https://baozongwi.xyz/tags/ollama/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/digital-china-data-security-finals-2025/Sun, 20 Apr 2025 09:14:43 +0000https://baozongwi.xyz/p/digital-china-data-security-finals-2025/thinkphp 爆破出来长度不同的密码了，但是进去不对，感觉就是被骗了，后面有空复现 在sql文件里面发现了admin和md5之后的密码，结果我现在去cmd5爆破也不能成功，说明这里肯定就是不对了，全局搜索THINK_VERSION 查找注入漏洞准备进后台 …