https://zeddyu.github.io/tags/rce/Recent content in RCE on Zeddy's BlogHugo -- gohugo.ioen-usFri, 08 Mar 2019 23:31:42 +0000https://zeddyu.github.io/p/web-for-pentest/Fri, 08 Mar 2019 23:31:42 +0000https://zeddyu.github.io/p/web-for-pentest/<p>很久之前就想做的靶机，一直没做，最近有空清理一下。地址在<a class="link" href="https://pentesterlab.com/exercises?dir=desc&amp;only=free&amp;sort=published_at" target="_blank" rel="noopener" >PentestLab</a></p>https://zeddyu.github.io/p/%E5%B7%A7%E7%94%A8%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E7%9A%84n%E7%A7%8D%E6%96%B9%E5%BC%8F/Thu, 17 Jan 2019 18:55:27 +0000https://zeddyu.github.io/p/%E5%B7%A7%E7%94%A8%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E7%9A%84n%E7%A7%8D%E6%96%B9%E5%BC%8F/<blockquote> <p>​ 本文首发于补天平台，地址：https://mp.weixin.qq.com/s/Hm6TiLHiAygrJr-MGRq9Mw</p> </blockquote> <p>在<code>NUAACTF_2018</code>中，我出了一道比较水的采用<code>Spring</code>框架的<code>SSRF</code>+<code>Java Deserialization</code>+<code>Command Injection</code>。个人觉得在出题时候也学习到了不少知识，特别是在<code>Command Injection</code>这一块让我对<code>Command Injection</code>有了新的看法。</p>