{"title":"Yang Hao's blog","subtitle":"Yang Hao's blog","link":[{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/atom.xml","rel":"self"}},{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/"}}],"updated":"2025-01-24T10:24:10.753Z","id":"https:\/\/yanghaoi.github.io\/","author":{"name":"YangHao"},"generator":"Hexo","entry":[{"title":"PHP filters\u548cCVE-2024-2961\u7ec4\u5408:\u4ece\u6587\u4ef6\u8bfb\u53d6\u5230RCE","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2024\/12\/04\/phpfilters-he-cve-2024-2961-cong-wen-jian-du-qu-dao-rce\/"}},"id":"https:\/\/yanghaoi.github.io\/2024\/12\/04\/phpfilters-he-cve-2024-2961-cong-wen-jian-du-qu-dao-rce\/","published":"2024-12-04T06:27:20.270Z","updated":"2025-01-24T10:24:10.753Z","summary":"

<\/a>1. \u7b80\u4ecb<\/h2>

glibc\uff08GNU C Library\uff09\u662f GNU \u9879\u76ee\u7684\u4e00\u90e8\u5206\uff0c\u4e3b\u8981\u4e3a\u57fa\u4e8e Unix \u7684\u7cfb\u7edf\uff08\u5982 Linux\uff09\u63d0\u4f9b","category":[{"@attributes":{"term":"\u6f0f\u6d1e\u590d\u73b0","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0\/"}},{"@attributes":{"term":"CVE-2024-2961","scheme":"https:\/\/yanghaoi.github.io\/tags\/CVE-2024-2961\/"}}]},{"title":"Fastjson\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1e\u590d\u73b0","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2024\/08\/18\/fastjson-lou-dong-chang-jian-wa-jue-he-li-yong-fang-fa\/"}},"id":"https:\/\/yanghaoi.github.io\/2024\/08\/18\/fastjson-lou-dong-chang-jian-wa-jue-he-li-yong-fang-fa\/","published":"2024-08-18T14:14:47.337Z","updated":"2025-01-24T08:04:58.161Z","summary":"

<\/a>0x01 \u7b80\u4ecb<\/h2>

Fastjson \u662f\u963f\u91cc\u5df4\u5df4\u5f00\u6e90\u7684\u4e00\u4e2a\u9ad8\u6027\u80fd JSON \u5e93\uff0c\u5e7f\u6cdb\u5e94\u7528\u4e8e Java \u5e94\u7528\u4e2d\u8fdb\u884c","category":[{"@attributes":{"term":"\u6f0f\u6d1e\u590d\u73b0","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0\/"}},{"@attributes":{"term":"Fastjson","scheme":"https:\/\/yanghaoi.github.io\/tags\/Fastjson\/"}}]},{"title":"\u5229\u7528Azure Attest Service\u6301\u4e45\u5316","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2022\/08\/29\/li-yong-azureattestservice-chi-jiu-hua\/"}},"id":"https:\/\/yanghaoi.github.io\/2022\/08\/29\/li-yong-azureattestservice-chi-jiu-hua\/","published":"2022-08-29T00:57:32.220Z","updated":"2022-08-29T02:48:32.111Z","summary":"

<\/a>0x01 \u7b80\u4ecb<\/h2>

AzureAttestService<\/code>\u662f\u5b89\u88c5SQL","category":[{"@attributes":{"term":"\u6743\u9650\u7ef4\u6301","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%9D%83%E9%99%90%E7%BB%B4%E6%8C%81\/"}},{"@attributes":{"term":"LOLBAS","scheme":"https:\/\/yanghaoi.github.io\/tags\/LOLBAS\/"}}]},{"title":"Windows Installer\u5b89\u88c5\u5305\u7684\u6784\u5efa\u548c\u6267\u884c","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2022\/03\/28\/windows-installer-an-zhuang-bao-de-gou-jian-he-zhi-xing\/"}},"id":"https:\/\/yanghaoi.github.io\/2022\/03\/28\/windows-installer-an-zhuang-bao-de-gou-jian-he-zhi-xing\/","published":"2022-03-28T12:12:43.906Z","updated":"2022-06-02T09:46:46.623Z","summary":"

