[标题搜索]只能搜索题目标题,[综合搜索]支持多关键词多项目搜索(以空格分隔)。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | NSSCTF | 流量分析 | [陇剑杯 2021]ios(问6) | 746558f3-c841-456b-85d7-d6c0f2edabb2 | https://blog.csdn.net/Zx244349115/art... | 陇剑杯 | 13752 |
| 2 | bugku | MISC | 马赛克 | 无 | https://blog.csdn.net/weixin_53622248... | Hackergame2021 | 2509 |
| 3 | 春秋云境 | WEB | CVE-2021-24762 | flag{44cdf008-2751-49ca-88a5-e9daed857223} | https://blog.csdn.net/qq_22002773/art... | 春秋云境 | 14499 |
| 4 | bugku | WEB | search | 0xGame{b373edd6-2cea-11ec-8d3d-0242ac130003} | https://blog.csdn.net/weixin_45582916... | 0xGame2021 | 934 |
| 5 | 封神台 | WEB | 这是一个不简单的音频(音频二进制隐写) | - | https://hack.zkaq.cn/university#/writ... | - | 14826 |
| 6 | vulfocus | WEB | nagiosxi SQL注入 (CVE-2018-10737) | NagiosXI <= 5.4.12 存在 SQL 注入漏洞(CVE-2018-10737),攻击者可通过 admin/logbook.php 的 txtSearch 参数执行任意 SQL 命令。受影响版本为 5.2.x 和 5.4.x(<5.4.13),修复方法为升级至 5.4.13 或以上版本。漏洞 PoC 示例为: POST /nagiosql/admin/logbook.php txtSearch=-1%' and (select 1 from(select count(*),concat((select (select (select concat(0x7e,version(),0x7e))) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)# 验证后的网址为:https://www.seebug.org/vuldb/ssvid-97267 | https://www.seebug.org/vuldb/ssvid-97267 | - | 16622 |
| 7 | BUUCTF | Reverse | [WUSTCTF2020]level3 | flag{Base64_is_the_start_of_reverse} | https://blog.csdn.net/m0_73644864/art... | WUSTCTF2020 | 7731 |
| 8 | BUUCTF | Misc | [DASCTF 2024最后一战|寒夜破晓,冬至终章]手把天尊 | flag{u_are_a_g00d_OLE_Repairer} | https://blog.csdn.net/2301_79200709/a... | DASCTF 2024最后一战|寒夜破晓,冬至终章 | 6235 |
| 9 | bugku | PWN | Gadget | SCTF{Y0u_Find_The_Gadget_And_Then_Call_alarm_to_give_you_flag} | https://cloud.tencent.com/developer/a... | SCTF2021 | 566 |
| 10 | NSSCTF | Python | [GWCTF 2019]pyre | GWHT{Just_Re_1s_Ha66y!} | https://blog.csdn.net/m0_71081503/art... | GWCTF | 10655 |