<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[quan9i的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Reme_mber</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Reme_mber]]></copyright><item><title><![CDATA[ctfshow 七夕杯]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/126191686</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/126191686</guid><author>Reme_mber</author><pubDate>Sat, 13 Aug 2022 22:46:58 +0800</pubDate><description><![CDATA[只能执行较短命令，不能回显，这个时候考虑到写入内容涉及到重定向符这里的话我们可以用ls命令查看根目录，然后把他定向到一个自定义文件中ls / > a此时我们去访问api/a发现在根目录下，我们直接用flag的话又因为字符串长度过长而无法执行，这里的话我们直接用*，用nl命令来读nl /*>b。...]]></description><category></category></item><item><title><![CDATA[代码审计基础php_bugs]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125687884</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125687884</guid><author>Reme_mber</author><pubDate>Thu, 11 Aug 2022 18:10:06 +0800</pubDate><description><![CDATA[代码审计不会，学习知识需要积累一下基础，因此来搭建php_bugs进行相关学习，题解如下，希望能对在学习代码审计的师傅们有所帮助。]]></description><category></category></item><item><title><![CDATA[从一文中了解SSRF的各种绕过姿势及攻击思路]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125581479</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125581479</guid><author>Reme_mber</author><pubDate>Sun, 31 Jul 2022 12:07:47 +0800</pubDate><description><![CDATA[SSRF之前只有简单了解，进行二次学习后简单总结一下，希望能对正在学习SSRF的师傅们有所帮助。]]></description><category></category></item><item><title><![CDATA[hexo+gitee搭建静态博客]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125891920</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125891920</guid><author>Reme_mber</author><pubDate>Wed, 20 Jul 2022 18:42:26 +0800</pubDate><description><![CDATA[hexo+gitee搭建博客]]></description><category></category></item><item><title><![CDATA[java语言学习-part1]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125619032</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125619032</guid><author>Reme_mber</author><pubDate>Tue, 19 Jul 2022 11:09:45 +0800</pubDate><description><![CDATA[文章同步于个人博客
https://www.quan9i.top/]]></description><category></category></item><item><title><![CDATA[常用getshell工具的下载]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125810502</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125810502</guid><author>Reme_mber</author><pubDate>Fri, 15 Jul 2022 18:57:50 +0800</pubDate><description><![CDATA[下载链接下载后校验MD5值与文档进行比对确认无后门，安装完成开始使用，这个工具类似于中国蚁剑，用于连接一句话木马getshell左边写路径，右边写密码即可，文件内容为。]]></description><category></category></item><item><title><![CDATA[解决win11下Eclipse安装后双击无法打开]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125786473</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125786473</guid><author>Reme_mber</author><pubDate>Thu, 14 Jul 2022 16:05:10 +0800</pubDate><description><![CDATA[学习JAVA时需要用到eclipse，但安装出现了问题，现在已解决，方法如下]]></description><category></category></item><item><title><![CDATA[XSS.haozi.me刷题]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125700129</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125700129</guid><author>Reme_mber</author><pubDate>Sun, 10 Jul 2022 16:11:22 +0800</pubDate><description><![CDATA[文章同步于个人博客https://www.quan9i.top]]></description><category></category></item><item><title><![CDATA[ctfshow XSS]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125400071</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125400071</guid><author>Reme_mber</author><pubDate>Tue, 28 Jun 2022 10:17:14 +0800</pubDate><description><![CDATA[ctfshow XSS 316-333]]></description><category></category></item><item><title><![CDATA[有关HTTP及HTTP的浅学习]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125349768</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125349768</guid><author>Reme_mber</author><pubDate>Fri, 24 Jun 2022 22:23:02 +0800</pubDate><description><![CDATA[当被问及HTTPS时发现自己不了解此类协议，因此来进行学习并总结如下，希望能对在学习的师傅有所帮助！了解HTTPS之前，首先需要了解一下HTTP
HTTP协议全称，中文含义是，位于TCP/IP四层模型当中的应用层。

