<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>边界之外</title><description>网络安全 · 技术复盘 · 学习手记</description><link>https://nothingsec.com/</link><item><title>DVWA SQL 注入：从判断到验证的完整路径</title><link>https://nothingsec.com/posts/dvwa-sqli-notes/</link><guid isPermaLink="true">https://nothingsec.com/posts/dvwa-sqli-notes/</guid><description>不只记录成功的 payload，也解释每一步判断背后的依据与容易忽略的错误。</description><pubDate>Tue, 28 Jul 2026 00:00:00 GMT</pubDate></item><item><title>重新理解 HTTP 请求：安全测试中的边界在哪里</title><link>https://nothingsec.com/posts/http-request-boundary/</link><guid isPermaLink="true">https://nothingsec.com/posts/http-request-boundary/</guid><description>从请求行、头部到正文，梳理一次请求在代理工具中被观察和修改的全过程。</description><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate></item><item><title>公开学习的第一个月：少收藏，多复盘</title><link>https://nothingsec.com/posts/learning-in-public/</link><guid isPermaLink="true">https://nothingsec.com/posts/learning-in-public/</guid><description>从堆积资料转向输出驱动，记录一套更适合长期安全学习的节奏。</description><pubDate>Sun, 12 Jul 2026 00:00:00 GMT</pubDate></item></channel></rss>