SongShuA

SongShuA

胸中梦黄粱，手握自在心 一个充满想法的网络安全从业人员 A person with dreams in their heart and the ability to control their own destiny, who is a creative professional in the field of cybersecurity.
github
首頁封存

xxl-job

cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover
cover

从零到一学挖洞|xxl-job 2023远程命令执行漏洞分析记录

看到了微步的漏洞预警信息，于是想从零开始记录一下 nday 漏洞的复现过程。虽然这次涉及代码审计很少，但也算一个路径，就记录一下吧。 首先看预警信息 首先提取关键词：accessToken 默认、在 application.properties 中配置、绕过认证调用…
从零到一学挖洞
此部落格數據所有權由區塊鏈加密技術和智能合約保障僅歸創作者所有。