<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>元数据泄露 - 标签 - 御衡的笔记</title><link>https://www.leobenchoi.com/tags/%E5%85%83%E6%95%B0%E6%8D%AE%E6%B3%84%E9%9C%B2/</link><description>御衡的笔记</description><generator>Hugo 0.166.0 &amp; FixIt v0.4.5</generator><language>zh-CN</language><lastBuildDate>Sun, 05 Apr 2026 04:10:00 +0000</lastBuildDate><atom:link href="https://www.leobenchoi.com/tags/%E5%85%83%E6%95%B0%E6%8D%AE%E6%B3%84%E9%9C%B2/index.xml" rel="self" type="application/rss+xml"/><item><title>【juice-shop】★★ Meta Geo Stalking：通过图像元数据重置密码</title><link>https://www.leobenchoi.com/posts/2026/juice-shop-meta-geo-stalking/</link><pubDate>Sun, 05 Apr 2026 04:10:00 +0000</pubDate><guid>https://www.leobenchoi.com/posts/2026/juice-shop-meta-geo-stalking/</guid><category domain="https://www.leobenchoi.com/categories/security/">安全</category><description>&lt;h1 class="heading-element" id="juice-shop-meta-geo-stalking通过图像元数据重置密码"&gt;&lt;span&gt;【juice-shop】★★ Meta Geo Stalking：通过图像元数据重置密码&lt;/span&gt;&#10; &lt;a href="#juice-shop-meta-geo-stalking%e9%80%9a%e8%bf%87%e5%9b%be%e5%83%8f%e5%85%83%e6%95%b0%e6%8d%ae%e9%87%8d%e7%bd%ae%e5%af%86%e7%a0%81" class="heading-mark"&gt;&#10; &lt;svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"&gt;&lt;path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"&gt;&lt;/path&gt;&lt;/svg&gt;&#10; &lt;/a&gt;&#10;&lt;/h1&gt;&lt;h2 class="heading-element" id="0x01-任务简报"&gt;&lt;span&gt;0x01 任务简报&lt;/span&gt;&#10; &lt;a href="#0x01-%e4%bb%bb%e5%8a%a1%e7%ae%80%e6%8a%a5" class="heading-mark"&gt;&#10; &lt;svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"&gt;&lt;path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"&gt;&lt;/path&gt;&lt;/svg&gt;&#10; &lt;/a&gt;&#10;&lt;/h2&gt;&lt;blockquote style="border-left: 5px solid #6f42c1; background-color: #f5f3ff; padding: 20px; margin: 1.5rem 0; color: #5521b5; line-height: 1.8; border-radius: 0 5px 5px 0;"&gt;&#13;&#10;&lt;div style="font-weight: bold; font-size: 1.1rem; margin-bottom: 10px; display: flex; align-items: center;"&gt;&#13;&#10;&lt;span style="margin-right: 8px;"&gt;💡&lt;/span&gt; 提示 (Hints)&#13;&#10;&lt;/div&gt;&#13;&#10;1. 查看相应照片的元数据。&lt;br&gt;&#13;&#10;2. 使用能够检查图像元数据的工具。&lt;br&gt;&#13;&#10;3. 使用此信息回答 John 的安全问题，他喜欢在公园里徒步旅行。&#13;&#10;&lt;/blockquote&gt;&#13;&#10;&lt;hr&gt;&#10;&lt;h2 class="heading-element" id="0x02-实战复现漏洞"&gt;&lt;span&gt;0x02 实战：复现漏洞&lt;/span&gt;&#10; &lt;a href="#0x02-%e5%ae%9e%e6%88%98%e5%a4%8d%e7%8e%b0%e6%bc%8f%e6%b4%9e" class="heading-mark"&gt;&#10; &lt;svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"&gt;&lt;path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"&gt;&lt;/path&gt;&lt;/svg&gt;&#10; &lt;/a&gt;&#10;&lt;/h2&gt;&lt;h3 class="heading-element" id="-第一步信息收集与邮箱猜测"&gt;&lt;span&gt;🔍 第一步：信息收集与邮箱猜测&lt;/span&gt;&#10; &lt;a href="#-%e7%ac%ac%e4%b8%80%e6%ad%a5%e4%bf%a1%e6%81%af%e6%94%b6%e9%9b%86%e4%b8%8e%e9%82%ae%e7%ae%b1%e7%8c%9c%e6%b5%8b" class="heading-mark"&gt;&#10; &lt;svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"&gt;&lt;path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"&gt;&lt;/path&gt;&lt;/svg&gt;&#10; &lt;/a&gt;&#10;&lt;/h3&gt;&lt;p&gt;本题涉及 OSINT 技术，需要从公开渠道收集信息。&lt;/p&gt;</description></item></channel></rss>