<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[jiangzhen5566的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/jiangzhen5566</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; jiangzhen5566]]></copyright><item><title><![CDATA[Thinkphp5.0.23-rce]]></title><link>https://blog.youkuaiyun.com/jiangzhen5566/article/details/148350342</link><guid>https://blog.youkuaiyun.com/jiangzhen5566/article/details/148350342</guid><author>jiangzhen5566</author><pubDate>Sat, 31 May 2025 11:26:04 +0800</pubDate><description><![CDATA[这块代码就是赋值,将他们赋值，filter = ['system'] ,method = ['get'] , server = ['REQUEST_METHOD' => 'whoami']开始时候$options[]数组为空，经过$this->input = file_get_contents('php://input');所以构造出来了call_user_func_array("system","whoami");最后的最后执行了命令。但是不知道为什么执行不了命令，应该是执行了，传马直接给杀了。]]></description><category></category></item><item><title><![CDATA[WebWolf文件上传500报错修复]]></title><link>https://blog.youkuaiyun.com/jiangzhen5566/article/details/147630824</link><guid>https://blog.youkuaiyun.com/jiangzhen5566/article/details/147630824</guid><author>jiangzhen5566</author><pubDate>Wed, 30 Apr 2025 14:06:49 +0800</pubDate><description><![CDATA[webgoat靶场500抛错问题解决]]></description><category></category></item><item><title><![CDATA[CVE-2016-5195(脏牛)]]></title><link>https://blog.youkuaiyun.com/jiangzhen5566/article/details/145280680</link><guid>https://blog.youkuaiyun.com/jiangzhen5566/article/details/145280680</guid><author>jiangzhen5566</author><pubDate>Tue, 21 Jan 2025 11:43:41 +0800</pubDate><description><![CDATA[该漏洞是 Linux 内核的内存子系统在处理写时拷贝（Copy-on-Write）时存在条件竞争漏洞， 导致可以破坏私有只读内存映射。黑客可以在获取低权限的的本地用户后，利用此漏洞获取 其他只读内存映射的写权限，进一步获取 root 权限。常规是生成firefart用户，可以更改dirty.c文件来设置用户，这里为了方便修改为了root。执行完毕之后，查看/etc/passwd。./dirty 123456(密码)上传dirty.c执行。su 用户名 输入密码。]]></description><category></category></item><item><title><![CDATA[关于VMware无法正常启动虚拟化引擎]]></title><link>https://blog.youkuaiyun.com/jiangzhen5566/article/details/144993440</link><guid>https://blog.youkuaiyun.com/jiangzhen5566/article/details/144993440</guid><author>jiangzhen5566</author><pubDate>Tue, 07 Jan 2025 21:11:52 +0800</pubDate><description><![CDATA[win11会有显示问题，显示是关闭的但是实际上是开启的 win+r 搜索msinfo32。若没有启动可以根据自身电脑品牌进入bios开启，我的是惠普的，摁f10进入bios。运行之后重启，win+r查看“msinfo32”如果还是没办法关闭内核隔离可以参考以下文章。无法正常关闭可以去官网下载。虚拟机内的wsl可以成功启动。接着启动虚拟机发现正常启动。这里关闭才是真正的关闭。]]></description><category></category></item></channel></rss>