Messages in this channel will be automatically deleted after 1 day

Channel
显齋Oracle-网络安全/web渗透
@Oracleimpacts
On this record: Topic · Growth · Engagement · Reactions · Posts · Citations · Cite this entry
650subscribers
-23 since we began measuring on 7 August 2026
Risers and fallers across the register · movement among entries of Under 1,000.
Register entry
| Telegram ID | -1001864128622 |
|---|---|
| Type | Channel |
| Username | @Oracleimpacts |
| Created | Between 1 October 2022 and 25 June 2023 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 7 August 2026 |
| Last confirmed live | 12 October 2026 |
| Measurements held | 8 |
| Confirmed unchanged | 1 time, most recently 12 October 2026 |
| On Telegram | t.me/Oracleimpacts |
Topic
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 20 September 2026 and assigned it the closest of 31 fixed categories, at 99% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and why it has no browse page of its own yet.
Growth
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 12 Oct 2026, 08:41 | 650 | -5 |
| 2 Oct 2026, 11:00 | 655 | -7 |
| 18 Sept 2026, 11:55 | 662 | -2 |
| 9 Sept 2026, 05:00 | 664 | -1 |
| 24 Aug 2026, 08:16 | 665 | -5 |
| 15 Aug 2026, 20:57 | 670 | -2 |
| 7 Aug 2026, 22:08 | 672 | -1 |
| 7 Aug 2026, 11:02 | 673 | first reading |
Engagement
19 posts held, back to 25 June 2023 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 19 posts for this entry, the most recent from 29 September 2024. An engagement rate over an empty window would be a number about nothing.
Reaction mix
35 reactions across 6 posts, in 3 distinct kinds. The most used accounts for 54.3% of them.
| Reaction | Count | Share | Share, drawn |
|---|---|---|---|
| 👍 | 19 | 54.3% | |
| ❤ | 14 | 40.0% | |
| 🤡 | 2 | 5.71% |
No sentiment is inferred, and none should be read in. This table is ordered by count and by nothing else. Emoji do not carry stable meaning across languages or communities — 🙏 is thanks in one channel and mourning in another — so we publish which ones were pressed and how often, and pass no judgement on what an audience meant by them.
Precision. Telegram publishes reaction counts per emoji and short-forms each one — 4.34K, 1.2M — so any single kind at or above 1,000 reaches us at three significant figures, and only counts below 1,000 are exact. The shares above are ratios of those figures and carry the same error. This is also why the total here can differ slightly from a reaction total printed elsewhere on the page: both are sums of the same rounded parts, taken over samples with different edges.
Coverage. Reactions were read on 6 of the 19 sampled posts in this sample. Summed by Telegram’s own count on each post — not by adding up the per-emoji breakdown above — those same posts carry 35 reactions in total: the kind of figure the paragraph above means by “a reaction total printed elsewhere on the page”.
Measured over the 19 most recent posts we hold, published 25 June 2023 to 29 September 2024, using the newest reading held for each. Telegram Stars are excluded: they are a payment, not a reaction, and they have their own section.
Recent posts
Photo, posted without a caption
Photo, posted without a caption
parse-server那个原型污染漏洞导致rce的漏洞,昨天有人问的,钻研了一下,应该是网上的文章有地方没说对 复现环境说的是mongodb依赖包版本3.6.11,当BSON数据中的对象包含_bsontype键,当他的值为Code时,该对象会被判断为Code类型。在进行序列化时,系统会调用serializeCode这个函数对该对象进行序列化处理 在反序列化时,如果遇到Code类型的数据,则系统会执行js内置的eval操作。将字符串变为可执行代码。这个算是比较常规的风险代码,所以他又定义了evalFunctions这个参数,通过一个叫GridFS的流程处理metadata 如果在代码中没有设置info.appId的值,程序就会进入if语句块,如图,把fileViaJSON设置为true。如果缓存中没有info.appId的信息,程序会继续执行下去。在代码中可以找到appId的赋值操作,并且后面还有一处校验。这一步需要保证_…
❤5👍1
File, posted without a caption
一款基于fofa api语句的资产收集工具,用于红队快速收集顶级域名或者ip相关关联的资产 新增计划 新增资产存活检测 已完成 新增资产指纹识别 未完成 新增xray工具联动 未完成 新增awvs工具联动 未完成 新增afrog工具联动 已完成 新增关联资产爬虫 未完成 新增WAF识别 未完成 新增多线程资产存活探测 未完成 新增其他测绘平台 未完成 新增数据自动去重 未完成 新增子域名资产穷举 未完成 新增fofa语句插件 已完成
File, posted without a caption
红队批量脆弱点搜集工具
File, posted without a caption
红队小工具 | 利用DCERPC协议,无需认证获取Windows机器主机信息和多网卡信息 工具主要用于探测内网Windows机器的操作系统信息、域名、主机名以及多网卡信息,可以辅助红队快速定位多网卡主机,以及判断机器是否在域内 优点: 无需认证,只要目标的135端口开放即可获得信息
问答环节 q:渗透需要学历吗? a:如果是找工作肯定需要,自学的话和学历没关系,能不能干事的唯一标准就是能力 q:自学遇到了瓶颈,无法提升也无法实战怎么办? a:外围多看实战资料,内网多打靶机跳出被教程引着走的圈子,搞懂原理自己理解,有空自行思考复现几个漏洞比看教程有价值 q:公安执法部门等国家队是不是都非常强? a:错误的,公安涉及技术的只有网警,知识来源于大学警校中网络安全与执法专业,需要花费一部分时间学习司法执法相关知识,并且会侧重取证,监控等非渗透知识。第二是公安属于体制内公务员,各类人事应酬非常多,技术上是难以保持一线的,一般重大事故或行动都会外包给安全公司。但外包有外包的好,公安部门作为网络安全主管部门能调动的资源非常多,你们熟知都什么奇安信深信服都是晶哥的打手,所以也千万别去招惹警察叔叔 q:外群是拿来做什么的,投了简历也没见有行动? a:后续会开展实战行动以及针对组员的拔高培训,录课中勿催 q:在渗透中…
👍4
Photo, posted without a caption
Showing the 12 most recent of 19 posts we hold for @Oracleimpacts. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Mentions
Names
Channels on the register whose handles appear in this channel's posts.
A mention is a weaker signal than a forward and is counted separately for that reason — naming a channel is not republishing it, and a handle in a post body is easy to place deliberately. The post counts beside each row below are distinct posts in which the handle appeared, from posts we have read on both sides — the “Named by N registered channels” figure above is a different count, of distinct NAMING CHANNELS rather than posts, and is not the sum of the rows under it.
Cite this entry
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 12 October 2026 — this entry's latest reading, not the date you are reading this.
“显齋Oracle-网络安全/web渗透” (@Oracleimpacts), 650 subscribers as measured 12 October 2026. Telegram Register, tgregister.com/channel/Oracleimpacts.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.