<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[LiangYueSec的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/LiangYueSec</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; LiangYueSec]]></copyright><item><title><![CDATA[[技术分享]记一次实战中的权限绕过]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/144968485</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/144968485</guid><author>LiangYueSec</author><pubDate>Tue, 07 Jan 2025 09:15:51 +0800</pubDate><description><![CDATA[[技术分享]记一次实战中的权限绕过]]></description><category></category></item><item><title><![CDATA[[技术分享]冰蝎自定义代码注入内存马]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/143902648</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/143902648</guid><author>LiangYueSec</author><pubDate>Wed, 20 Nov 2024 09:56:03 +0800</pubDate><description><![CDATA[[技术分享]冰蝎自定义代码注入内存马]]></description><category></category></item><item><title><![CDATA[[代码审计]宏*HCM最新文件上传漏洞分析复现]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/143786425</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/143786425</guid><author>LiangYueSec</author><pubDate>Fri, 15 Nov 2024 10:01:37 +0800</pubDate><description><![CDATA[[代码审计]宏*HCM最新文件上传漏洞分析复现]]></description><category></category></item><item><title><![CDATA[[工具推荐]JNDI利用分析魔改]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/143704087</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/143704087</guid><author>LiangYueSec</author><pubDate>Tue, 12 Nov 2024 10:47:29 +0800</pubDate><description><![CDATA[[工具推荐]JNDI利用分析魔改]]></description><category></category></item><item><title><![CDATA[[漏洞分析]某远OA后台表单导入任意文件写入漏洞]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/142971595</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/142971595</guid><author>LiangYueSec</author><pubDate>Wed, 16 Oct 2024 10:15:49 +0800</pubDate><description><![CDATA[[漏洞分析]某远OA后台表单导入任意文件写入漏洞]]></description><category></category></item><item><title><![CDATA[[漏洞利用]xxl-job Hessian2反序列化漏洞深入利用]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/142753382</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/142753382</guid><author>LiangYueSec</author><pubDate>Tue, 08 Oct 2024 10:33:11 +0800</pubDate><description><![CDATA[[漏洞利用]xxl-job Hessian2反序列化漏洞深入利用]]></description><category></category></item><item><title><![CDATA[[java学习]反射类加载字节码]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/142461967</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/142461967</guid><author>LiangYueSec</author><pubDate>Tue, 24 Sep 2024 10:00:00 +0800</pubDate><description><![CDATA[如果觉得该文章有帮助的，麻烦师傅们可以搜索下微信公众号：良月安全。点个关注，感谢师傅们的支持。本号所发布的所有内容，包括但不限于信息、工具、项目以及文章，均旨在提供学习与研究之用。所有工具安全性自测。如因此产生的一切不良后果与文章作者和本公众号无关。如有涉及公司与个人敏感信息，侵权烦请告知，我们会立即删除并致歉。defineClass的作用是处理传入的字节码（byte[]），将其处理成真正的Java类（Class）。 Java默认的ClassLoader#defineClass 是一个native方法，逻辑]]></description><category></category></item><item><title><![CDATA[[漏洞复现]泛微e-mobile cdnfile文件读取漏洞分析复现]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/142378499</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/142378499</guid><author>LiangYueSec</author><pubDate>Fri, 20 Sep 2024 10:48:36 +0800</pubDate><description><![CDATA[[漏洞复现]泛微e-mobile cdnfile文件读取漏洞分析复现]]></description><category></category></item><item><title><![CDATA[[技术分享]记一次JeecgBoot实战分享]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/142326113</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/142326113</guid><author>LiangYueSec</author><pubDate>Wed, 18 Sep 2024 10:24:56 +0800</pubDate><description><![CDATA[[技术分享]记一次JeecgBoot实战分享]]></description><category></category></item><item><title><![CDATA[[代码审计]帆软channel反序列化漏洞hsql链浅析利用]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/142096830</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/142096830</guid><author>LiangYueSec</author><pubDate>Tue, 