unknown's blog

  1. Archives
  2. Categories
  3. Friends
  4. About

# 2024

仿照springboot手搓一个maven打包插件
July 3rd
moonbox 简单审计
May 5th
AliyunCTF2024-chain17 详解
March 28th
XStream: 我是如何使用codeql独立挖掘利用链的
March 10th
XStream: 反序列化流程分析与历史各版本修复
March 8th
hibernate 各版本反序列化链
March 4th
FastJson(1): 流程分析
March 1st
FastJson(2): 漏洞分析
March 1st
FastJson(3): fj与反序列化
March 1st
hgame2024: 两个有趣java
February 29th
实践：分块传输打内存马
February 29th
JDBC: MYSQL
February 26th
JDBC: PGSQL
February 26th
JRMP反序列化
February 25th
Spring反序列化链1
February 23rd
Spring反序列化链2
February 23rd
JNDI注入学习
February 13th
RMI反序列化学习笔记(1): 流程分析
February 12th
RMI反序列化学习笔记(2): 攻击实现
February 12th
RMI反序列化学习笔记(3): 绕过手法
February 12th
Tomcat回显技术学习
February 7th
内存马结合反序列化
February 7th
Agent内存马学习
February 6th
Spring内存马学习
February 6th
Tomcat内存马学习
February 4th

# 2023

Hessian Deserialization Summary
October 8th
Java|AliyunCTF2023-ezbean 两个解法
June 16th