具体如下图所示

实际上的话在这里面需要考虑这些，下面进行讲解。这里以帅气的快递小哥送快递为例，当快递小哥得到我们的住址，在给我们送快递的时候，可能会采用汽车或者三轮车的方式来送，当他送到指定位置的时候，会给我们打电话说他是某个快递公司的，让我们去固定地点签收，如果我们不想去的话就可以给物业打]]></description><category></category></item><item><title><![CDATA[从SQL注入绕过最新安全狗WAF中学习fuzz]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/125025295</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/125025295</guid><author>Reme_mber</author><pubDate>Sat, 11 Jun 2022 23:43:21 +0800</pubDate><description><![CDATA[声明：文章首发于先知社区]]></description><category></category></item><item><title><![CDATA[docker搭建的wordpress博客将http转换为https]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124848720</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124848720</guid><author>Reme_mber</author><pubDate>Wed, 18 May 2022 23:32:38 +0800</pubDate><description><![CDATA[docker搭建的wordpress博客http转换https


]]></description><category></category></item><item><title><![CDATA[php特性之intval学习小记]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124781330</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124781330</guid><author>Reme_mber</author><pubDate>Sun, 15 May 2022 14:03:23 +0800</pubDate><description><![CDATA[前言
文章同步我的个人博客http://www.quan9i.top/，欢迎大家访问。
php特性的intval是一个比较常见的漏洞，今天就来比较全面的学习这个函数，将其简单的利用方式总结一下
函数学习
学习函数最好的方式就是去学习官方的，这样学习得到的收获更多一些，这里我们先来看一下这个函数定义
intval — 获取变量的整数值

而它的具体格式和解释如下
int intval( var,base)
//var指要转换成 integer 的数量值,base指转化所使用的进制 
Note: 
如果 bas]]></description><category></category></item><item><title><![CDATA[ctf刷题小结]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124416941</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124416941</guid><author>Reme_mber</author><pubDate>Sun, 15 May 2022 13:34:23 +0800</pubDate><description><![CDATA[CTF刷题小记，文章同步于我的个人博客，欢迎大家访问]]></description><category></category></item><item><title><![CDATA[反序列化之魔术方法的浅学习]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124752229</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124752229</guid><author>Reme_mber</author><pubDate>Fri, 13 May 2022 22:27:46 +0800</pubDate><description><![CDATA[前言
学习反序列化，那么就需要首先掌握魔术方法的使用，本篇文章将尽可能详细的讲解反序列化的魔术方法，博主只是小白，如有问题还请各位师傅多多指点！
魔术方法
常见魔术方法有以下几种
__construct： 在创建对象时候初始化对象，一般用于对变量赋初值。
__destruct： 和构造函数相反，当对象所在函数调用完毕后执行。
__call：当调用对象中不存在的方法会自动调用该方法。
__get()：获取对象不存在的属性时执行此函数。
__set()：设置对象不存在的属性时执行此函数。 
__toString]]></description><category></category></item><item><title><![CDATA[对SSRF的一次浅学习(CTF-hub)]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124520429</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124520429</guid><author>Reme_mber</author><pubDate>Wed, 04 May 2022 00:23:40 +0800</pubDate><description><![CDATA[网刃杯时签到题都没做出来，太菜了，特此来学习一下SSRF]]></description><category></category></item><item><title><![CDATA[php基于哈希算法出现的强弱比较漏洞]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124235010</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124235010</guid><author>Reme_mber</author><pubDate>Thu, 21 Apr 2022 14:38:33 +0800</pubDate><description><![CDATA[php强比较]]></description><category></category></item><item><title><![CDATA[xctf刷题小记]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124251865</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124251865</guid><author>Reme_mber</author><pubDate>Thu, 21 Apr 2022 14:28:29 +0800</pubDate><description><![CDATA[xctf部分题wp]]></description><category></category></item><item><title><![CDATA[php preg_replace /e 模式 漏洞分析]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124185032</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124185032</guid><author>Reme_mber</author><pubDate>Fri, 15 Apr 2022 19:09:15 +0800</pubDate><description><![CDATA[在做一道可以进行rce的相关题时，发现很多之前不知道的知识，并且感到这个漏洞很有意思，进行了简单分析，总结如下，希望能对师傅们有帮助]]></description><category></category></item><item><title><![CDATA[条件竞争学习]]></title><link>https://blog.youkuaiyun.com/Reme_mber/article/details/124168542</link><guid>https://blog.youkuaiyun.com/Reme_mber/article/details/124168542</guid><author>Reme_mber</author><pubDate>Fri, 15 Apr 2022 19:07:51 +0800</pubDate><description><![CDATA[在学习文件包含和文件上传时，都涉及到了文件竞争这个漏洞，因为理解问题，导致这类题我很难攻破，特此来进行条件竞争的学习，总结如下，希望能对正在学习的师傅有所帮助。
]]></description><category></category></item></channel></rss>