/posts/CISCN-2020%E5%88%9D%E8%B5%9B-writeup-web%E9%83%A8%E5%88%86/ 2020-08-25T16:20:23+00:00 /posts/sqlmap-%E8%A7%A3%E5%86%B3sqli-labs/ 2025-04-07T01:04:22+00:00 /posts/phpmyadmin-%E5%90%8E%E5%8F%B0-getshell-%E5%8F%8A%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8%E6%80%9D%E8%B7%AF%E6%95%B4%E7%90%86/ 2025-04-02T00:46:04+00:00 /posts/VolgaCTF-2021-Qualifier-writeup/ 2025-04-02T00:46:04+00:00 /posts/JWT-jku-x5u-Authentication-bypass/ 2025-04-02T00:46:04+00:00 /posts/BSides-Noida-CTF-2021-WriteUp-Web%E9%83%A8%E5%88%86/ 2025-04-07T01:04:22+00:00 /posts/CVE-2021-23419-open-graph-%E5%8E%9F%E5%9E%8B%E9%93%BE%E6%B1%A1%E6%9F%93%E5%88%86%E6%9E%90/ 2025-04-07T01:04:22+00:00 /posts/CommonsCollections1/ 2021-12-18T14:39:49+00:00 /posts/CVE-2022-22965-Spring-%E6%A0%B8%E5%BF%83%E6%A1%86%E6%9E%B6%E6%BC%8F%E6%B4%9E%E5%8E%9F%E7%90%86%E5%88%86%E6%9E%90/ 2025-04-07T01:04:22+00:00 /posts/Linux-%E6%8F%90%E6%9D%83%E4%BF%A1%E6%81%AF%E6%94%B6%E9%9B%86/ 2022-09-10T08:34:27+00:00 /posts/Juniper-Part-1-%E7%8E%AF%E5%A2%83%E6%90%AD%E5%BB%BA/ 2022-12-01T20:36:46+00:00 /posts/%E5%AE%9E%E7%94%A8%E8%B5%84%E6%BA%90%E6%94%B6%E9%9B%86/ 2023-02-28T20:05:38+00:00 /posts/Debug-php-with-vscode-in-remote-docker-container/ 2023-03-09T21:04:32+00:00 /posts/Code-Review-in-ASP-NET/ 2023-03-24T23:15:11+00:00 /posts/ChatGPT-Cyber-Security-Prompts/ 2023-03-31T10:27:33+00:00 /posts/DamCTF-2023-Writeup-Web/ 2025-04-07T01:04:22+00:00 /posts/Debug-python-with-vscode-in-remote-docker-container/ 2023-04-09T21:04:32+00:00 /posts/Debug-TypeScript-project-with-vscode/ 2023-04-18T03:07:39+00:00 /posts/PlaidCTF-2023-Writeup-Web/ 2025-04-07T01:04:22+00:00 /posts/python-%E6%B2%99%E7%AE%B1%E9%80%83%E9%80%B8%E5%8E%9F%E7%90%86/ 2025-04-07T01:04:22+00:00 /posts/pyjail-theory-01-%E5%86%85%E7%9C%81%E6%9C%BA%E5%88%B6/ 2025-04-07T01:04:22+00:00 /posts/pyjail-theory-02-%E8%AE%A4%E8%AF%86-sandbox/ 2025-04-07T01:04:22+00:00 /posts/pyjail-theory-03-%E9%80%83%E9%80%B8%E7%9B%AE%E6%A0%87/ 2025-04-07T01:04:22+00:00 /posts/Go-pongo-%E6%A8%A1%E6%9D%BF%E6%B3%A8%E5%85%A5/ 2025-04-07T01:04:22+00:00 /posts/python-%E6%B2%99%E7%AE%B1%E9%80%83%E9%80%B8%E7%BB%95%E8%BF%87/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-01-%E7%BB%95%E8%BF%87%E5%88%A0%E9%99%A4%E6%A8%A1%E5%9D%97%E6%88%96%E6%96%B9%E6%B3%95/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-02-%E5%AD%97%E7%AC%A6%E4%B8%B2%E5%8F%98%E6%8D%A2%E7%BB%95%E8%BF%87/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-03-%E7%BB%95%E8%BF%87%E5%91%BD%E5%90%8D%E7%A9%BA%E9%97%B4%E9%99%90%E5%88%B6/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-04-%E7%BB%95%E8%BF%87%E5%A4%9A%E8%A1%8C%E9%99%90%E5%88%B6/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-05-%E7%BB%95%E8%BF%87%E9%95%BF%E5%BA%A6%E9%99%90%E5%88%B6/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-06-%E5%8F%98%E9%87%8F%E8%A6%86%E7%9B%96%E4%B8%8E%E5%87%BD%E6%95%B0%E7%AF%A1%E6%94%B9/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-07-%E7%BB%95%E8%BF%87-audit-hook/ 2025-02-20T00:00:00+00:00 /posts/pyjail-bypass-08-%E7%BB%95%E8%BF%87-AST-%E6%B2%99%E7%AE%B1/ 2025-06-15T07:27:23+00:00 /posts/pickle-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87%E8%BF%87%E6%BB%A4/ 2025-04-07T01:04:22+00:00 /posts/php-%E6%97%A0%E5%8F%82%E6%95%B0RCE/ 