{
  "caspersun.club": {
    "/": {
      "date": "2026-02-07T10:42:33Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "172.66.46.253",
      "ipASN": "Cloudflare, Inc.",
      "ipCountry": null,
      "httpHeaderHash": "45G6C73BPQSK4V3MHQRO7AXNCCF63BMG",
      "httpHeaderTechnologies": [
        "HTTP/3",
        "Cloudflare"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 800,
      "httpBodyHash": "VCNDXRFM5JRR4OZCIY5Q3OEZ3VEP5NQT",
      "httpBodyTechnologies": [
        "jQuery:2.0.3",
        "Google Hosted Libraries",
        "Node.js",
        "FancyBox",
        "Hexo:5.1.1"
      ],
      "httpBodyUrls": [
        "/archives",
        "/tags/Windows/",
        "#Complex-Object",
        "#SSRF-CVE-2021-26855",
        "/fancybox/jquery.fancybox.pack.js",
        "https://rw.md/2022/11/09/ProxyNotRelay.html",
        "/2022/12/19/proxynotshell/proxynotshell/figureconversion.png",
        "https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend",
        "#PSObject",
        "#GetTargetTypeForDeserialization",
        "/2022/12/19/proxylogon/kerberos.png",
        "//fonts.googleapis.com/css?family=Source+Code+Pro",
        "/2022/12/19/proxynotshell/proxynotshell/deserializedsystemexception.png",
        "https://devblogs.microsoft.com/powershell/how-objects-are-sent-to-and-from-remote-sessions/",
        "#架构介绍",
        "#漏洞原理",
        "/2022/12/19/proxylogon/result.png",
        "#BaseObject-和-ImmediateBaseObject",
        "/2022/12/19/proxylogon/resetoab.png",
        "/2022/12/19/proxynotshell/proxynotshell/systemexception.png",
        "/2022/12/19/proxylogon/backendserver.png",
        "/2022/12/19/proxylogon/beresourcerequesthandler_canhandle.png",
        "/atom.xml",
        "#环境搭建",
        "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26855",
        "#简介",
        "#PSRP对象反序列化过程",
        "/2021/03/27/start-writing-blogs/",
        "/2022/12/19/proxynotshell/proxynotshell/psobject.png",
        "https://devco.re/blog/2021/08/06/a-new-attack-surface-on-MS-exchange-part-1-ProxyLogon/",
        "#PSMemberInfo",
        "#攻击效果",
        "#Custom-Converter",
        "/2022/12/19/proxylogon/GetBEResouceCookie.png",
        "/2022/12/19/proxylogon/createserverrequest.png",
        "https://github.com/testanull/ProxyNotShell-PoC",
        "/2022/12/19/proxylogon/gettargetbackendserverurl.png",
        "/2022/12/19/proxylogon/resetoabvirtualdirectoryxaml.png",
        "https://swarm.ptsecurity.com/attacking-ms-exchange-web-interfaces/",
        "/",
        "/css/style.css",
        "#member的类型",
        "#PSStandardMember",
        "/archives/2022/12/",
        "#Exchange-Server介绍",
        "/tags/Exchange-Server/",
        "https://www.amazon.com/Professional-Windows-PowerShell-Programming-Providers/dp/0470173939",
        "#影响范围",
        "#背景知识介绍",
        "/2022/12/19/proxylogon/iis_cas.png",
        "/2022/12/19/proxynotshell/proxynotshell/",
        "/2022/12/19/proxylogon/exchangeserver_history.png",
        "/2022/12/19/proxylogon/BE_ResolveAnchorMailbox.png",
        "//ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js",
        "/2022/12/19/proxylogon/SelectHandlerForUnauthenticatedRequest.png",
        "#TypeNames",
        "#PSRP协议",
        "#LanguagePrimitives-ConvertTo",
        "/2022/12/19/proxylogon/expresult.png",
        "/2022/12/19/proxylogon/aspx_shell_result.png",
        "https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_types.ps1xml?view=powershell-7.3",
        "#引用",
        "/favicon.png",
        "/fancybox/jquery.fancybox.css",
        "/2022/12/19/proxylogon/editoab.png",
        "/2022/12/19/proxylogon/backendserverfromstring.png",
        "/2022/12/19/proxynotshell/proxynotshell/result.png",
        "/2022/12/19/proxynotshell/proxynotshell/getprocess.png",
        "https://devblogs.microsoft.com/powershell/whats-up-with-psbase-psextended-psadapted-and-psobject/",
        "#利用效果",
        "#Primitive-Type",
        "#ReadOneDeserializedObject",
        "https://devblogs.microsoft.com/powershell/psstandardmembers-the-stealth-property/",
        "/js/script.js",
        "http://hexo.io/",
        "/2022/12/19/proxylogon/iis_backend.png",
        "/2022/12/19/proxynotshell/proxynotshell/psmemberinfo.png",
        "https://hosch3n.github.io/2021/08/22/ProxyLogon%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/",
        "/archives/2021/03/",
        "/2022/12/19/proxylogon/",
        "/categories/Exchange-Server/",
        "#Base-Adapted-Extended-Members",
        "#任意文件写入-CVE-2021-27065",
        "#复现环境",
        "#漏洞分析",
        "/2022/12/19/proxylogon/cas_arch.png",
        "/2022/12/19/proxylogon/writefileactivity.png",
        "/2022/12/19/proxylogon/OnPostAuthorizeInternal.png"
      ],
      "httpBodyMetaTags": {},
      "httpBodyByteSize": 60669,
      "httpBodyPageTitle": "Blog"
    },
    "/archives/": {
      "date": "2026-02-07T10:15:41Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "172.66.46.253",
      "ipASN": "Cloudflare, Inc.",
      "ipCountry": null,
      "httpHeaderHash": "GM5OLARBXK7OVHBUDYGGUH33XO44DIBV",
      "httpHeaderTechnologies": [
        "HTTP/3",
        "Cloudflare"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 805,
      "httpBodyHash": "TX5F4XKXF5NG7FY37C6J4JCR7S6K3GE6",
      "httpBodyTechnologies": [
        "Node.js",
        "FancyBox",
        "Hexo:5.1.1",
        "jQuery:2.0.3",
        "Google Hosted Libraries"
      ],
      "httpBodyUrls": [
        "/tags/Windows/",
