<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0"><channel><title>XS-Leak | baozongwi's blog</title><link>https://baozongwi.xyz/tags/xs-leak/</link><description>Currently exploring Java security and internal network penetration, with CTFs as a hobby.</description><generator>Hugo</generator><language>zh-cn</language><item><title>BackdoorCTF 2025</title><link>https://baozongwi.xyz/p/backdoorctf-2025/</link><pubDate>Wed, 10 Dec 2025 22:49:38 +0800</pubDate><guid>https://baozongwi.xyz/p/backdoorctf-2025/</guid><description>Go Touch Grass 一道 XS-Leak 的题目，就是利用懒加载来处理 from flask import Flask, request, make_response, render_template_string import os, base64, sys, threading, time, …</description></item></channel></rss>