SongShuA

SongShuA

胸中梦黄粱，手握自在心 一个充满想法的网络安全从业人员 A person with dreams in their heart and the ability to control their own destiny, who is a creative professional in the field of cybersecurity.
github
主页归档

从零到一学挖洞

cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover

从零到一学挖洞|xxl-job 2023远程命令执行漏洞分析记录

看到了微步的漏洞预警信息，于是想从零开始记录一下 nday 漏洞的复现过程。虽然这次涉及代码审计很少，但也算一个路径，就记录一下吧。 首先看预警信息 首先提取关键词：accessToken 默认、在 application.properties 中配置、绕过认证调用…
从零到一学挖洞
此博客数据所有权由区块链加密技术和智能合约保障仅归创作者所有。