[{"data":1,"prerenderedAt":123},["Reactive",2],{"content-query-KEXGvVHQ1K":3},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":7,"director":9,"time":10,"img":11,"plan":12,"body":13,"_type":83,"_id":84,"_source":85,"_file":86,"_extension":87,"head":88},"/book/a-fun-guide-to-exploring-binaries","book",false,"","たのしいバイナリの歩き方","Kenji Aiko","2026","a-fun-guide-to-exploring-binaries/1.png","1,100",{"type":14,"children":15,"toc":80},"root",[16],{"type":17,"tag":18,"props":19,"children":24},"element","book-content",{":by":20,":img":21,":plan":22,":title":23},"director","img","plan","title",[25,30,46,59,68,75],{"type":17,"tag":26,"props":27,"children":29},"text-title",{":t":28},"为什么我不学逆向？",[],{"type":17,"tag":31,"props":32,"children":33},"p",{},[34,37,44],{"type":35,"value":36},"text","在那个信息匮乏的年代，想学逆向要么啃书要么看视频。但就算是看了视频也没有什么帮助，因为涉及底层学起来还是很枯燥的，不像是 Web Security 找个靶场或者 Google 黑语法 ",{"type":17,"tag":38,"props":39,"children":41},"code",{"className":40},[],[42],{"type":35,"value":43},"inurl:php? intitle:新闻动态",{"type":35,"value":45}," 就能检验最新学到的 OWASP TOP 10。跑一跑最新学到的 sqlmap。而逆向学的就多了，开始就是 IDA PRO，不像是 Burp 就一个抓包，改改参数。",{"type":17,"tag":31,"props":47,"children":48},{},[49,51,57],{"type":35,"value":50},"随着 AI 越来越强，我自己也尝试了下 Artex，接入了 deepseek-flash。确实比我聪明和厉害许多，因为我至今从未弱密码成功过，也没进入过任何一个企业的后台，而它做到了。我下达的任务非常简单，就是 ",{"type":17,"tag":52,"props":53,"children":54},"strong",{},[55],{"type":35,"value":56},"拿下后台的管理员权限",{"type":35,"value":58}," 总共花了五块钱不到。但人总是贪心的，进入到后台后我又想获取服务器和数据库权限。但花了差不多 ¥60 仍然处于信息搜集阶段：",{"type":17,"tag":60,"props":61,"children":62},"text-tip",{},[63],{"type":17,"tag":31,"props":64,"children":65},{},[66],{"type":35,"value":67},"一开始我选择了 deepseek-pro 因为我觉得 pro 肯定比 flash 厉害许多，结果通过朋友得知 pro 又慢又贵还不聪明，白白浪费了 ¥49.16 大洋。",{"type":17,"tag":69,"props":70,"children":74},"text-flow",{"file":71,"height":72,"title":73},"/img/book/a-fun-guide-to-exploring-binaries/artex-exploration-graph-task-8-20261022T070916Z-redacted.json",560,"Artex 探索流程",[],{"type":17,"tag":31,"props":76,"children":77},{},[78],{"type":35,"value":79},"所以在看本书之前，我会先尝试下 AI 时代特有的方式，例如 REA 和 Artex，前者针对逆向，后者则是 Web 渗透。我希望自己通过 rust 编译一个密钥发卡程序，然后连接服务器，然后加壳做一个测试 demo。看看 REA 能不能绕过我的 API 校验实现破解 Adobe 类似的效果。而 Artex 则是随便找一个生产环境进行测试。",{"title":7,"searchDepth":81,"depth":81,"links":82},2,[],"markdown","content:book:a-fun-guide-to-exploring-binaries.md","content","book/a-fun-guide-to-exploring-binaries.md","md",{"script":89,"meta":97},[90],{"id":91,"type":92,"processTemplateParams":93,"innerHTML":94,"tagPosition":95,"tagPriority":96},"nuxt-og-image-overrides","application/json",true,"[{\"title\":1,\"excerpt\":-1,\"component\":2},\"たのしいバイナリの歩き方\",\"OgImageCustom\"]","bodyClose",30,[98,101,104,107,110,112,115,117,119,121],{"property":99,"content":100},"og:image","/__og-image__/static/book/a-fun-guide-to-exploring-binaries/og.png",{"property":102,"content":103},"og:image:width",1200,{"property":105,"content":106},"og:image:height",600,{"property":108,"content":109},"og:image:type","image/png",{"property":111},"og:image:alt",{"name":113,"content":114},"twitter:card","summary_large_image",{"name":116,"content":100},"twitter:image:src",{"name":118,"content":103},"twitter:image:width",{"name":120,"content":106},"twitter:image:height",{"name":122},"twitter:image:alt",1792657928280]