如何黑盒检测fasterxml jackson反序列化漏洞
黑盒检测检测jackson反序列化的步骤
序
前段时间，fasterxml jackson又出新的反序列化的payload了，看看各家的通告。心里想着，啥时候能测到一个反序列化漏洞。
[Read More]
-
-
Learning XXE with gosecure
Gosecure的XXE环境学习记录
LAB 1: Basic XXE ./gradlew build 没有反应，修改版本 21_rssviewer_xxe/gradle/wrapper/gradle-wrapper.properties distributionUrl=https\://services.gradle.org/distributions/gradle-4.8.1-all.zip 重新build即可。 [Read More] -
Learning SSTI with gosecure
Gosecure的SSTI环境学习记录
环境地址 gosecure 的ssti教程地址template-injection-workshop [Read More] -
Intigriti XSS Challenge-2020 Writeup
Intigriti’s December XSS Challenge https://challenge-1220.intigriti.io/ [Read More] -
An unsuccessful expressjs SSTI story
Recon Response Header x-powered-by: express. An expressjs website. [Read More]