[标题搜索]只能搜索题目标题,[综合搜索]支持多关键词多项目搜索(以空格分隔)。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | ctfshow | _元旦水友赛.MISC | CTF的一生如履薄冰 | ctfshow{We1_he_x1ng_fu_3u_lv_b0_b1ng?@EveryCtfer} | https://www.cnblogs.com/LOmxVE/articl... | MISC | 5077 |
| 2 | bugku | CTF-2023 | complete_me | 无 | https://wenku.baidu.com/view/313d5c0d... | Welcome | 2133 |
| 3 | NSSCTF | REVERSE | [NSSCTF 3rd]MyGO | NSSCTF{MyGo_1s_Re@lly_3a5y} | https://zhuanlan.zhihu.com/p/698495957 | NSSCTF | 12899 |
| 4 | BUUCTF | Real | [Jboss]CVE-2017-7504 | JBoss AS 4.x及之前版本的JbossMQ实现中,JMS over HTTP Invocation Layer的HTTPServerILServlet.java文件存在反序列化漏洞(CVE-2017-7504)。攻击者可通过发送特制的序列化数据执行任意代码。影响范围为JBoss AS 4.x及之前版本。复现步骤包括使用ysoserial生成payload(如CommonsCollections5链),通过curl向/jbossmq-httpil/HTTPServerILServlet路径发送二进制数据,成功后可反弹shell或执行命令。修复方法包括升级至JBoss AS 5.x及以上版本、禁用JMS over HTTP Invocation Layer或限制HTTPServerILServlet的访问权限 4 5。 | https://blog.csdn.net/YouthBelief/art... | Jboss | 6954 |
| 5 | CTFHUB | Pwn | pwn4 | ciscn_2019_s_4的解题过程及答案 | https://blog.csdn.net/mcmuyanga/artic... | CISCN | 10088 |
| 6 | bugku | WEB | 摆就完事了1 | NCTF{Spring_actuator_And_Jolokia_1S_So_fun_by_the_way_we1com3_to_join_API_Security_Community_yulige_yyds_wysb} | https://www.cnblogs.com/backlion/p/15... | NCTF2021 | 812 |
| 7 | ctfshow | WEB入门.终极考核 | web653 | ctfshow{5526710eb3ed7b4742232d6d6f9ee3a9} | http://blog.csdn.net/weixin_45882317/... | 终极考核 | 4213 |
| 8 | NSSCTF | Crypto | [INSHack 2019]Yet Another RSA Challenge - Part 2 | 无 | https://blog.csdn.net/weixin_44110537... | INSHack | 12383 |
| 9 | NSSCTF | 逆向 | [suctf 2019]babyunic | SUCTF{...} | https://blog.csdn.net/weixin_52640415... | suctf | 13794 |
| 10 | bugku | Heroes | jedi oriented programming | 无 | https://jointcenterforsatellitedataas... | Space | 1746 |