UWI's Blog

Here’s something encrypted, password is required to continue reading.

Here’s something encrypted, password is required to continue reading.

Here’s something encrypted, password is required to continue reading.

Here’s something encrypted, password is required to continue reading.

Here’s something encrypted, password is required to continue reading.

Here’s something encrypted, password is required to continue reading.

Here’s something encrypted, password is required to continue reading.

sql注入前言：这套代码比上一套简单，非常多离谱的漏洞逻辑 sql注入 1234567891011$this->subjectId 和 $city 都是直接拼接的同时这两个参数都是我们可控的 要执行到sql查询语句前必须经过这个if语句 if($this->key == "" || $this->key !== "TheHotelRevers...

java代码审计感觉审的小有起色了手头也审出了几个小0day所以开启php代码审计学习新篇章 先从比较简单的cms打起 mvc框架分析我就不写了直接看漏洞成因 任意文件删除FileAction 类下的delete方法 跟进$this->fileModel->delete方法 经过调试可以任意文件删除 123456789101112131415POST /admin.php?...

Here’s something encrypted, password is required to continue reading.