<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0"><channel><title>WorstFit | baozongwi's blog</title><link>https://baozongwi.xyz/tags/worstfit/</link><description>Currently exploring Java security and internal network penetration, with CTFs as a hobby.</description><generator>Hugo</generator><language>zh-cn</language><item><title>smileyCTF2025</title><link>https://baozongwi.xyz/p/smileyctf2025/</link><pubDate>Sat, 14 Jun 2025 16:05:06 +0000</pubDate><guid>https://baozongwi.xyz/p/smileyctf2025/</guid><description>web/Sculpture Revenge 访问用户提供的url，并且还必须是同域名的情况 """ from urllib.parse import urlparse, parse_qs, urlencode, urlunparse parsed = urlparse("https://google.com") …</description></item></channel></rss>