秋水的博客

php文件包含场景总结

thinkphp中一些利用点

showdoc代码审计

可道云另一种RCE利用

Solon框架蚁剑内存马实现

TelePort代码审计

Composer简单使用

发表于2022-04-19|基础知识环境搭建

bad2ce6c4900237e1fdbaa4d463c720bbda647ee2a6b6ad252d7793e6ed7b3641a2f3d341ae09eb54f252680a143873e1de53af4c670bda4735b35cd89c06c00d1d8a947d5e92e8b6bf8472654c85e1651982384b4411a415f588c910f628ecd06bec3aba2854ccc5265448e3b3c6836a3c0280483fb237084a5c82095ae9373dc3030894d6704c9f8c2081c58e90493cf9c1104386c24cddd2b34f2202a749ed703f7e5a1e12684906f3f11e230e85b750a6d04741f385072ed63f7742cebd229a606078e444fc95ad5c33a4c5cd81155a277099fb1b76b469382e9d6b96b11a3846e45d22ec7a1779672601d439f2928644c936b4546d9f ...

dompdf漏洞分析及进阶利用

发表于2022-04-19|web安全php第三方库

bad2ce6c4900237e1fdbaa4d463c720bbda647ee2a6b6ad252d7793e6ed7b3641a2f3d341ae09eb54f252680a143873e1de53af4c670bda4735b35cd89c06c00d1d8a947d5e92e8b6bf8472654c85e1651982384b4411a415f588c910f628ecd06bec3aba2854ccc5265448e3b3c6836a3c0280483fb237084a5c82095ae9373dc3030894d6704c9f8c2081c58e90493cf9c1104386c24cddd2b34f2202a749ed703f7e5a1e12684906f3f11e230e85b750a6d04741f385072ed63f7742cebd229a606078e444fc95ad5c33a4c5cd81155a277099fb1b76b469382e9d6b96b11a3846e45d22ec7a1779672601d439f2928644c936b4546d9f ...

Symfony框架的研究与利用

发表于2022-04-15|web安全框架

f4d70e2f346df27b323beac7e5deb149e66271efda772f6974178c893e02481048ff0e73771763077c14fc4222c9a7f3f70a22b7923d1a1f8eeffeee2af16890e302c9007231e31360a7aabdae903813976a864e7bbcf9ca26a89df79298f64a8fa9a17a1536c1b657bb8d24cac2e2de5540e30e097a6de82df54b50d32332fa78facc82295c0a53d68455f45296f5eb5371863bf19072e00bd4e545a0ad2f908e4d816792dbc40c9ff0c3f44e44a26880b0ea326f06ef7803f71765aa889916bd69093a5e55f92137562b30158e5590e3f10b254a7a967815664d7f44a2ff1e01b39d32eef00df93bb24897fc1ce647c2ebff55648628582 ...

MySQL报错注入

发表于2022-04-15|基础知识webSQL注入

f4d70e2f346df27b323beac7e5deb149e66271efda772f6974178c893e02481048ff0e73771763077c14fc4222c9a7f3f70a22b7923d1a1f8eeffeee2af16890e302c9007231e31360a7aabdae903813976a864e7bbcf9ca26a89df79298f64a8fa9a17a1536c1b657bb8d24cac2e2de5540e30e097a6de82df54b50d32332fa78facc82295c0a53d68455f45296f5eb5371863bf19072e00bd4e545a0ad2f908e4d816792dbc40c9ff0c3f44e44a26880b0ea326f06ef7803f71765aa889916bd69093a5e55f92137562b30158e5590e3f10b254a7a967815664d7f44a2ff1e01b39d32eef00df93bb24897fc1ce647c2ebff55648628582 ...

探索支付漏洞

发表于2022-04-15|web安全逻辑漏洞

f4d70e2f346df27b323beac7e5deb149e66271efda772f6974178c893e02481048ff0e73771763077c14fc4222c9a7f3f70a22b7923d1a1f8eeffeee2af16890e302c9007231e31360a7aabdae903813976a864e7bbcf9ca26a89df79298f64a8fa9a17a1536c1b657bb8d24cac2e2de5540e30e097a6de82df54b50d32332fa78facc82295c0a53d68455f45296f5eb5371863bf19072e00bd4e545a0ad2f908e4d816792dbc40c9ff0c3f44e44a26880b0ea326f06ef7803f71765aa889916bd69093a5e55f92137562b30158e5590e3f10b254a7a967815664d7f44a2ff1e01b39d32eef00df93bb24897fc1ce647c2ebff55648628582 ...

正则回溯机制

发表于2022-04-14|web安全绕waf

596973b89e0150f5241b97a9c6ca672dc7b43c127bb3c96048805fb6d330ec5fc5fe1e82f86ecc0d82572691ec78547536920ca1bc5ca137f6a09bda5253d84ed5da86bfa25f0df81f1470aec18a15e171791bd69d53bbee2adcef8e219cfb1f4a188d8f25a290c726925c04381067c2a7493000402d5abf585fe365e7ada0dfd0e1c92c4c43d20a7ebd7a5626039907a9742c266efda4459b0fba4cc1c52ec9ca46c0e30e11bb5c96786b98c4c6cc34be03b823362e4e2906df42e6981ff92cef2548f7cefe10b5d146757cb1abfcfd6e09b76852ef23caf1731aaa84f75071a426ad0870cff74abfd60616f522982826f229c5b61b61473 ...

Symfony搭建与创建新页面

发表于2022-04-14|基础知识环境搭建

596973b89e0150f5241b97a9c6ca672dc7b43c127bb3c96048805fb6d330ec5fc5fe1e82f86ecc0d82572691ec78547536920ca1bc5ca137f6a09bda5253d84ed5da86bfa25f0df81f1470aec18a15e171791bd69d53bbee2adcef8e219cfb1f4a188d8f25a290c726925c04381067c2a7493000402d5abf585fe365e7ada0dfd0e1c92c4c43d20a7ebd7a5626039907a9742c266efda4459b0fba4cc1c52ec9ca46c0e30e11bb5c96786b98c4c6cc34be03b823362e4e2906df42e6981ff92cef2548f7cefe10b5d146757cb1abfcfd6e09b76852ef23caf1731aaa84f75071a426ad0870cff74abfd60616f522982826f229c5b61b61473 ...

天擎研究

发表于2022-04-13|代码审计

e48c74ccdfda8d369b7c129066a7bda2651fd1b6c23d0d18e6a63f266f904b7a3509f031bae8d8323ee9e4018c2586855890468172bd93939f06426d0efb452eb9590e03a1f53cbc83d088f2546401287975f1f84520c997c48bdc748dbf24d50749d89447026f55f3a12c2c4848d3c30857a276db83d6bd44ba43a267036b6ee39a5c8aae6cdc32b55100ea0b4431e2555688c6c42b49b0c4014fa20994411c5c16699bb2e661a31f6509dfa13b692b1d002cbe2f2b44c46e8883dcd55cc135ce0cdc8c5439274c2fdd15e81b95072e7c2255e253363e93b7956eec4f8e30ab2c7fec7fd441170bcd2d956a4bf9af8d66de6faa410dc63f4 ...