Security-first development
DevSecOps delivery covering requirements, design, development, testing, deployment and continuous operations.
HKAS
Secure development, cybersecurity services and professional training for dependable digital business.
Cybersecurity services
Penetration testing, pre-launch assessment, incident response, security drills and LLM security evaluation.
Training and certification
Practical training for CISSP, information security engineering and project management certifications.
Latest articles
Java 反序列化基础与漏洞入门：从 readObject 到第一条调用链
从 Java 序列化机制和 readObject 入口开始，理解反序列化漏洞的基本原理与调用链分析方法。
Fastjson2 FNV-1a 哈希碰撞 AutoType 绕过 RCE
分析 Fastjson2 FNV-1a 哈希碰撞对 AutoType 安全机制的影响与授权环境下的复现过程。
Fastjson 1.2.83 @JSONType Gadget-free RCE 分析与复现
解析 Fastjson 1.2.83 中 @JSONType 相关 Gadget-free 利用路径和防御关注点。