<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" 
        xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
  <url>
    <loc>https://www.bx33661.com/blog/oh-my-vul-1-0/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/oh-my-vul-1-0.png</image:loc>
      <image:title><![CDATA[oh-my-vul 1.0：证据优先的漏洞研究工作台]]></image:title>
      <image:caption><![CDATA[记录 oh-my-vul 从两个安全研究 Skill 演进为证据优先漏洞研究工作台的过程，以及 Evidence、CLI、TUI、Codex 和 Claude Code 适配背后的设计考虑。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/agent-teams/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/agent-teams.png</image:loc>
      <image:title><![CDATA[Claude Code Agent Teams：多智能体代码安全审计]]></image:title>
      <image:caption><![CDATA[用 Claude Code Agent Teams 做代码安全审计：多智能体协作流程、适用边界与 Go 项目初体验。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/go-net-http-source-analysis/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/go-net-http-source-analysis.png</image:loc>
      <image:title><![CDATA[Go net/http 源码阅读与安全相关点]]></image:title>
      <image:caption><![CDATA[从 Server 与 Client 两个视角梳理 Go net/http 的请求处理链路、路由分发与响应写回机制，结合源码理解关键设计。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/wiz-cloud-hunting-games-writeup/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/wiz-cloud-hunting-games-writeup.png</image:loc>
      <image:title><![CDATA[Wiz Cloud Hunting Games 解题记录]]></image:title>
      <image:caption><![CDATA[记录 Wiz Cloud Hunting Games CTF 的完整调查过程：从 S3 数据外泄溯源，到 CloudTrail 追踪、Overlay 日志隐藏识别，再到持久化清除。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8s-goat-walkthrough/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8s-goat-walkthrough.png</image:loc>
      <image:title><![CDATA[Kubernetes Goat 靶场：密钥泄露到容器逃逸]]></image:title>
      <image:caption><![CDATA[Kubernetes Goat 实战：密钥泄露、DIND、Metadata Secrets 与容器逃逸等场景记录。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/redis-lua-script-part2/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/redis-lua-script-part2.png</image:loc>
      <image:title><![CDATA[Redis 与 Lua 脚本（Part 2）]]></image:title>
      <image:caption><![CDATA[整理 Lua 核心语法、Redis Lua 脚本执行模型（原子性、KEYS/ARGV、call/pcall）以及一个固定窗口限流实战示例，并补充 OpenResty 与 Lua 的关系。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/redis-core-guide/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/redis-core-guide.png</image:loc>
      <image:title><![CDATA[Redis 与缓存基础：结构、持久化与安全注意点]]></image:title>
      <image:caption><![CDATA[深度总结 Redis 的核心知识点，涵盖五大基本数据类型的应用场景、Python 实战操作，以及缓存穿透、击穿、雪崩等经典问题的解决方案（布隆过滤器等）。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/hnuctf-2026-ops/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/hnuctf-2026-ops.png</image:loc>
      <image:title><![CDATA[HNUCTF 2026 运维向题目记录]]></image:title>
      <image:caption><![CDATA[记录HnuCTF2026竞赛平台的搭建、运维过程，包括平台选择、服务器配置、代理设置以及比赛结果总结。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/dos-at-psitransfer/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/dos-at-psitransfer.png</image:loc>
      <image:title><![CDATA[PsiTransfer DoS 漏洞分析与复现]]></image:title>
      <image:caption><![CDATA[Analysis of a Denial of Service (DoS) vulnerability in psitransfer caused by improper exception handling in file upload logic.]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/n8n-cve-2025-68613-analysis/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/n8n-cve-2025-68613-analysis.png</image:loc>
      <image:title><![CDATA[n8n 表达式注入 RCE：CVE-2025-68613 分析与复现]]></image:title>
      <image:caption><![CDATA[n8n未授权RCE漏洞(CVE-2025-68613)深度分析与复现。包含环境搭建、漏洞原理、Payload构造及官方修复方案分析。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/opencode-vulnerability-analysis/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/opencode-vulnerability-analysis.png</image:loc>
