shadowsock5/sec_blogs

Web security blogs that doesnt support RSS

Ref

• https://github.com/404notf0und/Security-Data-Analysis-and-Visualization/blob/master/2018-2020%E5%9B%BD%E5%86%85%E5%AE%89%E5%85%A8%E5%9C%88%E6%B4%BB%E8%B7%83%E6%8A%80%E6%9C%AF%E5%8D%9A%E4%B8%BB.csv

https://lufe1.cn/

• https://lufe1.cn/2018/05/18/SSO%E5%88%86%E6%9E%90/#more
• https://lufe1.cn/2018/11/10/sqlmap%E5%A6%82%E4%BD%95%E5%88%A4%E6%96%AD%E6%95%B0%E6%8D%AE%E5%BA%93%E7%B1%BB%E5%9E%8B/
• https://lufe1.cn/2018/12/02/SQLMAP%E5%A6%82%E4%BD%95%E8%87%AA%E5%8A%A8%E6%A3%80%E6%B5%8BBoolean%E5%9E%8B%E6%B3%A8%E5%85%A5/#more
• https://lufe1.cn/2018/05/18/SSO分析/#more
• https://lufe1.cn/2018/05/18/Burp%20SQLi%20Scanner/#more

https://threezh1.com/

https://pingmaoer.github.io/

• https://pingmaoer.github.io/2019/08/27/%E5%88%A9%E7%94%A8Java%E5%8F%8D%E5%B0%84%E5%92%8C%E7%B1%BB%E5%8A%A0%E8%BD%BD%E6%9C%BA%E5%88%B6%E7%BB%95%E8%BF%87Jsp%E5%90%8E%E9%97%A8%E6%A3%80%E6%8B%BFshell%E7%9A%84%E4%B8%80%E6%AC%A1%E7%BB%8F%E5%8E%86/

https://p0rz9.github.io/

• https://p0rz9.github.io/2019/06/15/Ysoserial%E4%B9%8BSpring1_2/
• https://p0rz9.github.io/2019/05/28/SpEL%E8%A1%A8%E8%BE%BE%E5%BC%8F%E6%B3%A8%E5%85%A5/
• https://p0rz9.github.io/2019/05/28/SpEL表达式注入/

http://www.lmxspace.com

• http://www.lmxspace.com/2019/10/08/Java下奇怪的命令执行/
• http://www.lmxspace.com/2019/10/17/Shiro-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%AE%B0%E5%BD%95/

https://only-free.github.io/

https://only-free.github.io/2019/05/23/dui-web-an-quan-de-yi-xie-jing-yan-fen-xiang-url-tiao-zhuan-pian/

https://lalajun.github.io/

https://susers.github.io/

• https://susers.github.io/Web/SSRF-DOCKER-RCE/
• https://susers.github.io/uncategorized/flask-session/
• https://susers.github.io/Web/java-deserialize/

http://hexo.imagemlt.xyz/

https://www.jianshu.com/u/bf30f18c872c

• Bash /dev/(tcp|udp)/${HOST}/${PORT} 分析

https://www.kingkk.com/

• [XXE防御笔记]https://www.kingkk.com/2019/07/XXE%E9%98%B2%E5%BE%A1%E7%AC%94%E8%AE%B0/

http://adm1n.design/

http://admintony.com/

http://pupiles.com

• http://pupiles.com/java_unserialize2.html

https://blog.cyru1s.com

https://mengsec.com

• https://mengsec.com/2019/09/29/bitbucket-path-travel-to-rce/

http://www.code2sec.com

• http://www.code2sec.com/javafan-xu-lie-hua-lou-dong-xue-xi-shi-jian-liu-lei-de-jia-zai-ji-zhi-he-e-yi-lei-gou-zao.html
• http://www.code2sec.com/javazhong-huo-qu-urlde-hostde-zheng-que-zi-shi.html

https://laworigin.github.io

• https://laworigin.github.io/2019/01/11/s2-045-调试分析/#more

https://klionsec.github.io

• https://klionsec.github.io/2017/12/20/ldap-sec/

http://p2j.cn/