↓ Skip to main content

Posts

2025

上班的生活-记录开始
·19 words·1 min
Life Is Like a Boat
JAVA-内存马+servlet+Filter
·346 words·2 mins
Java
JavaEE代码审计-鉴权逻辑
·393 words·2 mins
JavaEE
JavaEECC1链条持续更新+fastjson1.2.24+log4j
·1894 words·9 mins
JavaEE
JavaEE代码审计-文件操作
·773 words·4 mins
JavaEE
NPS-内网攻防信息打点工具
·467 words·3 mins
Nps
JavaEE代码审计-sql注入
·684 words·4 mins
JavaEE
PHP11-Laravel-代码审计
·305 words·2 mins
Php
PHP10-thinkphp-RCE
·112 words·1 min
Php
PHP代码审计9-框架-YII
·263 words·2 mins
Php
PHP代码审计8-XXE-XSS
·272 words·2 mins
Php
PHP代码审计7-变量覆盖
·190 words·1 min
Php
MVC-PHP代码审计6-框架-文件包含
·151 words·1 min
Php
Maze-GuoQing靶机！
·129 words·1 min
Strings
MVC-PHP代码审计5-框架-反序列化构建链
·249 words·2 mins
Php
MVC-PHP代码审计4-框架-SQL注入
·309 words·2 mins
Php
Logi靶机-maze-JWT-Ti15中国队加油！
·265 words·2 mins
Jwt
readfile靶机-maze-snmp-rbash-能力机制
·723 words·4 mins
Rbash Smtp
MVC-PHP代码审计3-反序列化-原生-框架-phar
·452 words·3 mins
Php
MVC-PHP代码审计2
·204 words·1 min
Php
MVC-PHP代码审计
·336 words·2 mins
Php
Dockerfile-使用-docker语法
·434 words·3 mins
Dockerfile
Apache-nginx安装-配置文件修改+linux,windows常用命令
·253 words·2 mins
Weblogic
Weblogic-拿到密钥解密
·45 words·1 min
Weblogic
原生PHP代码审计-文件方面
·245 words·2 mins
Upload LFI
原生PHP代码审计-sql注入
·263 words·2 mins
Sql
Halfhour靶机-Maze-通配符漏洞
·371 words·2 mins
通配符 Wordpress
Confidence靶机-Maze-windows
·1616 words·8 mins
Windows Ldap
Mount靶机-maze
·525 words·3 mins
Mountnfs Mount
vmware-esxi-vscenter-靶场vulntarget-o
·219 words·2 mins
Vmware Esxi Vscenter
poppips-mazasec
·1025 words·5 mins
Linux
fluffy-htb
·930 words·5 mins
Windows ESC16
Editor-htb
·260 words·2 mins
Xwiki
K8s-3-靶场渗透
·218 words·2 mins
K8s
K8s-2-未授权访问-proxy
·931 words·5 mins
K8s
K8s-1-未授权访问
·977 words·5 mins
K8s
Pane12靶机-VITE
·27 words·1 min
Vite
Docker-逃逸-LINux内核漏洞
·216 words·2 mins
Docker
CodeTwo靶机-HTB
·157 words·1 min
HTB
Docker-逃逸-本身漏洞-CDK工具使用
·241 words·2 mins
Docker
Docker-逃逸-安全
·274 words·2 mins
Docker
云上服务-OSS存储桶渗透-AKSK两种利用特征
·272 words·2 mins
Oss Aksk
JWT渗透相关
·125 words·1 min
Jwt
红日靶场4
·242 words·2 mins
Docker
XuanJi靶机---难度low知识点-Git,TOTP
·45 words·1 min
TOTP Git
Wechat渗透相关抓包反编译
·56 words·1 min
Wedocode Wechat
nuclei-POC编写
·248 words·2 mins
Nuclei
自动化漏洞扫描工具
·65 words·1 min
AVWS
APP脱壳
·43 words·1 min
CS
红日靶场1-CS内网渗透
·136 words·1 min
CS
红日靶场7-WP-MS17-010-WMI-laravel-docker-exp