      <image:title><![CDATA[OpenCode 漏洞复现：CVE-2026-22812 分析]]></image:title>
      <image:caption><![CDATA[OpenCode 1.0.215版本RCE与任意文件读取漏洞深度分析,包含完整的漏洞复现步骤、代码审计细节以及安全防护建议。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/codeql-learning/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/codeql-learning.png</image:loc>
      <image:title><![CDATA[CodeQL 入门：数据库创建与常用查询]]></image:title>
      <image:caption><![CDATA[CodeQL静态污点分析、数据库创建（Python/C++）和查询执行完整实践指南，包含AI4CodeQL项目经验总结。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/ethereum-dex-sepolia/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/ethereum-dex-sepolia.png</image:loc>
      <image:title><![CDATA[以太坊测试网 DEX 合约发布与学习]]></image:title>
      <image:caption><![CDATA[在Sepolia测试网发行ERC-20代币、编写DEX合约与简易DApp的完整实践记录与踩坑总结。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/llm-attack-hackergame/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/llm-attack-hackergame.png</image:loc>
      <image:title><![CDATA[LLM 攻击与 Hackergame：GCG 等对抗学习笔记]]></image:title>
      <image:caption><![CDATA[TinyStories 与 Hackergame 题复现：prompt 注入、accepted/hackergame/🐮 输出与 GCG 攻击实战]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/spring-learning-analysis/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/spring-learning-analysis.png</image:loc>
      <image:title><![CDATA[Spring 安全相关学习与代码分析]]></image:title>
      <image:caption><![CDATA[深入理解Spring框架的设计理念，从传统Servlet容器到SpringBoot的演进过程，包括MVC架构、POJO规范、自动配置机制等核心概念。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/dify-coze-workflow/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/dify-coze-workflow.png</image:loc>
      <image:title><![CDATA[Dify 与 Coze 工作流搭建实践]]></image:title>
      <image:caption><![CDATA[详细介绍Dify和Coze这两个AI应用开发平台的工作流搭建方法，包括GitHub用户信息查询工作流、CTF WP考点提取工作流等实际案例。涵盖HTTP请求节点、条件分支、LLM节点、代码节点的配置与使用，以及DSL导出、调试技巧等高级功能的实践应用。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/p2p-bittorrent-protocol-deep-dive/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/p2p-bittorrent-protocol-deep-dive.png</image:loc>
      <image:title><![CDATA[P2P 与 BT 协议学习笔记]]></image:title>
      <image:caption><![CDATA[全面解析P2P（点对点）网络和BitTorrent协议的核心技术原理，包括DHT分布式哈希表、节点发现机制、NAT穿透、资源定位算法、数据传输优化等关键技术。深入探讨去中心化网络架构如何实现高效的文件共享，以及BitTorrent协议中的Tit-for-Tat激励机制、分片传输策略和哈希校验等核心算法的实现细节。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/ntlm-protocol-and-attack-techniques/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/ntlm-protocol-and-attack-techniques.png</image:loc>
      <image:title><![CDATA[NTLM 协议与常见攻击手法梳理]]></image:title>
      <image:caption><![CDATA[深入分析NTLM协议及其常见的攻击手法，包括NTLM中继、哈希传递等，并提供相应的防御策略。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/ssji-learning/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/ssji-learning.png</image:loc>
      <image:title><![CDATA[SSJI / 服务端注入学习笔记]]></image:title>
      <image:caption><![CDATA[深入学习服务器端JavaScript代码注入漏洞的原理、利用技巧、沙箱绕过方法以及实际CTF案例分析。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/csp-bypass-analysis/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/csp-bypass-analysis.png</image:loc>
      <image:title><![CDATA[CSP 绕过思路与 CTF 题目分析]]></image:title>
      <image:caption><![CDATA[深入分析CSP（内容安全策略）规则绕过技术，通过HTB CTF中的Cursed Secret Party题目详细讲解CSP绕过方法和防护机制。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/nginx-cache-poisoning/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/nginx-cache-poisoning.png</image:loc>
      <image:title><![CDATA[Web 缓存机制与缓存投毒攻击学习]]></image:title>
