https://gv7.me/articles/2022/remember-my-brother-qui/ 2024-01-02 https://gv7.me/articles/2019/security-raised-by-java-filter-scope-missetting/ 2024-01-02 https://gv7.me/articles/2021/construct-java-detection-class-deserialization-gadget/ 2023-01-13 https://gv7.me/articles/2022/the-spring-cloud-gateway-inject-memshell-through-spel-expressions/ 2022-03-10 https://gv7.me/articles/2022/rwctf-4th-desperate-cat-ascii-jar-writeup/ 2022-02-14 https://gv7.me/articles/2021/some-extensions-of-spring-bean-rce-under-weblogic/ 2021-12-31 https://gv7.me/articles/2019/weblogic-pseudo-random-dir-generation-algorithm-exploration/ 2021-11-20 https://gv7.me/articles/2021/a-gadget-is-secretly-leaking-your-id/ 2021-10-10 https://gv7.me/articles/2021/improve-neo-regeorg-compatibility-by-loading-classes/ 2021-09-13 https://gv7.me/articles/2021/shiro-deserialization-bypasses-waf-through-unknown-http-method/ 2021-09-05 https://gv7.me/articles/2021/java-deserialized-data-bypasses-waf-through-sleep-chunked/ 2021-08-31 https://gv7.me/articles/2021/woodpecker-framework-introduce/ 2021-08-15 https://gv7.me/articles/2021/java-deserialize-data-bypass-waf-by-adding-a-lot-of-dirty-data/ 2021-08-07 https://gv7.me/articles/2020/kill-java-web-filter-memshell/ 2021-01-21 https://gv7.me/articles/2020/filter-servlet-type-memshell-scan-capture-and-kill/ 2020-10-13 https://gv7.me/articles/2018/pentestbox-search-tools/ 2020-09-28 https://gv7.me/articles/2020/deserialization-of-serialvesionuid-conflicts-using-a-custom-classloader/ 2020-07-09 https://gv7.me/articles/2019/enable-ysoserial-to-support-execution-of-custom-code/ 2020-04-21 https://gv7.me/articles/2020/semi-automatic-mining-request-implements-multiple-middleware-echo/ 2020-04-19 https://gv7.me/articles/2020/how-to-detect-tomcat-ajp-lfi-more-accurately/ 2020-03-27 https://gv7.me/articles/2020/several-ways-to-detect-fastjson-through-dnslog/ 2020-03-24 https://gv7.me/articles/2020/cve-2020-1938-tomcat-ajp-lfi/ 2020-02-22 https://gv7.me/articles/2018/fast-locate-the-front-end-encryption-method/ 2019-12-21 https://gv7.me/articles/2019/burp-captcha-killer-usage/ 2019-12-16 https://gv7.me/articles/2019/chunked-coding-converter/ 2019-12-16 https://gv7.me/articles/2017/compile-sqlmap4burp/ 2019-10-06 https://gv7.me/articles/2019/refactoring-sqlmap4burp/ 2019-09-02 https://gv7.me/articles/2019/detection-weblogic-version-by-t3/ 2019-08-27 https://gv7.me/articles/2019/quickly-find-jars-that-depend-on-poc-exp/ 2019-05-21 https://gv7.me/articles/2019/oracle-download-auto-login-tampermonkey-script/ 2019-05-10 https://gv7.me/articles/2019/why-can-multipart-post-bypass-java-filter/ 2019-03-28 https://gv7.me/articles/2019/an-interesting-dark-chain/ 2019-02-16 https://gv7.me/articles/2017/batch-crack-shadows/ 2019-02-16 https://gv7.me/articles/2017/currentPayload-originalPayload/ 2019-02-16 https://gv7.me/articles/2017/how-do-sql-inject-web-services/ 2019-02-16 https://gv7.me/articles/2018/java-00-truncation/ 2019-02-16 https://gv7.me/articles/2017/jsEncrypter/ 2019-02-16 https://gv7.me/articles/2018/jsEncrypter-nodejs-server-script/ 2019-02-16 https://gv7.me/articles/2018/make-upload-vul-fuzz-dic/ 2019-02-16 https://gv7.me/articles/2017/making-the-password-top-100/ 2019-02-16 https://gv7.me/articles/2018/masscan-report-converter/ 2019-02-16 https://gv7.me/articles/2018/obfuscation-of-burp-extension-code/ 2019-02-16 https://gv7.me/articles/2018/solve-jsEncrypter-script-error-code-is-not-wrong/ 2019-02-16 https://gv7.me/articles/2017/Writing-AWVS-scripts-to-detect-Web-Services/ 2019-02-16 https://gv7.me/articles/2019/tampermonkey-script-autoclicker/ 2019-02-16 https://gv7.me/articles/2019/java-00-truncation-detail/ 2019-02-16