WriteUp

春秋云镜 Hospital Writeup

March  19,  2024

At Dawn

YApi 1.10.2 Unauthenticed RCE Via NoSQL Injection

March  10,  2024

At Dawn

CVE-2023-49070/CVE-2023-51467 Apache OfBiz 鉴权绕过RCE

March  10,  2024

At Dawn

CVE-2020-9496 Apache OfBiz 反序列化命令执行漏洞

March  8,  2024

At Dawn

Ysoserial JRMPListener/Client Review

February  29,  2024

At Dawn

Oracle 注入 RCE 由浅入深

February  29,  2024

At Dawn

BCEL环境下利用全反射构造高可用内存马

February  29,  2024

At Dawn

Atlassian Confluence CVE-2023-22527 分析及武器化实现

February  29,  2024

At Dawn

【.NET 安全】ASP.NET SoapFormatter Deserialization 04

February  26,  2024

At Dawn

易懂的Rome反序列化利用链(updated)

February  12,  2024