Aggregator

先知社区更新日志（2025-03-29）

周末看了看wolvCTF发现一些trick

Next.js 中间件鉴权绕过漏洞 (CVE-2025-29927)

赛后复现

本文以D-Link DWR-932路由器为例，系统性地剖析了物联网设备中FOTA（固件无线升级）技术的实现流程与安全机制。通过逆向工程与动态分析，揭示了FOTA从固件下载、解包校验到刷写重启的全链路细节，重点拆解了fotad、appmgr、prefota等核心组件的协同逻辑。研究发现，DWR-932采用多进程通信（如Unix域套接字appmgr.us）与分阶段状态机管理升级流程，通过flash_e

NSSCTF Round#28 WEB题解

文章主要对python中Bottle框架的模板引擎渲染的安全漏洞问题进行原理分析和利用

NodeJs可以写后端、electron又可以打包成exe，还可以通过主进程命令执行，那么不就可以自研一个C2了吗

LLVM IR 在网络安全中的应用

ezjava、CB链、Fastjson、ezJson、CC链、FastJsonBCEL、SnakeYaml、PolarOA、PolarOA2.0、一写一个不吱声、ezUtil

2025-软件系统安全攻防半决赛Wp

大语言模型（LLMs）的最新进展极大地提升了各种自然语言处理（NLP）任务的性能。其卓越的泛化能力使得LLMs不仅在通用任务中表现出色，还为集成应用的开发提供了强大的技术支持。在这些集成应用中，LLMs通常作为骨干，通过附加工具或扩展文本信息来帮助用户完成复杂任务

2025软件安全赛pwn encoder题解

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

PolarCTF网络安全2025春季个人挑战赛-Writeup

A vulnerability classified as critical was found in Adobe Acrobat Reader up to 20.005.30574/24.002.20736. This vulnerability affects unknown code. The manipulation leads to use after free. This vulnerability was named CVE-2024-34095. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Adobe Acrobat Reader up to 20.005.30574/24.002.20736. This issue affects some unknown processing. The manipulation leads to use after free. The identification of this vulnerability is CVE-2024-34096. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.