      <image:caption><![CDATA[缓存投毒（Cache Poisoning）是一种攻击技术，攻击者通过特定手段让缓存系统存储恶意或敏感的响应内容，然后其他用户访问时会获取到这些被污染的缓存内容]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/htb-challenge/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/htb-challenge.png</image:loc>
      <image:title><![CDATA[HTB CTF 题解与思路整理]]></image:title>
      <image:caption><![CDATA[HackTheBox CTF Challenge做题记录，涵盖WEB、MOBILE、CRYPTO、REVERSE等多个安全方向的深入分析与解题思路分享。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/htb-ctf/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/htb-ctf.png</image:loc>
      <image:title><![CDATA[HTB CTF 做题记录]]></image:title>
      <image:caption><![CDATA[HTB-CTF是HackTheBox发起的一个CTF比赛，题目覆盖了多个领域，包括WEB、MOBILE、CRYPTO、REVERSE等。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/claude-code/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/claude-code.png</image:loc>
      <image:title><![CDATA[Claude Code 使用笔记：CLI Agent 工作流实践]]></image:title>
      <image:caption><![CDATA[Claude Code / 同类 CLI Agent 使用随笔：交互模式、常用工作流与安全审计场景下的实践记录。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/mcp-security/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/mcp-security.png</image:loc>
      <image:title><![CDATA[MCP 安全应用场景与常见风险]]></image:title>
      <image:caption><![CDATA[深入探讨MCP（Model Context Protocol）在安全领域的应用，包括安全检查清单、IDA-Pro-MCP等安全工具的实践使用与配置指南。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/juice-shop/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/juice-shop.png</image:loc>
      <image:title><![CDATA[OWASP Juice Shop 靶场通关与漏洞练习]]></image:title>
      <image:caption><![CDATA[OWASP Juice Shop 靶场学习记录：常见 Web 漏洞复现路径、解题思路与安全测试练习笔记。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/jenkins-credential-crack/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/jenkins-credential-crack.png</image:loc>
      <image:title><![CDATA[Jenkins 凭证解密与敏感信息获取实战]]></image:title>
      <image:caption><![CDATA[Jenkins 凭证与敏感信息获取：常见暴露面、凭据解密思路与加固建议（授权环境）。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/mcp1/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/mcp1.png</image:loc>
      <image:title><![CDATA[MCP 学习与实践：协议、工具与接入笔记]]></image:title>
      <image:caption><![CDATA[MCP（Model Context Protocol）是由 Anthropic 于 2024 年 11 月推出的开源协议，旨在为大型语言模型（LLM）与外部工具、数据源之间建立统一、安全、标准化的通信接口。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/passthehash/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/passthehash.png</image:loc>
      <image:title><![CDATA[Pass the Hash 攻击原理与防护要点]]></image:title>
      <image:caption><![CDATA[Pass The Hash攻击学习，将窃取到的NTLM Hash作为凭据，直接用于认证和访问网络中的其他主机]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/tsclient/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/tsclient.png</image:loc>
      <image:title><![CDATA[春秋云境 Tsclient 与 Cobalt Strike 学习记录]]></image:title>
      <image:caption><![CDATA[Tsclient是一套难度为中等的靶场环境，完成该挑战可以帮助玩家了解内网渗透中的代理转发、内网扫描、信息收集、特权提升以及横向移动技术方法，加强对域环境核心认证机制的理解，以及掌握域环境渗透中一些有趣的技术要点。该靶场共有3个flag，分布于不同的靶机。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/brute4road/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/brute4road.png</image:loc>
      <image:title><![CDATA[春秋云境 Brute4Road 靶场通关记录]]></image:title>
      <image:caption><![CDATA[Brute4Road是一套难度为中等的靶场环境，完成该挑战可以帮助玩家了解内网渗透中的代理转发、内网扫描、信息收集、特权提升以及横向移动技术方法，加强对域环境核心认证机制的理解，以及掌握域环境渗透中一些有趣的技术要点。该靶场共有4个flag，分布于不同的靶机。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bxhttpSplit/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bxhttpSplit.png</image:loc>
      <image:title><![CDATA[HTTP 响应拆分漏洞原理与利用分析]]></image:title>
