay.com/blog/在阅读了220份idor漏洞报告后的心得体会 https://gugesay.com/blog/在阅读了220份idor漏洞报告后的心得体会 undefined Fri, 25 Feb 2022 06:20:41 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/如何为任意-youtube-频道提供验证徽章 https://gugesay.com/blog/如何为任意-youtube-频道提供验证徽章 undefined Fri, 20 Sep 2024 06:30:25 GMT undefined (Guge) bugbountyGoogleyoutube白帽故事 https://gugesay.com/blog/如何从iis欢迎页面中快速挖掘漏洞 https://gugesay.com/blog/如何从iis欢迎页面中快速挖掘漏洞 undefined Thu, 31 Oct 2024 14:44:46 GMT undefined (Guge) bugbountyIISshortscan白帽故事 https://gugesay.com/blog/如何从已披露的漏洞报告中重新发现新的漏洞 https://gugesay.com/blog/如何从已披露的漏洞报告中重新发现新的漏洞 undefined Thu, 14 Nov 2024 07:22:50 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/如何利用js进行进一步漏洞挖掘【2024至尊版】 https://gugesay.com/blog/如何利用js进行进一步漏洞挖掘【2024至尊版】 undefined Mon, 28 Oct 2024 12:30:32 GMT undefined (Guge) bugbountyJS白帽故事 https://gugesay.com/blog/如何在bugcrowd公共项目中找到50多个xss漏洞 https://gugesay.com/blog/如何在bugcrowd公共项目中找到50多个xss漏洞 undefined Wed, 20 Apr 2022 07:48:49 GMT undefined (Guge) bugbountybugcrowdXSS白帽故事 https://gugesay.com/blog/如何在epic-games上赚到7000赏金 https://gugesay.com/blog/如何在epic-games上赚到7000赏金 undefined Thu, 04 Jan 2024 12:07:12 GMT undefined (Guge) bugbountyrce白帽故事 https://gugesay.com/blog/如何在两个不同的网站中发现sql注入 https://gugesay.com/blog/如何在两个不同的网站中发现sql注入 undefined Sun, 13 Aug 2023 01:37:55 GMT undefined (Guge) bugbountysqli白帽故事 https://gugesay.com/blog/如何在侦查阶段快速发现ssrf https://gugesay.com/blog/如何在侦查阶段快速发现ssrf undefined Tue, 27 Dec 2022 04:23:44 GMT undefined (Guge) bugbountyssrf白帽故事 https://gugesay.com/blog/如何大规模搜寻泄露的敏感文件 https://gugesay.com/blog/如何大规模搜寻泄露的敏感文件 undefined Tue, 25 Jun 2024 01:58:07 GMT undefined (Guge) bugbounty泄露白帽故事 https://gugesay.com/blog/如何将-dom-xss升级为一键帐户接管（下集） https://gugesay.com/blog/如何将-dom-xss升级为一键帐户接管（下集） undefined Thu, 18 Apr 2024 02:21:17 GMT undefined (Guge) bugbountyXSS帐户接管白帽故事 https://gugesay.com/blog/如何将dom-xss升级为一键帐户接管（上集） https://gugesay.com/blog/如何将dom-xss升级为一键帐户接管（上集） undefined Wed, 17 Apr 2024 16:00:52 GMT undefined (Guge) bugbountyXSS帐户接管白帽故事 https://gugesay.com/blog/如何将低危的-ssrf-盲注升级为严重漏洞 https://gugesay.com/blog/如何将低危的-ssrf-盲注升级为严重漏洞 undefined Sun, 17 Nov 2024 08:58:29 GMT undefined (Guge) awsbugbountyssrf白帽故事 https://gugesay.com/blog/如何获得免费的linkedin-premium会员资格 https://gugesay.com/blog/如何获得免费的linkedin-premium会员资格 undefined Thu, 07 Sep 2023 08:15:25 GMT undefined (Guge) bugbountyidorLinkedln白帽故事 https://gugesay.com/blog/如何远程控制起亚汽车 https://gugesay.com/blog/如何远程控制起亚汽车 undefined Tue, 01 Oct 2024 04:00:15 GMT undefined (Guge) bugbountykia白帽故事起亚汽车 https://gugesay.com/blog/将selfxss升级为存储xss https://gugesay.com/blog/将selfxss升级为存储xss undefined Mon, 01 Apr 2024 01:38:45 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/将赏金从50变为1000的帐户接管漏洞 https://gugesay.com/blog/将赏金从50变为1000的帐户接管漏洞 undefined Sun, 13 Aug 2023 05:59:16 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/巧妙利用业务逻辑漏洞，实现google帐户接管 https://gugesay.com/blog/巧妙利用业务逻辑漏洞，实现google帐户接管 undefined Thu, 08 Aug 2024 01:41:18 GMT undefined (Guge) bugbountyGoogleidorotp白帽故事 https://gugesay.com/blog/巧妙利用本地存储漏洞，轻松登录他人直播-app-账户 https://gugesay.com/blog/巧妙利用本地存储漏洞，轻松登录他人直播-app-账户 undefined Wed, 29 May 2024 03:25:19 GMT undefined (Guge) bugbountyidorLocal Storage白帽故事 https://gugesay.com/blog/开箱即用-payloads https://gugesay.com/blog/开箱即用-payloads undefined Tue, 20 Feb 2024 01:22:21 GMT undefined (Guge) bugbountyPayload工具白帽故事 https://gugesay.com/blog/彻底弄懂-http-request-smuggling（http-请求走私）攻击以及实战演示 https://gugesay.com/blog/彻底弄懂-http-request-smuggling（http-请求走私）攻击以及实战演示 undefined Tue, 12 Sep 2023 09:13:30 GMT undefined (Guge) bugbountyHTTP Request Smuggler白帽故事请求走私 https://gugesay.com/blog/必备收藏！国外整理收集的网络安全资源 https://gugesay.com/blog/必备收藏！国外整理收集的网络安全资源 undefined Fri, 19 Jan 2024 06:56:27 GMT undefined (Guge) bugbounty工具白帽故事 https://gugesay.com/blog/快速发现未授权页面及sql注入漏洞，获得1500奖励 https://gugesay.com/blog/快速发现未授权页面及sql注入漏洞，获得1500奖励 undefined Thu, 19 Oct 2023 08:26:15 GMT undefined (Guge) bugbountysqli白帽故事 https://gugesay.com/blog/意外发现dos攻击并获得25000美元奖励的故事 https://gugesay.com/blog/意外发现dos攻击并获得25000美元奖励的故事 undefined Tue, 16 Apr 2024 01:44:39 GMT undefined (Guge) bugbountydosrce区块链白帽故事 https://gugesay.com/blog/打造自己专属的漏洞赏金搜索引擎 https://gugesay.com/blog/打造自己专属的漏洞赏金搜索引擎 undefined Mon, 17 Jun 2024 02:10:21 GMT undefined (Guge) bugbounty搜索引擎随记体验 https://gugesay.com/blog/挖掘p1漏洞最受欢迎的8款猎杀工具 https://gugesay.com/blog/挖掘p1漏洞最受欢迎的8款猎杀工具 undefined Wed, 01 Feb 2023 07:55:37 GMT undefined (Guge) bugbounty工具白帽故事 https://gugesay.com/blog/挖掘开发环境隐藏的秘密：一次-oauth-凭证从泄露到利 https://gugesay.com/blog/挖掘开发环境隐藏的秘密：一次-oauth-凭证从泄露到利 undefined Tue, 12 Dec 2023 10:12:07 GMT undefined (Guge) APIbugbountyOAuth白帽故事 https://gugesay.com/blog/攻击google-bard-从实时注入到数据外泄 https://gugesay.com/blog/攻击google-bard-从实时注入到数据外泄 undefined Mon, 04 Dec 2023 01:39:32 GMT undefined (Guge) Bardbugbounty白帽故事 https://gugesay.com/blog/最新h1漏洞披露通过作用域标签绕过-csp-的存储-xss，获 https://gugesay.com/blog/最新h1漏洞披露通过作用域标签绕过-csp-的存储-xss，获 undefined Tue, 21 Feb 2023 08:25:27 GMT undefined (Guge) bugbountyhackerone白帽故事 