From e55c7579f7c8d3cbc202d918344e7a69db562e3e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 11 Aug 2026 11:59:15 +0000
Subject: [PATCH] =?UTF-8?q?docs:=20append=20new=20books=20references=20to?=
 =?UTF-8?q?=20README=20=E6=96=87=E7=AB=A0/=E4=B9=A6=E7=B1=8D/=E6=95=99?=
 =?UTF-8?q?=E7=A8=8B=E7=9B=B8=E5=85=B3=20section?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: Mr-xn <18260135+Mr-xn@users.noreply.github.com>
---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 520f088..f40b2b9 100644
--- a/README.md
+++ b/README.md
@@ -3137,6 +3137,10 @@
 - [Java反序列化系列·基础篇] [Hessian 协议详解](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Hessian%20%E5%8D%8F%E8%AE%AE%E8%AF%A6%E8%A7%A3.md) | [Java Agent 详解](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20Agent%20%E8%AF%A6%E8%A7%A3.md) | [Java 动态代理](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20%E5%8A%A8%E6%80%81%E4%BB%A3%E7%90%86.md) | [Java 序列化与反序列化](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20%E5%BA%8F%E5%88%97%E5%8C%96%E4%B8%8E%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96.md) | [Java 的类加载与反射](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Java%20%E7%9A%84%E7%B1%BB%E5%8A%A0%E8%BD%BD%E4%B8%8E%E5%8F%8D%E5%B0%84.md) | [Javassist 使用指南](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Javassist%20%E4%BD%BF%E7%94%A8%E6%8C%87%E5%8D%97.md) | [RMI 协议详解](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20RMI%20%E5%8D%8F%E8%AE%AE%E8%AF%A6%E8%A7%A3.md) | [Tomcat 架构](./books/%E5%9F%BA%E7%A1%80%E7%AF%87%20-%20Tomcat%20%E6%9E%B6%E6%9E%84.md)
 - [Java反序列化系列·漏洞篇] [CC1链之ysoserial版](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20CC1%20%E9%93%BE%E4%B9%8B%20ysoserial%20%E7%89%88.md) | [Java反序列化之CC1链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20CC1%20%E9%93%BE.md) | [Java反序列化之CC3链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20CC3%20%E9%93%BE.md) | [Java反序列化之CC4+CC2+CC5+CC7链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20CC4%2BCC2%2BCC5%2BCC7%20%E9%93%BE.md) | [Java反序列化之Rome链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Java%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E4%B9%8B%20Rome%20%E9%93%BE.md) | [Fastjson反序列化](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Fastjson%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96.md) | [Fastjson 1.2.68-1.2.80利用](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Fastjson%201.2.68%20-%201.2.80%20%E5%88%A9%E7%94%A8.md) | [Hessian反序列化详解](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Hessian%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%AF%A6%E8%A7%A3.md) | [Hessian Aspectj二次反序列化新链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Hessian%20Aspectj%20%E4%BA%8C%E6%AC%A1%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%96%B0%E9%93%BE.md) | [JNDI注入详解](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20JNDI%20%E6%B3%A8%E5%85%A5%E8%AF%A6%E8%A7%A3.md) | [RMI相关的攻击](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20RMI%20%E7%9B%B8%E5%85%B3%E7%9A%84%E6%94%BB%E5%87%BB.md) | [Rome链之HotSwappableTargetSource利用链](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Rome%20%E9%93%BE%E4%B9%8B%20HotSwappableTargetSource%20%E5%88%A9%E7%94%A8%E9%93%BE.md) | [SnakeYaml反序列化](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20SnakeYaml%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96.md) | [JavaAgent内存马](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20JavaAgent%20%E5%86%85%E5%AD%98%E9%A9%AC.md) | [Spring内存马](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Spring%20%E5%86%85%E5%AD%98%E9%A9%AC.md) | [Tomcat内存马](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20Tomcat%20%E5%86%85%E5%AD%98%E9%A9%AC.md) | [URLDNS利用链分析](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20URLDNS%20%E5%88%A9%E7%94%A8%E9%93%BE%E5%88%86%E6%9E%90.md) | [ysoserial的JRMP模块分析](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20ysoserial%20%E7%9A%84%20JRMP%20%E6%A8%A1%E5%9D%97%E5%88%86%E6%9E%90.md) | [关于JEP 290](./books/%E6%BC%8F%E6%B4%9E%E7%AF%87%20-%20%E5%85%B3%E4%BA%8E%20JEP%20290.md)