      <image:caption><![CDATA[深入分析HTTP响应拆分漏洞（HTTP Response Splitting）的攻击原理、CRLF注入技术及防护措施，包含详细的攻击流程图解。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bx1go/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bx1go.png</image:loc>
      <image:title><![CDATA[Go template SSTI：原理、利用与防护]]></image:title>
      <image:caption><![CDATA[深入分析Go语言template模板引擎的SSTI（服务器端模板注入）漏洞，包括html/template和text/template的语法特性及安全利用技术。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bx33661http/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bx33661http.png</image:loc>
      <image:title><![CDATA[HTTP 请求走私（CL·TE / TE·CL）原理与检测]]></image:title>
      <image:caption><![CDATA[HTTP 请求走私（HTTP/1.1）原理、CL·TE 与 TE·CL 变体，以及检测与防御思路。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bx33661xpath/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bx33661xpath.png</image:loc>
      <image:title><![CDATA[XPath 注入原理、利用与防御]]></image:title>
      <image:caption><![CDATA[深入学习XPath注入攻击技术，包括XPath语法基础、注入原理分析、漏洞利用方法及在XML数据查询中的安全防护。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bx33661dom/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bx33661dom.png</image:loc>
      <image:title><![CDATA[DOM 树结构学习与前端安全相关分析]]></image:title>
      <image:caption><![CDATA[深入学习DOM（Document Object Model）树形结构，了解浏览器如何解析HTML文档并为JavaScript提供访问接口的机制。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/z8x9w23/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/z8x9w23.png</image:loc>
      <image:title><![CDATA[Python 安全新人第一讲：SSTI 与反序列化入门]]></image:title>
      <image:caption><![CDATA[HnuSec Python 安全新人第一讲：SSTI、反序列化、沙箱逃逸等 CTF/Web 安全入门要点。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/OpenHarmonyCTF/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/OpenHarmonyCTF.png</image:loc>
      <image:title><![CDATA[OpenHarmony CTF：ezAPP 与 SERVER 题解]]></image:title>
      <image:caption><![CDATA[OpenHarmonyCTF-ezAPP_And_SERVER 主要是鸿蒙APP结合Web漏洞分析和学习]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/chunqiu-Initial/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/chunqiu-Initial.png</image:loc>
      <image:title><![CDATA[春秋云境 Initial 靶场通关记录]]></image:title>
      <image:caption><![CDATA[春秋云境Initial靶场渗透测试实战记录，涵盖端口扫描、ThinkPHP漏洞利用、SUID提权等内网渗透技术的详细分析。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8x10w24/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8x10w24.png</image:loc>
      <image:title><![CDATA[对象存储桶安全问题与 CTF 题型分析]]></image:title>
      <image:caption><![CDATA[对象存储/储存桶常见安全问题与 CTF 题型：权限配置错误、枚举与数据泄露路径。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bxvite/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bxvite.png</image:loc>
      <image:title><![CDATA[Vite 任意文件读取漏洞分析（CVE-2025-30208 等）]]></image:title>
      <image:caption><![CDATA[Vite 任意文件读取相关 CVE（含 CVE-2025-30208 等）原理、复现与防御要点分析。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/CVE-2024-1561/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/CVE-2024-1561.png</image:loc>
      <image:title><![CDATA[CVE-2024-1561 复现与分析笔记]]></image:title>
      <image:caption><![CDATA[CVE-2024-1561漏洞复现分析，详解gradio-app中/component_server端点的本地文件读取漏洞利用过程与防护措施。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8x9w23/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8x9w23.png</image:loc>
      <image:title><![CDATA[哥斯拉 Webshell 流量分析与溯源]]></image:title>
      <image:caption><![CDATA[深入分析哥斯拉Webshell的流量特征与溯源技术，包括请求响应格式、加密机制及应急响应中的检测方法。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bxwebpack/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bxwebpack.png</image:loc>
      <image:title><![CDATA[Webpack 前端渗透：sourcemap 与接口泄露排查]]></image:title>
