随波逐流信息安全网 www.1o1o.xyz

   [随波逐流]CTF Flags

软件版本:v1.0.0   数据版本: v20260526
序号 Website Type Title Value Writeup Competition Id
1 bugku PWN printf flag{Have_y0U_Py_script_Otc_To_Ten_Ascii!} https://cloud.tencent.com/developer/a... bugku 200
2 bugku MISC the_climber GCTF{Th3_P4th_t0_Success_1s_N0T_L1n34r} https://www.madrhacks.org/writeups/gl... GlacierCTF2022 1932
3 BUUCTF Web [DASCTF Apr.2023 X SU战队2023开局之战]【困难】pdf_converter_revenge 无 https://blog.csdn.net/mochu7777777/ar... DASCTF Apr.2023 X SU战队2023开局之战 6250
4 BUUCTF Pwn babyheap_hitcon_2016 无 https://blog.csdn.net/seaaseesa/artic... - 8077
5 vulfocus WEB dedecms 远程文件包含 (CVE-2015-4553) 无 https://blog.csdn.net/mochu7777777/ar... - 16645
6 BUUCTF Reverse [b01lers2020]little_engine pctf{th3_m0d3rn_st34m_3ng1n3_w45_1nv3nt3d_1n_1698_buT_th3_b3st_0n3_in_1940} https://blog.csdn.net/weixin_52640415... b01lers2020 5928
7 XCTF Crypto wtc_rsa_bbq flag{how_d0_you_7urn_this_0n?} https://www.cnblogs.com/coming1890/p/... CTF 9546
8 BUUCTF Pwn [GKCTF2020]GirlFriendSimulator 题目的答案 https://blog.csdn.net/seaaseesa/artic... GKCTF2020 6752
9 NSSCTF JS分析 [NSSCTF 2022 Spring Recruit]ezgame 无 https://blog.csdn.net/2302_79119987/a... NSSCTF 10302
10 bugku PWN Yet^2 Another PySandbox Yet2Another PySandbox的解法是通过构造(lambda:sandboxed_eval)()获取未过滤的eval函数,进而利用Python内置对象链执行系统命令。具体利用链为:().__class__.__bases__.__subclasses__().__init__.func_globals["sys"].modules["os.path"].os.system("sh"),该方法可绕过小括号和引号过滤。 https://moraprogramming.hateblo.jp/en... SECCON2020 2128