#web security headers
50 related articles
·3 min
What Happens After You Click a Link? A Complete Technical Breakdown
From DNS resolution, TCP handshake, and TLS encryption to the Blink rendering engine — a detailed breakdown of what happens after you click a link.
Read more →
·3 min
Rusty HLP Viewer: A Cross-Platform Tool for Natively Opening Legacy HLP Help Files
Rusty HLP Viewer is the first open-source tool to natively open Windows HLP help files. Built in Rust, it runs on Windows, Linux, and macOS without format conversion.
Read more →
·4 min
Building Self-Hosted Tunnels Under Extreme Censorship: A Layered Architecture with VLESS Reality
Deep analysis of building layered tunnel architectures using VLESS+Reality to evade DPI and domestic relays with whitelisted IPs to bypass geographic blocking in extreme censorship environments.
Read more →
·8 min
Quick Start with SpringBoot for Beginners: From a Java Project to a Real Enterprise Application
Discover why beginners study SpringBoot for six months without getting started. Learn the 'focus on the big' methodology, and evolve a simple Java project step by step into a runnable enterprise application with IDEA.
Read more →
·8 min
Quick Start with SpringBoot from Scratch: From Java Projects to Enterprise Application Practice
Discover why beginners study SpringBoot for six months without getting started. Learn the 'focus on the big picture' methodology and evolve a simple Java project into a runnable enterprise-level SpringBoot application step by step.
Read more →
·3 min
AI-Assisted GeeTest Four-Image CAPTCHA Reverse Engineering: A Complete Efficiency Guide
A complete walkthrough of AI-assisted GeeTest four-image CAPTCHA reverse engineering: from capturing the w parameter to AI analyzing obfuscated code and generating runnable scripts in minutes.
Read more →
·2 min
WebMCP: The New Standard for AI Agents to Precisely Interact with Web Pages
WebMCP is a proposed web standard that lets pages proactively expose tool interfaces to AI agents via declarative and imperative APIs, eliminating browser automation guesswork. Now in Chrome 149 Origin Trial.
Read more →
·3 min
AI-Accelerated Reverse Engineering: Cracking SM2/SM4 Encrypted Freelance Jobs in 30 Minutes
Real freelance case study: how to use DeepSeek and LLMs to reverse-engineer SM2/SM4 encrypted API parameters in 30 minutes, covering anti-debug bypass, call stack backtrace, and AI-assisted deobfuscation.
Read more →
·3 min
Build a Flask Visual Database Query System in 20 Minutes with Trae
Learn how to use Trae, ByteDance's free AI coding tool, to build a Flask-based visual database query system (EasyQuery) in just 20 minutes. Full walkthrough included.
Read more →
·3 min
AI-Powered Python Reverse Engineering: A Full Retrospective on Using LLMs to Accelerate the Workflow
A real-world retrospective on AI-assisted Python reverse engineering: from JS obfuscation tracing and SM2/SM4 key extraction to generating decryption code with DeepSeek. An honest assessment of LLM value and legal risks.
Read more →
·4 min
AI Agents Automating JS Reverse Engineering: A Deep Dive into the New Paradigm for Web Scraping
AI agents are revolutionizing JS reverse engineering. This deep dive covers built-in tool chains, automation modes, prompt engineering for e-commerce, and full pipeline automation from parameter extraction to database storage.
Read more →
·2 min
Hombre: An Open-Source Visual Dashboard for Honcho AI Memory Server
Hombre is an open-source web GUI for self-hosted Honcho AI memory servers. Features workspace management, semantic search, real-time sync, and RBAC — built with FastAPI and native frontend, MIT licensed, Docker-ready.
Read more →
·3 min
Alibaba's Claude Ban Explained: The Full Story Behind the US-China AI Distillation War
Alibaba banned Claude Code after Anthropic accused it of the largest-ever model distillation attack. We break down what distillation is, Claude's hidden tracking, and how this became a US-China national security dispute.
Read more →
·7 min
Dify Enterprise System Integration in Practice: Building a Project Management AI Copilot with Workflows
Using a project management system as an example, this article details how to use the Dify low-code platform to achieve AI-powered integration of enterprise internal systems through interface capture and workflow orchestration.
Read more →
·6 min
Decoding the Obfuscated Bash Script on a Uniqlo T-Shirt: Tech Easter Eggs and Security Lessons
A tech enthusiast decoded an obfuscated Bash script on a Uniqlo T-shirt. This article breaks down the reverse-analysis approach, obfuscation tricks, and safe-execution principles.
Read more →
·7 min
Hidden Authentication Backdoor Exposed in Tenda Router Firmware: Multiple Versions Affected, Users Beware
Researchers found a hidden authentication backdoor in multiple Tenda router firmware versions, letting attackers bypass passwords to gain admin access. Learn the technical principles, impact, and protection tips.
Read more →
·3 min
Fortress: The Stealth Browser Built for AI Agents to Bypass Anti-Bot Detection
Fortress is an open-source stealth Chromium built for AI Agents. It eliminates automation fingerprints to bypass Cloudflare and other anti-bot systems.
Read more →
·5 min
OSINT Tools for Automated Discovery of Exposed Files on Domains: Principles, Applications, and Compliance Boundaries
Deep dive into how OSINT automation tools discover exposed files on domains, covering dictionary probing principles, attack surface management, bug bounty techniques, and compliance boundaries.
Read more →
·7 min
Learning Python Web Scraping from Scratch: How It Works, the Full Workflow, and Legal Boundaries
A must-read intro to Python web scraping: from HTTP requests and HTML parsing to data storage, systematically explaining how crawlers work and their full workflow, while clarifying legal boundaries like the robots protocol and privacy protection.
Read more →
·8 min
Python Web Scraping for Beginners: How It Works, Core Workflow, and Legal Red Lines Explained
A plain-language guide to how Python web scrapers work: from HTTP requests and responses, HTML tag parsing, to the complete three-step data scraping workflow, with a focus on the three legal red lines and compliance advice.
Read more →