随波逐流信息安全网 www.1o1o.xyz

   [随波逐流]CTF Flags

软件版本:v1.0.0   数据版本: v20260526
序号 Website Type Title Value Writeup Competition Id
1 XCTF MISC Easy-Header 无 https://ext.dcloud.net.cn/plugin?id=19019 - 9697
2 ctfshow WEB入门.爆破 web21 admin:shark63 https://blog.csdn.net/Leaf_initial/ar... 爆破 3247
3 bugku MISC 美丽的烟火 flag{yX73nAutbBozYhge6d2flG} ... bugku 2816
4 bugku Crypto tychophobia idek{crEDentia |https://www.cnblogs.com/WXjzc/p/1706... idekCTF2022 2739
5 ctfshow WEB入门.文件包含 web78 ?file=php://filter/read=convert.base64-encode/resource=flag.php https://blog.csdn.net/2301_80024722/a... 文件包含 3311
6 bugku WEB God_of_Aim flag{2b16dd84ae5d35c74fe16c759849b871} https://cloud.tencent.com/developer/a... moeCTF2022 1140
7 vulfocus WEB apache httpserver 信息泄露 (CVE-2017-9798) 无 https://blog.csdn.net/weixin_44047654... - 16736
8 NSSCTF MISC [MoeCTF 2021]misc入门指北 moectf{Th1s_1s_b4sIC_MisC_!} https://www.cnblogs.com/sbhglqy/p/18948869 MoeCTF 11359
9 NSSCTF 逆向技术 [watevrCTF 2019]Timeout flag{3ncrytion_is_overrated_youtube.com/watch?v=OPf0YbXqDm0} https://blog.csdn.net/m0_73644864/art... watevrCTF 10901
10 bugku PWN Yet^2 Another PySandbox Yet2Another PySandbox的解法是通过构造(lambda:sandboxed_eval)()获取未过滤的eval函数,进而利用Python内置对象链执行系统命令。具体利用链为:().__class__.__bases__.__subclasses__().__init__.func_globals["sys"].modules["os.path"].os.system("sh"),该方法可绕过小括号和引号过滤。 https://moraprogramming.hateblo.jp/en... SECCON2020 2128