Technical articles migrated from Yuque.
I opened up Burp AT’s jar looking for one thing: where does it hide the GPT client? After a thorough search, the answer was — nowhere, because it doesn’t exist. ...
Lately I’ve been doing more and more AI red teaming: half the time thinking about how to attack Agents, and the other half thinking about: once the attacks are done, what should real-world defense actually look like? I’ve written a local-first Agent Runtime Guard (ARG) myself, and I’ve also taken apart Microsoft’s newly open-sourced Agent Governance Toolkit (AGT). After taking both apart, the conclusion is actually quite clear: Agent runtime protection is, in essence, the “firewall” of the LLM era. Whenever I mention “firewall”—a word that has been beaten to death—I want to laugh. Still, this is decidedly not another layer of prompt rhetoric, nor is it old IAM renamed. What it intercepts is the segment where “the model’s intent has already formed, but the side effects haven’t happened yet”—the command hasn’t been exec’d, the keys haven’t been read, the email hasn’t been sent, no HTTP has left the network. ...
Reverse-proxy the OpenRouter AI API through an overseas server to work around regional access restrictions. Background (SCQA) S - Situation Overseas AI services (image generation, chat, etc.) are typically accessed through aggregator platforms like OpenRouter that offer a unified API, compatible with the OpenAI SDK. C - Complication These services impose access restrictions on mainland China — if the requesting source IP is identified as originating from within China, service is refused outright. ...
Red team security tooling — rebuilding OpenAI’s Privacy Filter into an HTTP gateway for structured PII extraction OpenAI open-sourced a small model called Privacy Filter that can identify PII such as names, emails, phone numbers, and addresses from unstructured text. I spent one evening turning it into an HTTP gateway service, running on an NVIDIA L20, with dual-process inference peaking at 81 RPS and GPU utilization pushed to 98%. ...
::::danger A Survey of the Security Risks of File Hash Leaks I did a dedicated round of research on this question, in both Chinese and English sources. Conclusion first: the answer to “is a file hash leak harmful” is not a simple yes or no — it is highly context-dependent. :::: If the hash is merely an offline integrity-check value — for example the SHA256SUMS file publicly published on a Linux distribution’s official site — it is usually not a secret. On the contrary, it should be published and signed so users can verify download integrity and authenticity of origin. This is exactly how Fedora’s official verification instructions, Debian’s official image verification instructions, and Ubuntu’s official tutorial are designed. ...
Got my hands on a beta app - Wukong. Opened it up — an invite code input box popped up. Invite code? I didn’t manage to get an invite code today… Most people give up at this point. My first reaction was: how is this thing implemented? I didn’t expect this little investigation to burn through my entire Coding Plan Pro quota. 1. Initial Exploration With a target to crack, the first step is figuring out its architecture. ...
::::success How do you bundle your Hook module together with the App? The idea is: use LSPatch to embed the LSPosed framework into the APK, so there is no need to modify the App’s business code — instead, :::: Embedded Hooks (LSPatch / XPatch) —— the most elegant route https://windysha.github.io/2019/04/18/Xpatch-%E5%85%8DRoot%E5%AE%9E%E7%8E%B0App%E5%8A%A0%E8%BD%BDXposed%E6%8F%92%E4%BB%B6%E7%9A%84%E4%B8%80%E7%A7%8D%E6%96%B9%E6%A1%88/ https://github.com/WindySha/Xpatch?tab=readme-ov-file This route best fits your current situation. If you like writing Hooks (Java/Kotlin) but dislike editing Smali (assembly), then this route is a great fit. The idea ...
LSPosed module: cc-aligned-debugSigned-xxxxQluvnDtXmttQ-.zip Original app files: DYLS-xxxxX9y9lvWKr5dr-.zip Ad-free modified version: dyls-3.1.2.0-noAd.zip Tags: Android reverse engineering, Smali, state machine, logic vulnerability Preface: When Hooking Meets a “Corpse File” In red team security testing, we are used to hooking with Frida or Xposed, precisely modifying memory like a surgeon. But recently, while analyzing an app called “Movie Hunter” (电影猎手), I ran into an interesting confrontation. This experience made me rethink: the highest form of cracking is often not fighting the code logic, but reshaping the data source. ...
A fairly routine testing workflow: the project runs on Go and uses the ubiquitous Gorilla/sessions to manage sessions…… Background The first thing I noticed was that the cookie could be base64-decoded — and then decoded a second time…… This cookie is a typical encrypted CookieStore session value from gorilla/sessions, matching the format: <timestamp>|<base64-encoded-session-data>|<MAC> Where: Part 1 is a timestamp Part 2 is the gob-encoded session value, then base64-encoded; Part 3 is an HMAC-SHA signature used to verify data integrity; If we know the secret key (for example this project’s hardcoded "changeme"), we can decode/forge/modify the session. B64-decode it, and we get ...
frp is a great tool — high performance, stable, and worth using. However, its configuration file has gone through two format generations (.ini ->.toml), and the options can be somewhat complicated for newcomers. When project timelines are tight and workloads heavy, you may not have time to figure out what all these options mean in a short period. Hence this article — written on April 14, 2025; the currently applicable frp version is: https://github.com/fatedier/frp/releases/tag/v0.61.2 ...