<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>远离尘世的幻想乡</title>
  
  <subtitle>May the flame guide thee</subtitle>
  <link href="https://syunaht.com/atom.xml" rel="self"/>
  
  <link href="https://syunaht.com/"/>
  <updated>2023-02-02T13:44:15.881Z</updated>
  <id>https://syunaht.com/</id>
  
  <author>
    <name>巡璃</name>
    
  </author>
  
  <generator uri="https://hexo.io/">Hexo</generator>
  
  <entry>
    <title>Thinkphp3.2.3&amp;xyhcms 反序列化漏洞分析</title>
    <link href="https://syunaht.com/p/2149696715.html"/>
    <id>https://syunaht.com/p/2149696715.html</id>
    <published>2023-01-06T02:25:30.000Z</published>
    <updated>2023-02-02T13:44:15.881Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;分析&quot;&gt;&lt;a href=&quot;#分析&quot; class=&quot;headerlink&quot; title=&quot;分析&quot;&gt;&lt;/a&gt;分析&lt;/h2&gt;&lt;p&gt;先搜索&lt;code&gt;unserialize(&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;&lt;img</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="代码审计" scheme="https://syunaht.com/tags/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/"/>
    
    <category term="PHP" scheme="https://syunaht.com/tags/PHP/"/>
    
    <category term="Thinkphp" scheme="https://syunaht.com/tags/Thinkphp/"/>
    
  </entry>
  
  <entry>
    <title>Nmap抓包分析与绕过Windows防火墙扫内网存活主机</title>
    <link href="https://syunaht.com/p/1247290297.html"/>
    <id>https://syunaht.com/p/1247290297.html</id>
    <published>2022-10-11T05:54:08.000Z</published>
    <updated>2023-01-05T11:09:08.066Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;p&gt;本文首发于“合天网安实验室”&lt;/p&gt;
&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="渗透" scheme="https://syunaht.com/categories/%E6%B8%97%E9%80%8F/"/>
    
    
    <category term="Nmap" scheme="https://syunaht.com/tags/Nmap/"/>
    
    <category term="端口扫描" scheme="https://syunaht.com/tags/%E7%AB%AF%E5%8F%A3%E6%89%AB%E6%8F%8F/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记-[观安杯]ezweb</title>
    <link href="https://syunaht.com/p/2130346180.html"/>
    <id>https://syunaht.com/p/2130346180.html</id>
    <published>2022-08-26T07:28:48.000Z</published>
    <updated>2022-09-24T00:59:20.884Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;[flask|文件覆盖]&lt;/p&gt;
&lt;pre class=&quot;line-numbers language-python&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
    <category term="flask" scheme="https://syunaht.com/tags/flask/"/>
    
  </entry>
  
  <entry>
    <title>赛题笔记-[CISCN2022]总决赛-第一天</title>
    <link href="https://syunaht.com/p/1463605317.html"/>
    <id>https://syunaht.com/p/1463605317.html</id>
    <published>2022-08-23T08:38:12.000Z</published>
    <updated>2022-08-23T12:43:05.453Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;web-unserialize-game&quot;&gt;&lt;a href=&quot;#web-unserialize-game&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="AwdP" scheme="https://syunaht.com/tags/AwdP/"/>
    
    <category term="break&amp;fix" scheme="https://syunaht.com/tags/break-fix/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记-[2021东华杯]Ezgadget</title>
    <link href="https://syunaht.com/p/2513904777.html"/>
    <id>https://syunaht.com/p/2513904777.html</id>
    <published>2022-08-19T14:34:45.000Z</published>
    <updated>2022-08-23T02:21:26.872Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;第一道JAVA题！&lt;/p&gt;
&lt;p&gt;题目给了jar包。&lt;/p&gt;
&lt;h2 id=&quot;题解&quot;&gt;&lt;a href=&quot;#题解&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="Java" scheme="https://syunaht.com/tags/Java/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记-简单的SSRF</title>
    <link href="https://syunaht.com/p/1644113306.html"/>
    <id>https://syunaht.com/p/1644113306.html</id>
    <published>2022-08-17T04:28:32.000Z</published>
    <updated>2022-08-23T02:21:26.869Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;[SSRF|gopher]&lt;/p&gt;
&lt;p&gt;群里看到的题&lt;/p&gt;
&lt;pre class=&quot;line-numbers</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="SSRF" scheme="https://syunaht.com/tags/SSRF/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记:[2022强网杯]初赛</title>
    <link href="https://syunaht.com/p/299496437.html"/>
    <id>https://syunaht.com/p/299496437.html</id>
    <published>2022-07-31T06:05:34.000Z</published>
    <updated>2022-08-23T02:21:26.875Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;crash&quot;&gt;&lt;a href=&quot;#crash&quot; class=&quot;headerlink&quot; title=&quot;crash&quot;&gt;&lt;/a&gt;crash&lt;/h2&gt;&lt;h3 id=&quot;源码&quot;&gt;&lt;a href=&quot;#源码&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
    <category term="反序列化" scheme="https://syunaht.com/tags/%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/"/>
    
