🏯 HOME 📁 Archives 📣 About ME 📒Old Blog 📌 Advertisements 🌐 SiteMap 🗂 Resources 🔭 RSS.xml
时间轴 📈
2022 📅
| Time | Name | Tags |
|---|---|---|
| 12/09 | VMWare-Workspace-ONE-Access-Auth-Bypass | 漏洞分析/Java/RCE |
| 09/28 | Spring-Framework-RCE-CVE-2022-22965漏洞分析 | 漏洞分析/Java/RCE |
| 08/08 | 相似度算法调研 | 算法/go |
| 07/19 | CVE-2022-33891 Apache Spark shell command injection | 命令执行/Spark |
| 07/05 | 正则匹配配置不当 | 正则匹配Java/正则匹配 |
| 06/22 | CVE-2022-22980 Mongodb SpEL | Java/SpEL/CodeQL |
| 03/29 | CodeQL Usage Tricks | CodeQL/Tricks/Java |
| 03/18 | Spring Boot RCE到内存马探索 | Spring/RCE/MemShell |
| 03/14 | Shiro后渗透拓展面 | Shiro/Agent/Web/Java |
| 03/02 | shiro反序列化漏洞攻击拓展面–修改key | shiro/key/Java/Web |
| 03/10 | GitHub Java CodeQL CTF | CodeQL/Java/CTF |
| 02/27 | Hack-Tools2Web | Hack/Tools/Web |
| 02/21 | CodeQL与Shiro550碰撞 | CodeQL/Java/Shiro |
| 02/21 | CodeQL初见Shiro550 | CodeQL/Java/Shiro |
| 02/20 | CodeQL与AST之间联系 | CodeQL/AST/Java |
| 02/15 | Java加载动态链接库方式 | Java/DLL/Load |
| 01/20 | Log4j2漏洞分析 | Log4j2/Java/Vul |
| 01/08 | PL-4-Interprocedural Analysis | PL |
| 01/07 | PL-3-Data Analysis Foundation | PL |
| 01/06 | PL-2-Data-Flow-Analysis | PL |
| 01/04 | PL-1-Intermediate-Representation | PL |
2021 📅
| Time | Name | Tags |
|---|---|---|
| 04/15 | PII泄露–用CodeQL识别日志中的PII数据 | CodeQL/Java |
| 04/24 | CodeQL workshop for Java Unsafe deserialization in Apache Struts | CodeQL/Java |
| 06/05 | weblogic之CVE-2020-2551iiop反序列化漏洞分析 | Java |
| 06/05 | weblogic之CVE-2020-2551iiop反序列化漏洞复现 | Java |
| 07/15 | Fastjson回显 | Java/Fastjson |
| 07/21 | Tomcat通用回显学习笔记 | Java |
| 08/03 | 从Java反序列化漏洞题看CodeQL数据流 | CodeQL/Java |
| 11/01 | Shiro-550反序列化漏洞分析 | shiro550/Java |
| 11/09 | 记一次Log4j失败的Gadget挖掘记录 | CodeQL/Java |
| 11/15 | ysoserial改造记录 | ysoserial/Java |
| 11/30 | JNDI注入 | JNDI/Java |
| 12/08 | shiro-JRMP-gadget | shiro/exp |
| 12/21 | Fastjson_Mysql_gadget复现 | fastjson/exp |
| 12/31 | 2021年度总结 | 总结 |
广告位 📑
广告位持续招租。。。。。。
感谢https://evolution-host.com的赞助
sumsec.me