<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0"><channel><title>Fury | baozongwi's blog</title><link>https://baozongwi.xyz/tags/fury/</link><description>Currently exploring Java security and internal network penetration, with CTFs as a hobby.</description><generator>Hugo</generator><language>zh-cn</language><item><title>AliCTF2026 Fileury</title><link>https://baozongwi.xyz/p/alictf-2026-fileury/</link><pubDate>Wed, 06 May 2026 11:29:09 +0800</pubDate><guid>https://baozongwi.xyz/p/alictf-2026-fileury/</guid><description>jdk8 一种常见但我第一次学习的手法 ext jar rce</description></item><item><title>AliCTF2025-Jtools</title><link>https://baozongwi.xyz/p/alictf-2025-jtools/</link><pubDate>Wed, 22 Oct 2025 20:39:41 +0800</pubDate><guid>https://baozongwi.xyz/p/alictf-2025-jtools/</guid><description>在做题之前，先浅浅学习下 fury 的序列化与反序列化机制。 了解 序列化 先写一个类用 package org.Fury.Base; import java.io.Serializable; public class User implements Serializable { private String …</description></item></channel></rss>