AI Assisted Development - FAFO 作者使用AI工具Claude开发了一个名为ProxyGen的VPN部署工具，支持在AWS、Azure等云平台上自动部署和管理WireGuard VPN服务器。该工具具备多云部署、自动化配置、客户端管理等功能，并通过多次迭代优化实现了一键式部署和资源跟踪。尽管存在一些技术限制和AI生成代码的问题，但整体项目展示了AI在开发中的潜力。... 2025-8-23 16:23:6 | 阅读: 76 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk vpngen cloud claude wireguard client

Expanding on ChunkyIngress - Clippy Goes Rogue (GoClipC2) 文章介绍了一种通过Windows剪贴板实现文件传输和命令控制的工具ChunkyIngress及基于Go语言开发的C2框架GoClipC2。该工具利用Base64编码将文件分块传输，并支持加密通信、文件上传下载、进程监控等功能。文章还探讨了不同Windows版本下剪贴板的工作原理及潜在检测方法。... 2025-6-15 10:59:58 | 阅读: 70 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk clipboard windows client c2 heartbeat

The Human Element: Why AI-Generated Content Is Killing Authenticity 文章探讨了人工智能在写作中的广泛应用及其对人类创造力的影响。作者指出，尽管AI有助于加速学习和创作，但它无法完全替代人类的创造力和经验。尤其是对于像他这样因阅读障碍而付出更多努力的写作者来说，AI生成的内容缺乏真实性和人性化元素。作者强调了人类写作的独特价值，并呼吁减少依赖AI生成的内容，坚持真实经验和个性化表达的重要性。... 2025-5-31 11:1:14 | 阅读: 54 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk creativity dyslexic learnings scattered interests

LOLCLOUD - Azure Arc - C2aaS 文章介绍了 Azure Arc 服务的功能及其潜在的攻击面。Azure Arc 是一个管理混合云资源的平台，支持跨环境的远程管理。文章详细讲解了如何通过 Azure Arc 部署命令与控制（C2）功能，并提供了具体的步骤和示例代码。同时，作者还分享了检测 Azure Arc 滥用行为的方法和指示器（IoCs），包括进程、网络活动、文件路径及 SIEM 规则等。... 2025-5-30 21:5:12 | 阅读: 66 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk arc azcmagent powershell processes

Offensive Threat Intelligence 网络威胁情报（CTI）不仅服务于防守方，还能提升红队能力。通过模拟真实攻击者行为、理解其战术演变，帮助发现防御盲点并推动改进。... 2025-5-24 00:53:30 | 阅读: 55 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk cti threats security behaviour operational

Commit Stomping 文章介绍了"Commit Stomping"技术，即通过篡改Git提交时间戳来掩盖真实操作时间。该技术利用Git允许手动设置或修改提交时间的功能，在恶意情况下可隐藏非法更改或干扰审计流程。文章还探讨了如何通过交互式变基、过滤器分支等工具实现历史重写，并提出了检测和防御措施。... 2025-5-15 21:39:59 | 阅读: 55 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk timestamps committer stomping dates rewriting

Common Tool Errors - Kerberos 文章介绍了Kerberos协议在攻击中的常见错误及其解决方法，包括KDC错误代码、常见原因及修复命令，并提供了域SID解析参考表。内容涉及Kerberos攻击技术（如Pass the Ticket、PKINIT）及与Active Directory相关的配置问题和时间同步问题。... 2025-4-27 12:20:24 | 阅读: 55 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk client krb expired revoked tkt

(Re)Building the Ultimate Homelab NUC Cluster - Part 3 文章介绍了一个基于Docker的家庭实验室搭建方法，包括自动化工具（如Portainer、Watchtower）、媒体管理工具（如Plex、Sonarr、Radarr）以及Homarr仪表盘的配置，提供了一个集成化、自动化的解决方案。... 2025-3-2 08:44:57 | 阅读: 66 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk volume1 plex homarr sonarr overseerr

2024 - The Year of Learning More and More 2024 marks 13 years in security, 10 in offensive security,... 2024-12-31 13:5:30 | 阅读: 45 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk zephrfish security adventures nuc

(Re)Building the Ultimate Homelab NUC Cluster - Part 2 2024-12-9 00:25:12 | 阅读: 53 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk ludus proxmox sccm ssh packer

Adversarial SysAdmin - The Key to Effective Living off the Land In my previous role, we frequently employed ‘living off the land’ strategies, rarely using... 2024-10-27 21:58:44 | 阅读: 52 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk pwd php passwd

(Re)Building the Ultimate Homelab NUC Cluster - Part 1 Explore my blog series on building a NUC cluster with Proxmox! Learn about connecting hosts, se... 2024-9-8 19:21:35 | 阅读: 60 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk homarr proxmox portainer download volume1

Side-by-Side with HelloJackHunter: Unveiling the Mysteries of WinSxS This post explores Windows Side-by-Side (WinSxS) and DLL hijacking, deep-diving some tooling I'... 2024-5-12 17:1:42 | 阅读: 62 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk windows winsxs fileversion powershell hijacking

BlackVue Dashcams - It's not a bug, it is a feature Blackvue cloud connected dashcams leak your location and allow anyone to view your video feed w... 2024-3-16 07:41:34 | 阅读: 52 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk blackvue cloud dashcam colin security

Failing Upwards: Put on your own mask before assisting others (Pt2) Reflecting on my experiences with various leaders, managers, and bosses, I've gained insights i... 2024-1-29 00:43:8 | 阅读: 47 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk leadership qualities maintaining zephrsnaps experiences

Failing Upwards (or not) (Pt1) If you find yourself on the path of leading a team, make sure you set critical baselines with y... 2024-1-29 00:42:48 | 阅读: 52 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk teaching leadership security taught learnt

Security For Everyone - 2023 Update This post will go through some of the steps you can take as an individual to secure the account... 2023-8-20 18:3:30 | 阅读: 42 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk security bitwarden lastpass advice

WebSockets are a Pain - A Journey in Learning and Leveraging Before I dive in and show examples of implementations that worked, it is worth doing a quick ex... 2023-4-3 16:5:7 | 阅读: 39 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk websockets caddy client github c2

Ticket Fraud Scammers - An Investigation If you're reading this, it's a blog post that's not my regular write-up but more of an investig... 2023-2-24 20:14:47 | 阅读: 47 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk raise tweets hypothesis gig

LTR102 - Published Finally! Hello Everyone, This a short blog post to announce I have finally published my second boo... 2022-12-24 02:20:46 | 阅读: 40 | 收藏 | ZephrSec - Adventures In Information Security - blog.zsec.uk paul career advice security morgan