<\/a>0x01 \u7b80\u4ecb<\/h2>

Msiexec\u662fWIndows\u4e0a\u4ece\u547d\u4ee4\u884c\u6267\u884cWindows","category":[{"@attributes":{"term":"Defense Evasion","scheme":"https:\/\/yanghaoi.github.io\/categories\/Defense-Evasion\/"}},{"@attributes":{"term":"Proxy Execution","scheme":"https:\/\/yanghaoi.github.io\/tags\/Proxy-Execution\/"}},{"@attributes":{"term":"Msiexec","scheme":"https:\/\/yanghaoi.github.io\/tags\/Msiexec\/"}}]},{"title":"360\u9694\u79bb\u6c99\u7bb1\u9003\u9038","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2022\/03\/18\/360-ge-chi-sha-xiang-tao-yi\/"}},"id":"https:\/\/yanghaoi.github.io\/2022\/03\/18\/360-ge-chi-sha-xiang-tao-yi\/","published":"2022-03-18T07:15:09.220Z","updated":"2023-05-01T14:37:42.493Z","summary":"

<\/a>0x01","category":[{"@attributes":{"term":"Defense Evasion","scheme":"https:\/\/yanghaoi.github.io\/categories\/Defense-Evasion\/"}},{"@attributes":{"term":"\u6c99\u7bb1\u9003\u9038","scheme":"https:\/\/yanghaoi.github.io\/tags\/%E6%B2%99%E7%AE%B1%E9%80%83%E9%80%B8\/"}}]},{"title":"\u901a\u8fc7 C++ \u64cd\u4f5c\u6ce8\u518c\u8868\u7981\u7528 Windows Defender","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2022\/03\/07\/tong-guo-c-cao-zuo-zhu-ce-biao-jin-yong-windows-defender\/"}},"id":"https:\/\/yanghaoi.github.io\/2022\/03\/07\/tong-guo-c-cao-zuo-zhu-ce-biao-jin-yong-windows-defender\/","published":"2022-03-07T03:39:19.880Z","updated":"2024-08-18T12:23:59.978Z","summary":"

<\/a>0x01 \u7b80\u4ecb<\/h2>

\u6700\u8fd1\u6574\u7406\u6587\u4ef6\uff0c\u53d1\u73b0\u81ea\u5df1\u4e4b\u524d\u7981\u7528Windows","category":[{"@attributes":{"term":"\u5b89\u5168\u5de5\u5177","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E5%AE%89%E5%85%A8%E5%B7%A5%E5%85%B7\/"}},{"@attributes":{"term":"C++ \u6ce8\u518c\u8868\u64cd\u4f5c","scheme":"https:\/\/yanghaoi.github.io\/tags\/C-%E6%B3%A8%E5%86%8C%E8%A1%A8%E6%93%8D%E4%BD%9C\/"}}]},{"title":"PHP\u4efb\u610f\u6587\u4ef6\u4e0a\u4f20\u7ed5\u8fc7\u591a\u91cd\u9650\u5236","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/11\/24\/php-ren-yi-wen-jian-shang-chuan-rao-guo-duo-chong-xian-zhi\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/11\/24\/php-ren-yi-wen-jian-shang-chuan-rao-guo-duo-chong-xian-zhi\/","published":"2021-11-24T02:46:26.349Z","updated":"2021-12-30T08:43:05.073Z","summary":"

<\/a>0x01","category":[{"@attributes":{"term":"\u6e17\u900f\u6d4b\u8bd5","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95\/"}},{"@attributes":{"term":"\u963f\u91cc\u4e91WAF\u7ed5\u8fc7","scheme":"https:\/\/yanghaoi.github.io\/tags\/%E9%98%BF%E9%87%8C%E4%BA%91WAF%E7%BB%95%E8%BF%87\/"}},{"@attributes":{"term":"PHP\u4e8c\u6b21\u6e32\u67d3\u7ed5\u8fc7","scheme":"https:\/\/yanghaoi.github.io\/tags\/PHP%E4%BA%8C%E6%AC%A1%E6%B8%B2%E6%9F%93%E7%BB%95%E8%BF%87\/"}}]},{"title":"DLL\u52ab\u6301\u6f0f\u6d1e","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/11\/18\/dll-jie-chi-lou-dong\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/11\/18\/dll-jie-chi-lou-dong\/","published":"2021-11-18T08:10:41.850Z","updated":"2022-03-10T07:44:40.924Z","summary":"

