<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:media="http://search.yahoo.com/mrss/" version="2.0"><channel><title>Dux's Blog</title><link>http://localhost:8080</link><atom:link href="http://localhost:8080/rss.xml" rel="self" type="application/rss+xml"/><description>by Dux</description><generator>Halo v2.25.4</generator><language>zh-cn</language><image><url>http://localhost:8080/upload/IMG_8595_44443.PNG</url><title>Dux's Blog</title><link>http://localhost:8080</link></image><lastBuildDate>Thu, 17 Sep 2026 02:26:10 GMT</lastBuildDate><item><title><![CDATA[HERO户籍猎手 3.0 逆向记录：披着查询工具外衣的 iApp 传播样本]]></title><link>http://localhost:8080/archives/virus-HERO-3.0-apk-analysis</link><description><![CDATA[<img src="http://localhost:8080/plugins/feed/assets/telemetry.gif?title=HERO%E6%88%B7%E7%B1%8D%E7%8C%8E%E6%89%8B%203.0%20%E9%80%86%E5%90%91%E8%AE%B0%E5%BD%95%EF%BC%9A%E6%8A%AB%E7%9D%80%E6%9F%A5%E8%AF%A2%E5%B7%A5%E5%85%B7%E5%A4%96%E8%A1%A3%E7%9A%84%20iApp%20%E4%BC%A0%E6%92%AD%E6%A0%B7%E6%9C%AC&amp;url=/archives/virus-HERO-3.0-apk-analysis" width="1" height="1" alt="" style="opacity:0;">声明：本文仅作安全研究与排障记录。分析过程全部离线完成，未安装、未运行样本，也没有主动访问样本中的远程地址。涉及姓名和身份证号的内容均已打码，不提供样本下载。 前几天在手机公共存储里遇到一个挺有意思的现象：/storage/emulated/0/ 下几乎每个一级目录都多出了 res 和 src，部分]]></description><guid isPermaLink="false">/archives/virus-HERO-3.0-apk-analysis</guid><dc:creator>Dux</dc:creator><category>安全研究</category><pubDate>Sun, 16 Aug 2026 06:47:00 GMT</pubDate></item><item><title><![CDATA[Hello Halo]]></title><link>http://localhost:8080/archives/hello-halo</link><description><![CDATA[<img src="http://localhost:8080/plugins/feed/assets/telemetry.gif?title=Hello%20Halo&amp;url=/archives/hello-halo" width="1" height="1" alt="" style="opacity:0;">如果你看到了这一篇文章，那么证明你已经安装成功了，感谢使用 Halo 进行创作，希望能够使用愉快。]]></description><guid isPermaLink="false">/archives/hello-halo</guid><dc:creator>Dux</dc:creator><pubDate>Wed, 29 Jul 2026 13:33:41 GMT</pubDate></item></channel></rss>