https://baozongwi.xyz/tags/crypto/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/ccf2025/Sat, 02 Aug 2025 14:46:27 +0000https://baozongwi.xyz/p/ccf2025/nop带我玩https://baozongwi.xyz/p/0penharmonyctf2025/Sat, 07 Jun 2025 12:12:57 +0000https://baozongwi.xyz/p/0penharmonyctf2025/很有教学意义的题目https://baozongwi.xyz/p/actf2025-web-ak/Sat, 26 Apr 2025 10:15:22 +0000https://baozongwi.xyz/p/actf2025-web-ak/AK也没进入前十https://baozongwi.xyz/p/1753ctf2025/Sun, 13 Apr 2025 18:12:45 +0000https://baozongwi.xyz/p/1753ctf2025/每一题都是mischttps://baozongwi.xyz/p/hxp38c3ctf/Thu, 27 Mar 2025 20:14:55 +0000https://baozongwi.xyz/p/hxp38c3ctf/起环境的时候发现了这样的报错 [+] Running 1/0 ✘ Network haschbargeld_default Error 0.0s failed to create network haschbargeld_default: Error response from daemon: all …https://baozongwi.xyz/p/wolvctf2025-ak/Sat, 22 Mar 2025 14:08:09 +0000https://baozongwi.xyz/p/wolvctf2025-ak/文章首发于先知社区 https://xz.aliyun.com/news/17404 Eval is Evil 本地测试发现可以直接执行命令但是是无回显 eval(input("What is the number?: ")) 现在的目的是执行这样的命令 __import__('os').system("dir") 但 …https://baozongwi.xyz/p/aliyunctf2025/Sat, 22 Feb 2025 10:10:44 +0000https://baozongwi.xyz/p/aliyunctf2025/燃尽了成绩也不咋地https://baozongwi.xyz/p/vnctf2025/Sat, 08 Feb 2025 10:00:21 +0000https://baozongwi.xyz/p/vnctf2025/总排第七，差一道AKWeb哎，难受 奶龙回家 爆破了很久的弱密码，发现======会触发另外一个回显 就感觉是注入了，然后写查询语句，发现万能密码都被过滤了，但是fuzz出来了这个东西会触发另外一种回显， 'randomblob(N)-- 可以确定是sqlite注入了，慢慢测试发现就过滤了union，绕过这个应该就可以 …https://baozongwi.xyz/p/hkcertctf2024/Fri, 08 Nov 2024 18:44:31 +0000https://baozongwi.xyz/p/hkcertctf2024/只会签到题https://baozongwi.xyz/p/qiangwang-cup-2024/Sat, 02 Nov 2024 09:31:08 +0000https://baozongwi.xyz/p/qiangwang-cup-2024/打着玩，反正当不了先锋