<\/a>0x01","category":[{"@attributes":{"term":"\u57fa\u7840\u6f0f\u6d1e","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E5%9F%BA%E7%A1%80%E6%BC%8F%E6%B4%9E\/"}},{"@attributes":{"term":"Windows DLL\u52ab\u6301","scheme":"https:\/\/yanghaoi.github.io\/tags\/Windows-DLL%E5%8A%AB%E6%8C%81\/"}}]},{"title":"\u4e00\u6b21HSTS\u8b66\u544a\u7684\u6392\u67e5","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/11\/03\/yi-ci-hsts-jing-gao-de-pai-cha\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/11\/03\/yi-ci-hsts-jing-gao-de-pai-cha\/","published":"2021-11-02T18:18:06.422Z","updated":"2021-11-02T18:26:16.575Z","summary":"

\u6700\u8fd1\u8bbf\u95ee\u535a\u5ba2\u53d1\u73b0\u9875\u9762\u663e\u793a\u4e0d\u6b63\u5e38\uff0cF12\u67e5\u770b\u7f51\u7edc\u60c5\u51b5\u540e\u53d1\u73b0cloudflare\u52a0\u8f7d\u7684\u9759\u6001\u8d44\u6e90\u51fa\u4e86\u95ee\u9898\uff0c\u5177\u4f53\u8868\u73b0\u4e3a\u6d4f\u89c8\u5668\u51fa\u73b0HSTS\u8b66\u544a\uff0c\u4f7f\u7528socks5\u4ee3\u7406\u65f6\u6b63\u5e38(\u4f7f\u7528socks5\u4ee3\u7406\u65f6\uff0cDNS\u67e5\u8be2\u4e5f\u662f\u7528\u7684socks5\u4ee3\u7406)\uff1a
<\/a>0x01 \u7b80\u4ecb<\/h2>

Redis","category":[{"@attributes":{"term":"\u6f0f\u6d1e\u5229\u7528","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8\/"}},{"@attributes":{"term":"Redis\u6f0f\u6d1e\u5229\u7528","scheme":"https:\/\/yanghaoi.github.io\/tags\/Redis%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8\/"}}]},{"title":"SSRF\u6f0f\u6d1e\u57fa\u7840","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/10\/07\/ssrf-lou-dong-ji-chu\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/10\/07\/ssrf-lou-dong-ji-chu\/","published":"2021-10-06T17:16:12.129Z","updated":"2021-10-18T09:46:39.162Z","summary":"

<\/a>0x01 \u7b80\u4ecb<\/h2>

SSRF(Server-side request forgery\uff0c\u670d\u52a1\u7aef\u8de8\u7ad9\u8bf7\u6c42\u4f2a\u9020)\u662f\u4e00\u79cd","category":[{"@attributes":{"term":"\u57fa\u7840\u6f0f\u6d1e","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E5%9F%BA%E7%A1%80%E6%BC%8F%E6%B4%9E\/"}},{"@attributes":{"term":"SSRF\u6f0f\u6d1e","scheme":"https:\/\/yanghaoi.github.io\/tags\/SSRF%E6%BC%8F%E6%B4%9E\/"}}]},{"title":"XXE\u6f0f\u6d1e\u57fa\u7840","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/10\/06\/xxe-lou-dong-ji-chu\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/10\/06\/xxe-lou-dong-ji-chu\/","published":"2021-10-06T13:52:05.000Z","updated":"2024-07-04T04:59:32.640Z","summary":"

<\/a>0x01","category":[{"@attributes":{"term":"\u57fa\u7840\u6f0f\u6d1e","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E5%9F%BA%E7%A1%80%E6%BC%8F%E6%B4%9E\/"}},{"@attributes":{"term":"XXE\u6f0f\u6d1e","scheme":"https:\/\/yanghaoi.github.io\/tags\/XXE%E6%BC%8F%E6%B4%9E\/"}}]},{"title":"Webgoat\u9776\u573a\u8c03\u8bd5\u73af\u5883\u914d\u7f6e","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/10\/05\/webgoat-ba-chang-diao-shi-huan-jing-pei-zhi\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/10\/05\/webgoat-ba-chang-diao-shi-huan-jing-pei-zhi\/","published":"2021-10-05T13:52:05.000Z","updated":"2021-11-25T02:49:43.593Z","summary":"

