<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[m0_63017769的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/m0_63017769</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; m0_63017769]]></copyright><item><title><![CDATA[fastjson漏洞复现]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/134279050</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/134279050</guid><author>m0_63017769</author><pubDate>Wed, 08 Nov 2023 00:13:01 +0800</pubDate><description><![CDATA[Fastjson是一个阿里巴巴开源的Java库(项目地址为:https://github.com/alibaba/fastjson)，它用于将Java对象转换为JSON表示。它还可以用于将JSON字符串转换为等效的Java对象。Fastjson可以处理任意Java对象,并且它提供了高性能的JSON解析和序列化功能。]]></description><category></category></item><item><title><![CDATA[xss 浅析]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/134120111</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/134120111</guid><author>m0_63017769</author><pubDate>Mon, 30 Oct 2023 15:14:54 +0800</pubDate><description><![CDATA[一、XSS概述(1)代码位于script标签中,如(2)代a码位于onclick事件中，此类事件带有onerror,.onload,onfocus,onblur,onchange,onmouseover,.ondblclick等(3)代码位于超链接的href属性中,或其他类似属性中。]]></description><category></category></item><item><title><![CDATA[wife_wife ctf]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/131243613</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/131243613</guid><author>m0_63017769</author><pubDate>Fri, 16 Jun 2023 11:36:05 +0800</pubDate><description><![CDATA[网站可以登录可以注册，除此之外没别的了。随便注册个用户登录也只能得到假flag。直接把false改成true重发是没用的。可以看看github上别人给出的源码查阅资料，原来也能触发原型链污染。的作用是把baseUser和user的属性合并后拷贝到{}中，即newUser是baseUser和user的集合体。baseUser猜测是user类似父类的东西，user应该就是上面的部分了。然后登录注册的用户即可得到flag。看了这篇相信这道题就很简单了。]]></description><category></category></item><item><title><![CDATA[暴力破解浅析]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/127818508</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/127818508</guid><author>m0_63017769</author><pubDate>Sat, 12 Nov 2022 11:56:00 +0800</pubDate><description><![CDATA[暴力破解浅析]]></description><category></category></item><item><title><![CDATA[计算机网络基本协议及攻击姿势]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/127818440</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/127818440</guid><author>m0_63017769</author><pubDate>Sat, 12 Nov 2022 11:51:44 +0800</pubDate><description><![CDATA[计算机网络及攻击姿势]]></description><category></category></item><item><title><![CDATA[【无标题】]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/127818126</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/127818126</guid><author>m0_63017769</author><pubDate>Sat, 12 Nov 2022 11:32:48 +0800</pubDate><description><![CDATA[nat以及三次握手四次挥手]]></description><category></category></item><item><title><![CDATA[路由器与交换机的作用]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/127818027</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/127818027</guid><author>m0_63017769</author><pubDate>Sat, 12 Nov 2022 11:18:37 +0800</pubDate><description><![CDATA[路由器与交换机的浅显理解]]></description><category></category></item><item><title><![CDATA[web方向基础入门学习总结]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/127817961</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/127817961</guid><author>m0_63017769</author><pubDate>Sat, 12 Nov 2022 11:12:22 +0800</pubDate><description><![CDATA[web基础入门知识学习总结]]></description><category></category></item><item><title><![CDATA[ctf夺旗赛]]></title><link>https://blog.youkuaiyun.com/m0_63017769/article/details/127817826</link><guid>https://blog.youkuaiyun.com/m0_63017769/article/details/127817826</guid><author>m0_63017769</author><pubDate>Sat, 12 Nov 2022 11:10:10 +0800</pubDate><description><![CDATA[好久以前做过的ctf]]></description><category></category></item></channel></rss>