A personal blog about Cybersecurity, Large Language Models (LLMs), and learning.https://www.bx33661.com/enhttps://www.bx33661.com/en/blog/websocket-handshake-message-replay-en/https://www.bx33661.com/en/blog/websocket-handshake-message-replay-en/Explore HTTP/1.1 upgrades, messages versus frames, local echo tests, text and binary traffic, connection closure, and editing or replaying messages in Yakit and Burp.Wed, 07 Oct 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/openrasp-sql-detect-bypass-en/https://www.bx33661.com/en/blog/openrasp-sql-detect-bypass-en/Explore JVM bytecode and Java agents through four experiments, trace OpenRASP's SQL injection detection, and examine its bypass surfaces.Wed, 30 Sep 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/cybergym-ai-security-agent-benchmark-en/https://www.bx33661.com/en/blog/cybergym-ai-security-agent-benchmark-en/Read CyberGym scores through real vulnerability reproduction, pre/post-patch validation, and the differences between its benchmark and CTF tasks.Sat, 26 Sep 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/threat-modeling-and-trust-boundaries-en/https://www.bx33661.com/en/blog/threat-modeling-and-trust-boundaries-en/Trust boundaries in path configuration, webhooks, and admin endpoints: attacker control, permissions, deployment, and AI audit false positives and misses.Fri, 25 Sep 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/wechat-miniapp-security-audit-en/https://www.bx33661.com/en/blog/wechat-miniapp-security-audit-en/WeChat miniapp auditing: package collection and recovery, attack-surface mapping, agent collaboration, dynamic verification, and traceable evidence.Sat, 01 Aug 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/cnvd-2026-20654-lg-nas-rce-en/https://www.bx33661.com/en/blog/cnvd-2026-20654-lg-nas-rce-en/Analysis of LG NAS command injection CNVD-2026-20654: root cause, local setup, real-device reproduction, and affected firmware versions.Wed, 29 Jul 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/oh-my-vul-1-0-en/https://www.bx33661.com/en/blog/oh-my-vul-1-0-en/oh-my-vul's evolution into an evidence-first research workbench: design choices for Evidence, CLI, TUI, and Codex and Claude Code support.Sat, 11 Jul 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/agent-teams-en/https://www.bx33661.com/en/blog/agent-teams-en/Using Claude Code Agent Teams for security auditing: multi-agent collaboration, its boundaries, and an initial Go project audit.Wed, 11 Mar 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/go-net-http-source-analysis-en/https://www.bx33661.com/en/blog/go-net-http-source-analysis-en/Trace Go net/http server source through ListenAndServe, Serve, and Handler; review request routing, response headers, JSON output, and middleware.Thu, 26 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/wiz-cloud-hunting-games-writeup-en/https://www.bx33661.com/en/blog/wiz-cloud-hunting-games-writeup-en/Wiz Cloud Hunting Games CTF investigation: S3 exfiltration, CloudTrail activity, IAM privilege escalation, and cross-account access.Fri, 20 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/k8s-goat-walkthrough-en/https://www.bx33661.com/en/blog/k8s-goat-walkthrough-en/Hands-on Kubernetes Goat scenarios, including secret leakage, DIND, Metadata Secrets, and container escape.Thu, 19 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/redis-lua-script-part2-en/https://www.bx33661.com/en/blog/redis-lua-script-part2-en/Covers core Lua syntax, the Redis Lua execution model (atomicity, KEYS/ARGV, call/pcall), a fixed-window rate-limiting example, and the relationship between OpenResty and Lua.Wed, 18 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/redis-core-guide-en/https://www.bx33661.com/en/blog/redis-core-guide-en/Redis commands, TTL, batch operations, and pipelines; Python Hash, List, and ZSet examples; cache penetration, breakdown, avalanche, and mitigations.Tue, 10 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/hnuctf-2026-ops-en/https://www.bx33661.com/en/blog/hnuctf-2026-ops-en/Documents setup and operation of the HNUCTF 2026 competition platform, including platform selection, server configuration, proxy setup, and a summary of competition results.Mon, 09 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/dos-at-psitransfer-en/https://www.bx33661.com/en/blog/dos-at-psitransfer-en/An upload PATCH request for an uninitialized file can crash PsiTransfer through an unhandled rejection. This note traces lib/store.js, reproduces the crash, and reviews the fix.Thu, 05 Feb 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/n8n-cve-2025-68613-analysis-en/https://www.bx33661.com/en/blog/n8n-cve-2025-68613-analysis-en/Analyzes n8n CVE-2025-68613 expression and sandbox behavior, reproduces command execution, and examines the fix's restrictions on this and prototype-property access.Sun, 18 Jan 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/opencode-vulnerability-analysis-en/https://www.bx33661.com/en/blog/opencode-vulnerability-analysis-en/OpenCode 1.0.215: unauthenticated session creation, command execution, and file reads, traced through server.ts, process calls, and CORS settings.Sat, 17 Jan 2026 