      <image:caption><![CDATA[前端 Webpack 渗透思路：sourcemap、打包还原、敏感接口与配置泄露排查路径。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bx33661win1/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bx33661win1.png</image:loc>
      <image:title><![CDATA[Windows 应急响应：日志、进程与持久化排查]]></image:title>
      <image:caption><![CDATA[Windows 应急响应与安全分析笔记：日志、进程、持久化排查与常见加固要点清单。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8x9w26/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8x9w26.png</image:loc>
      <image:title><![CDATA[2025 轩辕杯 Web 题 Writeup]]></image:title>
      <image:caption><![CDATA[2025轩辕杯-WEB-题解,本次轩辕杯队伍排名情况如下，我们HnuSecStar排名第六欢迎大家关注 HnuSec 公众号 [官网](https://www.hnusec.com)]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/summer-python-security/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/summer-python-security.png</image:loc>
      <image:title><![CDATA[Python 安全 CTF 培训：SSTI、反序列化与沙箱]]></image:title>
      <image:caption><![CDATA[Python 安全培训笔记：SSTI、反序列化、沙箱逃逸等 CTF 常见题型与防御思路梳理。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8burp/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8burp.png</image:loc>
      <image:title><![CDATA[Burp Suite 实战技巧：代理、扫描与 Collaborator]]></image:title>
      <image:caption><![CDATA[Burp Suite 实战杂项：代理抓包、过滤、扫描、Collaborator、Decoder 与常见排障技巧。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/java-algorithm-practice/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/java-algorithm-practice.png</image:loc>
      <image:title><![CDATA[Java 算法练习记录：常用题型与写法]]></image:title>
      <image:caption><![CDATA[Java算法练习记录，基于LeetCode经典题目的解题思路与代码实现，包括两数之和等算法题的多种解法分析。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/bxtcp/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/bxtcp.png</image:loc>
      <image:title><![CDATA[TCP/IP 核心协议学习笔记（TryHackMe）]]></image:title>
      <image:caption><![CDATA[基于 TryHackMe 的 TCP/IP 核心协议学习笔记：握手、状态机与抓包观察要点。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8x9w22/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8x9w22.png</image:loc>
      <image:title><![CDATA[蚁剑 Webshell 流量分析与应急溯源]]></image:title>
      <image:caption><![CDATA[中国蚁剑 Webshell 流量特征分析与应急溯源：识别加密通信并定位受控主机。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8x9w2m7/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8x9w2m7.png</image:loc>
      <image:title><![CDATA[L3HCTF best_profile：Nginx 缓存与 Flask ProxyFix]]></image:title>
      <image:caption><![CDATA[L3hCTF best_profile writeup - nginx cache and Flask ProxyFix]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/k8x9w55/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/k8x9w55.png</image:loc>
      <image:title><![CDATA[Next.js 中间件授权绕过 CVE-2025-29927 分析]]></image:title>
      <image:caption><![CDATA[L3hCTF best_profile writeup - nginx cache and Flask ProxyFix]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/blog/metasploit-framework-1/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/metasploit-framework-1.png</image:loc>
      <image:title><![CDATA[Metasploit 框架入门：TryHackMe 三关笔记]]></image:title>
      <image:caption><![CDATA[基于 TryHackMe 的 Metasploit 学习笔记：模块、利用流程与渗透测试各阶段基础操作。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/galleries/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/6C67AEDA-15B9-44A4-9493-B801382DB7EC-w1600.jpg</image:loc>
      <image:title><![CDATA[经幡穹顶]]></image:title>
      <image:caption><![CDATA[经幡穹顶]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/0228CA38-3A9D-4624-A6B8-0EDD2B1B5296-w1600.jpg</image:loc>
      <image:title><![CDATA[雪山晚霞]]></image:title>
      <image:caption><![CDATA[雪山晚霞]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/C0A851E2-DFC3-4E0B-B37E-3451E1DC3F24-w1600.jpg</image:loc>
