Path Traversal | baozongwi's bloghttps://baozongwi.xyz/tags/path-traversal/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cn招商铸盾2025车联网初赛https://baozongwi.xyz/p/shield-2025-iov-prelim/Wed, 20 Aug 2025 13:36:21 +0800https://baozongwi.xyz/p/shield-2025-iov-prelim/firmware-update-system-web admin\admin123登录后台，看到Apache/2.4.54，直接上传恶意文件压缩的包 POST /upload.php HTTP/1.1 Host: 124.133.253.44:32855 Content-Length: 375 …hgame2025https://baozongwi.xyz/p/hgame2025/Thu, 06 Feb 2025 13:48:14 +0000https://baozongwi.xyz/p/hgame2025/披着shi的新生赛hackergame2024https://baozongwi.xyz/p/hackergame2024/Thu, 14 Nov 2024 11:14:51 +0000https://baozongwi.xyz/p/hackergame2024/0x02 question 签到 这里的话我刚进来觉得是复制粘贴就可以了，但是不行，查看源码也没发现什么，后面看到url有个参数 http://202.38.93.141:12024/?pass=true 就好了 喜欢做签到的 CTFer 你们好呀 这个更像是社工题，先找到网页招新网页 比大小王 这一眼脚本题啊，对面的 …