<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0">
    <channel>
      <title>V9d0g</title>
      <link>https://v9d0g.github.io</link>
      <description>最近的10条笔记 on V9d0g</description>
      <generator>Quartz -- quartz.jzhao.xyz</generator>
      <item>
    <title>2020-第五空间智能安全大赛</title>
    <link>https://v9d0g.github.io/CTF-WP/2020-%E7%AC%AC%E4%BA%94%E7%A9%BA%E9%97%B4%E6%99%BA%E8%83%BD%E5%AE%89%E5%85%A8%E5%A4%A7%E8%B5%9B</link>
    <guid>https://v9d0g.github.io/CTF-WP/2020-%E7%AC%AC%E4%BA%94%E7%A9%BA%E9%97%B4%E6%99%BA%E8%83%BD%E5%AE%89%E5%85%A8%E5%A4%A7%E8%B5%9B</guid>
    <description><![CDATA[ 2020-第五空间智能安全大赛 hate-php 题型:RCE 漏洞原因:assert($code) &lt;?php error_reporting(0); if(!isset($_GET[&#039;code&#039;])){ highlight_file(__FILE__); }else{ $code = $_GET[&#039;code&#039;]; if (preg_match(&#039;/(f|l|a|g|\.|p|h|\/|;|\&quot;|\&#039;|\`|\||\[|\]|\_|=)/i&#039;,$code)) { die(&#039;You are too ... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2021-祥云杯</title>
    <link>https://v9d0g.github.io/CTF-WP/2021-%E7%A5%A5%E4%BA%91%E6%9D%AF</link>
    <guid>https://v9d0g.github.io/CTF-WP/2021-%E7%A5%A5%E4%BA%91%E6%9D%AF</guid>
    <description><![CDATA[ 2021-祥云杯 blog.z3ratu1.top/%E7%A5%A5%E4%BA%91%E6%9D%AF2021%20wp.html Secret of Admin 题型: typescript ssrf 文件目录访问 漏洞原因: router.get(‘/api/files’, async (req, res, next) router.get(‘/api/files/:id’, async (req, res) 源代码: import * as express from &#039;express&#039;; import { Request, Response, NextFuncti... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2021-第五届世界智能大会</title>
    <link>https://v9d0g.github.io/CTF-WP/2021-%E7%AC%AC%E4%BA%94%E5%B1%8A%E4%B8%96%E7%95%8C%E6%99%BA%E8%83%BD%E5%A4%A7%E4%BC%9A</link>
    <guid>https://v9d0g.github.io/CTF-WP/2021-%E7%AC%AC%E4%BA%94%E5%B1%8A%E4%B8%96%E7%95%8C%E6%99%BA%E8%83%BD%E5%A4%A7%E4%BC%9A</guid>
    <description><![CDATA[ 2021-第五届世界智能大会 hate-php 题型:RCE 漏洞原因:eval($code); &lt;?php error_reporting(0); if(!isset($_GET[&#039;code&#039;])){ highlight_file(__FILE__); }else{ $code = $_GET[&#039;code&#039;]; if(preg_match(&quot;/[A-Za-z0-9_$@]+/&quot;,$code)){ die(&#039;fighting!&#039;); } eval($code); } 过滤了大小写字母、数字、下划线、$、@ 数... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2021-第五空间智能安全大赛</title>
    <link>https://v9d0g.github.io/CTF-WP/2021-%E7%AC%AC%E4%BA%94%E7%A9%BA%E9%97%B4%E6%99%BA%E8%83%BD%E5%AE%89%E5%85%A8%E5%A4%A7%E8%B5%9B</link>
    <guid>https://v9d0g.github.io/CTF-WP/2021-%E7%AC%AC%E4%BA%94%E7%A9%BA%E9%97%B4%E6%99%BA%E8%83%BD%E5%AE%89%E5%85%A8%E5%A4%A7%E8%B5%9B</guid>
    <description><![CDATA[ 2021-第五空间智能安全大赛 easycleanup? 题型:RCE 漏洞原因:include $_GET[‘file’]; &lt;?php if(!isset($_GET[&#039;mode&#039;])){ highlight_file(__file__); }else if($_GET[&#039;mode&#039;] == &quot;eval&quot;){ $shell = $_GET[&#039;shell&#039;] ?? &#039;phpinfo();&#039;; if(strlen($shell) &gt; 15 | filter($shell) | che... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2021-第四届红帽杯</title>
    <link>https://v9d0g.github.io/CTF-WP/2021-%E7%AC%AC%E5%9B%9B%E5%B1%8A%E7%BA%A2%E5%B8%BD%E6%9D%AF</link>
    <guid>https://v9d0g.github.io/CTF-WP/2021-%E7%AC%AC%E5%9B%9B%E5%B1%8A%E7%BA%A2%E5%B8%BD%E6%9D%AF</guid>