        "/archives/2021/03/",
        "/tags/Exchange-Server/",
        "/2022/12/19/proxylogon/",
        "/fancybox/jquery.fancybox.pack.js",
        "//fonts.googleapis.com/css?family=Source+Code+Pro",
        "/",
        "/favicon.png",
        "/js/script.js",
        "http://hexo.io/",
        "/archives/2022/12/",
        "/categories/Exchange-Server/",
        "/2021/03/27/start-writing-blogs/",
        "/archives/2022",
        "/css/style.css",
        "/archives",
        "/atom.xml",
        "/archives/2021",
        "/fancybox/jquery.fancybox.css",
        "/2022/12/19/proxynotshell/proxynotshell/",
        "//ajax.googleapis.com/ajax/libs/jquery/2.0.3/jquery.min.js"
      ],
      "httpBodyMetaTags": {},
      "httpBodyByteSize": 6731,
      "httpBodyPageTitle": "Archives | Blog"
    }
  },
  "hackyboiz.github.io": {
    "/2021/03/08/idioth/2021-03-08/": {
      "date": "2026-02-07T04:21:26Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "185.199.110.153",
      "ipASN": "Fastly, Inc.",
      "ipCountry": "United States",
      "httpHeaderHash": "7RQBMESKPL3H6BBMSD7GWQAX3Q4YXTJ7",
      "httpHeaderTechnologies": [
        "Fastly",
        "Varnish",
        "GitHub Pages",
        "HSTS"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 819,
      "httpBodyHash": "2TDSNP2XUPKTUP2VP6EKC3HZTNBHGO43",
      "httpBodyTechnologies": [
        "Clipboard.js",
        "jQuery:3.4.1",
        "Bootstrap:4.4.1",
        "Google Analytics",
        "Node.js",
        "FancyBox",
        "Typed.js",
        "Hexo:5.1.1"
      ],
      "httpBodyUrls": [
        "https://cdn.staticfile.org/github-markdown-css/4.0.0/github-markdown.min.css",
        "https://www.fireeye.com/blog/threat-research/2021/03/detection-response-to-exploitation-of-microsoft-exchange-zero-day-vulnerabilities.html",
        "/js/main.js",
        "#",
        "/about/",
        "#Explain",
        "/categories/",
        "/tags/idioth/",
        "/js/local-search.js",
        "/img/profile_idioth.jpg",
        "/js/utils.js",
        "/css/main.css",
        "/tags/webshell/",
        "/categories/1day1line/",
        "https://github.com/fluid-dev/hexo-theme-fluid",
        "//at.alicdn.com/t/font_1736178_pjno9b9zyxs.css",
        "https://cdn.staticfile.org/typed.js/2.0.11/typed.min.js",
        "https://cdn.staticfile.org/fancybox/3.5.7/jquery.fancybox.min.css",
        "/",
        "/author/",
        "javascript:",
        "/js/clipboard-use.js",
        "https://maily.so/hackyboiz/embed?src=embed",
        "//at.alicdn.com/t/font_1749284_6peoq002giu.css",
        "https://cdn.staticfile.org/jquery/3.4.1/jquery.min.js",
        "https://hackyboiz.github.io/2021/03/08/idioth/2021-03-08/",
        "#URL",
        "/rss2.xml",
        "/tags/idioth",
        "/js/color-schema.js",
        "/lib/hint/hint.min.css",
        "https://www.google-analytics.com/analytics.js",
        "https://www.googletagmanager.com/gtag/js?id=UA-177243668-2",
        "https://cdn.staticfile.org/clipboard.js/2.0.6/clipboard.min.js",
        "/tags/",
        "/archives/",
        "https://cdn.staticfile.org/tocbot/4.11.1/tocbot.min.js",
        "https://cdn.staticfile.org/twitter-bootstrap/4.4.1/css/bootstrap.min.css",
        "https://cdn.staticfile.org/highlight.js/10.0.0/styles/github-gist.min.css",
        "/.css",
        "#Target",
        "/author",
        "/js/debouncer.js",
        "https://cdn.staticfile.org/fancybox/3.5.7/jquery.fancybox.min.js",
        "/tags/cve/",
        "/js/lazyload.js",
        "https://hexo.io",
        "/tags/microsoft/",
        "/2021/03/09/l0ch/2021-03-09/",
        "https://cdn.staticfile.org/mathjax/3.0.5/es5/tex-svg.js",
        "https://cdn.staticfile.org/anchor-js/4.2.2/anchor.min.js",
        "https://cdn.staticfile.org/twitter-bootstrap/4.4.1/js/bootstrap.min.js",
        "/img/favicon.ico",
        "/2021/03/07/l0ch/bughunting-tutorial/",
        "https://creativecommons.org/licenses/by-sa/4.0/deed.ko"
      ],
      "httpBodyMetaTags": {
        "description": "\u003ch2 id=\"URL\"\u003e\u003ca href=\"#URL\" class=\"headerlink\" title=\"URL\"\u003e\u003c/a\u003eURL\u003c/h2\u003e\u003cp\u003e\u003ca href=\"https://www.fireeye.com/blog/threat-research/2021/03/detection-response-to-exploitation-of-microsoft-exchange-zero-day-vulnerabilities.html\"\u003eDetection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"Target\"\u003e\u003ca href=\"#Target\" class=\"headerlink\" title=\"Target\"\u003e\u003c/a\u003eTarget\u003c/h2\u003e\u003cul\u003e\n\u003cli\u003e2021\u0026#xB144; 3\u0026#xC6D4; 2\u0026#xC77C; \u0026#xC790; \u0026#xD328;\u0026#xCE58; \u0026#xC774;\u0026#xC804;\u0026#xC758; Microsoft Exchange Server\u003cul\u003e\n\u003cli\u003e2013 Cumulative Update 23\u003c/li\u003e\n\u003cli\u003e2016 Cumulative Update 18\u003c/li\u003e\n\u003cli\u003e2016 Cumulative Update 19\u003c/li\u003e\n\u003cli\u003e2019 Cumulative Update 7\u003c/li\u003e\n\u003cli\u003e2019 Cumulative Update 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"Explain\"\u003e\u003ca href=\"#Explain\" class=\"headerlink\" title=\"Explain\"\u003e\u003c/a\u003eExplain\u003c/h2\u003e\u003cp\u003eMicrosoft Exchange