 - [Java反序列化系列·配置篇] [IDEA查看带sun包的JDK源码](./books/%E9%85%8D%E7%BD%AE%E7%AF%87%20-%20IDEA%20%E6%9F%A5%E7%9C%8B%E5%B8%A6%20sun%20%E5%8C%85%E7%9A%84%20JDK%20%E6%BA%90%E7%A0%81.md) | [Maven手动下载与导入依赖](./books/%E9%85%8D%E7%BD%AE%E7%AF%87%20-%20Maven%20%E6%89%8B%E5%8A%A8%E4%B8%8B%E8%BD%BD%E4%B8%8E%E5%AF%BC%E5%85%A5%E4%BE%9D%E8%B5%96.md)
+- [AI 渗透初探：从零开始的实战赋能记录](./books/AI%20%E6%B8%97%E9%80%8F%E5%88%9D%E6%8E%A2%EF%BC%9A%E4%BB%8E%E9%9B%B6%E5%BC%80%E5%A7%8B%E7%9A%84%E5%AE%9E%E6%88%98%E8%B5%8B%E8%83%BD%E8%AE%B0%E5%BD%95.md)
+- [Android移动安全系列] [Android移动安全第一章_组件导出安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B8%80%E7%AB%A0_%E7%BB%84%E4%BB%B6%E5%AF%BC%E5%87%BA%E5%AE%89%E5%85%A8.md) | [Android移动安全第二章_Intent安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%BA%8C%E7%AB%A0_Intent%E5%AE%89%E5%85%A8.md) | [Android移动安全第三章_Binder服务安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B8%89%E7%AB%A0_Binder%E6%9C%8D%E5%8A%A1%E5%AE%89%E5%85%A8.md) | [Android移动安全第四章_ContentProvider安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%9B%9B%E7%AB%A0_ContentProvider%E5%AE%89%E5%85%A8.md) | [Android移动安全第五章_WebView安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%BA%94%E7%AB%A0_WebView%E5%AE%89%E5%85%A8.md) | [Android移动安全第六章_UI欺骗与钓鱼](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%85%AD%E7%AB%A0_UI%E6%AC%BA%E9%AA%97%E4%B8%8E%E9%92%93%E9%B1%BC.md) | [Android移动安全第七章_DeepLink安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B8%83%E7%AB%A0_DeepLink%E5%AE%89%E5%85%A8.md) | [Android移动安全第八章_广播安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%85%AB%E7%AB%A0_%E5%B9%BF%E6%92%AD%E5%AE%89%E5%85%A8.md) | [Android移动安全第九章_PendingIntent安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E4%B9%9D%E7%AB%A0_PendingIntent%E5%AE%89%E5%85%A8.md) | [Android移动安全第十章_系统设置安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E7%AB%A0_%E7%B3%BB%E7%BB%9F%E8%AE%BE%E7%BD%AE%E5%AE%89%E5%85%A8.md) | [Android移动安全第十一章_SSRF与网络安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%B8%80%E7%AB%A0_SSRF%E4%B8%8E%E7%BD%91%E7%BB%9C%E5%AE%89%E5%85%A8.md) | [Android移动安全第十二章_加密与数据存储安全](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%BA%8C%E7%AB%A0_%E5%8A%A0%E5%AF%86%E4%B8%8E%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8%E5%AE%89%E5%85%A8.md) | [Android移动安全第十三章_认证与证书校验](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%B8%89%E7%AB%A0_%E8%AE%A4%E8%AF%81%E4%B8%8E%E8%AF%81%E4%B9%A6%E6%A0%A1%E9%AA%8C.md) | [Android移动安全第十四章_ZipSlip路径遍历](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E5%9B%9B%E7%AB%A0_ZipSlip%E8%B7%AF%E5%BE%84%E9%81%8D%E5%8E%86.md) | [Android移动安全第十五章_FragmentInjection](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E4%BA%94%E7%AB%A0_FragmentInjection.md) | [Android移动安全第十六章_SELinux与沙箱机制](./books/Android%E7%A7%BB%E5%8A%A8%E5%AE%89%E5%85%A8%E7%AC%AC%E5%8D%81%E5%85%AD%E7%AB%A0_SELinux%E4%B8%8E%E6%B2%99%E7%AE%B1%E6%9C%BA%E5%88%B6.md)
+- [CVE-2026-41843 Spring Framework路径遍历漏洞浅析](./books/CVE-2026-41843%20Spring%20Framework%E8%B7%AF%E5%BE%84%E9%81%8D%E5%8E%86%E6%BC%8F%E6%B4%9E%E6%B5%85%E6%9E%90.md)
+- [WebSocket 实战：基于协议特点的漏洞挖掘](./books/WebSocket%20%E5%AE%9E%E6%88%98%EF%BC%9A%E5%9F%BA%E4%BA%8E%E5%8D%8F%E8%AE%AE%E7%89%B9%E7%82%B9%E7%9A%84%E6%BC%8F%E6%B4%9E%E6%8C%96%E6%8E%98.md)
 
 
 ## <span id="head9"> 说明</span>