秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

通达oa11.9前台rce-2

发表于2022-05-03|代码审计

91a422660214b3b201ab07b830d5381ad88e12348486351f6c207d99598a0c501113e005a109ad62e057b4645798cdbd8a1451ec6e2ab1caec28b130996c9dc18bfb620376983a8ae201352aa9b2feff4287a7dc5dec66ad3c6429cabc50abeaa36215c2c590219a996ebf3aa2a54ecd3811a68afe95402d4a3c5096795991349b3c47f0c4b1ed4623df35e7490102cc43cd523219971789cda1a6e15503a3d34c4ff777d2e26eedfe314bcc60aa98f7ee76c5fc738421c70c04e74587ab364fc6091bae208abe3e2ae65a7c30fb479b00d1f6be57182d51758a0ddc954a66e41b9bc7a7a24bd96a762d6e9c742982e2ca52d9bd6094d41db ...

通达oa11.9前台rce-3

发表于2022-05-03|代码审计

91a422660214b3b201ab07b830d5381ad88e12348486351f6c207d99598a0c501113e005a109ad62e057b4645798cdbd8a1451ec6e2ab1caec28b130996c9dc18bfb620376983a8ae201352aa9b2feff4287a7dc5dec66ad3c6429cabc50abeaa36215c2c590219a996ebf3aa2a54ecd3811a68afe95402d4a3c5096795991349b3c47f0c4b1ed4623df35e7490102cc43cd523219971789cda1a6e15503a3d34c4ff777d2e26eedfe314bcc60aa98f7ee76c5fc738421c70c04e74587ab364fc6091bae208abe3e2ae65a7c30fb479b00d1f6be57182d51758a0ddc954a66e41b9bc7a7a24bd96a762d6e9c742982e2ca52d9bd6094d41db ...

基于通达2015的一个有趣的漏洞

发表于2022-04-30|web安全

e0b118e3de0e42d016a71340ac565231955ac35fca391ef896e7a05ef3d357c3ac2e9ab55a42495536e6795e9775dfd7ffc38f0d74e9f9b68fe62dccbe493e643186c74835608958c562d58adc59c6ea356606b8393737b9de2891b674247d262fe13c2bef683b5c0a3a8c1546c70442f5639b4eb0a8eb114b352ed3e99d7ae670caff20f2a36316c0d03514559dd1c492837015120c7c26bb1606c2d5cfde8ec86ea35f576cc49f87ba215a79840b57978464eb8c0c2a6dd942e7d8fd4c8a5dbea962c4b5ee86bc3f418a6c365a17b4caffd0aaed7016b69cb6934e4a8c29bcb52d6958b51b3ac931cc5cd294679922d4dba18fe8ad7697d ...

通达OA2013漏洞整理

发表于2022-04-30|代码审计

e0b118e3de0e42d016a71340ac565231955ac35fca391ef896e7a05ef3d357c3ac2e9ab55a42495536e6795e9775dfd7ffc38f0d74e9f9b68fe62dccbe493e643186c74835608958c562d58adc59c6ea356606b8393737b9de2891b674247d262fe13c2bef683b5c0a3a8c1546c70442f5639b4eb0a8eb114b352ed3e99d7ae670caff20f2a36316c0d03514559dd1c492837015120c7c26bb1606c2d5cfde8ec86ea35f576cc49f87ba215a79840b57978464eb8c0c2a6dd942e7d8fd4c8a5dbea962c4b5ee86bc3f418a6c365a17b4caffd0aaed7016b69cb6934e4a8c29bcb52d6958b51b3ac931cc5cd294679922d4dba18fe8ad7697d ...

E-Office10代码审计

发表于2022-04-29|代码审计

5e791c84d42d263314c3305d2b71d4f5256df7d6b353605725ed89c7fb8197bd29c6c1b7085d1067f152d7cc1fe243b0afa11291c00e6b715b39e19643147e5328c660c296ec6ca39134a0de55e9fbc8e13f9b534112e61f637b1f9d7525f149c11451582e348157a7eb1f54a1d79c073469f4cdd1c6c25c694c9ca4b7ee5a9b901ad1c5363a6d1539ebf765832956c376c6b7b6ae89e97951a980abd5e1b94fe5a9430f9257e4e9299091e6f5b53e6bb5f8c672fd79530512effd314b029ee79d3fab2bd88d1292b933b55d3cf48f5b476c966377ca717b5a6a13568ceb62e6b33b0f9b4f8c44037359f605242242624a12f21226a6ac0c0 ...

冰心网络验证系统代码审计

发表于2022-04-28|代码审计

aa341060ce431fb38adba272c94469ab7b964d5dca250fd7df80ee1afd72a959dc08492df6e79ed4c7a7a53881ad2c7d0349b4b1d645db300bb69c3f6f27b2fde22469a9d79fd87ff68f9724738ae3fc70d849bff78844c79c2da53fea48143ed895c55685834fd97d515007b37a29f1cdfb91ca831ad83e004bce2e8c0aa138c740d6b587867be2bf7548e31a624103065fd142a52bf31af602df9a66959c00038cbe3a2d1d41fa20b261ce881a13b0094a765f368eec286fe0f1c197bf98717f769230930c58e1de534bae546ecffea819de348b1397ed1dc46b2a59158b1de0fc96d18cccb1ceeeca19bf127290156f58567cb33d77979 ...

VSCode调试PHP代码

发表于2022-04-28|基础知识环境搭建

aa341060ce431fb38adba272c94469ab7b964d5dca250fd7df80ee1afd72a959dc08492df6e79ed4c7a7a53881ad2c7d0349b4b1d645db300bb69c3f6f27b2fde22469a9d79fd87ff68f9724738ae3fc70d849bff78844c79c2da53fea48143ed895c55685834fd97d515007b37a29f1cdfb91ca831ad83e004bce2e8c0aa138c740d6b587867be2bf7548e31a624103065fd142a52bf31af602df9a66959c00038cbe3a2d1d41fa20b261ce881a13b0094a765f368eec286fe0f1c197bf98717f769230930c58e1de534bae546ecffea819de348b1397ed1dc46b2a59158b1de0fc96d18cccb1ceeeca19bf127290156f58567cb33d77979 ...

PHPStorm调试PHP代码

发表于2022-04-28|基础知识环境搭建

aa341060ce431fb38adba272c94469ab7b964d5dca250fd7df80ee1afd72a959dc08492df6e79ed4c7a7a53881ad2c7d0349b4b1d645db300bb69c3f6f27b2fde22469a9d79fd87ff68f9724738ae3fc70d849bff78844c79c2da53fea48143ed895c55685834fd97d515007b37a29f1cdfb91ca831ad83e004bce2e8c0aa138c740d6b587867be2bf7548e31a624103065fd142a52bf31af602df9a66959c00038cbe3a2d1d41fa20b261ce881a13b0094a765f368eec286fe0f1c197bf98717f769230930c58e1de534bae546ecffea819de348b1397ed1dc46b2a59158b1de0fc96d18cccb1ceeeca19bf127290156f58567cb33d77979 ...