search

v2ish1yan / blogtalk

my blog`s talks repository
Apache License 2.0
1 stars 0 forks source link

2023西湖论剑部分web | v2ish1yan`s blog #22

Open v2ish1yan opened 1 year ago

v2ish1yan commented 1 year ago

http://v2ish1yan.top/2023/02/03/%E6%AF%94%E8%B5%9Bwp/2023%E8%A5%BF%E6%B9%96%E8%AE%BA%E5%89%91/

real_ez_node0x00 通过拆分http进行ssrf 原型链污染利用ejs进行rce 0x01 源码分析此处代码存在原型链污染 1234567891011121314151617181920router.post('/copy',(req,res)=>{ res.setHeader('Content-type','te