      <image:title><![CDATA[峡谷双桥]]></image:title>
      <image:caption><![CDATA[峡谷双桥]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/79d35189354e2824167cfebb10876af4-w1279.jpg</image:loc>
      <image:title><![CDATA[Labubu]]></image:title>
      <image:caption><![CDATA[Labubu]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/738eadca2488bd4f583bb071d15fc038-w1600.jpg</image:loc>
      <image:title><![CDATA[宝泉]]></image:title>
      <image:caption><![CDATA[宝泉风景]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/c9531bcaeefed42bb36b974696149c7a-w1600.jpg</image:loc>
      <image:title><![CDATA[山间]]></image:title>
      <image:caption><![CDATA[山间风景]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/3a05e267fc3eb4a6c146489836f5d50e-w1600.jpg</image:loc>
      <image:title><![CDATA[校园]]></image:title>
      <image:caption><![CDATA[校园]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/cd3ca9f14be50495c1be8ed017c7b348-w1600.jpg</image:loc>
      <image:title><![CDATA[落日]]></image:title>
      <image:caption><![CDATA[海南落日]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/fb450aaf347e5d8e64d0341cf3b23b61-w1600.jpg</image:loc>
      <image:title><![CDATA[古都]]></image:title>
      <image:caption><![CDATA[古都风景]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/b4fb8f48829b62de174d7b1e24a3b7ca-w1600.jpg</image:loc>
      <image:title><![CDATA[云层]]></image:title>
      <image:caption><![CDATA[云层光影]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/gallery/optimized/2713625f33c9006f62b6e40783e27527-w1600.jpg</image:loc>
      <image:title><![CDATA[云影]]></image:title>
      <image:caption><![CDATA[天际云影]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/notes/javascript-advanced-learning/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/javascript-advanced-learning.png</image:loc>
      <image:title><![CDATA[JavaScript特性&Promise等]]></image:title>
      <image:caption><![CDATA[深入学习JavaScript核心特性，包括链式调用、Promise异步编程、原型链等高级概念，结合LeetCode实践加深理解]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/notes/wechat-miniprogram-reverse-4/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/wechat-miniprogram-reverse-4.png</image:loc>
      <image:title><![CDATA[微信4.0小程序逆向：解包、反编译与解混淆]]></image:title>
      <image:caption><![CDATA[微信 4.0 小程序逆向：新版存储路径、包提取、反编译与解混淆流程及工具使用要点。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/notes/algorithm-study/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/algorithm-study.png</image:loc>
      <image:title><![CDATA[数据结构与算法学习笔记]]></image:title>
      <image:caption><![CDATA[常用数据结构与算法学习笔记：复杂度分析、示例代码，以及面向面试的复习提纲与复杂度对照。]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/notes/machine-learning-classification-task/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/image/machine-learning-classification-task.png</image:loc>
      <image:title><![CDATA[机器学习算法-分类任务]]></image:title>
      <image:caption><![CDATA[基于scikit-learn实现手写数字识别的分类任务，涵盖数据可视化、逻辑回归模型训练与性能评估的完整流程]]></image:caption>
    </image:image>
  </url>
  <url>
    <loc>https://www.bx33661.com/</loc>
    <image:image>
      <image:loc>https://www.bx33661.com/touxiang-512.png</image:loc>
      <image:title><![CDATA[BX - Site Image]]></image:title>
      <image:caption><![CDATA[我是BX，欢迎来到我的博客！这里分享网络安全、CTF、Web安全等技术研究，和我一起学习、成长、分享，见证星辰大海！]]></image:caption>
    </image:image>
    <image:image>
      <image:loc>https://www.bx33661.com/touxiang-192.png</image:loc>
      <image:title><![CDATA[BX Logo]]></image:title>
      <image:caption><![CDATA[BX网站标志]]></image:caption>
    </image:image>
  </url>
</urlset>