Telegram必备的搜索引擎,极搜JISOU帮你精准找到,想要的群组、频道、视频、音乐 👉 t.me/jisou2?start=a_5030337299

Channel
Hacker区块链钱包追踪解封 智能合约渗透
@yuyujiangdequanneirenwufenxiang
On this record: Topic · Growth · Engagement · Reactions · Posts · Citations · Cite this entry
168subscribers
-309 since we began measuring on 7 August 2026
Risers and fallers across the register · movement among entries of Under 1,000.
Register entry
| Telegram ID | -1003808512924 |
|---|---|
| Type | Channel |
| Username | @yuyujiangdequanneirenwufenxiang |
| Created | Between 1 February 2026 and 24 April 2026 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 8 August 2026 |
| Last confirmed live | 6 November 2026 |
| Measurements held | 13 |
| Confirmed unchanged | 1 time, most recently 6 November 2026 |
| On Telegram | t.me/yuyujiangdequanneirenwufenxiang |
Topic
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 24 September 2026 and assigned it the closest of 31 fixed categories, at 99% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and the other topics.
Growth
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 6 Nov 2026, 02:08 | 168 | -1 |
| 29 Oct 2026, 17:27 | 169 | -3 |
| 22 Oct 2026, 00:16 | 172 | -1 |
| 15 Oct 2026, 12:31 | 173 | -2 |
| 9 Oct 2026, 01:19 | 175 | -7 |
| 29 Sept 2026, 04:59 | 182 | -14 |
| 14 Sept 2026, 13:39 | 196 | -28 |
| 6 Sept 2026, 05:15 | 224 | -50 |
| 28 Aug 2026, 12:28 | 274 | -21 |
| 22 Aug 2026, 07:56 | 295 | -63 |
| 15 Aug 2026, 20:52 | 358 | -119 |
| 8 Aug 2026, 04:34 | 477 | no change |
| 7 Aug 2026, 18:36 | 477 | first reading |
Engagement
15 posts held, back to 24 April 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 15 posts for this entry, the most recent from 4 August 2026. An engagement rate over an empty window would be a number about nothing.
Reaction mix
1 reaction across 1 post, in 1 kind.
| Reaction | Count | Share | Share, drawn |
|---|---|---|---|
| ❤ | 1 | 100.0% |
No sentiment is inferred, and none should be read in. This table is ordered by count and by nothing else. Emoji do not carry stable meaning across languages or communities — 🙏 is thanks in one channel and mourning in another — so we publish which ones were pressed and how often, and pass no judgement on what an audience meant by them.
Precision. Telegram publishes reaction counts per emoji and short-forms each one — 4.34K, 1.2M — so any single kind at or above 1,000 reaches us at three significant figures, and only counts below 1,000 are exact. The shares above are ratios of those figures and carry the same error. This is also why the total here can differ slightly from a reaction total printed elsewhere on the page: both are sums of the same rounded parts, taken over samples with different edges.
Coverage. Reactions were read on 1 of the 15 sampled posts in this sample. Summed by Telegram’s own count on each post — not by adding up the per-emoji breakdown above — those same posts carry 1 reactions in total: the kind of figure the paragraph above means by “a reaction total printed elsewhere on the page”.
Measured over the 15 most recent posts we hold, published 24 April 2026 to 4 August 2026, using the newest reading held for each. Telegram Stars are excluded: they are a payment, not a reaction, and they have their own section.
Recent posts
当我再次思考人工智能机器人和人工智能代理在渗透测试中的应用时,我突然产生了一个有趣的想法。 我们一直在讨论: — 人工智能如何加速漏洞搜索 — 人工智能如何助力情报收集 — 代理如何自动化日常工作 — 人工智能如何开始与真人漏洞猎手竞争 但几乎没有人提出另一个问题。 如果攻击人工智能渗透测试员本身呢?🤔 现在,越来越多自主的人工智能代理出现,它们: — 遍历基础设施 — 分析 HTTP 响应 — 运行工具 — 读取扫描器的输出 — 决定下一步行动 而它们的所有工作都是基于处理不可信的数据。 对于普通的渗透测试员来说,奇怪的 FTP、可疑的有效载荷或偶然发现的 passwords.txt 都是值得停下来思考的。 而人工智能代理呢? ☑️它可以简单地继续执行被“喂给”它的操作链。 如果理解了: — 模型 — 内存 — 上下文 — 决策逻辑 那么就有可能不再影响基础设施,而是影响人工智能代理本身。 目前,围绕这一点…
