秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

F5 BIG-IP iControl REST未授权远程命令执行漏洞分析(CVE-2021-22986)

发表于2022-05-10|漏洞复现

13a0d9c723c7bb3295974408c964b176563f4ef4883f4d0fe7db763499f8037f4ac2c81fb03b7f7dbdeb62db0b9e9284830a2de4778e8ecff4c15c4297ac594fe3c604597f558518d023f46ee598419c2ff89527135fe00d0b1def9e5bec38dae8bdddea75ae803bd236d43837703ce7e7d0d48e5742f072feda1de44b3c25c422c3ed3cf595e13c782a0ef537b0ebb9a0266a81faa410171fd6be9934b7ef03e3a5581788a4ac06760135fb47dddabc97323a3f9dc7cc0d0c8b29530244366b284e110f02f09eb74b41506cc9e0c6f3aa09c117a7834239e038f38422e9cfd21613d2efa8743cb2363e351c023d67db39ffd9cdd88eabdf8 ...

F5 BIG-IP iControl REST未授权远程命令执行漏洞分析(CVE-2022-1388)

发表于2022-05-10|漏洞复现

13a0d9c723c7bb3295974408c964b176563f4ef4883f4d0fe7db763499f8037f4ac2c81fb03b7f7dbdeb62db0b9e9284830a2de4778e8ecff4c15c4297ac594fe3c604597f558518d023f46ee598419c2ff89527135fe00d0b1def9e5bec38dae8bdddea75ae803bd236d43837703ce7e7d0d48e5742f072feda1de44b3c25c422c3ed3cf595e13c782a0ef537b0ebb9a0266a81faa410171fd6be9934b7ef03e3a5581788a4ac06760135fb47dddabc97323a3f9dc7cc0d0c8b29530244366b284e110f02f09eb74b41506cc9e0c6f3aa09c117a7834239e038f38422e9cfd21613d2efa8743cb2363e351c023d67db39ffd9cdd88eabdf8 ...

XXE漏洞

发表于2022-05-09|基础知识webxxe

209ca67dc642adf151b11ef6be36af19f6eb7849cc81ca08bcab8cbafe310d427fc3de091168e384564dd1d567989366c5ae36a0ddaa07688784a421c0c57a06e8e3ee0fcf0be86b8a20f91fa65bf1b754a1ef0fee06631d3d8c1561cf0e5c659b017ba4165987e34554c0cd0e336a9e8ba2198a27be7b947b355ce44b103dd6e5fb7fee36662de936803808592fed73a252b87593da6dc5288107c86165fe6ae14fa845f89e044f2c8ba170901d64406ded0cd2869b8e436fef018a25338aeca044df2e244a8baf8d14b9f1da3fda820cab921023cd88ebde0f4d23411a4c607491a2f4a700f9c5c903abe58668d5153a9423947f6936e6e ...

搭建Springboot环境

发表于2022-05-09|基础知识环境搭建

209ca67dc642adf151b11ef6be36af19f6eb7849cc81ca08bcab8cbafe310d427fc3de091168e384564dd1d567989366c5ae36a0ddaa07688784a421c0c57a06e8e3ee0fcf0be86b8a20f91fa65bf1b754a1ef0fee06631d3d8c1561cf0e5c659b017ba4165987e34554c0cd0e336a9e8ba2198a27be7b947b355ce44b103dd6e5fb7fee36662de936803808592fed73a252b87593da6dc5288107c86165fe6ae14fa845f89e044f2c8ba170901d64406ded0cd2869b8e436fef018a25338aeca044df2e244a8baf8d14b9f1da3fda820cab921023cd88ebde0f4d23411a4c607491a2f4a700f9c5c903abe58668d5153a9423947f6936e6e ...

通达oa11.10后台getshell归纳

发表于2022-05-07|代码审计

68c0ab944679ccbf19ca43c23ad73895ef6bdca75b3fa4f96de4dc1d8fa7646bba6457390d774ecc69f2b57c954cadac9d75d370512c002f8f544ca620d2389d2afd3f2ce5551146c091ff882d1593d6d0bba027729ca569aebf9338ca4f5f3578de4d51c98215fca1d610fcc308095369fff9c465c5fa3fbb1bef6bc63500ddb3d49b3079dc5257ca0f0013882af054e6b4b8edf99b082ec19bbb5c528dcba9eb28651d69fe3b993fc9fc87de6fd591148a22335fab903a182f0d45a092ecaa455a1d4c548c4fc266fad78f4d9ab158f577307b1957aa1c8be97885fb717ae504d40dffe4822694b98fa7a19faf18e9e35ae3cb9921d1b9f ...

通达oa11.10前台其他问题

发表于2022-05-05|代码审计

c281b801b7d68691c39b480bc3416051a61ca025d8b2e18fcba46232f9ece32dd87907987dc58c56b59460a96ffc0ddc1cdce7d308c93bbef61b55ce0972ab94186683915d8ae6654da34259c1b85b6df5a3ce584523a377a24589d9d48cf969cdcc74ed32c768c6349ece466439399d7e92e8fb3c8ab0138248598ca89650e78eb3bf3a2a1ef5808d4cb49355e4916dd7fdfd7a532faf09cf1e5f0e9e3b309077f92039e507d5d223e55ce87ceeef4dbdb75cec3cf50b7c805a0c9e140b13f4d5d92fc8bb6d7efa8fd5b4f8574f7bda39383d937c8c75009a8d683e5059a7b8025da150436e21e1445af8c23491ad54e2b56aa0984b312f4 ...

通达oa11.10前台rce-1

发表于2022-05-03|代码审计

91a422660214b3b201ab07b830d5381ad88e12348486351f6c207d99598a0c501113e005a109ad62e057b4645798cdbd8a1451ec6e2ab1caec28b130996c9dc18bfb620376983a8ae201352aa9b2feff4287a7dc5dec66ad3c6429cabc50abeaa36215c2c590219a996ebf3aa2a54ecd3811a68afe95402d4a3c5096795991349b3c47f0c4b1ed4623df35e7490102cc43cd523219971789cda1a6e15503a3d34c4ff777d2e26eedfe314bcc60aa98f7ee76c5fc738421c70c04e74587ab364fc6091bae208abe3e2ae65a7c30fb479b00d1f6be57182d51758a0ddc954a66e41b9bc7a7a24bd96a762d6e9c742982e2ca52d9bd6094d41db ...

通达oa11.10前台rce-2

发表于2022-05-03|代码审计

91a422660214b3b201ab07b830d5381ad88e12348486351f6c207d99598a0c501113e005a109ad62e057b4645798cdbd8a1451ec6e2ab1caec28b130996c9dc18bfb620376983a8ae201352aa9b2feff4287a7dc5dec66ad3c6429cabc50abeaa36215c2c590219a996ebf3aa2a54ecd3811a68afe95402d4a3c5096795991349b3c47f0c4b1ed4623df35e7490102cc43cd523219971789cda1a6e15503a3d34c4ff777d2e26eedfe314bcc60aa98f7ee76c5fc738421c70c04e74587ab364fc6091bae208abe3e2ae65a7c30fb479b00d1f6be57182d51758a0ddc954a66e41b9bc7a7a24bd96a762d6e9c742982e2ca52d9bd6094d41db ...