秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

发表于2024-11-04|代码审计

4bce324aa22e41b6b3b642ce4036862553ee4312530e4f54a60a4800d824c3a87e412d4bd4afeb605bd8e79b182e1f3c9ac1d7f727e618056634ad05230772cd5de86386f2e9420a4bbbab18ac3dc1494f3ae27390cb14921628147025bb3fc8a292ae924300c866eb67d39a7de8eda738a700d1daee9ffd289229f248dc1b431169b1986ef801ccc688423ac47138f020e6668a1153efcff00ccff27dc04319a93c51cd383fc427bcb056a13dcaffdcfbed42ff0b7ca39c56092607e59c3e2722b32f6cfea456401996361ab4300ae6fc8a458940b19b3f81be0092a3f9c759a189a3fc00059cf9aae450a855f8e31a4cd5c39a15cce697b ...

Solon框架蚁剑内存马实现

发表于2024-09-13|web安全内存马

5747d2cb6b2247106e0a6c1198a33762b5da2781c7d8fe9dea4552daabc6df3a7ede0243f6e3166e29981efeed999fe33731a78cda396c7ea95c99be207ada0bd553ea7e50e6417151a4f9e68b08f0b1dcbc9f4a18c5806940163897f348f5671aa99044bfd9414d7462e949f13adbfc87a1a5051afe3d456d120b93c19cc5ccb6a7446d4e1bbcda85625d592657b0df44fc88253043de6aa6f5eaa254b47e1b6c11c1098a65c304314bb731194245fd0e35bb02b268eb1570c9d2927d2c8bad4e6ea0959657bc4b420cca616c431a75078271722e7945681b89fb50e5cfa22bd8bd46dec560dfb163142f288f79f66eccb4a23a48c2f589c ...

php文件包含场景总结

发表于2022-10-20|web安全

2921bea4039503163809a9bb827365a17acbf0997b53b5f0d512eb17ede7580275693eb191ba140979fc59f24c9dfdb670b46c8d2e6565c3582c66547713ac71daa6cf3b13075a9164ade1624ca3068a30b7aeacce82374e19e7ad0535e5fd8a87c31f608d3f2b2f71abb5f24394adfc5e6952567ca9ab99eb9cab4b0678525ec29fdc8d444a15e03c9735a2c00dddcfb67b4eee15f53b178723d0098099e59d5f33dcdf32f2a3a3b6d1914e7c7de538aeba752e321c21cdf531f5971f1612bf58a2ca4c01a0feac2f64ef0384832cc9c2aa22df97986581a0708213545484774545ee98d69c6315a5bc2762a38fa931deee25524470aead7 ...

thinkphp中一些利用点

发表于2022-10-20|web安全

2921bea4039503163809a9bb827365a17acbf0997b53b5f0d512eb17ede7580275693eb191ba140979fc59f24c9dfdb670b46c8d2e6565c3582c66547713ac71daa6cf3b13075a9164ade1624ca3068a30b7aeacce82374e19e7ad0535e5fd8a87c31f608d3f2b2f71abb5f24394adfc5e6952567ca9ab99eb9cab4b0678525ec29fdc8d444a15e03c9735a2c00dddcfb67b4eee15f53b178723d0098099e59d5f33dcdf32f2a3a3b6d1914e7c7de538aeba752e321c21cdf531f5971f1612bf58a2ca4c01a0feac2f64ef0384832cc9c2aa22df97986581a0708213545484774545ee98d69c6315a5bc2762a38fa931deee25524470aead7 ...

showdoc代码审计

发表于2022-10-20|代码审计

2921bea4039503163809a9bb827365a17acbf0997b53b5f0d512eb17ede7580275693eb191ba140979fc59f24c9dfdb670b46c8d2e6565c3582c66547713ac71daa6cf3b13075a9164ade1624ca3068a30b7aeacce82374e19e7ad0535e5fd8a87c31f608d3f2b2f71abb5f24394adfc5e6952567ca9ab99eb9cab4b0678525ec29fdc8d444a15e03c9735a2c00dddcfb67b4eee15f53b178723d0098099e59d5f33dcdf32f2a3a3b6d1914e7c7de538aeba752e321c21cdf531f5971f1612bf58a2ca4c01a0feac2f64ef0384832cc9c2aa22df97986581a0708213545484774545ee98d69c6315a5bc2762a38fa931deee25524470aead7 ...

可道云另一种RCE利用

发表于2022-10-20|代码审计

2921bea4039503163809a9bb827365a17acbf0997b53b5f0d512eb17ede7580275693eb191ba140979fc59f24c9dfdb670b46c8d2e6565c3582c66547713ac71daa6cf3b13075a9164ade1624ca3068a30b7aeacce82374e19e7ad0535e5fd8a87c31f608d3f2b2f71abb5f24394adfc5e6952567ca9ab99eb9cab4b0678525ec29fdc8d444a15e03c9735a2c00dddcfb67b4eee15f53b178723d0098099e59d5f33dcdf32f2a3a3b6d1914e7c7de538aeba752e321c21cdf531f5971f1612bf58a2ca4c01a0feac2f64ef0384832cc9c2aa22df97986581a0708213545484774545ee98d69c6315a5bc2762a38fa931deee25524470aead7 ...

PHP反序列化中的__wakeup绕过问题

发表于2022-10-09|web安全反序列化

e230280488b28b685a0cc9c1cbc61041e863dc6931bacd10564b7e88568e4bfa46dfa5b6a9dca38947b4a17080618cb5c19b368e4609dfd187416c9ae86d24d4cc83eda15924e5cc7e9cec70699f6efc5dddc6ace3e64748656e0345c5cc3f862d4e72233906d23fbda5d0085565b048efcb55c398592cc1417e86870b412cd9f8cf184fbe31c2d20607c9521b0d5eff18cb8810691ca88337b008848e73527370f0b66d0a301025745f1710623e28d90bb3424f2dae6ecad6e66534f236e534832cf1194552f296d44c0e9ef60f6ef148f27916a990eccea7454bf1257e84879b8f4644ea13e7f6bdc0448f27060aa9c5391fbd55b878629 ...

迅睿cms前台rce分析复现

发表于2022-10-08|漏洞复现

d2dc4dad36fe4d27adf71a6cedeb726158f0ab90042ef505465c2ff0d6f945ec9260d4714eb92385bb757ad94ff45554e3cd7279db34905ba807abeddac334145ecae49b779a0abbc2c776a663576d301dcdfb94767692464a57b384ccb9c7b171589acee295a5dfded4ba9812ca32849714b41bca6cf5c59a3152523b63864bff948d6ff678c1918104dceb03fb053a2fd941c60d2f450dbeb3392e55d4e9f937ac6f7a55d09869decb0ad7a79863135f1b19b4e0b58868d6e0a3f15a30edc9be3316fdf72da5d328f4accfcfda418e504c5e0e87dd3113e659c47286e4548f7a128f762530a5a546b3610515af64bef326e92bcbd8a33db ...