https://baozongwi.xyz/tags/%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/shield-2025-iov-prelim/Wed, 20 Aug 2025 13:36:21 +0800https://baozongwi.xyz/p/shield-2025-iov-prelim/firmware-update-system-web admin\admin123登录后台，看到Apache/2.4.54，直接上传恶意文件压缩的包 POST /upload.php HTTP/1.1 Host: 124.133.253.44:32855 Content-Length: 375 …https://baozongwi.xyz/p/linux-amd64-suid-privilege-escalation/Sun, 03 Aug 2025 18:19:43 +0000https://baozongwi.xyz/p/linux-amd64-suid-privilege-escalation/suid位还是花