[标题搜索]只能搜索题目标题,[综合搜索]支持多关键词多项目搜索(以空格分隔)。
| 序号 | Website | Type | Title | Value | Writeup | Competition | Id |
|---|---|---|---|---|---|---|---|
| 1 | bugku | PWN | printf | flag{Have_y0U_Py_script_Otc_To_Ten_Ascii!} | https://cloud.tencent.com/developer/a... | bugku | 200 |
| 2 | bugku | MISC | the_climber | GCTF{Th3_P4th_t0_Success_1s_N0T_L1n34r} | https://www.madrhacks.org/writeups/gl... | GlacierCTF2022 | 1932 |
| 3 | BUUCTF | Web | [DASCTF Apr.2023 X SU战队2023开局之战]【困难】pdf_converter_revenge | 无 | https://blog.csdn.net/mochu7777777/ar... | DASCTF Apr.2023 X SU战队2023开局之战 | 6250 |
| 4 | BUUCTF | Pwn | babyheap_hitcon_2016 | 无 | https://blog.csdn.net/seaaseesa/artic... | - | 8077 |
| 5 | vulfocus | WEB | dedecms 远程文件包含 (CVE-2015-4553) | 无 | https://blog.csdn.net/mochu7777777/ar... | - | 16645 |
| 6 | BUUCTF | Reverse | [b01lers2020]little_engine | pctf{th3_m0d3rn_st34m_3ng1n3_w45_1nv3nt3d_1n_1698_buT_th3_b3st_0n3_in_1940} | https://blog.csdn.net/weixin_52640415... | b01lers2020 | 5928 |
| 7 | XCTF | Crypto | wtc_rsa_bbq | flag{how_d0_you_7urn_this_0n?} | https://www.cnblogs.com/coming1890/p/... | CTF | 9546 |
| 8 | BUUCTF | Pwn | [GKCTF2020]GirlFriendSimulator | 题目的答案 | https://blog.csdn.net/seaaseesa/artic... | GKCTF2020 | 6752 |
| 9 | NSSCTF | JS分析 | [NSSCTF 2022 Spring Recruit]ezgame | 无 | https://blog.csdn.net/2302_79119987/a... | NSSCTF | 10302 |
| 10 | bugku | PWN | Yet^2 Another PySandbox | Yet2Another PySandbox的解法是通过构造(lambda:sandboxed_eval)()获取未过滤的eval函数,进而利用Python内置对象链执行系统命令。具体利用链为:().__class__.__bases__.__subclasses__().__init__.func_globals["sys"].modules["os.path"].os.system("sh"),该方法可绕过小括号和引号过滤。 | https://moraprogramming.hateblo.jp/en... | SECCON2020 | 2128 |