    <category term="flask" scheme="https://syunaht.com/tags/flask/"/>
    
  </entry>
  
  <entry>
    <title>CISCN2022初赛-Web</title>
    <link href="https://syunaht.com/p/1853756331.html"/>
    <id>https://syunaht.com/p/1853756331.html</id>
    <published>2022-05-29T14:48:07.000Z</published>
    <updated>2022-05-30T09:04:02.754Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;Ezpop&quot;&gt;&lt;a href=&quot;#Ezpop&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="比赛" scheme="https://syunaht.com/tags/%E6%AF%94%E8%B5%9B/"/>
    
  </entry>
  
  <entry>
    <title>从外网打点到内网漫游-入门级靶场渗透笔记</title>
    <link href="https://syunaht.com/p/3625148018.html"/>
    <id>https://syunaht.com/p/3625148018.html</id>
    <published>2022-04-02T12:18:29.000Z</published>
    <updated>2023-01-23T10:02:28.570Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="渗透" scheme="https://syunaht.com/categories/%E6%B8%97%E9%80%8F/"/>
    
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
    <category term="内网渗透" scheme="https://syunaht.com/tags/%E5%86%85%E7%BD%91%E6%B8%97%E9%80%8F/"/>
    
  </entry>
  
  <entry>
    <title>挖洞实战之信息泄露与前端加密</title>
    <link href="https://syunaht.com/p/2667916416.html"/>
    <id>https://syunaht.com/p/2667916416.html</id>
    <published>2022-03-15T12:49:22.000Z</published>
    <updated>2023-01-05T09:26:46.670Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;p&gt;本文首发于“合天网安实验室”&lt;/p&gt;
&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="SRC" scheme="https://syunaht.com/categories/SRC/"/>
    
    
    <category term="JS逆向" scheme="https://syunaht.com/tags/JS%E9%80%86%E5%90%91/"/>
    
  </entry>
  
  <entry>
    <title>Shiro550/Shiro721复现</title>
    <link href="https://syunaht.com/p/3654935441.html"/>
    <id>https://syunaht.com/p/3654935441.html</id>
    <published>2022-03-06T05:23:54.000Z</published>
    <updated>2022-03-06T08:14:56.398Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;Shiro550&quot;&gt;&lt;a href=&quot;#Shiro550&quot; class=&quot;headerlink&quot; title=&quot;Shiro550&quot;&gt;&lt;/a&gt;Shiro550&lt;/h2&gt;&lt;h3 id=&quot;原理&quot;&gt;&lt;a href=&quot;#原理&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="SRC" scheme="https://syunaht.com/categories/SRC/"/>
    
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
    <category term="CVE-2016-4437" scheme="https://syunaht.com/tags/CVE-2016-4437/"/>
    
    <category term="Shiro" scheme="https://syunaht.com/tags/Shiro/"/>
    
  </entry>
  
  <entry>
    <title>sqlmap-Tamper之较为通用的自动化双写绕过</title>
    <link href="https://syunaht.com/p/3775845718.html"/>
    <id>https://syunaht.com/p/3775845718.html</id>
    <published>2022-02-21T09:40:23.000Z</published>
    <updated>2023-01-05T09:25:04.813Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;p&gt;本文首发于“合天网安实验室”&lt;/p&gt;
&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="开发" scheme="https://syunaht.com/categories/%E5%BC%80%E5%8F%91/"/>
    
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
    <category term="sqlmap" scheme="https://syunaht.com/tags/sqlmap/"/>
    
    <category term="tamper" scheme="https://syunaht.com/tags/tamper/"/>
    
  </entry>
  
  <entry>
    <title>关于SwitchyOmega+Burpsuite+Chrome无法抓取127.0.0.1/localhost问题及解决办法</title>
    <link href="https://syunaht.com/p/1006188223.html"/>
    <id>https://syunaht.com/p/1006188223.html</id>
    <published>2022-01-09T07:56:24.000Z</published>
    <updated>2022-01-28T14:54:15.477Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot;</summary>
        
      
    
    
    
    <category term="杂谈" scheme="https://syunaht.com/categories/%E6%9D%82%E8%B0%88/"/>
    