2025-04-07T01:04:22+00:00 /posts/php-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%88%A9%E7%94%A8/ 2025-04-07T01:04:22+00:00 /posts/php-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%A0%BC%E5%BC%8F%E5%9F%BA%E7%A1%80/ 2025-04-07T01:04:22+00:00 /posts/php-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87/ 2025-04-07T01:04:22+00:00 /posts/php-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%AD%97%E7%AC%A6%E9%80%83%E9%80%B8/ 2025-04-07T01:04:22+00:00 /posts/php-phar-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%88%A9%E7%94%A8/ 2025-08-22T02:20:19+00:00 /posts/php-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%8E%9F%E7%94%9F%E7%B1%BB%E5%88%A9%E7%94%A8/ 2025-08-22T02:20:19+00:00 /posts/phpggc-thinkphp-%E5%88%A9%E7%94%A8%E9%93%BE%E5%88%86%E6%9E%90/ 2025-04-07T01:04:22+00:00 /posts/phpggc-thinkphp-RCE1/ 2025-04-07T01:04:22+00:00 /posts/phpggc-thinkphp-RCE2/ 2025-04-07T01:04:22+00:00 /posts/phpggc-thinkphp-RCE3/ 2025-04-07T01:04:22+00:00 /posts/phpggc-thinkphp-RCE4/ 2025-04-07T01:04:22+00:00 /posts/phpggc-thinkphp-FW1/ 2025-04-07T01:04:22+00:00 /posts/phpggc-thinkphp-FW2/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%86%85%E5%AD%98%E9%A9%AC%E5%9F%BA%E6%9C%AC%E5%8E%9F%E7%90%86/ 2025-04-07T01:04:22+00:00 /posts/Java-Tomcat-%E5%86%85%E5%AD%98%E9%A9%AC/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87%E9%9D%9E%E5%8E%9F%E7%94%9F%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%99%A8/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87-SerialKiller/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87-RASP/ 2025-04-07T01:04:22+00:00 /posts/Werkzeug-debug-%E5%AE%89%E5%85%A8%E9%97%AE%E9%A2%98/ 2025-04-07T01:04:22+00:00 /posts/SCTF-2023-Web-writeup/ 2025-04-07T01:04:22+00:00 /posts/php-%E5%8E%9F%E7%94%9F%E7%B1%BB%E5%88%A9%E7%94%A8/ 2025-04-07T01:04:22+00:00 /posts/Bash-jail-%E7%BB%95%E8%BF%87/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E7%9A%84%E5%87%A0%E7%A7%8D%E6%96%B9%E5%BC%8F/ 2025-04-07T01:04:22+00:00 /posts/Java-RMI-%E5%AE%89%E5%85%A8%E7%AC%94%E8%AE%B0/ 2025-04-07T01:04:22+00:00 /posts/Java-JNDI-%E5%AE%89%E5%85%A8%E7%AC%94%E8%AE%B0/ 2025-04-07T01:04:22+00:00 /posts/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E5%B7%A5%E5%85%B7-Semgrep/ 2025-04-07T01:04:22+00:00 /posts/BurpSuite-NTLM-%E6%8A%93%E5%8C%85%E9%97%AE%E9%A2%98/ 2025-04-07T01:04:22+00:00 /posts/Exchange-PowerShell-Remoting/ 2025-04-07T01:04:22+00:00 /posts/Java-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E7%BB%95%E8%BF%87-resolveClass/ 2025-04-07T01:04:22+00:00 /posts/python-inf-tricks/ 2025-04-07T01:04:22+00:00 /posts/python-Flask-%E4%B8%AD%E7%9A%84-XSS/ 2025-04-07T01:04:22+00:00 /posts/jeklly-theme-chirpy-%E5%A2%9E%E5%8A%A0%E7%9B%AE%E5%BD%95%E6%98%BE%E7%A4%BA%E7%BA%A7%E5%88%AB/ 2025-04-07T01:04:22+00:00 /posts/pyjail-bypass-09-%E7%BB%95%E8%BF%87%E8%BE%93%E5%87%BA%E9%99%90%E5%88%B6/ 2025-02-25T00:00:00+00:00 /posts/DirCMS-%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/ 2025-04-07T01:04:22+00:00 /posts/Windows-%E6%8F%90%E6%9D%83%E7%9F%A5%E8%AF%86%E7%82%B9/ 2025-04-07T01:04:22+00:00 /posts/TPCTF2023-%E9%83%A8%E5%88%86-web-Writeup/ 2025-04-07T01:04:22+00:00 /posts/GOAD-%E9%9D%B6%E5%9C%BA%E7%8E%AF%E5%A2%83%E6%90%AD%E5%BB%BA/ 