应急响应sstioracle侧信道tar软链接phar反序列化php特性php伪协议反序列化字符串逃逸disabled_function绕过open_basedir绕过cnextphp-fpm被动模式RCEpickle反序列化flask报错对抗样本攻击神经网络后门攻击php反序列化Next.js条件竞争油猴脚本哈希碰撞tsharkjava反射XSLeakdjangopyjailsql注入ShellShockphp原生类xssmihomo原型链污染极致CMSgo模板注入gopher协议redistarfilelitestarnginxnosqlmongodbvm沙箱逃逸nodejs大小写特性git泄露计划任务提权docker-api未授权GateOne任意文件读取os.path.join目录穿越jwtPostgreSQLincludeparseIntxxe注册表取证磁盘镜像取证mysqljskeras模型加载RCEhttp3缓冲区污染minio STS注入jtarjavathrow new exception绕过php原生类绕过md5强比较RCEpearcmdgo 1.20.0 CVE-2023-45283 windows目录穿越缓冲区复用bcryptNTUSER.DATperlsupabasethrift提示词注入LLM指纹识别git命令执行verilog命令执行slim模板tcp自连接pickle反序列化(with image)multiprocessing进程间通信管道污染sqlitephp jaillaravelwordpressJsonPickle文本嵌入erb模板注入bottle请求走私uuid代码审计Path Normalizationopen_basedirGroovy表达式注入cloudClickHousessrfjavascriptyaml软链接Mako SSTIbashFuck文件上传ret2libcflask pinret2csumysql域渗透ret2textret2shellcoderet2syscallredis主从复制rcewordpress wpcargo未授权RCEbase64提权sweetpotato提权约束性委派spelceleryphp匿名类heapdump泄露shiro反序列化RCE.NET逆向RSA/AES解密Backup Operators提权SAM转储工控thinkphpsudo提权信呼OAMS17-010票据传递go sstiphp-tricksFCKeditorshellshocko2oa弱口令加后台RCEHarbor未授权Minio SSRF交互式shellk8s容器挂载逃逸Harbor镜像同步绕过死亡exitSmarty SSTI布尔盲注php特性 进制转换jwt密钥爆破ping命令注入python原型链污染无字母数字RCExpath盲注flask session伪造go session伪造flask热加载pongo2模板注入thymeleaf sstimd5ejs模板注入MCPBlockchainsageenv提权