<\/a>0x01 \u7b80\u4ecb<\/h2>

\u9009\u62e9<\/a>0x01","category":[{"@attributes":{"term":"\u5b89\u5168\u5de5\u5177","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E5%AE%89%E5%85%A8%E5%B7%A5%E5%85%B7\/"}},{"@attributes":{"term":"CobaltStrike","scheme":"https:\/\/yanghaoi.github.io\/tags\/CobaltStrike\/"}},{"@attributes":{"term":"\u6d41\u91cf\u4f2a\u88c5","scheme":"https:\/\/yanghaoi.github.io\/tags\/%E6%B5%81%E9%87%8F%E4%BC%AA%E8%A3%85\/"}}]},{"title":"PHPStorm+PHPStudy\u8c03\u8bd5\u914d\u7f6e","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/07\/27\/phpstudy-phpstorm-de-dai-ma-diao-shi-pei-zhi\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/07\/27\/phpstudy-phpstorm-de-dai-ma-diao-shi-pei-zhi\/","published":"2021-07-27T11:25:05.292Z","updated":"2021-11-02T18:19:37.727Z","summary":"

<\/a>0x01","category":[{"@attributes":{"term":"\u4ee3\u7801\u5ba1\u8ba1","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1\/"}},{"@attributes":{"term":"PHPStorm\u8c03\u8bd5","scheme":"https:\/\/yanghaoi.github.io\/tags\/PHPStorm%E8%B0%83%E8%AF%95\/"}},{"@attributes":{"term":"PHP\u4ee3\u7801\u5ba1\u8ba1","scheme":"https:\/\/yanghaoi.github.io\/tags\/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1\/"}}]},{"title":"Cobalt Strike\u63d2\u4ef6\u4e4bCVE-2020-0796\u63d0\u6743\u811a\u672c\u5f00\u53d1","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2021\/04\/22\/cobalt-strike-cha-jian-zhi-cve-2020-0796-ti-quan-jiao-ben-kai-fa\/"}},"id":"https:\/\/yanghaoi.github.io\/2021\/04\/22\/cobalt-strike-cha-jian-zhi-cve-2020-0796-ti-quan-jiao-ben-kai-fa\/","published":"2021-04-22T14:41:13.080Z","updated":"2021-04-22T15:21:56.503Z","summary":"

<\/a>0x00 \u524d\u8a00<\/h2>

CVE-2020-0796(Windows SMBv3 Client\/Server Remote","category":[{"@attributes":{"term":"\u5b89\u5168\u5de5\u5177","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E5%AE%89%E5%85%A8%E5%B7%A5%E5%85%B7\/"}},{"@attributes":{"term":"CVE-2020-0796","scheme":"https:\/\/yanghaoi.github.io\/tags\/CVE-2020-0796\/"}},{"@attributes":{"term":"Cobalt Strike","scheme":"https:\/\/yanghaoi.github.io\/tags\/Cobalt-Strike\/"}}]},{"title":"Windows\u672c\u5730\u63d0\u6743\u6f0f\u6d1eCVE-2020-1313\u590d\u73b0","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2020\/10\/09\/windows-ben-di-ti-quan-lou-dong-cve-2020-1313-fu-xian\/"}},"id":"https:\/\/yanghaoi.github.io\/2020\/10\/09\/windows-ben-di-ti-quan-lou-dong-cve-2020-1313-fu-xian\/","published":"2020-10-09T08:14:44.972Z","updated":"2021-11-02T18:21:22.654Z","summary":"