Server\u0026#xC758; \u0026#xC81C;\u0026#xB85C; \u0026#xB370;\u0026#xC774; \u0026#xCDE8;\u0026#xC57D;\u0026#xC810;\u0026#xC744; \u0026#xC545;\u0026#xC6A9;\u0026#xD55C; \u0026#xACF5;\u0026#xACA9;\u0026#xC774; \u0026#xBC1C;\u0026#xACAC;\u0026#xB418;\u0026#xC5C8;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u0026#xD589;\u0026#xC704;\u0026#xB294; \u0026#xC811;\u0026#xC18D; \u0026#xC720;\u0026#xC9C0;\u0026#xB97C; \u0026#xC704;\u0026#xD55C; \u0026#xC6F9; \u0026#xC258; \u0026#xC0DD;\u0026#xC131;, \u0026#xC6D0;\u0026#xACA9; \u0026#xCF54;\u0026#xB4DC; \u0026#xC2E4;\u0026#xD589;, \u0026#xC5D4;\u0026#xB4DC; \u0026#xD3EC;\u0026#xC778;\u0026#xD2B8; \u0026#xBCF4;\u0026#xC548; \u0026#xC194;\u0026#xB8E8;\u0026#xC158; \u0026#xD0D0;\u0026#xC9C0;\u0026#xC785;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e2021\u0026#xB144; 1\u0026#xC6D4;\u0026#xC5D0; \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u003ccode\u003ehelp.aspx\u003c/code\u003e \u0026#xC6F9; \u0026#xC258;\u0026#xC740; FireEye xAgent, CarbonBlack, CrowdStrike Falcon \u0026#xC5D4;\u0026#xB4DC; \u0026#xD3EC;\u0026#xC778;\u0026#xD2B8; \u0026#xC81C;\u0026#xD488;\u0026#xC744; \u0026#xD0D0;\u0026#xC9C0;\u0026#xD558;\u0026#xACE0; \u0026#xC874;\u0026#xC7AC; \u0026#xC5EC;\u0026#xBD80;\u0026#xB97C; \u0026#xC791;\u0026#xC131;\u0026#xD558;\u0026#xB294; \u0026#xCF54;\u0026#xB4DC;\u0026#xB97C; \u0026#xD3EC;\u0026#xD568;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xD574;\u0026#xB2F9; \u0026#xC6F9; \u0026#xC258;\u0026#xC740; CVE-2021-26858\u0026#xC744; \u0026#xC545;\u0026#xC6A9;\u0026#xD558;\u0026#xC5EC; Microsoft Exchange Server\u0026#xC758; \u0026#xD1B5;\u0026#xD569; \u0026#xBA54;\u0026#xC2DC;\u0026#xC9D5; \u0026#xC11C;\u0026#xBE44;\u0026#xC2A4;\u0026#xC778; \u003ccode\u003eUMWorkerProcess.exe\u003c/code\u003e\u0026#xB97C; \u0026#xD1B5;\u0026#xD574; \u0026#xC0DD;\u0026#xC131;\u0026#xB429;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e\u0026#xB2E4;\u0026#xB978; \u0026#xACF3;\u0026#xC5D0;\u0026#xC11C; \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u003ccode\u003eiisstart.apsx\u003c/code\u003e \u0026#xC6F9; \u0026#xC258;\u0026#xC740; \u0026#xBD80;\u0026#xBD84;\u0026#xC801;\u0026#xC73C;\u0026#xB85C; \u0026#xB09C;\u0026#xB3C5;\u0026#xD654;\u0026#xB418;\u0026#xC5B4; \u0026#xC788;\u0026#xC73C;\u0026#xBA70;, \u0026#xD30C;\u0026#xC77C; \u0026#xC2DC;\u0026#xC2A4;\u0026#xD15C;\u0026#xACFC; \u0026#xD1B5;\u0026#xC2E0;\u0026#xD558;\u0026#xAE30; \u0026#xC704;\u0026#xD55C; \u0026#xAE30;\u0026#xB2A5;, \u0026#xC784;\u0026#xC758; \u0026#xBA85;\u0026#xB839; \u0026#xC2E4;\u0026#xD589;, \u0026#xC5C5;\u0026#xB85C;\u0026#xB4DC;, \u0026#xC0AD;\u0026#xC81C;, \u0026#xD30C;\u0026#xC77C; \u0026#xB0B4;\u0026#xC6A9; \u0026#xD655;\u0026#xC778; \u0026#xB4F1;\u0026#xC758; \u0026#xAE30;\u0026#xB2A5;\u0026#xC744; \u0026#xD3EC;\u0026#xD568;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e2021\u0026#xB144; 3\u0026#xC6D4;\u0026#xC5D0;\u0026#xB294; Exchange Server\u0026#xC758; \u0026#xC5EC;\u0026#xB7EC; \u0026#xCDE8;\u0026#xC57D;\u0026#xC810;\u0026#xC744; \u0026#xC545;\u0026#xC6A9;\u0026#xD558;\u0026#xC5EC; \u0026#xC5EC;\u0026#xB7EC; \u0026#xAC1C;\u0026#xC758; \u0026#xC6F9; \u0026#xC258;\u0026#xC774; \u0026#xC5C5;\u0026#xB85C;\u0026#xB4DC;\u0026#xB418;\u0026#xC5C8;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xD574;\u0026#xB2F9; \u0026#xC6F9; \u0026#xC258;\u0026#xC740; Exchange \u0026#xC6F9; \u0026#xD504;\u0026#xB860;\u0026#xD2B8; \u0026#xC5D4;\u0026#xB4DC;\u0026#xC640; \u0026#xAD00;\u0026#xB828;\u0026#xB41C; IIS \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4;\u0026#xC778; \u003ccode\u003ew3wp.exe\u003c/code\u003e\u0026#xAC00; \u003ccode\u003ecmd.exe\u003c/code\u003e\u0026#xB97C; \u0026#xC0DD;\u0026#xC131;\u0026#xD558;\u0026#xAC8C; \u0026#xB9CC;\u0026#xB4ED;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e\u0026#xC704;\u0026#xC758; \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u0026#xC6F9; \u0026#xC258; \u0026#xB2E4;\u0026#xC218;\u0026#xB294; \u003ccode\u003eExchange Organization administrators\u003c/code\u003e \u0026#xADF8;\u0026#xB8F9;\u0026#xC5D0;\u0026#xC11C; \u003ccode\u003eadministrator\u003c/code\u003e \u0026#xC0AC;\u0026#xC6A9;\u0026#xC790;\u0026#xB97C; \u0026#xC0AD;\u0026#xC81C;\u0026#xD558;\u0026#xB294; \u003ccode\u003enet group \u0026quot;Exchange Organization administrators\u0026quot; administrator /del /domain\u003c/code\u003e \u0026#xBA85;\u0026#xB839;\u0026#xC744; \u0026#xC218;\u0026#xD589;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xB2E8;\u0026#xC77C; \u0026#xC2DC;\u0026#xC2A4;\u0026#xD15C; \u0026#xB3C4;\u0026#xBA54;\u0026#xC778;\u0026#xC744; \u0026#xC0AC;\u0026#xC6A9;\u0026#xD558;\u0026#xBA74;, \u0026#xB85C;\u0026#xCEEC;\u0026#xC5D0;\u0026#xC11C; \u0026#xD574;\u0026#xB2F9; \u0026#xBA85;\u0026#xB839;\u0026#xC774; \u0026#xC218;\u0026#xD589;\u0026#xB429;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003eMicrosoft\u0026#xC5D0;\u0026#xC11C; \u0026#xBC1D;\u0026#xD78C; \u0026#xCD94;\u0026#xAC00;\u0026#xC801;\u0026#xC778; \u0026#xC545;\u0026#xC6A9; \u0026#xD589;\u0026#xC704;\u0026#xB294; \u0026#xB2E4;\u0026#xC74C;\u0026#xACFC; \u0026#xAC19;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eLSASS \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4; \u0026#xBA54;\u0026#xBAA8;\u0026#xB9AC; \u0026#xB364;\u0026#xD504;\u0026#xB97C; \u0026#xD1B5;\u0026#xD55C; \u0026#xC790;\u0026#xACA9; \u0026#xC99D;\u0026#xBA85; \u0026#xB3C4;\u0026#xC6A9;\u003c/li\u003e\n\u003cli\u003e7zip\u0026#xC744; \u0026#xC0AC;\u0026#xC6A9;\u0026#xD558;\u0026#xC5EC; \u0026#xC720;\u0026#xCD9C; \u0026#xB370;\u0026#xC774;\u0026#xD130; \u0026#xC555;\u0026#xCD95;\u003c/li\u003e\n\u003cli\u003eExchange PowerShell Snapin\u0026#xC744; \u0026#xD1B5;\u0026#xD574; mailbox data \u0026#xC804;\u0026#xC1A1;\u003c/li\u003e\n\u003cli\u003e\u0026#xC6D0;\u0026#xACA9; \u0026#xC811;\u0026#xC18D;\u0026#xC744; \u0026#xC704;\u0026#xD574; \u0026#xCD94;\u0026#xAC00;\u0026#xC801;\u0026#xC73C;\u0026#xB85C; Covenant, Nishang, PowerCat \u0026#xC0AC;\u0026#xC6A9;\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eExchange Server\u0026#xAC00; \u0026#xC6F9; \u0026#xC258;\u0026#xC5D0; \u0026#xACF5;\u0026#xACA9;\u0026#xC744; \u0026#xBC1B;\u0026#xC558;\u0026#xB294;\u0026#xC9C0; \u0026#xD655;\u0026#xC778;\u0026#xD558;\u0026#xB294; \u0026#xBC29;\u0026#xBC95;\u0026#xC740; \u0026#xB2E4;\u0026#xC74C;\u0026#xACFC; \u0026#xAC19;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eC:\\Windows\\System32\\inetsrv\\w3wp.exe\u003c/code\u003e \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4;\u0026#xAC00; \u003ccode\u003ecmd.exe\u003c/code\u003e \u0026#xC790;\u0026#xC2DD; \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4;\u0026#xB97C; \u0026#xAC00;\u0026#xC9D0;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ew3wp.exe\u003c/code\u003e\u0026#xB098; \u003ccode\u003eUMWorkerProcess.exe\u003c/code\u003e\u0026#xC5D0; \u0026#xC758;\u0026#xD574; \u0026#xD30C;\u0026#xC77C;\u0026#xC774; \u0026#xC0DD;\u0026#xC131;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eSYSTEM\u003c/code\u003e \u0026#xC0AC;\u0026#xC6A9;\u0026#xC790;\u0026#xAC00; \u0026#xC18C;\u0026#xC720;\u0026#xD55C; ASPX \u0026#xD30C;\u0026#xC77C;\u0026#xC774; \u0026#xC874;\u0026#xC7AC;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTemporary ASP.NET Files\u003c/code\u003e \u0026#xB514;\u0026#xB809;\u0026#xD130;\u0026#xB9AC;\u0026#xC5D0; \u0026#xCC98;\u0026#xC74C; \u0026#xBCF4;\u0026#xB294; \u0026#xCEF4;\u0026#xD30C;\u0026#xC77C;\u0026#xB41C; ASPX \u0026#xD30C;\u0026#xC77C; \u0026#xC874;\u0026#xC7AC;\u003c/li\u003e\n\u003cli\u003e\u0026#xB2E4;\u0026#xC74C; \u0026#xB9AC;\u0026#xC18C;\u0026#xC2A4;\u0026#xC5D0; \u0026#xB300;\u0026#xD574; \u0026#xC678;\u0026#xBD80; IP\u0026#xB97C; \u0026#xAC80;\u0026#xC0AC;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;.\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e/rpc/\u003c/code\u003e \u0026#xB514;\u0026#xB809;\u0026#xD130;\u0026#xB9AC;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e/ecp/DDI/DDIService.svc/SetObject\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u0026#xC874;\u0026#xC7AC;\u0026#xD558;\u0026#xC9C0; \u0026#xC54A;\u0026#xB294; \u0026#xB9AC;\u0026#xC18C;\u0026#xC2A4;\u003c/li\u003e\n\u003cli\u003e\u0026#xC758;\u0026#xC2EC;\u0026#xC2A4;\u0026#xB7FD;\u0026#xAC70;\u0026#xB098; \u0026#xC2A4;\u0026#xD478;\u0026#xD551; \u0026#xB41C; HTTP User-Agents\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u0026#xBA54;\u0026#xC77C; \u0026#xBC15;\u0026#xC2A4;\u0026#xB85C; \u0026#xB0B4;\u0026#xBCF4;\u0026#xB0B4;\u0026#xB294; \u0026#xC608;\u0026#xC0C1;\u0026#xCE58; \u0026#xBABB;\u0026#xD558;\u0026#xAC70;\u0026#xB098; \u0026#xC758;\u0026#xC2EC;\u0026#xC2A4;\u0026#xB7EC;\u0026#xC6B4; Exchange PowerShell Snapin request\u0026#xAC00; \u0026#xC874;\u0026#xC7AC;\u003c/li\u003e\n\u003c/ul\u003e\n - hack \u0026 life",
        "og:description": "\u003ch2 id=\"URL\"\u003e\u003ca href=\"#URL\" class=\"headerlink\" title=\"URL\"\u003e\u003c/a\u003eURL\u003c/h2\u003e\u003cp\u003e\u003ca href=\"https://www.fireeye.com/blog/threat-research/2021/03/detection-response-to-exploitation-of-microsoft-exchange-zero-day-vulnerabilities.html\"\u003eDetection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities\u003c/a\u003e\u003c/p\u003e\n\u003ch2 id=\"Target\"\u003e\u003ca href=\"#Target\" class=\"headerlink\" title=\"Target\"\u003e\u003c/a\u003eTarget\u003c/h2\u003e\u003cul\u003e\n\u003cli\u003e2021\u0026#xB144; 3\u0026#xC6D4; 2\u0026#xC77C; \u0026#xC790; \u0026#xD328;\u0026#xCE58; \u0026#xC774;\u0026#xC804;\u0026#xC758; Microsoft Exchange Server\u003cul\u003e\n\u003cli\u003e2013 Cumulative Update 23\u003c/li\u003e\n\u003cli\u003e2016 Cumulative Update 18\u003c/li\u003e\n\u003cli\u003e2016 Cumulative Update 19\u003c/li\u003e\n\u003cli\u003e2019 Cumulative Update 7\u003c/li\u003e\n\u003cli\u003e2019 Cumulative Update 8\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2 id=\"Explain\"\u003e\u003ca href=\"#Explain\" class=\"headerlink\" title=\"Explain\"\u003e\u003c/a\u003eExplain\u003c/h2\u003e\u003cp\u003eMicrosoft Exchange Server\u0026#xC758; \u0026#xC81C;\u0026#xB85C; \u0026#xB370;\u0026#xC774; \u0026#xCDE8;\u0026#xC57D;\u0026#xC810;\u0026#xC744; \u0026#xC545;\u0026#xC6A9;\u0026#xD55C; \u0026#xACF5;\u0026#xACA9;\u0026#xC774; \u0026#xBC1C;\u0026#xACAC;\u0026#xB418;\u0026#xC5C8;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u0026#xD589;\u0026#xC704;\u0026#xB294; \u0026#xC811;\u0026#xC18D; \u0026#xC720;\u0026#xC9C0;\u0026#xB97C; \u0026#xC704;\u0026#xD55C; \u0026#xC6F9; \u0026#xC258; \u0026#xC0DD;\u0026#xC131;, \u0026#xC6D0;\u0026#xACA9; \u0026#xCF54;\u0026#xB4DC; \u0026#xC2E4;\u0026#xD589;, \u0026#xC5D4;\u0026#xB4DC; \u0026#xD3EC;\u0026#xC778;\u0026#xD2B8; \u0026#xBCF4;\u0026#xC548; \u0026#xC194;\u0026#xB8E8;\u0026#xC158; \u0026#xD0D0;\u0026#xC9C0;\u0026#xC785;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e2021\u0026#xB144; 1\u0026#xC6D4;\u0026#xC5D0; \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u003ccode\u003ehelp.aspx\u003c/code\u003e \u0026#xC6F9; \u0026#xC258;\u0026#xC740; FireEye xAgent, CarbonBlack, CrowdStrike Falcon \u0026#xC5D4;\u0026#xB4DC; \u0026#xD3EC;\u0026#xC778;\u0026#xD2B8; \u0026#xC81C;\u0026#xD488;\u0026#xC744; \u0026#xD0D0;\u0026#xC9C0;\u0026#xD558;\u0026#xACE0; \u0026#xC874;\u0026#xC7AC; \u0026#xC5EC;\u0026#xBD80;\u0026#xB97C; \u0026#xC791;\u0026#xC131;\u0026#xD558;\u0026#xB294; \u0026#xCF54;\u0026#xB4DC;\u0026#xB97C; \u0026#xD3EC;\u0026#xD568;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xD574;\u0026#xB2F9; \u0026#xC6F9; \u0026#xC258;\u0026#xC740; CVE-2021-26858\u0026#xC744; \u0026#xC545;\u0026#xC6A9;\u0026#xD558;\u0026#xC5EC; Microsoft Exchange Server\u0026#xC758; \u0026#xD1B5;\u0026#xD569; \u0026#xBA54;\u0026#xC2DC;\u0026#xC9D5; \u0026#xC11C;\u0026#xBE44;\u0026#xC2A4;\u0026#xC778; \u003ccode\u003eUMWorkerProcess.exe\u003c/code\u003e\u0026#xB97C; \u0026#xD1B5;\u0026#xD574; \u0026#xC0DD;\u0026#xC131;\u0026#xB429;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e\u0026#xB2E4;\u0026#xB978; \u0026#xACF3;\u0026#xC5D0;\u0026#xC11C; \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u003ccode\u003eiisstart.apsx\u003c/code\u003e \u0026#xC6F9; \u0026#xC258;\u0026#xC740; \u0026#xBD80;\u0026#xBD84;\u0026#xC801;\u0026#xC73C;\u0026#xB85C; \u0026#xB09C;\u0026#xB3C5;\u0026#xD654;\u0026#xB418;\u0026#xC5B4; \u0026#xC788;\u0026#xC73C;\u0026#xBA70;, \u0026#xD30C;\u0026#xC77C; \u0026#xC2DC;\u0026#xC2A4;\u0026#xD15C;\u0026#xACFC; \u0026#xD1B5;\u0026#xC2E0;\u0026#xD558;\u0026#xAE30; \u0026#xC704;\u0026#xD55C; \u0026#xAE30;\u0026#xB2A5;, \u0026#xC784;\u0026#xC758; \u0026#xBA85;\u0026#xB839; \u0026#xC2E4;\u0026#xD589;, \u0026#xC5C5;\u0026#xB85C;\u0026#xB4DC;, \u0026#xC0AD;\u0026#xC81C;, \u0026#xD30C;\u0026#xC77C; \u0026#xB0B4;\u0026#xC6A9; \u0026#xD655;\u0026#xC778; \u0026#xB4F1;\u0026#xC758; \u0026#xAE30;\u0026#xB2A5;\u0026#xC744; \u0026#xD3EC;\u0026#xD568;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e2021\u0026#xB144; 3\u0026#xC6D4;\u0026#xC5D0;\u0026#xB294; Exchange Server\u0026#xC758; \u0026#xC5EC;\u0026#xB7EC; \u0026#xCDE8;\u0026#xC57D;\u0026#xC810;\u0026#xC744; \u0026#xC545;\u0026#xC6A9;\u0026#xD558;\u0026#xC5EC; \u0026#xC5EC;\u0026#xB7EC; \u0026#xAC1C;\u0026#xC758; \u0026#xC6F9; \u0026#xC258;\u0026#xC774; \u0026#xC5C5;\u0026#xB85C;\u0026#xB4DC;\u0026#xB418;\u0026#xC5C8;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xD574;\u0026#xB2F9; \u0026#xC6F9; \u0026#xC258;\u0026#xC740; Exchange \u0026#xC6F9; \u0026#xD504;\u0026#xB860;\u0026#xD2B8; \u0026#xC5D4;\u0026#xB4DC;\u0026#xC640; \u0026#xAD00;\u0026#xB828;\u0026#xB41C; IIS \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4;\u0026#xC778; \u003ccode\u003ew3wp.exe\u003c/code\u003e\u0026#xAC00; \u003ccode\u003ecmd.exe\u003c/code\u003e\u0026#xB97C; \u0026#xC0DD;\u0026#xC131;\u0026#xD558;\u0026#xAC8C; \u0026#xB9CC;\u0026#xB4ED;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003e\u0026#xC704;\u0026#xC758; \u0026#xBC1C;\u0026#xACAC;\u0026#xB41C; \u0026#xC6F9; \u0026#xC258; \u0026#xB2E4;\u0026#xC218;\u0026#xB294; \u003ccode\u003eExchange Organization administrators\u003c/code\u003e \u0026#xADF8;\u0026#xB8F9;\u0026#xC5D0;\u0026#xC11C; \u003ccode\u003eadministrator\u003c/code\u003e \u0026#xC0AC;\u0026#xC6A9;\u0026#xC790;\u0026#xB97C; \u0026#xC0AD;\u0026#xC81C;\u0026#xD558;\u0026#xB294; \u003ccode\u003enet group \u0026quot;Exchange Organization administrators\u0026quot; administrator /del /domain\u003c/code\u003e \u0026#xBA85;\u0026#xB839;\u0026#xC744; \u0026#xC218;\u0026#xD589;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;. \u0026#xB2E8;\u0026#xC77C; \u0026#xC2DC;\u0026#xC2A4;\u0026#xD15C; \u0026#xB3C4;\u0026#xBA54;\u0026#xC778;\u0026#xC744; \u0026#xC0AC;\u0026#xC6A9;\u0026#xD558;\u0026#xBA74;, \u0026#xB85C;\u0026#xCEEC;\u0026#xC5D0;\u0026#xC11C; \u0026#xD574;\u0026#xB2F9; \u0026#xBA85;\u0026#xB839;\u0026#xC774; \u0026#xC218;\u0026#xD589;\u0026#xB429;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cp\u003eMicrosoft\u0026#xC5D0;\u0026#xC11C; \u0026#xBC1D;\u0026#xD78C; \u0026#xCD94;\u0026#xAC00;\u0026#xC801;\u0026#xC778; \u0026#xC545;\u0026#xC6A9; \u0026#xD589;\u0026#xC704;\u0026#xB294; \u0026#xB2E4;\u0026#xC74C;\u0026#xACFC; \u0026#xAC19;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eLSASS \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4; \u0026#xBA54;\u0026#xBAA8;\u0026#xB9AC; \u0026#xB364;\u0026#xD504;\u0026#xB97C; \u0026#xD1B5;\u0026#xD55C; \u0026#xC790;\u0026#xACA9; \u0026#xC99D;\u0026#xBA85; \u0026#xB3C4;\u0026#xC6A9;\u003c/li\u003e\n\u003cli\u003e7zip\u0026#xC744; \u0026#xC0AC;\u0026#xC6A9;\u0026#xD558;\u0026#xC5EC; \u0026#xC720;\u0026#xCD9C; \u0026#xB370;\u0026#xC774;\u0026#xD130; \u0026#xC555;\u0026#xCD95;\u003c/li\u003e\n\u003cli\u003eExchange PowerShell Snapin\u0026#xC744; \u0026#xD1B5;\u0026#xD574; mailbox data \u0026#xC804;\u0026#xC1A1;\u003c/li\u003e\n\u003cli\u003e\u0026#xC6D0;\u0026#xACA9; \u0026#xC811;\u0026#xC18D;\u0026#xC744; \u0026#xC704;\u0026#xD574; \u0026#xCD94;\u0026#xAC00;\u0026#xC801;\u0026#xC73C;\u0026#xB85C; Covenant, Nishang, PowerCat \u0026#xC0AC;\u0026#xC6A9;\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eExchange Server\u0026#xAC00; \u0026#xC6F9; \u0026#xC258;\u0026#xC5D0; \u0026#xACF5;\u0026#xACA9;\u0026#xC744; \u0026#xBC1B;\u0026#xC558;\u0026#xB294;\u0026#xC9C0; \u0026#xD655;\u0026#xC778;\u0026#xD558;\u0026#xB294; \u0026#xBC29;\u0026#xBC95;\u0026#xC740; \u0026#xB2E4;\u0026#xC74C;\u0026#xACFC; \u0026#xAC19;\u0026#xC2B5;\u0026#xB2C8;\u0026#xB2E4;.