    
    <category term="Burpsuite" scheme="https://syunaht.com/tags/Burpsuite/"/>
    
  </entry>
  
  <entry>
    <title>Apache Log4j2 RCE复现</title>
    <link href="https://syunaht.com/p/2341403076.html"/>
    <id>https://syunaht.com/p/2341403076.html</id>
    <published>2021-12-10T15:58:33.000Z</published>
    <updated>2022-01-28T14:54:15.477Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;这洞真的是鲨疯了，安全圈直接过年，我也借此挖了几个edu，好好体会了下挖洞的感觉，算是正式入src的门了吧。&lt;/p&gt;
&lt;h2</summary>
        
      
    
    
    
    <category term="SRC" scheme="https://syunaht.com/categories/SRC/"/>
    
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
    <category term="CVE-2021-44228" scheme="https://syunaht.com/tags/CVE-2021-44228/"/>
    
    <category term="SRC" scheme="https://syunaht.com/tags/SRC/"/>
    
  </entry>
  
  <entry>
    <title>赛题笔记:2021全国大学生软件测试Web安全测试个人赛-决赛</title>
    <link href="https://syunaht.com/p/4150217060.html"/>
    <id>https://syunaht.com/p/4150217060.html</id>
    <published>2021-11-18T12:58:26.000Z</published>
    <updated>2022-01-28T14:54:15.447Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;第一次参加，很多都是原题，发挥的不是很好，挺可惜的。&lt;/p&gt;
&lt;h2 id=&quot;Web1&quot;&gt;&lt;a href=&quot;#Web1&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="比赛" scheme="https://syunaht.com/tags/%E6%AF%94%E8%B5%9B/"/>
    
  </entry>
  
  <entry>
    <title>BurpSuite Pro 2021最新版破解激活教程及下载</title>
    <link href="https://syunaht.com/p/895015936.html"/>
    <id>https://syunaht.com/p/895015936.html</id>
    <published>2021-11-08T10:25:01.000Z</published>
    <updated>2022-01-28T14:54:15.477Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;还有很多师傅不知道，portswigger其实已经公开了各个版本的下载地址了。配合之前的keygen</summary>
        
      
    
    
    
    <category term="Tools" scheme="https://syunaht.com/categories/Tools/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="Burpsuite" scheme="https://syunaht.com/tags/Burpsuite/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记:[FBCTF2019]Products Manager</title>
    <link href="https://syunaht.com/p/4184488030.html"/>
    <id>https://syunaht.com/p/4184488030.html</id>
    <published>2021-11-08T07:08:31.000Z</published>
    <updated>2022-01-28T14:54:15.476Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;给了源码&lt;/p&gt;
&lt;p&gt;&lt;img</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记:[陇原战疫2021网络安全大赛]eaaasyphp</title>
    <link href="https://syunaht.com/p/389324891.html"/>
    <id>https://syunaht.com/p/389324891.html</id>
    <published>2021-11-07T05:27:24.000Z</published>
    <updated>2022-01-28T14:54:15.447Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;关键字:[fpm|fastcgi]&lt;/p&gt;
&lt;pre class=&quot;line-numbers language-php&quot;</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
  </entry>
  
  <entry>
    <title>赛题笔记:2021浙江省决赛</title>
    <link href="https://syunaht.com/p/1625935779.html"/>
    <id>https://syunaht.com/p/1625935779.html</id>
    <published>2021-10-30T09:26:14.000Z</published>
    <updated>2022-01-28T14:54:15.447Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;拿了省一，好耶。在此得感谢师傅们与好基友&lt;code&gt;@独奏&lt;/code&gt;的耐心教导。&lt;/p&gt;
&lt;h2 id=&quot;Web&quot;&gt;&lt;a</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="比赛" scheme="https://syunaht.com/tags/%E6%AF%94%E8%B5%9B/"/>
    
  </entry>
  
  <entry>
    <title>刷题笔记:[极客大挑战2021]验证码</title>
    <link href="https://syunaht.com/p/3538007516.html"/>
    <id>https://syunaht.com/p/3538007516.html</id>
    <published>2021-10-26T12:00:56.000Z</published>
    <updated>2021-11-07T03:10:50.648Z</updated>
    
    
      
      
        
        
    <summary type="html">&lt;h2 id=&quot;前言&quot;&gt;&lt;a href=&quot;#前言&quot; class=&quot;headerlink&quot; title=&quot;前言&quot;&gt;&lt;/a&gt;前言&lt;/h2&gt;&lt;p&gt;关键字:[验证码|ocr]&lt;/p&gt;
&lt;p&gt;感谢&lt;code&gt;@Hel1antHu5&lt;/code&gt;的指点。&lt;/p&gt;
&lt;p&gt;&lt;img</summary>
        
      
    
    
    
    <category term="Web" scheme="https://syunaht.com/categories/Web/"/>
    
    
    <category term="CTF" scheme="https://syunaht.com/tags/CTF/"/>
    
    <category term="Web" scheme="https://syunaht.com/tags/Web/"/>
    
  </entry>
  
</feed>
