[标题搜索]只能搜索题目标题，[综合搜索]支持多关键词多项目搜索（以空格分隔）。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | bugku | MISC | USB | shellmates{usB_Dat4_gO3s_bRrRrr} | https://ctf.bugku.com/challenges/deta... | HackINI2023 | 372 |
| 2 | BUUCTF | Web | [GKCTF 2021]easynode | flag{easynode_rce_via_ejs_proto_pollution} | https://blog.csdn.net/woshilnp/articl... | GKCTF 2021 | 6699 |
| 3 | 春秋云境 | WEB | CVE-2011-3923 | S2-009是S2-003与S2-005的补丁绕过，在ParameterInterceptor这个拦截器上只对参数名进行了过滤，而未对参数值进行过滤，导致攻击代码可以写入到OgnlContext对应root对象中的属性中，通过第二个参数名读取恶意代码并执行 1。 | https://cn-sec.com/archives/1497796.html | 春秋云境 | 14796 |
| 4 | BUUCTF | Misc | [NewStarCTF 2023 公开赛道]压缩包们 | flag{y0u_ar3_the_m4ter_of_z1111ppp_606a4adc} | ... | NewStarCTF 2023 公开赛道 | 7168 |
| 5 | NSSCTF | MISC | [SWPUCTF 2024 秋季新生赛]从千年真理部到游戏开发部day2 | NSSCTF{Welcome_to_game_dev_department} | https://zhuanlan.zhihu.com/p/699434594 | SWPUCTF | 12097 |
| 6 | BUUCTF | Web | October 2019 Twice SQL Injection | flag{example_flag} | https://blog.csdn.net/2401_86760082/a... | - | 8457 |
| 7 | BUUCTF | Web | [GKCTF X DASCTF应急挑战杯]babycat-revenge | flag{revenge_is_a_cup_of_3373707} | ... | GKCTF X DASCTF应急挑战杯 | 6716 |
| 8 | bugku | live | one byte man with no friend | 无 | https://www.cnblogs.com/CH13hh/p/18166545 | TSG | 1824 |
| 9 | NSSCTF | 文件上传 | [WUSTCTF 2020]CV Maker | wctf2020{congratulation_upl0ad_to_getShe1111111} | https://www.cnblogs.com/yesec/p/12608971.html | WUSTCTF | 10583 |
| 10 | bugku | PWN | dataleak | 无 | https://www.anquanke.com/post/id/264278 | SCTF2021 | 565 |