y4tacker/websitecomments issues and pull requests

#59 - Apache ActiveMQ Jolokia远程代码执行不依赖JDK打法 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker 12 months ago
Labels: Gitalk, b9ed68636fdba00d95dcf8eb6242cdeb

#59 - Apache ActiveMQ Jolokia远程代码执行不依赖JDK打法 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker 12 months ago
Labels: Gitalk, b9ed68636fdba00d95dcf8eb6242cdeb

#58 - 某系统最新前台权限绕过分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker 12 months ago
Labels: Gitalk, 20d91675f2e576ccf12ae3346ab02652

#58 - 某系统最新前台权限绕过分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker 12 months ago
Labels: Gitalk, 20d91675f2e576ccf12ae3346ab02652

#57 - I Doc View全版本前台RCE漏洞分析汇总 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker 12 months ago
Labels: Gitalk, 6d562ec6fdf40cc12566f05a62dbc518

#57 - I Doc View全版本前台RCE漏洞分析汇总 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker 12 months ago
Labels: Gitalk, 6d562ec6fdf40cc12566f05a62dbc518

#56 - 某系统全版本前台RCE绕过总结 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 1 year ago
Labels: Gitalk, 71f0e10be15354d2b1f38fcb1e3470dc

#56 - 某系统全版本前台RCE绕过总结 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 1 year ago
Labels: Gitalk, 71f0e10be15354d2b1f38fcb1e3470dc

#55 - 浅析Smartbi逻辑漏洞 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 2 comments
Labels: Gitalk, 8ae7daf953b229655262290343ad0948

#55 - 浅析Smartbi逻辑漏洞 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 2 comments
Labels: Gitalk, 8ae7daf953b229655262290343ad0948

#54 - FastJson与原生反序列化(二) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 5 comments
Labels: Gitalk, bd2cdd3e696b451f766f50dc416abcc1

#54 - FastJson与原生反序列化(二) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 5 comments
Labels: Gitalk, bd2cdd3e696b451f766f50dc416abcc1

#53 - 利用TemplatesImpl执行字节码在实战中的踩坑记录 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, 0edd009a022464cc40c032f8e7274a7e

#53 - 利用TemplatesImpl执行字节码在实战中的踩坑记录 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, 0edd009a022464cc40c032f8e7274a7e

#52 - Java文件上传大杀器-绕waf(针对commons-fileupload组件) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, 6f77d2b45a0eb51b57dc0a38d4e9c3f4

#52 - Java文件上传大杀器-绕waf(针对commons-fileupload组件) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, 6f77d2b45a0eb51b57dc0a38d4e9c3f4

#51 - 2023RealWorldCTF-由于有很多day就不公开了 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, 8eb389da198b58b0d4692952890e03f5

#51 - 2023RealWorldCTF-由于有很多day就不公开了 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, 8eb389da198b58b0d4692952890e03f5

#50 - 探寻Java文件上传流量层面waf绕过姿势系列二 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, b4b513d692a71cac34c8ff07e7b75836

#50 - 探寻Java文件上传流量层面waf绕过姿势系列二 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago
Labels: Gitalk, b4b513d692a71cac34c8ff07e7b75836

#49 - PbootCMS<=3.1.2前台注入分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 2 comments
Labels: Gitalk, 52dba507af4a2ad5fa8a50bca37cf12a

#49 - PbootCMS<=3.1.2前台注入分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 2 comments
Labels: Gitalk, 52dba507af4a2ad5fa8a50bca37cf12a

#48 - FastJson与原生反序列化 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 5 comments
Labels: Gitalk, cbe32fdfbb93f105538701eb852cf882

#48 - FastJson与原生反序列化 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 1 year ago - 5 comments
Labels: Gitalk, cbe32fdfbb93f105538701eb852cf882

#47 - OpenRasp分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, dcadf016e5965aff4f6017ff11e10a17

#47 - OpenRasp分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, dcadf016e5965aff4f6017ff11e10a17

#46 - 2023RealWorldCTF-由于有很多day就不公开了 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, 7f6baa5f682f42950d30fa593a2314cb

#46 - 2023RealWorldCTF-由于有很多day就不公开了 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, 7f6baa5f682f42950d30fa593a2314cb

#45 - 2023BiosCTF-VulnDrive2(很实战推荐) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, e2e05f1429bcc811ec44f236399d3d3f

