https://baozongwi.xyz/tags/apache-http-server/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/shield-2025-iov-prelim/Wed, 20 Aug 2025 13:36:21 +0800https://baozongwi.xyz/p/shield-2025-iov-prelim/firmware-update-system-web admin\admin123登录后台，看到Apache/2.4.54，直接上传恶意文件压缩的包 POST /upload.php HTTP/1.1 Host: 124.133.253.44:32855 Content-Length: 375 …https://baozongwi.xyz/p/xuanji-chapter-2/Fri, 14 Mar 2025 12:52:06 +0000https://baozongwi.xyz/p/xuanji-chapter-2/第二章日志分析-apache日志分析 直接把Apache的日志导出来 /var/log/apache2/access.log.1 f1 但是这个日志已经有好几千行代码了，但是可以看到日志结构和auth.log，是不太一样的，IP在第一位，我们直接把IP导出来 cat access.log.1 | awk '{print …https://baozongwi.xyz/p/ctfshow-component-vulnerabilities/Fri, 21 Feb 2025 16:38:05 +0000https://baozongwi.xyz/p/ctfshow-component-vulnerabilities/全是CVE