記事
Nov 5, 2024
强网杯 2024 By W&M
WEB - 7
Password Game
Proxy
platform
EzCalc
snake
Xiaohuanxiong
PyBlockly
PWN - 3
chat_with_me
expect_number
baby_heap
REVERSE - 2
mips
boxx
MISC - 8
谍影重重
Master of DFIR - Phishing
Maste ······
Oct 20, 2024
强网拟态 2024 By W&M
WEB
OnlineRunner
ez_pickle
Spreader
capoo
REVERSE
Serv1ce
A_game
babyre
Misc
ezflag
Find way to read video
Pvz
Streaming
Input Page Walk
PWN
signin
signin_revenge
QWEN
ezcode
gruess_book ······
Oct 1, 2024
SCTF 2024 By W&M
WEB
SycServer2.0
havefun
ezRender
Simpleshop
ezjump
ez_tex
Reverse
BBox
logindemo
ez_cython
Pwn
c_or_go
GoComplier
Factory
kno_puts
kno_puts_revenge
vmCode
Crypto
Signin
不完全阻塞干扰
Whisper
······
Sep 23, 2024
ByteCTF 2024 By W&M
WEB
ezauth
ezobj
OnlyBypassMe
CrossVue
ezoldbuddy
PWN
ezheap
Reverse
babyApk
ByteKit
Bytebuffer
Crypto
magic_lfsr
MISC
ByteInTheAir
Bash Game
Guess Cookie
AI
What I say
Ezai
Mobile ······
Sep 11, 2024
WMCTF 2024 WriteUp
WEB
PasswdStealer
前言
SpringBoot场景下的利用
step1 触发超时
step2 进入循环
step3 泄露回显
最终利用
EzQl
解法一
解法二
Jvm-go
YourWA
信息收集
文件读取
利用
Spectre
XSS 实现
XSS 之后：原型链污染（非预期）
XSS 之后：SharedArrayBuffer 那些事
PW ······