#45 - 2023BiosCTF-VulnDrive2(很实战推荐) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, e2e05f1429bcc811ec44f236399d3d3f

#44 - 2023IdekCTFWriteup | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago - 5 comments
Labels: Gitalk, 4e9c6e298e9371f8d13476d2cf2f5f9e

#44 - 2023IdekCTFWriteup | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago - 5 comments
Labels: Gitalk, 4e9c6e298e9371f8d13476d2cf2f5f9e

#43 - TetCTF2023&Liferay(CVE-2019-16891)(Pre-Auth RCE) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, 1231789b167f6d853822fc0beafaa02c

#43 - TetCTF2023&Liferay(CVE-2019-16891)(Pre-Auth RCE) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, 1231789b167f6d853822fc0beafaa02c

#42 - 实训打靶记录(一) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, 60c009df33243b1d57dac440c782fc81

#42 - 实训打靶记录(一) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, 60c009df33243b1d57dac440c782fc81

#41 - 关于pearcmd利用总结 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, c7b30dce0ba600fd71293a7f55f520b0

#41 - 关于pearcmd利用总结 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, c7b30dce0ba600fd71293a7f55f520b0

#40 - 浅谈JspWebshell之编码 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, bf9700a8f5c042a85fa811ebf1ecadce

#40 - 浅谈JspWebshell之编码 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 2 years ago
Labels: Gitalk, bf9700a8f5c042a85fa811ebf1ecadce

#39 - JspWebShell新姿势解读 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, fd3f655a38094e76f6d328e17cef38a5

#39 - JspWebShell新姿势解读 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, fd3f655a38094e76f6d328e17cef38a5

#38 - 实训打靶记录(二) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 8f8435a61dd3b59675e694a52367527e

#38 - 实训打靶记录(二) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 8f8435a61dd3b59675e694a52367527e

#37 - 读研的意义？ | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 57af6e6ebe3a0fd202219a151d7fbdbd

#37 - 读研的意义？ | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 57af6e6ebe3a0fd202219a151d7fbdbd

#36 - Y4教你审计系列之熊海CMS代码审计 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 454aa4067bed7093f9a731aa9ebb57fc

#36 - Y4教你审计系列之熊海CMS代码审计 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 454aa4067bed7093f9a731aa9ebb57fc

#35 - 浅析Apache Commons Jxpath命令执行分析(CVE-2022-41852) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 1d1873c0c947055b3762df086e3262a4

#35 - 浅析Apache Commons Jxpath命令执行分析(CVE-2022-41852) | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 1d1873c0c947055b3762df086e3262a4

#34 - 保研or就业---阿里云实习之旅 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago - 3 comments
Labels: Gitalk, ffe7ffe5538499049cd0b7ed52930933

#34 - 保研or就业---阿里云实习之旅 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago - 3 comments
Labels: Gitalk, ffe7ffe5538499049cd0b7ed52930933

#33 - 保研or就业 --- 阿里云实习之旅 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, b136c259a655912a3ede82a44e5feeee

#33 - 保研or就业 --- 阿里云实习之旅 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, b136c259a655912a3ede82a44e5feeee

#32 - 临行随笔 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, b17b35d005e99891c36bd40ff1c5ec8b

#32 - 临行随笔 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, b17b35d005e99891c36bd40ff1c5ec8b

#31 - Nday备份 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 3b82c5ad7991ed3a3f18afcdff78b834

#31 - Nday备份 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker about 2 years ago
Labels: Gitalk, 3b82c5ad7991ed3a3f18afcdff78b834

#30 - 探寻Tomcat文件上传流量层面绕waf新姿势 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, c55692c69557d26ea36dceeec79500e2

#30 - 探寻Tomcat文件上传流量层面绕waf新姿势 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, c55692c69557d26ea36dceeec79500e2

#29 - GadgetInspector源码分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, d894632e10bc09b3f01c5bc2815b7c26

#29 - GadgetInspector源码分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, d894632e10bc09b3f01c5bc2815b7c26

#28 - 写给自己的2022年终总结 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, e1fb4c6ba2fde5f5bd208ad7702cf17b

#28 - 写给自己的2022年终总结 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, e1fb4c6ba2fde5f5bd208ad7702cf17b

#27 - On Java读书笔记 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 94536143df52734f3da3c5623119c58b

