<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Pysnow's Blog]]></title><description><![CDATA[兜兜里有糖]]></description><link>https://blog.youkuaiyun.com/not_code_god</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; not_code_god]]></copyright><item><title><![CDATA[DASCTF X CBCTF 2022]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126953258</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126953258</guid><author>not_code_god</author><pubDate>Tue, 20 Sep 2022 14:53:21 +0800</pubDate><description><![CDATA[DASCTF X CBCTF 2022]]></description><category></category></item><item><title><![CDATA[2022第五空间网络安全大赛]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126943938</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126943938</guid><author>not_code_god</author><pubDate>Mon, 19 Sep 2022 22:57:31 +0800</pubDate><description><![CDATA[2022第五空间网络安全大赛]]></description><category></category></item><item><title><![CDATA[MTCTF2022 WP]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126912830</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126912830</guid><author>not_code_god</author><pubDate>Sun, 18 Sep 2022 00:10:57 +0800</pubDate><description><![CDATA[MTCTF2022]]></description><category></category></item><item><title><![CDATA[羊城杯2022]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126696653</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126696653</guid><author>not_code_god</author><pubDate>Sun, 04 Sep 2022 23:46:29 +0800</pubDate><description><![CDATA[羊城杯2022wp]]></description><category></category></item><item><title><![CDATA[网鼎杯2022青龙组]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126561960</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126561960</guid><author>not_code_god</author><pubDate>Sat, 27 Aug 2022 20:16:09 +0800</pubDate><description><![CDATA[网鼎杯2022青龙组]]></description><category></category></item><item><title><![CDATA[巅峰极客2022wp]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126561933</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126561933</guid><author>not_code_god</author><pubDate>Sat, 27 Aug 2022 20:13:54 +0800</pubDate><description><![CDATA[巅峰极客2022wp]]></description><category></category></item><item><title><![CDATA[corCTF2022 Web]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126258600</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126258600</guid><author>not_code_god</author><pubDate>Wed, 10 Aug 2022 01:19:46 +0800</pubDate><description><![CDATA[corCTF2022 web前三道]]></description><category></category></item><item><title><![CDATA[第六届“强网杯”全国网络安全挑战赛]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126199370</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126199370</guid><author>not_code_god</author><pubDate>Sat, 06 Aug 2022 18:45:23 +0800</pubDate><description><![CDATA[也就是go服务端，接着go再解析json，并计算出cost，如果cost小于money就成功，并将money返回，flask这边接受到数据并上传到数据库上。，令num为0就不用花钱了，要在双键的前面被覆盖位置。]]></description><category></category></item><item><title><![CDATA[第六届”蓝帽杯“全国大学生网络安全技能大赛 半决赛]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126199335</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126199335</guid><author>not_code_god</author><pubDate>Sat, 06 Aug 2022 18:44:06 +0800</pubDate><description><![CDATA[总榜38，地区第四。]]></description><category></category></item><item><title><![CDATA[ctfshow七夕杯2022]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/126199298</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/126199298</guid><author>not_code_god</author><pubDate>Sat, 06 Aug 2022 18:42:15 +0800</pubDate><description><![CDATA[https://pysnow.cn/archives/281/]]></description><category></category></item><item><title><![CDATA[NepCTF2022 WP]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/125883979</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/125883979</guid><author>not_code_god</author><pubDate>Wed, 20 Jul 2022 00:49:10 +0800</pubDate><description><![CDATA[NepCTFWriteUp]]></description><category></category></item><item><title><![CDATA[第二届网刃杯web]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/124516267</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/124516267</guid><author>not_code_god</author><pubDate>Sat, 30 Apr 2022 18:00:31 +0800</pubDate><description><![CDATA[第二届网刃杯web部分复现]]></description><category></category></item><item><title><![CDATA[[DASCTF2022]三月月赛WriteUp Web部分全复现]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/124111055</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/124111055</guid><author>not_code_god</author><pubDate>Mon, 11 Apr 2022 22:11:57 +0800</pubDate><description><![CDATA[Web
ezpop
ezpop
&lt;?php
highlight_file(__FILE__);
class crow
{
    public $v1;
    public $v2;
    function eval() {
        echo "crow::eval&lt;br&gt;";
        echo new $this-&gt;v1($this-&gt;v2);
    }
    public function __invoke()
    {
        echo ]]></description><category></category></item><item><title><![CDATA[VNCTF2022 web全复现]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/124028028</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/124028028</guid><author>not_code_god</author><pubDate>Thu, 07 Apr 2022 22:11:49 +0800</pubDate><description><![CDATA[web
文章目录webGameV4.0gocalc0easyJ4va信息收集获取key反序列化newcalc0非预期PoC 1PoC 2预期解InterestingPHP解法一解法二
GameV4.0
前端小游戏题，直接想到查看js源代码

