秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

e-office10后台漏洞

发表于2022-06-28|代码审计

ce3fee5090681b453fc3978c1207adafcff2bd28db9d88be3b3a4b37c8876c7e121ff41d7e685f4a3e364efad00aee016bf97688e402f009b19d7ec63fc70a5e3d79948850f62d36233d51de8ea46e65e1bb8980f46189019dbea8a3693130ac27d8fd33aa1ad781e2bb76d29a39304cd8755816e4603c6ad9e6b56e82f5f9535b33464fe642d8d9213a9b0d03413fec2a2a15fcfd387d40a90b34635eeefcf51e5b1069a6d107c5137e7868b577bbeb829e8fcfa8e9f09891ddb1af2e8027877ff83885efa45246eea724d93b3e1a385ceefb1211f27a373e3b8afeb8e2eac7244e6dfe7220be264afb561aa5a803ff744d95cf6fae1079b ...

eoffice10最新版RCE利用

发表于2022-06-28|代码审计

ce3fee5090681b453fc3978c1207adafcff2bd28db9d88be3b3a4b37c8876c7e121ff41d7e685f4a3e364efad00aee016bf97688e402f009b19d7ec63fc70a5e3d79948850f62d36233d51de8ea46e65e1bb8980f46189019dbea8a3693130ac27d8fd33aa1ad781e2bb76d29a39304cd8755816e4603c6ad9e6b56e82f5f9535b33464fe642d8d9213a9b0d03413fec2a2a15fcfd387d40a90b34635eeefcf51e5b1069a6d107c5137e7868b577bbeb829e8fcfa8e9f09891ddb1af2e8027877ff83885efa45246eea724d93b3e1a385ceefb1211f27a373e3b8afeb8e2eac7244e6dfe7220be264afb561aa5a803ff744d95cf6fae1079b ...

E-Office9代码审计

发表于2022-05-24|代码审计

24514493f6a05cc2c3daf94844337846fd57b834ed2d107eb8e71c01ea21ee772ec1418158a02447ad21e2a292fdf5ab645bb239e625b97c1105d5783c1555d59378c22243ebf1f471833d86b6685174cfcd779d401ec501825d30d9da455d14f8aae4ce3e868d62b2fb78e3764f1ca483d1ec5cb4be43f1d27f867a836f1f4a28db3e8813c3e01a9c86c5a922855b6571d507f997fe6d7c6d073baaffda815fd252d7fbf501ac20d2b12c8f15237654bdef15f2b845edb6a05e970067b379e8f3e269ac631d9da35a77811d4451ada4cb8684282c516066ec072389e100c6d8ca78351763234582197679da52a109617d01540ab583e70f9 ...

Laravel的debug模块

发表于2022-05-17|web安全框架

2da42106d71b08515db4405cf5360aaba569db2e6a6ee65e4fe68ef99b5b38a111311b313a30be8df44e0ef42a68b52ae4a148a3265337a1673bd0ce35975fa24be6c33d9c2f80740118f167caaf8e458ea41b655e98bf4e75cf5bf5d0b71cc68c16a21f1c34ef9b004ca31e1b41b01da61d8ccae8b9246e5d8969c17e046a2abfe6efb6991ee36c9b0b27f94e692f37451506fefc3813618e0f7b8cec3b47ab0730a5f7254789bd3764fb5b809bb881edd5b51003968b14adf90ec81af14b8a7718b9c8331d92cb7d4e2baf1be1c35d1005c3d95cfa867381ab9200274afe4bf969b0e73fae2a9edb9f5af2185c7039c2deb503a02e80cb4 ...

Laravel中的where条件

发表于2022-05-17|web安全框架

2da42106d71b08515db4405cf5360aaba569db2e6a6ee65e4fe68ef99b5b38a111311b313a30be8df44e0ef42a68b52ae4a148a3265337a1673bd0ce35975fa24be6c33d9c2f80740118f167caaf8e458ea41b655e98bf4e75cf5bf5d0b71cc68c16a21f1c34ef9b004ca31e1b41b01da61d8ccae8b9246e5d8969c17e046a2abfe6efb6991ee36c9b0b27f94e692f37451506fefc3813618e0f7b8cec3b47ab0730a5f7254789bd3764fb5b809bb881edd5b51003968b14adf90ec81af14b8a7718b9c8331d92cb7d4e2baf1be1c35d1005c3d95cfa867381ab9200274afe4bf969b0e73fae2a9edb9f5af2185c7039c2deb503a02e80cb4 ...

lmxcms代码审计

发表于2022-05-13|代码审计

e650f393a0e038006a140d2c8b65123db32d0c1d68bfff3c8355cdb06635eac1c429475738fb00ed7ad9ff890b48b9234dd25e4fc24c2cf870c871633dfbc1ec7181decc4900006b8e337fe4550282eef81f6a7b92d16c25170c2253332fcbaf57e51f043dca49718f49def7b5f93ee0335c7899a05af1317b706411214731e6e602bafac6eef5cff2411ccbe0f0b36236ac1f885b72776ce454b907866e9b8c27c7b0ed2333455d14d5b28c223db3ec9a8feb24455c49e146611488ea245b5d50601ca49e3c0eab84ff6d9c8104f4f9af05e3db78d8dbee417cc0dd2227dde44ea269979cd0d7fcc740c244f19636e05605061d06942c335 ...

MD5算法及hash扩展攻击

发表于2022-05-12|web安全加解密

d08a5db64652e447289fd80d5acb37805f71847a5891c11f0ad67f947bbc09117c620fb389db38efe6578ecafbb1f380542afa95b278434bbce9d87a7f66ec97edd40abe3897c40edb7c397eef991c98e38038bc1e746c15a03b7f7b2003ee87efa62f8c9c6072977b5b74403a4a0aefe76c18ec85ca102b76e038eed282798b68301836b3a4e887be81e5391c59b2e980543842c158d364051ed38010ce0b430914c46046be60396ade626f0e84464ec1ee16d08f8a618cbce484d8f3035dfa0b0170d2121ee4c8f9c203412e5e158195ed4c13dc514c77d6abd520a9d75341748c5b07d68365f458b26b37fdf1189d4c9e0a93e668dd3d7 ...

绕D盾和百度在线查杀

发表于2022-05-12|web安全绕waf

d08a5db64652e447289fd80d5acb37805f71847a5891c11f0ad67f947bbc09117c620fb389db38efe6578ecafbb1f380542afa95b278434bbce9d87a7f66ec97edd40abe3897c40edb7c397eef991c98e38038bc1e746c15a03b7f7b2003ee87efa62f8c9c6072977b5b74403a4a0aefe76c18ec85ca102b76e038eed282798b68301836b3a4e887be81e5391c59b2e980543842c158d364051ed38010ce0b430914c46046be60396ade626f0e84464ec1ee16d08f8a618cbce484d8f3035dfa0b0170d2121ee4c8f9c203412e5e158195ed4c13dc514c77d6abd520a9d75341748c5b07d68365f458b26b37fdf1189d4c9e0a93e668dd3d7 ...