#27 - On Java读书笔记 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 94536143df52734f3da3c5623119c58b

#26 - Java触发二次反序列化的点 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 97ab7f2ee5b672d77813f732a647b488

#26 - Java触发二次反序列化的点 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 97ab7f2ee5b672d77813f732a647b488

#25 - 2022MRCTF-Java部分 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 9929c260d26cbc467d0ee836dc204d4d

#25 - 2022MRCTF-Java部分 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 9929c260d26cbc467d0ee836dc204d4d

#24 - 2022*CTF-Web | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 5bfdb386c93cd5f3f489f3ecad6b0e1c

#24 - 2022*CTF-Web | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, 5bfdb386c93cd5f3f489f3ecad6b0e1c

#23 - Enjoy模板引擎分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, f6fb42e2d6d7a89e518fc93276237878

#23 - Enjoy模板引擎分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, f6fb42e2d6d7a89e518fc93276237878

#22 - 浅谈Shiro550受Tomcat Header长度限制影响突破 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 2 comments
Labels: Gitalk, 857a9897192165c1eb8041da14541f81

#22 - 浅谈Shiro550受Tomcat Header长度限制影响突破 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 2 comments
Labels: Gitalk, 857a9897192165c1eb8041da14541f81

#21 - 我与RuoYi的攻防史 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 1 comment
Labels: Gitalk, 98523a83cc335e7bff734bbad85ebe19

#21 - 我与RuoYi的攻防史 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 1 comment
Labels: Gitalk, 98523a83cc335e7bff734bbad85ebe19

#20 - ROME改造计划 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, cb509af91514a981bbe9f1a2529187e1

#20 - ROME改造计划 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago
Labels: Gitalk, cb509af91514a981bbe9f1a2529187e1

#19 - 浅谈Fastjson绕waf | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 1 comment
Labels: Gitalk, 948da237aec9f52237dd02656c2c1787

#19 - 浅谈Fastjson绕waf | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 1 comment
Labels: Gitalk, 948da237aec9f52237dd02656c2c1787

#18 - 2022虎符CTF-Java部分 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 2 comments
Labels: Gitalk, 45a2d45605e1bfd9bc8c47ba615cc4b7

#18 - 2022虎符CTF-Java部分 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker over 2 years ago - 2 comments
Labels: Gitalk, 45a2d45605e1bfd9bc8c47ba615cc4b7

#17 - SnakeYAML实现Gadget探测 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, a684786bae00f12faf69da30522387aa

#16 - SnakeYAML反序列化及可利用Gadget | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, 0d07c0ef493630c2dde36d953b67f983

#16 - SnakeYAML反序列化及可利用Gadget | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, 0d07c0ef493630c2dde36d953b67f983

#15 - SnakeYAML反序列化及可利用Gadget | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, f929e66860509d524f03333e4dadac07

#15 - SnakeYAML反序列化及可利用Gadget | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, f929e66860509d524f03333e4dadac07

#14 - 低版本SpringBoot-SpEL表达式注入漏洞复现分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, 2ab0655e0b5a9a6bec902e9c64178900

#14 - 低版本SpringBoot-SpEL表达式注入漏洞复现分析 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, 2ab0655e0b5a9a6bec902e9c64178900

#13 - c3p0的三个gadget的学习 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, c16021496a46bbc4d4e3fedf0d667c57

#13 - c3p0的三个gadget的学习 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, c16021496a46bbc4d4e3fedf0d667c57

#12 - 对Java反序列化数据绕WAF新姿势的补充 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, cac9ca3769a02f865c3d26c6f54d404e

#12 - 对Java反序列化数据绕WAF新姿势的补充 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, cac9ca3769a02f865c3d26c6f54d404e

#11 - 分类 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, a676607444a8bc8b150c9a3aff884e61

#11 - 分类 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, a676607444a8bc8b150c9a3aff884e61

#10 - 标签 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, f47af1d1eda4d807b02bba32be15120b

#10 - 标签 | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, f47af1d1eda4d807b02bba32be15120b

#9 - Java反序列化脏数据绕WAF | Y4tacker's Blog

Issue - State: open - Opened by Y4tacker almost 3 years ago
Labels: Gitalk, a5c18218a23b0fcfce9c74c40e552925

GitHub / y4tacker/websitecomments issues and pull requests