https://gugesay.com/blog/最新h1越权漏洞披露，获得15000美元奖励 https://gugesay.com/blog/最新h1越权漏洞披露，获得15000美元奖励 undefined Mon, 29 Apr 2024 11:25:21 GMT undefined (Guge) bugbountyhackeroneidor白帽故事 https://gugesay.com/blog/最新twitter-xss-csrf-漏洞完整披露 https://gugesay.com/blog/最新twitter-xss-csrf-漏洞完整披露 undefined Wed, 20 Dec 2023 02:03:24 GMT undefined (Guge) bugbountycsrfXSS白帽故事 https://gugesay.com/blog/最适合渗透人员的15款浏览器插件推荐 https://gugesay.com/blog/最适合渗透人员的15款浏览器插件推荐 undefined Thu, 10 Aug 2023 07:13:54 GMT undefined (Guge) bugbounty工具白帽故事 https://gugesay.com/blog/服务器端原型污染检测插件 https://gugesay.com/blog/服务器端原型污染检测插件 undefined Wed, 06 Mar 2024 04:48:06 GMT undefined (Guge) bugbountyPrototype Pollution原型污染工具白帽故事 https://gugesay.com/blog/某android-app中一处有趣的bug https://gugesay.com/blog/某android-app中一处有趣的bug undefined Wed, 12 Jun 2024 06:17:36 GMT undefined (Guge) APPbugbountyXSS白帽故事 https://gugesay.com/blog/查询背后：通过sql注入挖掘ntlm哈希 https://gugesay.com/blog/查询背后：通过sql注入挖掘ntlm哈希 undefined Thu, 02 Nov 2023 07:48:09 GMT undefined (Guge) bugbountyNTLMsqli白帽故事 https://gugesay.com/blog/每个白帽都不应错过的酷炫侦察技巧！总有一 https://gugesay.com/blog/每个白帽都不应错过的酷炫侦察技巧！总有一 undefined Sun, 20 Aug 2023 02:46:53 GMT undefined (Guge) bugbounty侦察白帽故事 https://gugesay.com/blog/没有swaggerui的swag怎么破 https://gugesay.com/blog/没有swaggerui的swag怎么破 undefined Sun, 13 Aug 2023 06:15:55 GMT undefined (Guge) bugbountySwaggerUI白帽故事 https://gugesay.com/blog/独家揭秘：巧妙利用akamai，透过f5窃取用户内部数据！ https://gugesay.com/blog/独家揭秘：巧妙利用akamai，透过f5窃取用户内部数据！ undefined Wed, 31 Jan 2024 08:22:00 GMT undefined (Guge) bugbounty白帽故事请求走私 https://gugesay.com/blog/白帽应如何避免攻击性扫描行为 https://gugesay.com/blog/白帽应如何避免攻击性扫描行为 undefined Tue, 02 Apr 2024 01:26:01 GMT undefined (Guge) bugbounty白帽白帽故事 https://gugesay.com/blog/空穴来宝：如何从一个空文件中找到登录凭据 https://gugesay.com/blog/空穴来宝：如何从一个空文件中找到登录凭据 undefined Wed, 29 May 2024 01:33:17 GMT undefined (Guge) bugbountyCredentials白帽故事 https://gugesay.com/blog/突破google的bug跟踪系统，获得15600美元赏金之旅 https://gugesay.com/blog/突破google的bug跟踪系统，获得15600美元赏金之旅 undefined Fri, 24 Nov 2023 15:41:24 GMT undefined (Guge) bugbountyGoogle白帽故事 https://gugesay.com/blog/绕过双因素认证至账户接管 https://gugesay.com/blog/绕过双因素认证至账户接管 undefined Mon, 22 Jan 2024 08:56:37 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/继续citrix传奇：cve-2023-5914和cve-2023-6184 https://gugesay.com/blog/继续citrix传奇：cve-2023-5914和cve-2023-6184 undefined Wed, 20 Mar 2024 01:41:09 GMT undefined (Guge) bugbountyCitrixrce白帽故事 https://gugesay.com/blog/致命组合-利用idor实现csrf攻击 https://gugesay.com/blog/致命组合-利用idor实现csrf攻击 