https://baozongwi.xyz/tags/node.js/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/software-sec-competition-2026/Wed, 01 Apr 2026 10:08:46 +0800https://baozongwi.xyz/p/software-sec-competition-2026/TL;DR 这次比赛的感觉就是题目挺难的，如果真正不看笔记不用 AI 是真打不了，已经闻到了失败的味道。 本来不打算发博客的，包括有些师傅来问了也不打算发的，不过 thymeleaf 这道题的分块传输打入内存马确实挺有意思 🤔 thymeleaf 目录结构是这样， package …https://baozongwi.xyz/p/nssround8-ez_node/Thu, 25 Dec 2025 22:16:03 +0800https://baozongwi.xyz/p/nssround8-ez_node/nodejs PP根本学不会啊😣https://baozongwi.xyz/p/hkcertctf-2025/Mon, 22 Dec 2025 01:16:06 +0800https://baozongwi.xyz/p/hkcertctf-2025/renderme thinkphp 的模板注入，测试了一下，参数带外可以放恶意函数，解析的话，ThinkPHP 模板引擎支持 {$var|function}的语法，语法结构为{$待处理变量|函数名}，发现 choom 进行 suid 提权 …https://baozongwi.xyz/p/newstarctf-2023-public-track/Fri, 08 Aug 2025 21:00:15 +0000https://baozongwi.xyz/p/newstarctf-2023-public-track/依旧放松，不对劲，好像并不放松https://baozongwi.xyz/p/energy-cybersecurity-competition-2025/Thu, 17 Apr 2025 09:34:43 +0000https://baozongwi.xyz/p/energy-cybersecurity-competition-2025/看看题https://baozongwi.xyz/p/squ1rrelctf2025/Sat, 05 Apr 2025 18:42:59 +0000https://baozongwi.xyz/p/squ1rrelctf2025/。。。https://baozongwi.xyz/p/plaidctf2025/Sat, 05 Apr 2025 11:13:08 +0000https://baozongwi.xyz/p/plaidctf2025/外卡赛也能打打https://baozongwi.xyz/p/wolvctf2025-ak/Sat, 22 Mar 2025 14:08:09 +0000https://baozongwi.xyz/p/wolvctf2025-ak/爽！https://baozongwi.xyz/p/hgame2025/Thu, 06 Feb 2025 13:48:14 +0000https://baozongwi.xyz/p/hgame2025/披着shi的新生赛https://baozongwi.xyz/p/javascript-prototype-pollution/Fri, 31 Jan 2025 19:25:47 +0000https://baozongwi.xyz/p/javascript-prototype-pollution/pollution_start!