    <description><![CDATA[ 2021-第四届红帽杯 find_it 题型:文件泄露 漏洞原因:fwrite(hack,a); 备份文件的可能形式 /.xxx.xx.swp /xxx.DS_Store /.git /.svn 通过目录扫描找到robots.txt(爬虫协议) 该文件指明了1ndex.php文件 但无法访问 挨个试 找到.1ndex.php.swp &lt;?php $link = mysql_connect(&#039;localhost&#039;, &#039;ctfhub&#039;, &#039;ctfhub&#039;); echo &quot;Hello My freind!&quot;; if... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2022-LineCtf</title>
    <link>https://v9d0g.github.io/CTF-WP/2022-LineCtf</link>
    <guid>https://v9d0g.github.io/CTF-WP/2022-LineCtf</guid>
    <description><![CDATA[ 2022-LineCtf gotm 题型:SSTI注入 漏洞原因:GO语言 new_acc := Account{uid, upw, false, secret_key}，get_account(id) 源代码: package main import ( &quot;encoding/json&quot; &quot;fmt&quot; &quot;log&quot; &quot;net/http&quot; &quot;os&quot; &quot;text/template&quot; &quot;github.com/golang-jwt/jwt&quot; ) type Accoun... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2023-NewstarCTF-WEB</title>
    <link>https://v9d0g.github.io/CTF-WP/2023-NewstarCTF-WEB</link>
    <guid>https://v9d0g.github.io/CTF-WP/2023-NewstarCTF-WEB</guid>
    <description><![CDATA[ 2023-NewstarCTF WEB WEEK1-泄露的秘密 题型:信息泄露 漏洞原因:www.zip、robots.txt文件 首先访问/robots.txt 可以得到一半的flag 但是这时候可以尝试去访问网站备份 .bak .svn .swp 都不行 再想想是否可能下载得了备份文件 访问/www.zip下载到网站源码 查看即可 WEEK1-ErrorFlask 题型:Flask报错页面信息泄露 漏洞原因:Flask报错页面信息泄露 题目提示：输入number1 number2 尝试使用GET方式传值 url/?number1=1&amp;number2=1 可以看到页面回显 不是SST... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2023-古剑杯</title>
    <link>https://v9d0g.github.io/CTF-WP/2023-%E5%8F%A4%E5%89%91%E6%9D%AF</link>
    <guid>https://v9d0g.github.io/CTF-WP/2023-%E5%8F%A4%E5%89%91%E6%9D%AF</guid>
    <description><![CDATA[ 2023-古剑杯 CRYPTO guess the key 黑盾杯2019WEB原题——guess the keywww.manongjc.com/detail/18-azqewyhlwnbynee.html 题型:逆向解密 这个题应该是属于逆向的吧，难点是根据题目的C代码给出加密算法的逆向 #include &lt;stdlib.h&gt; #include &lt;stdio.h&gt; #include &lt;string.h&gt; int main(int argc, char **argv) { if (argc != 3) { printf(&quot;USAGE: %s IN... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>2023-柏鹭杯</title>
    <link>https://v9d0g.github.io/CTF-WP/2023-%E6%9F%8F%E9%B9%AD%E6%9D%AF</link>
    <guid>https://v9d0g.github.io/CTF-WP/2023-%E6%9F%8F%E9%B9%AD%E6%9D%AF</guid>
    <description><![CDATA[ 2023-柏鹭杯 WEB express fs 题型:任意文件读取 关键字绕过 express原型链污染 漏洞原因:/proc/self/cmdline源码泄露 在任意文件读取的里面 有个重要的点 就是通过linux系统里面的特殊文件泄露信息 /var/log/access.log # /etc/passwd # /proc/self/environ # /proc/sched_debug # 提供cpu上正在运行的进程信息，可以获得进程的pid号，可以配合后面需要pid的利用 /proc/mounts # 挂载的文件系统列表 /proc/net/arp # arp表，可以获得内网其他机器的地... ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item><item>
    <title>SDCMS V2.8 commnd execution</title>
    <link>https://v9d0g.github.io/%E5%85%AC%E5%BC%80vuln/SDCMS-V2.8-commnd-execution</link>
    <guid>https://v9d0g.github.io/%E5%85%AC%E5%BC%80vuln/SDCMS-V2.8-commnd-execution</guid>
    <description><![CDATA[ SDCMS V2.8 commnd execution SDCMS V2.8命令执行 Environment 环境 V2.8 www.sdcms.cn/cms.html Analysis 分析 There is a hidden danger in the security filtering method of template content in app\admin\controller\theme.php, which can cause arbitrary command execution through code injection. ]]></description>
    <pubDate>Fri, 14 Aug 2026 06:28:17 GMT</pubDate>
  </item>
    </channel>
  </rss>