<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[ 刘家华(游戏开发)]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/LDBQH</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; LDBQH]]></copyright><item><title><![CDATA[【攻防技术】信息收集之公众号自动收集]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/130896293</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/130896293</guid><author>LDBQH</author><pubDate>Sat, 27 May 2023 01:01:12 +0800</pubDate><description><![CDATA[公众号自动收集的小脚本]]></description><category></category></item><item><title><![CDATA[CVE-2023-21839远程代码执行漏洞]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/130459956</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/130459956</guid><author>LDBQH</author><pubDate>Mon, 01 May 2023 23:13:17 +0800</pubDate><description><![CDATA[weblogic CVE-2023-21839、CVE-2023-21931、CVE-2023-21979远程代码执行漏洞复现。]]></description><category></category></item><item><title><![CDATA[【CTF】初学ROP]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/130360320</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/130360320</guid><author>LDBQH</author><pubDate>Tue, 25 Apr 2023 21:54:34 +0800</pubDate><description><![CDATA[win_function2为什么要返回到pop_ebp_ret，这里困扰我一直不能理解，单步跟踪后发现，原因是此函数有参数，当前函数执行ret后，此时栈顶是win_function2的参数，需要执行pop ebp将栈顶弹出，让栈顶指针指向vuln函数的地址，在利用ret跳转到到vuln函数，这就是pop ebp​；单步调试，观察内存中栈的变化，运行到ret指令，观察到ebp被pop成为了我们填充的aaaa，此时栈顶指针为我们覆盖的返回地址，此地址为win_function1的地址，该函数不需要参数。]]></description><category></category></item><item><title><![CDATA[【漏洞复现】MinIO敏感信息泄露（CVE-2023-28432）]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/130314333</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/130314333</guid><author>LDBQH</author><pubDate>Sun, 23 Apr 2023 09:16:39 +0800</pubDate><description><![CDATA[MinIO发现了信息泄露漏洞]]></description><category></category></item><item><title><![CDATA[【漏洞复现】利用禅道系统RCE命令执行漏洞反弹shell]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/130301651</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/130301651</guid><author>LDBQH</author><pubDate>Sun, 23 Apr 2023 08:36:52 +0800</pubDate><description><![CDATA[禅道系统RCE漏洞复现]]></description><category></category></item><item><title><![CDATA[【攻防技术】同时运行新版和老板burp]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/128328005</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/128328005</guid><author>LDBQH</author><pubDate>Thu, 15 Dec 2022 11:54:31 +0800</pubDate><description><![CDATA[研究了一下同时运行两个版本burp的方法]]></description><category></category></item><item><title><![CDATA[【蓝军建设】如何搞垮一个甲方攻防队伍]]></title><link>https://blog.youkuaiyun.com/LDBQH/article/details/127786896</link><guid>https://blog.youkuaiyun.com/LDBQH/article/details/127786896</guid><author>LDBQH</author><pubDate>Mon, 14 Nov 2022 23:07:09 +0800</pubDate><description><![CDATA[实战经验的总结，手把手教你如何拆掉攻防队伍，搞不好还搞不垮么]]></description><category></category></item></channel></rss>