在data.js文件中搜索到了关键词flag，且后面附着着一个base64编码的字符串，解码试试

得到flag，再将其url解码一下就行
VNCTF{Welcome_to_VNCTF2022}

gocalc0

go语言的ssti，传入{{.}}指向当前的类，类似于]]></description><category></category></item><item><title><![CDATA[[NISACTF 2022]WriteUp web篇]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/123910155</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/123910155</guid><author>not_code_god</author><pubDate>Fri, 01 Apr 2022 22:54:13 +0800</pubDate><description><![CDATA[[NISACTF 2022]
WEB
checkin
打开一看，本来一位就是简单的一道get传参题，结果发现复制的时候出现了问题

所以我就把代码复制到vscode上面来

发现存在Unicode特殊字符，直接把字符原样复制下来，然后URLencode编码一下
最终payload
    ?ahahahaha=jitanglailo&amp;%E2%80%AE%E2%81%A6Ugeiwo%E2%81%A9%E2%81%A6cuishiyuan=%E2%80%AE%E2%81%A6 Flag!%E2%81%]]></description><category></category></item><item><title><![CDATA[ctfshow卷王杯部分web]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/123170171</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/123170171</guid><author>not_code_god</author><pubDate>Sun, 27 Feb 2022 20:49:49 +0800</pubDate><description><![CDATA[ctfshow卷王杯web部分[easy unserialize&amp;easy web]
easy unserialize
&lt;?php
/**
 * @Author: F10wers_13eiCheng
 * @Date:   2022-02-01 11:25:02
 * @Last Modified by:   F10wers_13eiCheng
 * @Last Modified time: 2022-02-07 15:08:18
 */
include("./HappyYear.php");]]></description><category></category></item><item><title><![CDATA[typechoSEO站点收录插件推荐]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/123095279</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/123095279</guid><author>not_code_god</author><pubDate>Wed, 23 Feb 2022 17:28:55 +0800</pubDate><description><![CDATA[typechoSEO站点收录插件推荐BaiduSubmit
文章目录typechoSEO站点收录插件推荐BaiduSubmit资源前言安装百度站长网站设置API提交sitemap手动提交百度站长其他工具插件介绍功能使用robots文件查看自己站点是否被收录总结
资源


插件下载地址本人网盘空间


作者文章介绍传送门


前言
当我们搭建好一个小站点的时候，我们可能会遇到怎样让搜索引擎爬取到我们的文章的问题，当然你也可以不选择让你的站点让搜索引擎爬取。这个时候你就需要SEO（”搜索引擎优化“），这里面涉及]]></description><category></category></item><item><title><![CDATA[一天入门linux之linux操作系统基础详解]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/121897007</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/121897007</guid><author>not_code_god</author><pubDate>Mon, 13 Dec 2021 07:35:50 +0800</pubDate><description><![CDATA[半天入门操作系统之shell，一天精通linux操作]]></description><category></category></item><item><title><![CDATA[一篇文章搞懂linux用户与用户组]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/121897004</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/121897004</guid><author>not_code_god</author><pubDate>Mon, 13 Dec 2021 03:44:17 +0800</pubDate><description><![CDATA[这是一篇详细讲解linux用户与用户组的文章，当然也是我现学现写的，所以里面有不完整或者错误的地方欢迎指出来，写这个篇文章的目的本来就是用来配合另外一篇文章]]></description><category></category></item><item><title><![CDATA[linux shell重定向(输入输出重定向)讲解]]></title><link>https://blog.youkuaiyun.com/not_code_god/article/details/121892090</link><guid>https://blog.youkuaiyun.com/not_code_god/article/details/121892090</guid><author>not_code_god</author><pubDate>Sun, 12 Dec 2021 19:40:08 +0800</pubDate><description><![CDATA[linux shell的输入输出重定向，当然里面的内容是针对bash的]]></description><category></category></item></channel></rss>