Offensive Security Researcher · Red Team Operator
Red team operations, from initial access to long-hold persistence.
A 24-chapter full-stack offensive security reference: anti-attribution, reconnaissance, penetration testing, code audit, post-exploitation and AD lateral movement, phishing, C2 development, AV/EDR evasion, cloud-native attacks, and AI-powered offense. Updated with 2025-2026 APT techniques.
English + Chinese, with a searchable docs site and the original XMind mind map.
Write your own AD PoC with impacket: source-level guides to Kerberos, DCE/RPC, DCOM and WMI programming. Bilingual (EN/ZH) with PDF editions, built from real domain-penetration development work.
Autonomous agent that mines Java deserialization gadget chains from any JAR directory — static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. One command, zero intermediate decisions: JARs in → chains + PoCs out. Includes interactive TUI (EN/CN) and CLI modes. 8 novel chains discovered (1 T1 entry + 6 T2 carriers).
English + Chinese README.
- Tracking 2025-2026 offensive techniques: ADCS ESC1-ESC16, eBPF rootkits, sleep obfuscation, device-code phishing, AI infrastructure CVEs
- Maintaining both references above, bilingual, release-driven
WeChat MP: IndexSec
All published work is for lawful security research, education, and authorized testing.