<\/a>1.","category":[{"@attributes":{"term":"\u6f0f\u6d1e\u590d\u73b0","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0\/"}},{"@attributes":{"term":"\u6743\u9650\u63d0\u5347","scheme":"https:\/\/yanghaoi.github.io\/tags\/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87\/"}},{"@attributes":{"term":"Windows 10","scheme":"https:\/\/yanghaoi.github.io\/tags\/Windows-10\/"}},{"@attributes":{"term":"CVE-2020-1313","scheme":"https:\/\/yanghaoi.github.io\/tags\/CVE-2020-1313\/"}}]},{"title":"\u8bb0\u4e00\u6b21\u7b80\u5355\u7684win\u63d0\u6743","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2020\/09\/06\/ji-yi-ci-jian-dan-de-win-ti-quan\/"}},"id":"https:\/\/yanghaoi.github.io\/2020\/09\/06\/ji-yi-ci-jian-dan-de-win-ti-quan\/","published":"2020-09-06T06:32:24.637Z","updated":"2023-05-01T14:38:10.342Z","summary":"

<\/a>1.","category":[{"@attributes":{"term":"\u7f51\u7edc\u653b\u9632","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E7%BD%91%E7%BB%9C%E6%94%BB%E9%98%B2\/"}},{"@attributes":{"term":"windows\u670d\u52a1\u63d0\u6743","scheme":"https:\/\/yanghaoi.github.io\/tags\/windows%E6%9C%8D%E5%8A%A1%E6%8F%90%E6%9D%83\/"}},{"@attributes":{"term":"metasploit","scheme":"https:\/\/yanghaoi.github.io\/tags\/metasploit\/"}}]},{"title":"\u7b80\u5355\u7684\u6e90\u7801\u514d\u6740","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2020\/08\/30\/jian-dan-de-yuan-ma-mian-sha\/"}},"id":"https:\/\/yanghaoi.github.io\/2020\/08\/30\/jian-dan-de-yuan-ma-mian-sha\/","published":"2020-08-30T05:49:04.297Z","updated":"2023-05-11T07:37:33.142Z","summary":"

<\/a>1.","category":[{"@attributes":{"term":"\u7f51\u7edc\u653b\u9632","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E7%BD%91%E7%BB%9C%E6%94%BB%E9%98%B2\/"}},{"@attributes":{"term":"msfvenom\u514d\u6740","scheme":"https:\/\/yanghaoi.github.io\/tags\/msfvenom%E5%85%8D%E6%9D%80\/"}},{"@attributes":{"term":"C\u8bed\u8a00\u514d\u6740","scheme":"https:\/\/yanghaoi.github.io\/tags\/C%E8%AF%AD%E8%A8%80%E5%85%8D%E6%9D%80\/"}},{"@attributes":{"term":"\u9690\u85cf\u7a0b\u5e8f\u7a97\u53e3","scheme":"https:\/\/yanghaoi.github.io\/tags\/%E9%9A%90%E8%97%8F%E7%A8%8B%E5%BA%8F%E7%AA%97%E5%8F%A3\/"}}]},{"title":"Weblogic IIOP\u53cd\u5e8f\u5217\u5316\u6f0f\u6d1eCVE-2020-2551\u590d\u73b0","link":{"@attributes":{"href":"https:\/\/yanghaoi.github.io\/2020\/08\/22\/weblogic-iiop-fan-xu-lie-hua-lou-dong-cve-2020-2551-fu-xian\/"}},"id":"https:\/\/yanghaoi.github.io\/2020\/08\/22\/weblogic-iiop-fan-xu-lie-hua-lou-dong-cve-2020-2551-fu-xian\/","published":"2020-08-21T18:12:53.460Z","updated":"2021-11-02T18:22:54.928Z","summary":"

<\/a>1. \u524d\u8a00<\/h4>
\n

2020\u5e741\u670815\u65e5, Oracle\u5b98\u65b9\u53d1\u5e03\u4e86Weblogic","category":[{"@attributes":{"term":"\u6f0f\u6d1e\u590d\u73b0","scheme":"https:\/\/yanghaoi.github.io\/categories\/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0\/"}},{"@attributes":{"term":"weblogic\u6f0f\u6d1e","scheme":"https:\/\/yanghaoi.github.io\/tags\/weblogic%E6%BC%8F%E6%B4%9E\/"}},{"@attributes":{"term":"IDEA\u7f16\u8bd1","scheme":"https:\/\/yanghaoi.github.io\/tags\/IDEA%E7%BC%96%E8%AF%91\/"}}]}]}