https://vvnblog.com/posts/Recent content in Posts on Vivian's BlogHugo -- gohugo.iozh-twCopyright © 2026 Vivian All Rights Reserved.Wed, 08 Jul 2026 00:00:00 +0000https://vvnblog.com/posts/coae-exam/Wed, 08 Jul 2026 00:00:00 +0000https://vvnblog.com/posts/coae-exam/以為攻擊 AI 就只有 Prompt Injection？HTB COAE 讓我見識到 AI 攻擊的另一片天地。https://vvnblog.com/posts/ccsp-exam/Sat, 09 May 2026 00:00:00 +0000https://vvnblog.com/posts/ccsp-exam/零雲端經驗一頭栽進 CCSP，本來只想收集徽章和貼紙，最後被 Cloud Security 狠狠上了一課。https://vvnblog.com/posts/ai-red-teamer-learn/Mon, 16 Mar 2026 00:00:00 +0000https://vvnblog.com/posts/ai-red-teamer-learn/當 AI 從工具變成攻擊目標，滲透測試會長什麼樣子？記錄我從使用、理解到攻擊 AI 的一季學習歷程。https://vvnblog.com/posts/no-superhero-mode-2023-2025/Thu, 01 Jan 2026 00:00:00 +0000https://vvnblog.com/posts/no-superhero-mode-2023-2025/沒有超人模式，也能一步步往前。一位資安工程師媽媽在工作與育兒的夾縫中，兩年考取 OSCP 與 CISSP 的真實節奏。https://vvnblog.com/posts/cissp-exam/Tue, 07 Oct 2025 00:00:00 +0000https://vvnblog.com/posts/cissp-exam/習慣動手打靶的技術腦，要怎麼切換成管理者的思維？我用三個月準備 CISSP，走出熟悉的技術框架。https://vvnblog.com/posts/oscp-exam/Mon, 28 Apr 2025 00:00:00 +0000https://vvnblog.com/posts/oscp-exam/兩度落榜，一邊帶小孩一邊備考，在職媽媽如何在有限時間裡走完 OSCP+ 這條鋼索？https://vvnblog.com/posts/graphql-leak-info/Fri, 19 Jul 2024 00:00:00 +0000https://vvnblog.com/posts/graphql-leak-info/一個沒關掉的 Introspection Query，就讓我列舉出整個 GraphQL schema。從實戰案例看這個常見卻致命的設定疏失。https://vvnblog.com/posts/cookie/Thu, 23 May 2024 00:00:00 +0000https://vvnblog.com/posts/cookie/一個沒設好的 Cookie，足以讓攻擊者偽裝成你。認識 Secure、HttpOnly、SameSite 這三道防線，以及怎麼開啟它們。https://vvnblog.com/posts/jwt/Thu, 11 Apr 2024 00:00:00 +0000https://vvnblog.com/posts/jwt/一組用點號分隔的字串，如何撐起現代網站的登入驗證？拆解 JWT 的三段結構，以及用它時最容易踩的雷。https://vvnblog.com/posts/netgear-m4300/Thu, 13 Jul 2023 00:00:00 +0000https://vvnblog.com/posts/netgear-m4300/交換器竟然藏著一個開放的 API？從一則弱掃告警出發，一步步用指令關掉 NetGear M4300 的隱藏服務。https://vvnblog.com/posts/edl/Wed, 15 Mar 2023 00:00:00 +0000https://vvnblog.com/posts/edl/還在一個一個手動把惡意 IP 加進防火牆？EDL / EBL 讓防火牆自動抓清單，把時間還給更重要的資安工作。