Orange Orange ·

Pwn a CTF Platform with Java JRMP Gadget

📝

内容提要

打 CTF 打膩覺得沒啥新鮮感嗎，來試試打掉整個 CTF 計分板吧! 前幾個月，剛好看到某個大型 CTF 比賽開放註冊，但不允許台灣參加有點難過 :(看著官網最下面發現是 FlappyPig 所主辦，又附上 GitHub 原始碼 秉持著練習 Java code review 的精神就 git clone 下來找洞了! (以下測試皆在 FlappyPig...

🏷️

标签

java platform
➡️

继续阅读

  1. Single-tenant Titus: VM-level isolation on a multi-tenant container platform
    Samartha Chandrashekar & Nick ParkerYou click play on a Friday night, and...
  2. 探索全新方式，借助首期 Google Marketing Platform Drop 实现最佳投资回报
    谷歌推出月度资讯系列“Google Marketing Platform Drops”，介绍覆盖完整客户旅程的最新动态：Gartner 将谷歌评为广告平台...
  3. Vercel Labs Open-Sources fx: A Zig Coding Agent Designed to Be Embedded
    Vercel Labs has released fx, an experimental open-source coding agent written...
  4. Christophe Pettus: All Your GUCs in a Row: recovery_prefetch
    Standby lagging on network storage? `recovery_prefetch` lets WAL replay ask t...
  5. 脂蛋白a偏高：即使血脂LDL正常，冠心病风险暴增67%
    低密度脂蛋白正常，心脏照样出事！ 一项覆盖三万五千多人的[url=
  6. Amazon renames Kindle Unlimited to Kindle Plus and expands access to audiobooks
    The plus-ification of subscription services continues unabated with Amazon be...
👤 个人中心
在公众号发送验证码完成验证