12/09 |
VMWare-Workspace-ONE-Access-Auth-Bypass |
漏洞分析/Java/RCE |
09/28 |
Spring-Framework-RCE-CVE-2022-22965漏洞分析 |
漏洞分析/Java/RCE |
08/08 |
相似度算法调研 |
算法/go |
07/19 |
CVE-2022-33891 Apache Spark shell command injection |
Java/命令执行/Spark |
07/05 |
正则匹配配置不当 |
Java/正则匹配 |
06/22 |
CVE-2022-22980 Mongodb SpEL |
Java/SpEL/CodeQL |
03/29 |
CodeQL Usage Tricks |
CodeQL/Tricks/Java |
03/18 |
Spring Boot RCE到内存马探索 |
Spring/RCE/MemShell |
03/14 |
Shiro后渗透拓展面 |
Shiro/Agent/Web/Java |
03/02 |
shiro反序列化漏洞攻击拓展面–修改key |
shiro/key/Java/Web |
03/10 |
GitHub Java CodeQL CTF |
CodeQL/Java/CTF |
02/27 |
Hack-Tools2Web |
Hack/Tools/Web |
02/21 |
CodeQL与Shiro550碰撞 |
CodeQL/Java/Shiro |
02/21 |
CodeQL初见Shiro550 |
CodeQL/Java/Shiro |
02/20 |
CodeQL与AST之间联系 |
CodeQL/AST/Java |
02/15 |
Java加载动态链接库方式 |
Java/DLL/Load |
01/20 |
Log4j2漏洞分析 |
Log4j2/Java/Vul |
01/08 |
PL-4-Interprocedural Analysis |
PL |
01/07 |
PL-3-Data Analysis Foundation |
PL |
01/06 |
PL-2-Data-Flow-Analysis |
PL |
01/04 |
PL-1-Intermediate-Representation |
PL |