https://baozongwi.xyz/tags/%E5%86%85%E5%AD%98%E9%A9%AC/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/java-memshell-basics/Sat, 29 Aug 2026 01:27:26 +0800https://baozongwi.xyz/p/java-memshell-basics/TL;DR 之前把这四种内存马拆开写了，回头翻的时候一直在几个文件之间跳，干脆合到一篇里。这里主要看 Tomcat 收到请求以后到底从哪里取组件，以及我们运行时往哪些对象里塞东西。 这几个 demo 统一使用 Spring Boot 2.7.18、Java 8 和内置 Tomcat 9，代码还是 …https://baozongwi.xyz/p/sanic-memory-shell/Tue, 27 May 2025 15:35:40 +0000https://baozongwi.xyz/p/sanic-memory-shell/pickle反序列化的时候应该挺有用的吧https://baozongwi.xyz/p/flask-memory-shell-analysis/Mon, 02 Sep 2024 11:03:56 +0000https://baozongwi.xyz/p/flask-memory-shell-analysis/你学SSTI不学内存马？