10 Sep 2024 15:17:44 +0800</pubDate><description><![CDATA[[代码审计]帆软channel反序列化hsql浅析利用]]></description><category></category></item><item><title><![CDATA[[工具推荐]Hessian反序列化漏洞利用工具分享]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/141421114</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/141421114</guid><author>LiangYueSec</author><pubDate>Thu, 22 Aug 2024 10:18:36 +0800</pubDate><description><![CDATA[[工具推荐]Hessian反序列化漏洞利用工具分享]]></description><category></category></item><item><title><![CDATA[[漏洞复现]JeecgBoot AviatorScript表达式注入漏洞复现]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/141024135</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/141024135</guid><author>LiangYueSec</author><pubDate>Thu, 08 Aug 2024 13:13:39 +0800</pubDate><description><![CDATA[[漏洞复现]JeecgBoot AviatorScript表达式注入漏洞复现]]></description><category></category></item><item><title><![CDATA[[漏洞复现]章管家前台任意文件上传漏洞(XVE-2024-19042)]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140996266</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140996266</guid><author>LiangYueSec</author><pubDate>Wed, 07 Aug 2024 16:59:27 +0800</pubDate><description><![CDATA[[漏洞复现]章管家前台任意文件上传漏洞(XVE-2024-19042)]]></description><category></category></item><item><title><![CDATA[[漏洞分析]LiveBos文件上传漏洞复现及绕过分析]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140923800</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140923800</guid><author>LiangYueSec</author><pubDate>Mon, 05 Aug 2024 12:57:26 +0800</pubDate><description><![CDATA[[漏洞分析]LiveBos文件上传漏洞复现及绕过分析]]></description><category></category></item><item><title><![CDATA[[漏洞复现]海康威视综合安防管理平台存在licenseExpire前台RCE]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140876237</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140876237</guid><author>LiangYueSec</author><pubDate>Fri, 02 Aug 2024 17:27:18 +0800</pubDate><description><![CDATA[[漏洞复现]海康威视综合安防管理平台存在licenseExpire前台RCE]]></description><category></category></item><item><title><![CDATA[[代码审计]jeecg-boot最新权限绕过漏洞分析及新绕过发现]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140840776</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140840776</guid><author>LiangYueSec</author><pubDate>Thu, 01 Aug 2024 10:35:26 +0800</pubDate><description><![CDATA[[代码审计]jeecg-boot最新权限绕过分析及新绕过发现]]></description><category></category></item><item><title><![CDATA[[代码审计]海康productFile命令执行历史漏洞分析（含poc）]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140789729</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140789729</guid><author>LiangYueSec</author><pubDate>Tue, 30 Jul 2024 10:59:32 +0800</pubDate><description><![CDATA[[代码审计]海康productFile命令执行历史漏洞分析（含poc）]]></description><category></category></item><item><title><![CDATA[[工具推荐]前端加解密之Burp插件Galaxy]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140765178</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140765178</guid><author>LiangYueSec</author><pubDate>Mon, 29 Jul 2024 11:08:39 +0800</pubDate><description><![CDATA[[工具推荐]前端加解密之Burp插件Galaxy]]></description><category></category></item><item><title><![CDATA[[代码审计]记一次简单的java代码审计]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140713607</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140713607</guid><author>LiangYueSec</author><pubDate>Fri, 26 Jul 2024 13:55:34 +0800</pubDate><description><![CDATA[[代码审计]记一次简单的java代码审计]]></description><category></category></item><item><title><![CDATA[[漏洞合集]致远获取后台权限及权限绕过漏洞大合集]]></title><link>https://blog.youkuaiyun.com/LiangYueSec/article/details/140684553</link><guid>https://blog.youkuaiyun.com/LiangYueSec/article/details/140684553</guid><author>LiangYueSec</author><pubDate>Thu, 25 Jul 2024 13:44:24 +0800</pubDate><description><![CDATA[[漏洞合集]致远获取后台权限及权限绕过漏洞大合集]]></description><category></category></item></channel></rss>