Introduction: Hunters and prey always change inadvertently.
I. Introduction
As the saying goes, people who eat delicious food are short-tongued and soft-handed. During festivals or events, I always receive all kinds of wishes. It would be embarrassing if I didn’t make some contribution. So I came to "slander" the young lady.
As shown in the picture, there was no conversation for ten days and a half, and I just gave him a gift box. Who can resist this? Then I obediently handed over my new home address [humble].
pI wrote so many words because I have been a little obsessed with playing Werewolf recently...
Since the young lady likes itImmerse yourself in it a> some chat records to enhance the interest and readability of the article. forge , how can I not satisfy her? So I decided to
2. Text
I vaguely remember that the first article I submitted to the platform was completed during hw. The big guys on the red team were very helpful and never eliminated us, which gave me time to complete it. Then the blue team will be mainly responsible for traceability analysis.
Later, after the review was approved, someone came to add me on WeChat and said that they wanted to give me a mooncake gift box. The only information I got at that time was the WeChat ID of yunzhongkexin123. The name is also very official, gender male.
I habitually looked at the circle of friends. The background is a girl. Combined with the word "little brother", the person in charge of operations should be a little sister.
But there was no information. I know there is a saying that there is no free lunch in the world, but I was given mooncakes, not lunch, so I obediently handed over the information.
Later, due to certain things, I received several messages:
I think this material proposal is very good, and I fell into deep thought at the time. However, I currently have too little information. I know that there is no need to rush this matter, so I can only take my time. After discussing with U, I decided to deal with this matter coldly. When it comes to social work, we should slowly get in touch, slowly look for opportunities, and passively collect. At that time, there was no good way. We could only learn about it by taking the initiative to indirectly contact the people around the other party. Later, we did contact several colleagues around the other party. But all we talked about was work, and since I was just making materials, I didn’t plan to start with that.
Just come here for N days.
An event of Yunzhong has appeared. Invite friends to register to win gifts.
Links can be shared through image QR codes. So how to determine the identity of the sharer is a key point. So I extracted the link for the QR code to access and intercepted the data packet for observation.
Take a screenshot of the QR code and find an online decoding website. You can see the QR code decoding result as shown below.
Through observation, it was found that there was a jwt ciphertext during the transmission process, and it was decrypted using an online website.
https://jwt.io/
Perform base64 decryption of jwt and find that the request contains a mobile phone number, then the opportunity comes.
For social workers, having the target’s mobile phone number means you can get more things. Based on the above idea, I only need to get the QR code of the person who shared the picture to get the other person’s mobile phone number, so I checked the target circle of friends and found nothing to share.
Then try it first and ask directly:
The young lady looked confused and thought I was going to invite her to do an activity and expressed doubts about me. However, it can be read from this sentence that the young lady has forgotten about the social worker. The drunkard’s intention is not to drink. I had to tell the truth.
During this period, the lady also brought up stored XSS, which shows that she is often exposed to security research.
After getting the mobile phone number through decryption, check with the girl to see if it is hers. However, there is no direct reply, so let’s take it as the default first. Check and verify it and you will know.
Now that the mobile phone number has been obtained, the problem fix will have no impact on us, so we will always notify you to fix the problem.
It is easiest to choose the mobile phone number first.
·WeChat search all at once
As shown below, the format is an abbreviation followed by an underline and 4 digits.
According to Chinese naming habits, guess the initials + birthday.
·Take Alipay transfer
The format is **X, where You can directly get the full name of the other party through mobile banking transfer. That's it for now.
·Tg take a walk
There is a huge amount of information, including mobile phone numbers, names, and nicknames.
Combined with the above information, we basically locked the target’s name, gender, and date of birth
·qq
Basically determine the target age based on mutual verification of qq level, birthday date and other information
·reg007
What websites have you registered for? Find out with just one search - REG007
·Search engine
Searched for the mobile phone number and found two pictures of sublet houses
According to the source of the picture, it comes from Douban, and the specific address of the sublease is indicated.
Continue to follow up, extract key information release date, expiration date, floor, orientation, us, and other layout pictures in the room, and lock the specific house number of the house. Based on the keyword "we" and the layout of the house (such as bathroom toiletries, bedroom clothing decorations, some small items on the table), you can determine... hhh
According to the search engine results, it was confirmed that the place of residence was XXX.
Based on the information obtained, we will continue to make plans. Since the release date of the house was relatively short, we can speculate on two situations: 1. The house was sublet successfully, and 2. the house was not sublet successfully a> First, make a small badge for XX property through special channels to enhance authenticity +1; prepare the form and pen, and write a few lines of data to enhance authenticity +2.
So I decided to take a chance. Go directly to the field to collect further information. After all, you have your mobile phone number and name, and you can knock on the door directly.
· Beautiful imagination
Play as a property owner to register tenants,
Situational dialogue:
Property owner: Knock on the door, hello, is this Ms. Xxx (name obtained above) , I am a community property manager who needs to conduct statistics on the current residents of the community and present a forged property management certificate.
New tenant: Huh? Hello, I am not Xxx, I just rented here.
Property: So, can you please show your rental contract, because the date we require statistics starts from X, month, X (the date is before the date you get).
New tenant: Wait a moment, turn around and go back to get the contract.
After flipping through the table, you get the target’s ID number.
If the target ID number information is successfully obtained. If that doesn't work, try asking the tenant to leave their name, phone number and identifying information. Then use the obtained tenant information to disguise the identity to get close to the target. If the new tenant is between 20-30 years old, you can disguise his boyfriend/girlfriend or other identities to get close to the target and get the target's social contact information to prepare for the next step. .
Through dialogue, the approximate geographical location of the target's current residence is obtained as XXX district.
Through dialogue, it is obtained that the commuting time is approximately X hours, and the X community of the target location is screened out.
