SongShuA

SongShuA

胸中梦黄粱，手握自在心 一个充满想法的网络安全从业人员 A person with dreams in their heart and the ability to control their own destiny, who is a creative professional in the field of cybersecurity.
github
HomeArchives

xxl-job

cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover

从零到一学挖洞|xxl-job 2023远程命令执行漏洞分析记录

看到了微步的漏洞预警信息，于是想从零开始记录一下 nday 漏洞的复现过程。虽然这次涉及代码审计很少，但也算一个路径，就记录一下吧。 首先看预警信息 首先提取关键词：accessToken 默认、在 application.properties 中配置、绕过认证调用…
从零到一学挖洞
Ownership of this blog data is guaranteed by blockchain and smart contracts to the creator alone.