\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eC:\\Windows\\System32\\inetsrv\\w3wp.exe\u003c/code\u003e \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4;\u0026#xAC00; \u003ccode\u003ecmd.exe\u003c/code\u003e \u0026#xC790;\u0026#xC2DD; \u0026#xD504;\u0026#xB85C;\u0026#xC138;\u0026#xC2A4;\u0026#xB97C; \u0026#xAC00;\u0026#xC9D0;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ew3wp.exe\u003c/code\u003e\u0026#xB098; \u003ccode\u003eUMWorkerProcess.exe\u003c/code\u003e\u0026#xC5D0; \u0026#xC758;\u0026#xD574; \u0026#xD30C;\u0026#xC77C;\u0026#xC774; \u0026#xC0DD;\u0026#xC131;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eSYSTEM\u003c/code\u003e \u0026#xC0AC;\u0026#xC6A9;\u0026#xC790;\u0026#xAC00; \u0026#xC18C;\u0026#xC720;\u0026#xD55C; ASPX \u0026#xD30C;\u0026#xC77C;\u0026#xC774; \u0026#xC874;\u0026#xC7AC;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eTemporary ASP.NET Files\u003c/code\u003e \u0026#xB514;\u0026#xB809;\u0026#xD130;\u0026#xB9AC;\u0026#xC5D0; \u0026#xCC98;\u0026#xC74C; \u0026#xBCF4;\u0026#xB294; \u0026#xCEF4;\u0026#xD30C;\u0026#xC77C;\u0026#xB41C; ASPX \u0026#xD30C;\u0026#xC77C; \u0026#xC874;\u0026#xC7AC;\u003c/li\u003e\n\u003cli\u003e\u0026#xB2E4;\u0026#xC74C; \u0026#xB9AC;\u0026#xC18C;\u0026#xC2A4;\u0026#xC5D0; \u0026#xB300;\u0026#xD574; \u0026#xC678;\u0026#xBD80; IP\u0026#xB97C; \u0026#xAC80;\u0026#xC0AC;\u0026#xD569;\u0026#xB2C8;\u0026#xB2E4;.\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e/rpc/\u003c/code\u003e \u0026#xB514;\u0026#xB809;\u0026#xD130;\u0026#xB9AC;\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e/ecp/DDI/DDIService.svc/SetObject\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u0026#xC874;\u0026#xC7AC;\u0026#xD558;\u0026#xC9C0; \u0026#xC54A;\u0026#xB294; \u0026#xB9AC;\u0026#xC18C;\u0026#xC2A4;\u003c/li\u003e\n\u003cli\u003e\u0026#xC758;\u0026#xC2EC;\u0026#xC2A4;\u0026#xB7FD;\u0026#xAC70;\u0026#xB098; \u0026#xC2A4;\u0026#xD478;\u0026#xD551; \u0026#xB41C; HTTP User-Agents\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\u0026#xBA54;\u0026#xC77C; \u0026#xBC15;\u0026#xC2A4;\u0026#xB85C; \u0026#xB0B4;\u0026#xBCF4;\u0026#xB0B4;\u0026#xB294; \u0026#xC608;\u0026#xC0C1;\u0026#xCE58; \u0026#xBABB;\u0026#xD558;\u0026#xAC70;\u0026#xB098; \u0026#xC758;\u0026#xC2EC;\u0026#xC2A4;\u0026#xB7EC;\u0026#xC6B4; Exchange PowerShell Snapin request\u0026#xAC00; \u0026#xC874;\u0026#xC7AC;\u003c/li\u003e\n\u003c/ul\u003e\n - hack \u0026 life"
      },
      "httpBodyByteSize": 43444,
      "httpBodyPageTitle": "[하루한줄] Microsoft Exchange server 제로 데이 취약점 악용 - hackyboiz"
    },
    "/tags/CVE-2024-24919/": {
      "date": "2026-02-07T04:37:41Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "185.199.110.153",
      "ipASN": "Fastly, Inc.",
      "ipCountry": "United States",
      "httpHeaderHash": "BMQUBBVATUQQKWRK4AKYQKOU6YFOZBDV",
      "httpHeaderTechnologies": [
        "Varnish",
        "GitHub Pages",
        "HSTS",
        "Fastly"
      ],
      "httpHeaderUrls": [
        "d430:EDFEE:517B79:5D2B08:6986C195"
      ],
      "httpHeaderByteSize": 818,
      "httpBodyHash": "26YTIX5625BKIWISHC4SMDHUW3IY7ZNP",
      "httpBodyTechnologies": [
        "Clipboard.js",
        "jQuery:3.4.1",
        "Bootstrap:4.4.1",
        "Google Analytics",
        "Node.js",
        "Typed.js",
        "Hexo:5.1.1"
      ],
      "httpBodyUrls": [
        "/js/debouncer.js",
        "/css/main.css",
        "/js/color-schema.js",
        "https://www.google-analytics.com/analytics.js",
        "//at.alicdn.com/t/font_1736178_pjno9b9zyxs.css",
        "https://cdn.staticfile.org/typed.js/2.0.11/typed.min.js",
        "/about/",
        "/author/",
        "https://github.com/fluid-dev/hexo-theme-fluid",
        "https://hackyboiz.github.io/tags/cve-2024-24919/",
        "/tags/",
        "/rss2.xml",
        "/archives/",
        "javascript:",
        "/js/lazyload.js",
        "#",
        "https://cdn.staticfile.org/twitter-bootstrap/4.4.1/css/bootstrap.min.css",
        "/",
        "/.css",
        "/js/utils.js",
        "https://hexo.io",
        "https://cdn.staticfile.org/clipboard.js/2.0.6/clipboard.min.js",
        "/js/main.js",
        "/js/clipboard-use.js",
        "https://cdn.staticfile.org/jquery/3.4.1/jquery.min.js",
        "https://www.googletagmanager.com/gtag/js?id=UA-177243668-2",
        "https://cdn.staticfile.org/twitter-bootstrap/4.4.1/js/bootstrap.min.js",
        "/categories/",
        "/img/favicon.ico",
        "/js/local-search.js",
        "/2024/06/01/j0ker/2024-06-01/",
        "//at.alicdn.com/t/font_1749284_6peoq002giu.css"
      ],
      "httpBodyMetaTags": {
        "description": "hack \u0026 life",
        "og:description": "hack \u0026 life"
      },
      "httpBodyByteSize": 9502,
      "httpBodyPageTitle": "Tags - CVE-2024-24919 - hackyboiz"
    },
    "/tags/null-pointer-dereference/": {
      "date": "2026-02-07T05:44:24Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "185.199.110.153",
      "ipASN": "Fastly, Inc.",
      "ipCountry": "United States",
      "httpHeaderHash": "R4MMEX45CJ2CXCUNKMP4KY7YNXD6EOGD",
      "httpHeaderTechnologies": [
        "Fastly",
        "Varnish",
        "GitHub Pages",
        "HSTS"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 818,
      "httpBodyHash": "DPHFMRDAHJCO7PNAH56ONNWG4CKSA4JH",
      "httpBodyTechnologies": [
        "Google Analytics",
        "Node.js",
        "Typed.js",
        "Hexo:5.1.1",
        "Clipboard.js",
        "jQuery:3.4.1",
        "Bootstrap:4.4.1"
      ],
      "httpBodyUrls": [
        "/.css",
        "/categories/",
        "/js/color-schema.js",
        "https://cdn.staticfile.org/twitter-bootstrap/4.4.1/css/bootstrap.min.css",
        "/rss2.xml",
        "/css/main.css",
        "https://cdn.staticfile.org/clipboard.js/2.0.6/clipboard.min.js",
        "https://cdn.staticfile.org/twitter-bootstrap/4.4.1/js/bootstrap.min.js",
