https://baozongwi.xyz/tags/prompt-injection/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/iscc2025-regional-competition/Wed, 14 May 2025 15:46:33 +0000https://baozongwi.xyz/p/iscc2025-regional-competition/ISCC原来不是PY是打的啊https://baozongwi.xyz/p/swampctf2025-ak/Sun, 30 Mar 2025 17:28:14 +0000https://baozongwi.xyz/p/swampctf2025-ak/Serialies 被打成20分的Java反序列化？！，让我来看看这个是什么东西，在java/com/serialies/serialies/PersonController.java中 如果是POST就调用person.getJob().init();，如果是GET直接返回全部对象， public void …