🏯 HOME 📁 Archives 📣 About ME 📒Old Blog 📌 Advertisements
| Time | Name | Tags |
|---|---|---|
| 01/04 | PL-1-Intermediate-Representation | PL |
| 01/06 | PL-2-Data-Flow-Analysis | PL |
| 01/07 | PL-3-Data Analysis Foundation | PL |
| 01/08 | PL-4-Interprocedural Analysis | PL |
| 01/20 | Log4j2漏洞分析 | Log4j2/Java/Vul |
| 02/15 | Java加载动态链接库方式 | Java/DLL/Load |
| 02/20 | CodeQL与AST之间联系 | CodeQL/AST/Java |
| 02/21 | CodeQL初见Shiro550 | CodeQL/Java/Shiro |
| 02/21 | CodeQL与Shiro550碰撞 | CodeQL/Java/Shiro |
| 02/27 | Hack-Tools2Web | Hack/Tools/Web |
| 03/02 | shiro反序列化漏洞攻击拓展面--修改key | shiro/key/Java/Web |
| 03/10 | [GitHub Java CodeQL CTF](./2022/GitHub Java CodeQL CTF.md) | CodeQL/Java/CTF |
| 03/14 | Shiro后渗透拓展面 | Shiro/Agent/Web/Java |
| 03/18 | [Spring Boot RCE到内存马探索](./2022/Spring Boot RCE到内存马探索.md) | Spring/RCE/MemShell |
| 03/29 | CodeQL Usage Tricks | CodeQL/Tricks/Java |
| Time | Name | Tags |
|---|---|---|
| 04/15 | PII泄露--用CodeQL识别日志中的PII数据 | CodeQL/Java |
| 04/24 | CodeQL workshop for Java Unsafe deserialization in Apache Struts | CodeQL/Java |
| 06/05 | weblogic之CVE-2020-2551iiop反序列化漏洞分析 | Java |
| 06/05 | weblogic之CVE-2020-2551iiop反序列化漏洞复现 | Java |
| 07/15 | Fastjson回显 | Java/Fastjson |
| 07/21 | Tomcat通用回显学习笔记 | Java |
| 08/03 | 从Java反序列化漏洞题看CodeQL数据流 | CodeQL/Java |
| 11/01 | Shiro-550反序列化漏洞分析 | shiro550/Java |
| 11/09 | 记一次Log4j失败的Gadget挖掘记录 | CodeQL/Java |
| 11/15 | ysoserial改造记录 | ysoserial/Java |
| 11/30 | JNDI注入 | JNDI/Java |
| 12/08 | shiro-JRMP-gadget | shiro/exp |
| 12/21 | Fastjson_Mysql_gadget复现 | fastjson/exp |
| 12/31 | 2021年度总结 | 总结 |
广告位持续招租。。。。。。