        "//at.alicdn.com/t/font_1749284_6peoq002giu.css",
        "/js/utils.js",
        "/img/favicon.ico",
        "/about/",
        "/author/",
        "/2021/04/09/l0ch/2021-04-09/",
        "https://cdn.staticfile.org/typed.js/2.0.11/typed.min.js",
        "https://www.googletagmanager.com/gtag/js?id=UA-177243668-2",
        "https://cdn.staticfile.org/jquery/3.4.1/jquery.min.js",
        "/js/main.js",
        "/js/lazyload.js",
        "/js/local-search.js",
        "/js/clipboard-use.js",
        "https://github.com/fluid-dev/hexo-theme-fluid",
        "https://hackyboiz.github.io/tags/null-pointer-dereference/",
        "//at.alicdn.com/t/font_1736178_pjno9b9zyxs.css",
        "#",
        "/",
        "/tags/",
        "/archives/",
        "https://hexo.io",
        "/js/debouncer.js",
        "javascript:",
        "https://www.google-analytics.com/analytics.js"
      ],
      "httpBodyMetaTags": {
        "description": "hack \u0026 life",
        "og:description": "hack \u0026 life"
      },
      "httpBodyByteSize": 9475,
      "httpBodyPageTitle": "Tags - null pointer dereference - hackyboiz"
    }
  },
  "shenyuanluo.com": {
    "/categories/iOS/": {
      "date": "2026-02-07T17:01:34Z",
      "httpProtocol": "http/1.1, tls/1.2",
      "httpStatus": 200,
      "ipAddress": "45.32.21.195",
      "ipASN": "The Constant Company, LLC",
      "ipCountry": "Japan",
      "httpHeaderHash": "2MN4R4HXCIPCVOYEMEM4XW7NTNVJRDBU",
      "httpHeaderTechnologies": [
        "Ubuntu",
        "Nginx:1.14.0"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 322,
      "httpBodyHash": "FBLPOW3WJNKFEY53H2OMDKOGBG6TEE4R",
      "httpBodyTechnologies": [
        "Node.js",
        "Hexo:5.1.1",
        "Google AdSense"
      ],
      "httpBodyUrls": [
        "/",
        "/guestbook/",
        "/categories/",
        "/ProAttribute.html",
        "/IosLockscreen.html",
        "/about/",
        "/js/next-boot.js",
        "/SYDeviceInfo.html",
        "/js/schemes/pisces.js",
        "/XcodeShortcutKey.html",
        "/lib/font-awesome/css/all.min.css",
        "http://www.jianshu.com/u/fc8f31ef2618",
        "/images/logo.svg",
        "/tags/",
        "/SYClock.html",
        "/ScalingView.html",
        "/DiscussPerformSelector.html",
        "/lib/velocity/velocity.min.js",
        "https://github.com/shenyuanluo",
        "/Localizable.html",
        "/images/avatar.png",
        "http://blog.shenyuanluo.com/categories/iOS/",
        "/images/favicon-32x32.png",
        "/top",
        "/archives/",
        "/css/main.css",
        "/lib/anime.min.js",
        "/js/local-search.js",
        "http://blog.csdn.net/shenyuanluo",
        "https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5747660311187256",
        "https://hexo.io/",
        "https://busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js",
        "/js/motion.js",
        "https://pisces.theme-next.org/",
        "/js/utils.js",
        "/iOSCommonCode.html",
        "/iOSUnityAutoMerge.html",
        "/lib/velocity/velocity.ui.min.js",
        "/images/apple-touch-icon-next.png",
        "https://juejin.im/user/5796ba8dc4c9710054256672/posts",
        "/images/favicon-16x16.png"
      ],
      "httpBodyMetaTags": {
        "description": "让人迷茫的原因只有一个，那就是本该拼搏的年纪，却想得太多，做得太少！",
        "og:description": "让人迷茫的原因只有一个，那就是本该拼搏的年纪，却想得太多，做得太少！"
      },
      "httpBodyByteSize": 18158,
      "httpBodyPageTitle": "分类: iOS | ShenYuanLuo的博客"
    },
    "/iOSCertificateCreate.html": {
      "date": "2026-02-07T15:44:14Z",
      "httpProtocol": "http/1.1, tls/1.2",
      "httpStatus": 200,
      "ipAddress": "45.32.21.195",
      "ipASN": "The Constant Company, LLC",
      "ipCountry": "Japan",
      "httpHeaderHash": "RXMSNH3YASSSZPGHQ6FH72Y5THQTMTZX",
      "httpHeaderTechnologies": [
        "Ubuntu",
        "Nginx:1.14.0"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 322,
      "httpBodyHash": "UVIUVTWV6WW5P3LW6CDBR2UPSX4AGYJW",
      "httpBodyTechnologies": [
        "Node.js",
        "Hexo:5.1.1",
        "Google AdSense"
      ],
      "httpBodyUrls": [
        "#创建-CSR-文件",
        "/lib/velocity/velocity.min.js",
        "https://busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js",
        "/tags/",
        "/about/",
        "/lib/anime.min.js",
        "/images/favicon-32x32.png",
        "/js/schemes/pisces.js",
        "/images/logo.svg",
        "/images/favicon-16x16.png",
        "#%E5%BC%80%E5%8F%91%E8%80%85%E8%B4%A6%E5%8F%B7",
        "https://juejin.im/user/5796ba8dc4c9710054256672/posts",
        "#开发者账号",
        "#%E6%89%93%E5%8C%85",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateSelectCSR.png",
        "/categories/",
        "/tags/iOS%E8%AF%81%E4%B9%A6/",
        "/lib/velocity/velocity.ui.min.js",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateAdd.png",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateSelect.png",
        "#%E8%AF%81%E4%B9%A6",
        "#创建发布证书",
        "https://github.com/shenyuanluo",
        "http://blog.shenyuanluo.com/iOSCertificateCreate.html",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateInstalled.png",
        "/archives/",
        "/images/avatar.png",
        "#%E6%9D%A1%E4%BB%B6",
        "/MacOSInstallCmake.html",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CSRSave.png",
        "#%E5%88%9B%E5%BB%BA-CSR-%E6%96%87%E4%BB%B6",
        "//cdn.jsdelivr.net/npm/gitalk@1/dist/gitalk.min.css",
        "/top",
        "https://pisces.theme-next.org/",