undefined Wed, 11 Jan 2023 02:03:26 GMT undefined (Guge) bugbountycsrfidor白帽故事 https://gugesay.com/blog/越权拿下超级管理员权限 https://gugesay.com/blog/越权拿下超级管理员权限 undefined Tue, 05 Sep 2023 03:17:05 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/远程文件包含（rfi）小技巧 https://gugesay.com/blog/远程文件包含（rfi）小技巧 undefined Sun, 22 Oct 2023 13:10:11 GMT undefined (Guge) bugbountyRFI白帽故事 https://gugesay.com/blog/逆向分析混淆-js-代码处理签名哈希并实现工具化 https://gugesay.com/blog/逆向分析混淆-js-代码处理签名哈希并实现工具化 undefined Tue, 23 Jan 2024 01:37:29 GMT undefined (Guge) bugbounty工具白帽故事逆向分析 https://gugesay.com/blog/通过-js-文件实现bypass管理面板 https://gugesay.com/blog/通过-js-文件实现bypass管理面板 undefined Tue, 10 May 2022 01:48:33 GMT undefined (Guge) bugbountybypass白帽故事 https://gugesay.com/blog/通过-pdf-打印功能利用ssrf访问内部数据 https://gugesay.com/blog/通过-pdf-打印功能利用ssrf访问内部数据 undefined Tue, 26 Nov 2024 01:02:28 GMT undefined (Guge) bugbountypdfssrf白帽故事 https://gugesay.com/blog/通过-url-解析器绕过-csp-混淆，实现-netlify-cdn-上的xss https://gugesay.com/blog/通过-url-解析器绕过-csp-混淆，实现-netlify-cdn-上的xss undefined Thu, 19 Sep 2024 07:33:44 GMT undefined (Guge) bugbountycsp bypassNetlify白帽故事 https://gugesay.com/blog/通过反向代理劫持oauth代码的账户接管之旅 https://gugesay.com/blog/通过反向代理劫持oauth代码的账户接管之旅 undefined Wed, 29 Nov 2023 12:57:14 GMT undefined (Guge) bugbountyOAuth白帽故事 https://gugesay.com/blog/通过更改logo进行命令注入的故事 https://gugesay.com/blog/通过更改logo进行命令注入的故事 undefined Mon, 06 Mar 2023 02:17:19 GMT undefined (Guge) bugbounty命令注入白帽故事 https://gugesay.com/blog/通过重置密码token泄露收获e2500赏金 https://gugesay.com/blog/通过重置密码token泄露收获e2500赏金 undefined Wed, 03 Apr 2024 01:11:57 GMT undefined (Guge) ATObugbounty帐户接管白帽故事 https://gugesay.com/blog/重置密码绕过的n种利用姿势 https://gugesay.com/blog/重置密码绕过的n种利用姿势 undefined Tue, 09 Apr 2024 01:38:05 GMT undefined (Guge) bugbountyidor白帽故事 https://gugesay.com/blog/黑掉-apple-系列-从-sql-注入到远程代码执行 https://gugesay.com/blog/黑掉-apple-系列-从-sql-注入到远程代码执行 undefined Thu, 09 May 2024 03:13:56 GMT undefined (Guge) Applebugbountyrcesqli白帽故事 https://gugesay.com/blog/黑掉nasa【1】：从发现漏洞到荣登名人堂之旅 https://gugesay.com/blog/黑掉nasa【1】：从发现漏洞到荣登名人堂之旅 undefined Fri, 30 Aug 2024 07:45:11 GMT undefined (Guge) bugbountyHacking NASA白帽故事 https://gugesay.com/blog/黑掉nasa【2】：从发现漏洞到荣登名人堂之旅 https://gugesay.com/blog/黑掉nasa【2】：从发现漏洞到荣登名人堂之旅 undefined Fri, 30 Aug 2024 08:04:15 GMT undefined (Guge) bugbountyHacking NASA白帽故事 https://gugesay.com/blog/黑掉nasa：ssrf、子域接管以及xss https://gugesay.com/blog/黑掉nasa：ssrf、子域接管以及xss undefined Sun, 02 Jun 2024 14:40:59 GMT undefined (Guge) bugbountyHacking NASA白帽故事