ws4/ws4.github.io

Issues

• 高危漏洞狙击框架:woodpecker-framework | 回忆飘如雪

  #80 opened 3 years ago by ws4
  4

• CVE-2022-22947 Spring cloud gateway some problems

  #93 opened a year ago by Phoenix1112
  0

• 构造java探测class反序列化gadget | 回忆飘如雪

  #90 opened 3 years ago by ws4
  3

• [Vssue]fortify规则库解密之旅 | 回忆飘如雪

  #73 opened 5 years ago by ws4
  1

• Spring cloud gateway通过SPEL注入内存马 | 回忆飘如雪

  #92 opened 3 years ago by SummerSec
  2

• Java反序列化数据绕WAF之延时分块传输 | 回忆飘如雪

  #82 opened 3 years ago by ws4
  2

• 忆魁兄 | 回忆飘如雪

  #91 opened 3 years ago by ws4
  0

• RWCTF 4th Desperate Cat ASCII Jar Writeup | 回忆飘如雪

  #89 opened 3 years ago by ws4
  0

• 请问笔者开发的uplaod bypass framework在哪？

  #88 opened 3 years ago by jwt-123
  0

• weblogic下spring bean RCE的一些拓展 | 回忆飘如雪

  #87 opened 3 years ago by ws4
  0

• 通过加载class提高Neo-reGeorg兼容性 | 回忆飘如雪

  #86 opened 3 years ago by ws4
  0

• 有一个gadget正在泄露你的ID | 回忆飘如雪

  #85 opened 3 years ago by ws4
  0

• 10分钟总结所有类型SQL注入 | 回忆飘如雪

  #84 opened 3 years ago by ws4
  0

• 半自动化挖掘request实现多种中间件回显 | 回忆飘如雪

  #83 opened 3 years ago by ws4
  0

• 使用自定义ClassLoader解决反序列化serialVesionUID不一致问题 | 回忆飘如雪

  #81 opened 3 years ago by ws4
  0

• [Vssue]半自动化挖掘request实现多种中间件回显 | 回忆飘如雪

  #79 opened 5 years ago by ws4
  1

• [Vssue]通过dnslog探测fastjson的几种方法 | 回忆飘如雪

  #78 opened 5 years ago by ws4
  0

• [Vssue]如何更加精准地检测AJP协议文件包含漏洞(CVE-2020-1938) | 回忆飘如雪

  #77 opened 5 years ago by ws4
  0

• [Vssue]编写油猴脚本，实现自动登录下载Oracle产品 | 回忆飘如雪

  #70 opened 5 years ago by ws4
  2

• [Vssue]CVE-2020-1938:Tomcat AJP文件包含漏洞分析 | 回忆飘如雪

  #75 opened 5 years ago by ws4
  0

• [Vssue]CVE-2020-1938:Tomcat AJP协议文件包含漏洞分析 | 回忆飘如雪

  #76 opened 5 years ago by ws4
  0

• [Vssue]CVE-2019-17564:Apache dubbo HTTP协议反序列化漏洞分析 | 回忆飘如雪

  #74 opened 5 years ago by ws4
  0

• [Vssue]如何快速找到POC/EXP依赖的jar？ | 回忆飘如雪

  #72 opened 5 years ago by ws4
  0

• [Vssue]使ysoserial支持执行自定义代码 | 回忆飘如雪

  #71 opened 5 years ago by ws4
  0

• [Vssue]过滤器作用范围/和/*引发的安全问题 | 回忆飘如雪

  #69 opened 5 years ago by ws4
  0

• [Vssue]上传包可“绕过”Java过滤器的检查？ | 回忆飘如雪

  #68 opened 5 years ago by ws4
  0

• [Vssue]突破内网渗透中的访问策略限制 | 回忆飘如雪

  #67 opened 5 years ago by ws4
  0

• [Vssue]一个被广泛流传的XXE漏洞错误修复方案 | 回忆飘如雪

  #66 opened 5 years ago by ws4
  0

• [Vssue]探究Java中XXE漏洞的深层原理 | 回忆飘如雪

  #65 opened 5 years ago by ws4
  0

• [Vssue]从代码层面理解java的00截断漏洞深入篇 | 回忆飘如雪

  #64 opened 5 years ago by ws4
  0

• [Vssue]小玩具01:编写WSIS自动投票油猴脚本 | 回忆飘如雪

  #63 opened 5 years ago by ws4
  0

• [Vssue]解决jsEncrypter脚本错误代码不报错问题 | 回忆飘如雪

  #62 opened 5 years ago by ws4
  0

• [Vssue]构造优质上传漏洞fuzz字典 | 回忆飘如雪

  #61 opened 5 years ago by ws4
  0

• [Vssue]编写masscan报告转换脚本 | 回忆飘如雪

  #60 opened 5 years ago by ws4
  0

• [Vssue]从代码层面理解java的00截断漏洞 | 回忆飘如雪

  #59 opened 5 years ago by ws4
  0

• [Vssue]GhostScript沙箱绕过命令执行漏洞复现 | 回忆飘如雪

  #58 opened 5 years ago by ws4
  0

• [Vssue]XSS中的JS转义和HTML转义 | 回忆飘如雪

  #57 opened 5 years ago by ws4
  0

• [Vssue]Blind XXE经典payload引发的脑洞 | 回忆飘如雪

  #56 opened 5 years ago by ws4
  0

• [Vssue]10分钟总结所有类型SQL注入 | 回忆飘如雪

  #55 opened 5 years ago by ws4
  0

• [Vssue]复现JBossMQ JMS Invocation Layer漏洞（CVE-2017-7504） | 回忆飘如雪

  #54 opened 5 years ago by ws4
  0

• [Vssue]复现tomcat远程代码执行漏洞（CVE-2016-8735） | 回忆飘如雪

  #53 opened 5 years ago by ws4
  0

• [Vssue]jsEncrypter的Node.js版server脚本 | 回忆飘如雪

  #52 opened 5 years ago by ws4
  0

• [Vssue]快速定位前端加密方法 | 回忆飘如雪

  #51 opened 5 years ago by ws4
  0

• [Vssue]混淆Burp插件代码 | 回忆飘如雪

  #50 opened 5 years ago by ws4
  0

• [Vssue]填坑:PentestBox之工具名称搜索 | 回忆飘如雪

  #49 opened 5 years ago by ws4
  0

• [Vssue]Meltdown和Spectre漏洞学习笔记 | 回忆飘如雪

  #48 opened 5 years ago by ws4
  0

• [Vssue]编写加密传输爆破插件jsEncrypter | 回忆飘如雪

  #47 opened 5 years ago by ws4
  0

• [Vssue]永远的亚伦·斯沃茨 | 回忆飘如雪

  #46 opened 5 years ago by ws4
  0

• [Vssue]Burp Suite APIs分类归纳 | 回忆飘如雪

  #45 opened 5 years ago by ws4
  0

• [Vssue]Burp中的currentPayload和originalPayload | 回忆飘如雪

  #44 opened 5 years ago by ws4
  0