·161 words·1 min
Vshell Ms-17-010永恒之蓝smb Docker 内网
CS怎么上线LINUX
·18 words·1 min
CS
APP动态调试
·26 words·1 min
CS
APP-逆向修改
·38 words·1 min
App
APP-安卓9模拟器抓包设置-绕过双向验证
·63 words·1 min
App
APP-安卓9模拟器抓包设置-安装系统BP证书
·136 words·1 min
App
ActiveMQ-RocketMQ-Kafka-CVE
·90 words·1 min
ActiveMQ RocketMQ Kafka
THINKPHP-laravel-SpringBoot-Gateway-Struct2 CVE
·97 words·1 min
THINKPHP Struct2 SpringBoot
Fastjson
·96 words·1 min
Fastjson
CVE-java-jackson-xstream-fastjson
·109 words·1 min
Jackson Xstream Fastjson
CVE-vulfocus-apache-tomcat-jetty-weblogic
·135 words·1 min
Vulhub Apache Tomcat Jetty Weblogic
CVE-java-solr-log4j-shiro
·77 words·1 min
Vulhub Apache Shiro Solr Log4j
sudo靶机---难度low知识点-爆破-sudoers
·30 words·1 min
Sudoers 爆破
CVE-vulfocus-vulhub-redis-couchdb-H2DB
·200 words·1 min
Vulhub Redis Couchdb Vulfocus
websocket-messages-to-exploit-vulnerabilities
·192 words·1 min
Websocket Portswigger
language靶机---难度easy知识点-docker逃逸-爆破
·144 words·1 min
Docker逃逸 爆破
hoshi靶机---难度medium知识点-文件包含+表达式注入+盲水印
·134 words·1 min
文件包含 表达式注入 盲水印
yibasuo靶机---难度easy知识点-nail
·39 words·1 min
Nail
gigachad靶机---难度easy知识点-nail
·18 words·1 min
Nail
talk靶机---难度easy知识点-SQL注入
·170 words·1 min
SQL注入
matrix靶机---难度easy知识点-表达式注入
·202 words·1 min
表达式注入
pwn-tool
·106 words·1 min
分号截断
insomnia靶机---难度easy知识点-分号截断
·90 words·1 min
分号截断
vulny靶机---难度easy知识点-file-manager
·78 words·1 min
Wordpress
Locker靶机---难度easy知识点-分号截断,Sulogin
·150 words·1 min
Sulogin
observe靶机---难度low知识点-fuzz-ln
·49 words·1 min
Fuzz Ln
flower靶机---难度low知识点-base64-py
·63 words·1 min
Base64 Python
mixue靶机---难度群友知识点-logic-monitor.我冰城呢
·51 words·1 min
Logic Monitor
ximai靶机---难度LOW-easy-知识点-wp-sqlmap-wpplugin
·154 words·1 min
Wordpress Sqlmap
受益匪浅translate靶机---难度LOW-easy-知识点-tmp-定时任务-socat
·77 words·1 min
Tmp 定时任务 Socat
大窑dayao靶机---难度LOW-知识点-tftp-udp-定时任务
·64 words·1 min
Creatab Tftp
connection靶机---难度LOW-知识点-smb-enm4linux
·50 words·1 min
Smb
baseme靶机---难度LOW-知识点-爆破ssh密钥-base64语法-
·95 words·1 min
Ssh2john Base64
VUlNyx-infected靶机---难度LOW-知识点-backdoor-module
·43 words·1 min
Module
Vulnyx-agent靶机-LOW-知识点-Agent-dirb工具
·66 words·1 min
Agent Dirb
群友Qingmei靶机-LOW-知识点-SSH
·75 words·1 min
SSH
Commit靶机---难度LOW-知识点-bash_history
·58 words·1 min
Bash_history SSH
Loower靶机---难度LOW-知识点-SSH观察
·26 words·1 min
SSH