https://baozongwi.xyz/tags/%E6%9D%A1%E4%BB%B6%E7%AB%9E%E4%BA%89/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/shctf-2025/Fri, 20 Feb 2026 20:45:51 +0800https://baozongwi.xyz/p/shctf-2025/😅😅😅https://baozongwi.xyz/p/ctfshow-extreme-challenge-3-byte-file-read/Tue, 26 Aug 2025 18:08:15 +0800https://baozongwi.xyz/p/ctfshow-extreme-challenge-3-byte-file-read/极限命令执行6 <?php error_reporting(0); if (isset($_POST['ctf_show'])) { $ctfshow = $_POST['ctf_show']; if (is_string($ctfshow) && strlen($ctfshow) <= 3) { sleep(1); …https://baozongwi.xyz/p/hitcon2025/Mon, 25 Aug 2025 14:38:50 +0800https://baozongwi.xyz/p/hitcon2025/Pholyglot!（31solves） <?php $sandbox = '/www/sandbox/' . md5("orange" . $_SERVER['REMOTE_ADDR']); @mkdir($sandbox); @chdir($sandbox) or die("err?"); $msg = …https://baozongwi.xyz/p/hxp38c3ctf/Thu, 27 Mar 2025 20:14:55 +0000https://baozongwi.xyz/p/hxp38c3ctf/牛https://baozongwi.xyz/p/ctfshow-new-year-water-friends-match/Mon, 20 Jan 2025 18:53:17 +0000https://baozongwi.xyz/p/ctfshow-new-year-water-friends-match/有意思的https://baozongwi.xyz/p/srdnlenctf2025/Sun, 19 Jan 2025 19:42:32 +0000https://baozongwi.xyz/p/srdnlenctf2025/shithttps://baozongwi.xyz/p/ctfshow-forgiveness-cup/Thu, 16 Jan 2025 19:39:50 +0000https://baozongwi.xyz/p/ctfshow-forgiveness-cup/刷https://baozongwi.xyz/p/ctfshow-36d-practice-match/Wed, 11 Dec 2024 19:51:33 +0000https://baozongwi.xyz/p/ctfshow-36d-practice-match/刷https://baozongwi.xyz/p/session-file-inclusion/Fri, 27 Sep 2024 13:39:03 +0000https://baozongwi.xyz/p/session-file-inclusion/经典