https://baozongwi.xyz/tags/debugger-pin/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/flask-pin-calculation/Mon, 19 Aug 2024 09:09:00 +0000https://baozongwi.xyz/p/flask-pin-calculation/0x01 前言 最近有道flask不仅仅可以绕过黑名单而且开启了debug模式可以进行pin值计算getshell 0x02 原理 pin码是flask在开启debug模式下，进行代码调试模式所需的进入密码，需要正确的PIN码才能进入调试模式,可以理解为自带的webshell 计算 …