00:00:00 GMThttps://www.bx33661.com/en/blog/codeql-learning-en/https://www.bx33661.com/en/blog/codeql-learning-en/A practical guide to CodeQL static taint analysis, database creation for Python and C++, and query execution, including lessons from the AI4CodeQL project.Thu, 11 Dec 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/ethereum-dex-sepolia-en/https://www.bx33661.com/en/blog/ethereum-dex-sepolia-en/A hands-on record of issuing ERC-20 tokens on Sepolia, writing DEX contracts, and building a simple DApp, including lessons learned.Tue, 09 Dec 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/llm-attack-hackergame-en/https://www.bx33661.com/en/blog/llm-attack-hackergame-en/Reproductions of TinyStories and Hackergame challenges: prompt injection, accepted/hackergame/🐮 outputs, and hands-on GCG attacks.Wed, 03 Dec 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/spring-learning-analysis-en/https://www.bx33661.com/en/blog/spring-learning-analysis-en/Spring's evolution from Servlet containers to Spring Boot, covering its design, MVC, POJO conventions, and auto-configuration.Thu, 30 Oct 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/dify-coze-workflow-en/https://www.bx33661.com/en/blog/dify-coze-workflow-en/Build Dify workflows for GitHub user lookup and CTF writeup extraction, covering HTTP, branching, LLM and code nodes, debugging, and DSL export.Fri, 19 Sep 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/p2p-bittorrent-protocol-deep-dive-en/https://www.bx33661.com/en/blog/p2p-bittorrent-protocol-deep-dive-en/BitTorrent notes on peer discovery, connection setup, resource lookup, and piece transfer. Explains DHT, Trackers, and NAT traversal, with torrent and magnet-link experiments.Tue, 09 Sep 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/ntlm-protocol-and-attack-techniques-en/https://www.bx33661.com/en/blog/ntlm-protocol-and-attack-techniques-en/NTLM negotiation, challenge, and response; rainbow tables, salts, Pass the Hash, Python hash examples, Impacket, Mimikatz, and defenses.Fri, 05 Sep 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/ssji-learning-en/https://www.bx33661.com/en/blog/ssji-learning-en/Study server-side JavaScript injection through dynamic execution, context access, constructor chains, and the HTB Breathtaking View challenge.Fri, 05 Sep 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/csp-bypass-analysis-en/https://www.bx33661.com/en/blog/csp-bypass-analysis-en/HTB Cursed Secret Party: template output, jsDelivr allowlists, and XSS exploitation, with a review of CSP directives, nonces, and script hashes.Thu, 04 Sep 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/nginx-cache-poisoning-en/https://www.bx33661.com/en/blog/nginx-cache-poisoning-en/Nginx cache keys and hits: CDNio and best_profile illustrate how inputs outside cache keys and proxy trust settings enable cache poisoning.Wed, 03 Sep 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/htb-challenge-en/https://www.bx33661.com/en/blog/htb-challenge-en/HTB writeups for Spookifier, Trapped Source, Breathtaking View, and Primed for Action, covering template injection, source analysis, SSJI, and primes.Sat, 30 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/htb-ctf-en/https://www.bx33661.com/en/blog/htb-ctf-en/HTB CTF Try Out Web and ICS write-ups: command and template injection, and hidden information in Modbus/TCP captures analyzed with Wireshark.Sat, 30 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/claude-code-en/https://www.bx33661.com/en/blog/claude-code-en/Claude Code usage, CLAUDE.md context, commands, agents, and examples connecting GLM, DeepSeek, and MCP services over different transports.Mon, 25 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/mcp-security-en/https://www.bx33661.com/en/blog/mcp-security-en/Configure IDA-Pro-MCP and CloudSword-MCP, review MCP security practices, and inspect tools, prompts, and resources with the SDK and FastMCP.Fri, 15 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/juice-shop-en/https://www.bx33661.com/en/blog/juice-shop-en/Deploying OWASP Juice Shop with Docker and Node.js and practicing one-star challenges involving the score board, XSS, sensitive files, and encoding, plus SQL and NoSQL injection.Mon, 11 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/jenkins-credential-crack-en/https://www.bx33661.com/en/blog/jenkins-credential-crack-en/Local Jenkins credential tests: credentials.xml, master.key, hudson.util.Secret, and decryption checks for passwords and SSH private keys.Sun, 10 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/mcp1-en/https://www.bx33661.com/en/blog/mcp1-en/MCP hosts, clients, servers, and JSON-RPC: chart and search integrations, plus building and calling a weather service with Python and uv.Sun, 10 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/passthehash-en/https://www.bx33661.com/en/blog/passthehash-en/NTLM hash credentials, SAM, LSASS, and domain scenarios: Pass the Hash with Impacket and Mimikatz, plus credential-protection measures.Sat, 02 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/tsclient-en/https://www.bx33661.com/en/blog/tsclient-en/Tsclient: leaked MSSQL credentials, Windows escalation, Cobalt