秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

从一道题简单理解csp

发表于2022-04-10|web安全xsscsp

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

phar反序列化及一些场景

发表于2022-04-10|web安全反序列化phar

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

php中throw异常的问题研究

发表于2022-04-10|web安全反序列化

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

php构造pop时用到的一些特性

发表于2022-04-10|web安全反序列化pop

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

SplDoublyLinkedList绕过disable_function

发表于2022-04-10|web安全UAF绕disable_function

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

基于MySQL的Phar反序列化

发表于2022-04-10|web安全反序列化phar

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

基于无上传的Phar反序列化的利用

发表于2022-04-10|web安全反序列化phar

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...

记录一次登录绕过的代码研究

发表于2022-04-10|web安全代码审计登陆绕过

8b3178139940b56a25fe5cc1ec4c9ec63025b65d0cda093f427054e78a5f3f45c86f74a6993fffed1570aa42ebfd89876f4bab4f670b056450d3776487cc5122c2c44747b2e9bb66bf49f48daf5ea3809eb0e4bca82d00734c1e1b35beca43e96a4b7008211b291f7fcdcb2c918fdf24804de77f193ec1bb1a44d529e8d0e62dc9ac1d1266056b310527fe807fbecdf127462cb0304c41fc7a966a16b899f2f62c48b0dede720c8b2bd4593db4e11ee69a87dd731724fafa8a5f6a854e81955d9a5f504e8bed3b90e3bf97416ac377d8c4db8704368cd2db6e97f688a36c4694d190c7b432f237c0c3731cb8a8aeb65490fd5d8d59c57b2be ...