#区块链智能合约渗透 #交易所破解 #黑客攻击 关注频道,获取最新资讯!🔥 了解网络安全、黑客工具及信息安全领域的最新动态。 🥂 技术支持联系:@IBZhacker
使用Burp拦截请求 当我们注册Cryptokitties账户时,Web应用的处理逻辑会从用户的MetaMask扩展中提取用户所公开的以太坊地址,随后,网站会要求我们输入邮箱地址以及账户昵称。
由于dApp的确可以访问这些特权以太坊地址,那么第三条渗透测试分支就变成:“我们应该如何才能让dApp帮我们写入智能合约中的这些特权函数?” 考虑到这一点,现在我们的攻击面已经扩展为: 1、标准的Web应用评估(身份认证、访问控制、会话管理)。这个过程可能不涉及到智能合约,只涉及到横向或者纵向的权限提升、数据库注入、XSS等。 2、智能合约审计。权限问题、向上或者向下溢出、竞争条件等等。 3、尝试通过Web接口伪造智能合约的写入权限。我们是否能找到一种方式,使Web应用以非预期的方式来与智能合约交互? 想象一下有个普通的Web应用,可能带有各种安全漏洞。现在,想象一下有一款应用,具备如下特点: 1、从头开始构建自己的数据库软件; 2、将这些数据库对外开放; 3、有些时候这些数据库中会存有真金白银。 这就是以太坊dApp开发者所需要面临的安全挑战。
在以太坊中,我们可以编写只能从特定以太坊地址调用才能执行的函数。onlyOwner就是modifier的一个典型实例,如果我们正确实现了onlyOwner,那么只有合约的所有者(owner)才能运行某些函数。 contract mortal { /* Define variable owner of the type address */ address owner; modifier onlyOwner { require(msg.sender == owner); _; } function writeData(bytes32 data) public onlyOwner returns (bool success) { // will only run if owner sent transaction } ..…
所谓的以太坊(Ethereum)去中心化应用(decentralized application,dApp),指的就是基于共识协议(consensus protocol)交互的应用。我们选择的目标为dApp最常见的某类应用场景:与一个或者多个智能合约(smart contracts)交互的常规Web应用。 当我们通过Web访问某个dApp时(比如使用MetaMask之类的扩展),我们就可以使用自己的私钥与网站交互,通过web接口对交易进行签名。
续上文: 我们看见key的产生都依赖于discuz 自定义的random函数,出现过的authkey爆破问题也因此产生。在安装时由于处于同一个cgi进程,导致mt_rand() 只播种了一次种子,所以产生了随机数种子爆破和推测key的问题,在3.4版本中,authkey的产生已经是拼接了完整的32位字符串,导致了无法进行爆破推算出authkey的前半部,因此这个问题已经被修复,但这个漏洞原理值得学习。代码最后可以看出authkey产生后还放入了数据库中,最终authkey存在于数据库pre_common_setting表和/config/config_global.php配置文件。 代码中的 instal_uc_server()函数实现了UC_KEY(dz),UC_KEY(uc_server)的产生,使用了同一个生成函数_generate_key(),代码如图1。 产生的算法牵扯到安装环境和安装过程的http header信…
Discuz的几种密钥分析 通过分析,在discuz中,主要有下面的几种密钥, 这些密钥共同构成了discuz的加密解密体系,这里的命名有重复,我已经标记了对应key值以及key所在的位置。如下表1所示。 主要探讨的其实就只有 authkey,UC_KEY(dz),UC_KEY(uc_server),UC_MYKEY,authkey(uc_server) 5种,我们首先来看着几个密钥是怎么来的最后又到了哪儿去。 密钥的产生 authkey,UC_KEY(dz),UC_KEY(uc_server),UC_MYKEY 都是在安装的时候产生。authkey(uc_server)的产生是和UC_MYKEY息息相关的,在后文中详细讲述。生成代码如图2所示: 业务需求联系:@IBZhacker #区块链智能合约渗透 #APP网站破解 #黑客攻击
云平台模式一览表
按 Ctrl 键并点击鼠标会以 无警告 方式打开 Calc,并且我们能够通过将输出重定向到 /dev/pts/# 来实现远程控制。 printf "\x1b]8;;file:///C:/windows/system32/calc.exe\x07Click here\x1b]8;;\x1b\\\n"
#安全分享 #kali Kali Linux + LLM:完全本地化的 AI 渗透测试助手 Kali 官方最近展示了一种新的安全研究模式: 通过 LLM 用自然语言直接控制 Kali 工具。 这次的方案有几个关键特点: 1️⃣ 完全本地运行: 使用 • Ollama • 本地 LLM • 本地 GPU / CPU 整个系统 无需连接任何云 API。 2️⃣ 自然语言控制渗透工具 你可以直接输入: Scan the target network and identify open services LLM 会自动: • 调用 Kali 工具 • 执行扫描 • 分析结果 • 给出下一步攻击建议 3️⃣ AI 自动化渗透测试 LLM 可以自动编排工具,例如: • nmap • dirsearch • nikto • metasploit 未来可能实现: AI 自动完成完整渗透测试流程 Recon → …
❤1
Showing the 12 most recent of 15 posts we hold for @yuyujiangdequanneirenwufenxiang. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Mentions
Names
Channels on the register whose handles appear in this channel's posts.
A mention is a weaker signal than a forward and is counted separately for that reason — naming a channel is not republishing it, and a handle in a post body is easy to place deliberately. The post counts beside each row below are distinct posts in which the handle appeared, from posts we have read on both sides — the “Named by N registered channels” figure above is a different count, of distinct NAMING CHANNELS rather than posts, and is not the sum of the rows under it.
Cite this entry
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 6 November 2026 — this entry's latest reading, not the date you are reading this.
“Hacker区块链钱包追踪解封 智能合约渗透” (@yuyujiangdequanneirenwufenxiang), 168 subscribers as measured 6 November 2026. Telegram Register, tgregister.com/channel/yuyujiangdequanneirenwufenxiang.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.