        "http://blog.csdn.net/shenyuanluo",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateNeedCSR.png",
        "/",
        "/guestbook/",
        "/js/local-search.js",
        "/images/apple-touch-icon-next.png",
        "/categories/iOS%E7%AD%BE%E5%90%8D%E8%AF%81%E4%B9%A6/",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CSRRequest.png",
        "/iOSArchivePrepare.html",
        "#证书",
        "/images/AliPay.png",
        "/lib/font-awesome/css/all.min.css",
        "#%E5%88%9B%E5%BB%BA%E5%8F%91%E5%B8%83%E8%AF%81%E4%B9%A6",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateCreated.png",
        "https://hexo.io/",
        "http://www.jianshu.com/u/fc8f31ef2618",
        "#打包",
        "/js/utils.js",
        "/js/motion.js",
        "https://developer.apple.com/",
        "http://blog.shenyuanluo.com/iOSArchivePrepare.html",
        "https://images.shenyuanluo.com/images/iOSCertificateCreate/CertificateUpperLimit.png",
        "#条件",
        "/css/main.css",
        "/js/next-boot.js",
        "/images/WechatPay.png",
        "https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5747660311187256"
      ],
      "httpBodyMetaTags": {
        "description": "如果不了解 iOS 的签名机制的，请翻看 iOS 打包预备 。  开发者账号准备一个已经付费的开发者账号；开发者账号类型主要有 4 类：  个人（Individual）：年资费 $99，在 App Store 销售者只能显示个人的 ID，单人使用；且只能有一个开发者，100个 iOS设备 UDID 测试。 公司（Company）：年资费 $99，申请时需要填写公司的邓白氏编码（D-U-N-S）；",
        "og:description": "如果不了解 iOS 的签名机制的，请翻看 iOS 打包预备 。  开发者账号准备一个已经付费的开发者账号；开发者账号类型主要有 4 类：  个人（Individual）：年资费 $99，在 App Store 销售者只能显示个人的 ID，单人使用；且只能有一个开发者，100个 iOS设备 UDID 测试。 公司（Company）：年资费 $99，申请时需要填写公司的邓白氏编码（D-U-N-S）；"
      },
      "httpBodyByteSize": 25766,
      "httpBodyPageTitle": "iOS 证书创建流程 | ShenYuanLuo的博客"
    }
  },
  "tarotdeck.top": {
    "/2023/09/08/Mudras-for-Bod-Mind-and-Spirit/": {
      "date": "2026-02-07T01:09:27Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "185.199.109.153",
      "ipASN": "Fastly, Inc.",
      "ipCountry": "United States",
      "httpHeaderHash": "7ZF3RVWSSPQPZB3HCIDY7JEFOV22WW7Q",
      "httpHeaderTechnologies": [
        "GitHub Pages",
        "Fastly",
        "Varnish"
      ],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 793,
      "httpBodyHash": "TXCAMAD2DUAALCVJX35L5XO3KRKWR4QA",
      "httpBodyTechnologies": [
        "cdnjs",
        "Node.js",
        "Cloudflare",
        "Hexo:5.1.1",
        "jQuery CDN",
        "Bootstrap:6",
        "jQuery:3.1.1"
      ],
      "httpBodyUrls": [
        "https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js",
        "https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/js/bootstrap.min.js",
        "https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.6/css/bootstrap.min.css",
        "/",
        "/css/styles.css",
        "favicon/favicon.ico",
        "https://fonts.googleapis.com/css?family=Crimson+Text|Open+Sans:300,800",
        "https://www.tarot-ai.top/",
        "https://www.lanzoub.com/izNnf1yqrsxa",
        "https://code.jquery.com/jquery-3.1.1.slim.min.js"
      ],
      "httpBodyMetaTags": {
        "description": "Digital Guidebook\nCome and Get your Free Tarot Reading With AI"
      },
      "httpBodyByteSize": 3093,
      "httpBodyPageTitle": "Mudras-for-Bod-Mind-and-Spirit - Tarot"
    }
  },
  "zolotyh.com": {
    "/": {
      "date": "2026-02-13T23:16:41Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "35.185.44.232",
      "ipASN": "Google LLC",
      "ipCountry": "United States",
      "httpHeaderHash": "FHM6QNUL6P3QRPP2JEIBLSJRRQIXMUWO",
      "httpHeaderTechnologies": [],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 426,
      "httpBodyHash": "OOHZZLVBGY5MZHY24W6UNGPOIGGVZXVF",
      "httpBodyTechnologies": [
        "Node.js",
        "Hexo:5.1.1"
      ],
      "httpBodyUrls": [
        "/js/script.js",
        "/favicon-16x16.png",
        "/favicon-32x32.png",
        "/",
        "/about",
        "/atom.xml",
        "/rss2.xml",
        "/css/style.css",
        "/js/tocbot.min.js",
        "/apple-touch-icon.png",
        "https://twitter.com/zolotyh",
        "/tag",
        "/site.webmanifest",
        "/safari-pinned-tab.svg",
        "https://gitlab.com/alexz0",
        "/category",
        "/image/avatar.jpeg",
        "https://github.com/zolotyh",
        "https://www.instagram.com/alexzolotyh/",
        "/archives"
      ],
      "httpBodyMetaTags": {},
      "httpBodyByteSize": 5908,
      "httpBodyPageTitle": "Alex's blog"
    },
    "/category/": {
      "date": "2026-02-13T21:51:46Z",
      "httpProtocol": "h2, tls/1.3",
      "httpStatus": 200,
      "ipAddress": "35.185.44.232",
      "ipASN": "Google LLC",
      "ipCountry": "United States",
      "httpHeaderHash": "ZYEV36BHQF3NC6DSDL77WD2M3NBKK3QS",
      "httpHeaderTechnologies": [],
      "httpHeaderUrls": [],
      "httpHeaderByteSize": 426,
      "httpBodyHash": "PU3GOXOBFHGJR3AEJEDC32AIQWZQFACI",
      "httpBodyTechnologies": [
        "Node.js",
        "Hexo:5.1.1"
      ],
      "httpBodyUrls": [
        "/js/script.js",
        "/js/tocbot.min.js",
        "/favicon-32x32.png",
        "/safari-pinned-tab.svg",
        "/archives",
        "/css/style.css",
        "/site.webmanifest",
        "/apple-touch-icon.png",
        "/",
        "/about",
        "/tag",
        "/category",
        "/rss2.xml",
        "/favicon-16x16.png",
        "/atom.xml"
      ],
      "httpBodyMetaTags": {},
      "httpBodyByteSize": 4277,
      "httpBodyPageTitle": "category | Alex's blog"
    }
  }
}