秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

DNS域传送漏洞

发表于2022-04-10|基础知识dns域传送

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

udf提权源码

发表于2022-04-10|web安全MySQLudf

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

udf提权复现

发表于2022-04-10|web安全MySQLudf

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

MySQL任意文件读取

发表于2022-04-10|web安全MySQL任意文件读取

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

简单的xss绕过

发表于2022-04-10|web安全绕wafxss

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

PHPMailer漏洞

发表于2022-04-10|web安全php第三方库PHPMailer

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

webuploader组件上传漏洞

发表于2022-04-10|web安全php第三方库webuploader

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

php伪协议绕过exit

发表于2022-04-10|web安全php伪协议

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...