Strike sessions, domain lateral movement, three flag clues, and Beacon and payload basics.Fri, 01 Aug 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/brute4road-en/https://www.bx33661.com/en/blog/brute4road-en/A Brute4Road walkthrough covering Redis, Linux SUID escalation, proxy forwarding, and internal scanning, then obtaining four flags through WordPress, MSSQL, and domain credentials.Tue, 29 Jul 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bxhttpsplit-en/https://www.bx33661.com/en/blog/bxhttpsplit-en/CRLF response splitting and header boundaries: local injection reproduction, cache poisoning, session fixation, and framework newline filtering.Fri, 25 Jul 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bx1go-en/https://www.bx33661.com/en/blog/bx1go-en/Go html/template versus text/template: local injection examples, context access, and why command execution needs exposed callable functions.Wed, 23 Jul 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bx33661http-en/https://www.bx33661.com/en/blog/bx33661http-en/Explains HTTP/1.1 request smuggling, the CL·TE and TE·CL variants, and approaches to detection and defense.Wed, 23 Jul 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bx33661xpath-en/https://www.bx33661.com/en/blog/bx33661xpath-en/An in-depth study of XPath injection, covering XPath syntax fundamentals, injection principles, exploitation techniques, and security defenses for querying XML data.Wed, 23 Jul 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/z8x9w23-en/https://www.bx33661.com/en/blog/z8x9w23-en/HnuSec Python web security material: setup, Flask, dynamic execution, object reflection, Jinja2 SSTI, object chains, CTF exercises, and remediation.Sun, 20 Jul 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/openharmonyctf-en/https://www.bx33661.com/en/blog/openharmonyctf-en/OpenHarmony ezAPP_And_SERVER: ABC decompilation, client interfaces, encoding, authentication logic, and server-side SQLite injection.Mon, 23 Jun 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/chunqiu-initial-en/https://www.bx33661.com/en/blog/chunqiu-initial-en/Initial range notes: ThinkPHP entry, sudo mysql escalation, intranet enumeration, Xinhu OA access through a proxy, and the first two flag segments.Mon, 16 Jun 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/k8x10w24-en/https://www.bx33661.com/en/blog/k8x10w24-en/Object storage access: AK/SK, pre-signed URLs, STS, IAM/RAM policies, and the d3invitation challenge's frontend credential leaks and excessive permissions.Mon, 16 Jun 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bxvite-en/https://www.bx33661.com/en/blog/bxvite-en/TGCTF front-end challenges: Vite file-access bypasses in CVE-2025-30208, CVE-2025-31486, and CVE-2025-32395, with Vue debugging observations.Sun, 15 Jun 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/cve-2024-1561-en/https://www.bx33661.com/en/blog/cve-2024-1561-en/Reproducing Gradio CVE-2024-1561 in Vulhub: tracing /component_server method calls and cache-file access, recording local file reads, and testing Nuclei detection.Sun, 15 Jun 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/k8x9w23-en/https://www.bx33661.com/en/blog/k8x9w23-en/Godzilla Webshell traffic analysis and attribution: request and response formats, encryption mechanisms, and incident-response detection methods.Sun, 15 Jun 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bxwebpack-en/https://www.bx33661.com/en/blog/bxwebpack-en/A Webpack penetration-testing guide to identifying bundles, recovering source with sourcemaps, and investigating sensitive APIs and exposed configuration.Thu, 29 May 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bx33661win1-en/https://www.bx33661.com/en/blog/bx33661win1-en/Windows Server IIS, registry, handles, and directories: tracing anomalous processes and files with Resource Monitor, Task Scheduler, and Everything.Thu, 15 May 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/k8x9w26-en/https://www.bx33661.com/en/blog/k8x9w26-en/2025 Xuanyuan Cup Web and Misc writeups covering Flask injection, SSRF, file reading, PHP filter bypass, and media steganography.Thu, 15 May 2025 00:00:00 GMThttps://www.bx33661.com/en/blog/bxtcp-en/https://www.bx33661.com/en/blog/bxtcp-en/TryHackMe notes on DNS, WHOIS, FTP, SMTP, POP3, and IMAP: purposes, commands, interaction flows, packet captures, and Telnet observations.Sat, 15 Jun 2024 00:00:00 GMThttps://www.bx33661.com/en/blog/k8x9w22-en/https://www.bx33661.com/en/blog/k8x9w22-en/Local AntSword traffic analysis: HTTP POST parameters, response formats, default/chr/rot13 encoding, and scripted response decoding.Mon, 15 Jan 2024 00:00:00 GMThttps://www.bx33661.com/en/blog/k8x9w2m7-en/https://www.bx33661.com/en/blog/k8x9w2m7-en/Review L3HCTF best_profile, tracing Nginx cache configuration and Flask ProxyFix through cache poisoning and template injection.Mon, 15 Jan 2024 00:00:00 GMThttps://www.bx33661.com/en/blog/metasploit-framework-1-en/https://www.bx33661.com/en/blog/metasploit-framework-1-en/TryHackMe notes on Metasploit module search, configuration, scanning, msfvenom payloads, sessions, and file transfer with a Python HTTP server.Mon, 01 Jan 2024 00:00:00 GMT