Tags

Base

• URLDNS
• Java反序列化-WebGoat
• Java反序列化原理
• Java反射&动态代理
• Java基础

CISCN

• 2024CISCN初赛
• 2023CISCN初赛

CommonsCollections

• CommonsCollections
• CC3
• CC6
• CC1-LazyMap
• CC1-TransformedMap

Crack

• hydra
• medusa

Deserialize

• CommonsCollections
• CC3
• CC6
• CC1-LazyMap
• CC1-TransformedMap
• URLDNS
• Php Unserialize

Enumeration

• ffuf
• nmap
• gobuster
• sqlmap

Fastjson

• Fastjson 远程命令执行漏洞(CVE-2017-18349)

General

• curl

HTB

• HTB Runner
• HTB SolarLab
• HTB IClean
• HTB TwoMillion
• HTB PermX
• HTB Cap
• HTB BoardLight
• HTB Lame
• HTB Perfection
• HTB Headless

Hash

• Php Hash Compare

Http

• IP Spoofing

JNDI

• JNDI

Lateral-Movement

• Active Directory Enumeration & Attacks
• File Transfer
• Shells

Log4j2

• Log4j2 lookup JNDI注入(CVE-2021-44228)

Pollution

• Python Prototype Pollution
• JavaScript Prototype Pollution

Privesc

• Windows Privilege Escalation
• Linux Privilege Escalation
• MySQL UDF

RMI

• RMI

Service-Test

• Attacking Common Services

Shiro

• Shiro 1.2.4反序列化漏洞(CVE-2016-4437)

Tunnel

• ligolo-ng

Web-Pentest

• Command Injections
• File Upload
• Cross-Site Scripting (XSS)
• File Inclusion
• XML External Entity (XXE)
• JavaScript Deobfuscation
• HTTP Verb Tampering
• Server-Side Request Forgery (SSRF)
• Mysql Injections