2025-04-07T01:04:22+00:00 /posts/0CTF-2023-Mathexam-Writeup/ 2025-04-07T01:04:22+00:00 /posts/CSS-injection/ 2025-04-07T01:04:22+00:00 /posts/QWB-2023-writeup/ 2025-04-07T01:04:22+00:00 /posts/HTB-Prolab-Dante/ 2025-04-07T01:04:22+00:00 /posts/Migrate-gitbook-to-mkdocs/ 2025-04-07T01:04:22+00:00 /posts/pyjail-bypass-10-%E7%BB%95%E8%BF%87-opcode-%E6%B2%99%E7%AE%B1/ 2025-06-15T07:27:23+00:00 /posts/pyjail-bypass-11-%E5%88%A9%E7%94%A8%E7%94%9F%E6%88%90%E5%99%A8%E6%A0%88/ 2025-06-30T02:09:19+00:00 /posts/TPCTF-2025-web-writeup/ 2025-03-20T07:30:00+00:00 /posts/Cyber-Apocalypse-CTF-2025-WEB-Writeup/ 2025-06-15T07:27:23+00:00 /posts/DiceCTF-2025-Quals-WEB-Writeup/ 2025-04-07T01:30:00+00:00 /posts/GoogleCTF-2025-pwn-Internship-Writeup-copy/ 2025-06-30T01:30:00+00:00 /posts/GoogleCTF-2025-web-MYTHOS-Writeup/ 2025-07-01T09:30:00+00:00 /posts/R3CTF-2025-no-brackets-CGO-%E7%AC%A6%E5%8F%B7%E5%8A%AB%E6%8C%81/ 2025-07-11T01:30:00+00:00 /posts/L3HCTF-2025-TellMeWhy-Fastjson-%E9%AB%98%E7%89%88%E6%9C%AC-Getter-%E5%88%A9%E7%94%A8/ 2025-07-15T01:30:00+00:00 /posts/Ubuntu-20.04-PPA-%E6%BA%90%E5%A4%B1%E6%95%88/ 2025-08-24T10:07:17+00:00 /posts/TFCCTF-2025-%CE%A0jail/ 2025-09-03T00:37:59+00:00 /posts/TFCCTF-2025-minijail-Bash%E4%B8%8B%E6%9C%89%E9%99%90%E5%AD%97%E7%AC%A6%E7%9A%84%E6%9E%81%E9%99%90%E6%9E%84%E9%80%A0/ 2025-09-03T00:37:59+00:00 /categories/ 2025-09-03T00:38:22+00:00 /tags/ 2025-09-03T00:38:22+00:00 /archives/ 2025-09-03T00:38:22+00:00 /about/ 2025-09-03T00:38:22+00:00 /links/ 2025-09-03T00:38:22+00:00 / /tags/rce/ /tags/unserialize/ /tags/prototype-pollution/ /tags/float-number/ /tags/sql-injection/ /tags/sqlmap/ /tags/phpmyadmin/ /tags/getshell/ /tags/jwt/ /tags/middleware-security/ /tags/xss/ /tags/flask/ /tags/csp-bypass/ /tags/command-execute/ /tags/deserialization-exploit-chain/ /tags/spring/ /tags/pentest/ /tags/info-gathering/ /tags/juniper/ /tags/useful-resources/ /tags/php/ /tags/docker/ /tags/debug/ /tags/asp-net/ /tags/chatgpt/ /tags/cortex/ /tags/storm-injection/ /tags/python/ /tags/nodejs/ /tags/typescript/ /tags/react/ /tags/pyjail/ /tags/ssti/ /tags/pickle/ /tags/deserialization/ /tags/thinkphp/ /tags/memoryshell/ /tags/tomcat/ /tags/rasp/ /tags/werkzeug/ /tags/flask-debug-rce/ /tags/imagemagick/ /tags/ssh/ /tags/zip-slip/ /tags/request-smuggling/ /tags/bash-jail/ /tags/%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/ /tags/rmi/ /tags/%E5%B7%A5%E5%85%B7/ /tags/ntlm/ /tags/exchange/ /tags/inf/ /tags/jekyll/ /tags/cms/ /tags/windows/ /tags/lpe/ /tags/vega/ /tags/goad/ /tags/active-directory/ /tags/bash/ /tags/tunnel/ /tags/0ctf-2023/ /tags/css/ /tags/qwb/ /tags/htb/ /tags/ms17-010/ /tags/gitbook/ /tags/mkdocs/ /tags/web/ /tags/ctf/ /tags/writeup/ /tags/tpctf/ /tags/confusion-attack/ /tags/csrf/ /tags/ruby/ /tags/grpc/ /tags/share-storage/ /tags/perl/ /tags/go/ /tags/fastjson/ /tags/env/ /categories/ctf/ /categories/php/ /categories/jwt/ /categories/cve/ /categories/java/ /categories/pentest/ /categories/iot/ /categories/useful-resources/ /categories/env/ /categories/asp-net/ /categories/chatgpt/ /categories/python/ /categories/go/ /categories/bash/ /categories/code-audit/ /categories/exchange/ /categories/css/ /page2/ /page3/ /page4/ /page5/ /page6/ /page7/ /page8/ /page9/