<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[lyink001的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/lyink001</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; lyink001]]></copyright><item><title><![CDATA[spring boot actuator 未授权访问（env泄露redis密码）]]></title><link>https://blog.youkuaiyun.com/lyink001/article/details/128343964</link><guid>https://blog.youkuaiyun.com/lyink001/article/details/128343964</guid><author>lyink001</author><pubDate>Fri, 16 Dec 2022 16:13:47 +0800</pubDate><description><![CDATA[actuator 未授权访问获取redis密码]]></description><category></category></item><item><title><![CDATA[前端源码泄露]]></title><link>https://blog.youkuaiyun.com/lyink001/article/details/128341235</link><guid>https://blog.youkuaiyun.com/lyink001/article/details/128341235</guid><author>lyink001</author><pubDate>Fri, 16 Dec 2022 12:32:10 +0800</pubDate><description><![CDATA[攻击者可以通过泄露的前端源代码可以针对源代码对代码中各种信息如隐蔽接口、API、加密算法、管理员邮箱、内部功能等等，或者接口API可以尝试未授权漏洞，拼接接口越权漏洞，查找源代码中关键字去GitHub查找程序源码进行代码审计。]]></description><category></category></item><item><title><![CDATA[Docker Remote API未授权访问]]></title><link>https://blog.youkuaiyun.com/lyink001/article/details/128339352</link><guid>https://blog.youkuaiyun.com/lyink001/article/details/128339352</guid><author>lyink001</author><pubDate>Fri, 16 Dec 2022 10:47:18 +0800</pubDate><description><![CDATA[docker remote api获取服务器权限]]></description><category></category></item></channel></rss>