Through dialogue, I found out that a friend also lives there and lives in one of the communities. Ask her where she lives. If everything goes well, I will get the target community.
Conclusion:
First name x
Gender x
Personal identity x
Hand number x
Date of birth x
Current place of residence x
Current place of work x
· brutal reality
The average temperature in Beijing in January is basically below zero. With the tenacity in my character, I broke the seal of my bed, picked a weekend with good sunshine, took stock of my equipment, and looked at my handsome self in front of the mirror. Everything is ready, let’s go!
“Didong” the elevator door opened and he walked to the target’s door.
“Dong dong dong”, hello, I am the property manager.
“Wait a moment, I’ll be right back.” A gentle female voice came to my ears. I secretly thought that the voice sounded young, probably 20+.
With a "squeak", the door opened.
A burst of hot air hit my face, and my glasses were instantly covered with fog. I was speechless in my heart. Before I took off my glasses, I heard a burst of silver bell-like laughter, "Hahaha, are you okay? It's too cold outside. I'm the only one at home. Come in first."< a i=6> As he said that, he grabbed my hand and pulled me in. Ah, this. Feeling the temperature on my hands, my originally stiff hands seemed to become even stiffer. "You sit down first, I will pour you a cup of tea." Listening to the footsteps turning around, feeling the temperature of the room, the glasses finally adapted to the temperature, and the vision gradually became clear. A pair of long, white thighs suddenly came into view. His eyes gradually moved up, emmm, he had golden waves and slightly wet hair. It looked like he had just taken a shower. Just as I was lost in thought, a cup of tea appeared in front of me. I could see the tea leaves swaying in the cup. Suddenly my mouth seemed to feel a little dry. "Try it, this tea will go away the heat. The heating here is too high in winter, so I prepared some tea to go away the heat." "By the way, what information do you want to register?" ?” I took a sip of the tea in my hand and felt much more awake. It was worthy of being a tea. If nothing else, it had a really good effect on reducing internal heat. “Ah, yes, that’s right. Because of the epidemic, the community needs to collect identity information of the residents who lived from x month to x month.” "That's right, but I just moved in, and I signed a contract directly with the property owner." "Then do you have the contact information or identity information of the person before subletting? "?" "I have your contact information, but it's just your identity information." She suddenly looked at me steadily, "You don't seem like a real estate agent." I was stunned, and she turned around and said, "She looks like a policeman." I chuckled and said, "It would be great if I were a policeman. I would definitely catch those who lie. Liar." He complained secretly in his heart, you don't look like a normal renter. “Really? Then you must be a competent policeman. But when I moved in, I cleaned up the room and found a rental contract left behind. It should have been pulled down from the previous rental. Please wait a moment. , I'll get it for you," he said and turned to leave. I looked at the back of the other party 178 and secretly breathed a sigh of relief. The mission is finally complete. I took over the contract and it said xxx rental agreement. House owner: xxx ID number: xxx Tenant: xxx ID number: xxx Compare The contract was copied onto the registration form. "Thank you very much. The registration is complete. I'm sorry to bother you. Thank you for your hospitality. I'll see you again when I have the chance." I said and got ready to run away. “Wait a minute!” “Do you have any questions?” “Don’t you want to register information? My Don't you want to register?" "Oops, I was careless." His back was turned to the other party, and his body was a little stiff. “Yes, look at me, I have forgotten all this. Here you go, please fill it in.” I turned around and saw a smiling face that seemed to see through everything. smiling face. Suddenly my body felt weak and I lost consciousness. I seem to have had a long dream. In the dream, it is still as cold as the severe winter, but it is like a small sun hanging around me, very warm. I feel that it will be there soon. One moment before the other, I wanted to catch it but couldn't. This aroused my curiosity even more, so I pretended to be relaxed, and then jumped back suddenly. I felt like I had a hold of it, and it was pinned beneath me. Suddenly I heard a "Hmm~" sound in my ears. I was stunned for a moment, and then I woke up from my dream and opened my eyes. "Did you sleep well, xxx" I was stunned, "Do you know me?" "Otherwise ?” But I’ve never seen you, and I’ve only told one person about my coming, “Are you U?!” I suddenly realized. “High-end hunters often appear in the form of prey. You taught me that." U said lightly. I smiled bitterly, that’s it. Unexpectedly, I hunted geese all day long and ended up being pecked by geese. U is a good friend I met on an anonymous software. She is a cool girl. Because she has the same interests, but neither of them admits defeat, we made a bet, agreeing that whoever gets there first will be the other. You can make the other party agree to something unconditionally. “When I made the bet, I started to pay attention to your every move. Later, when you talked about your new material, I started to prepare in advance and became friends with your target. After a red envelope, we acted together in this big drama of inviting you to the urn." I looked at the 178 U next to me and gave a helpless smile. Sure enough,High-end The hunter often appears in the form of prey. I admit that I lost, completely. The night was quiet and seductive, but in a spacious and bright corner, there was suddenly an untimely burst of excited laughter, mixed with one or two sentences, it should start, let’s start, two A red envelope, hahaha... The night is getting darker and darker, and the laughter gradually stops. There are only the sounds of falling snowflakes and the whispers of neighbors cursing. Why are you crazy if you don't sleep at night? , whattwo copiesred envelopes...
3. Epilogue
Who is the prey, who is the hunter, who is the prey of the article, and whose prey is the article?
I thought I could brag, but I didn’t expect to be so good at making up. I am really an ordinary little genius.
Note: The original address of this article: https://www.sec-in.com
The author of the article is one of the members of Jumang Security Lab. Welcome to search and follow us on WeChat .
Original articles by members of the Jumang Security Lab team. Welcome to like and follow. Please indicate the source when reprinting.