https://y4er.com/https://y4er.com/about/https://y4er.com/categories/https://y4er.com/categories/%E4%BA%8C%E8%BF%9B%E5%88%B6/https://y4er.com/categories/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/https://y4er.com/categories/%E4%BB%A3%E7%A0%81%E7%89%87%E6%AE%B5/https://y4er.com/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/https://y4er.com/categories/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/https://y4er.com/categories/%E7%9E%8E%E6%8A%98%E8%85%BE/https://y4er.com/categories/APP%E7%9B%B8%E5%85%B3/https://y4er.com/categories/bypass/https://y4er.com/categories/CTF%E7%AC%94%E8%AE%B0/https://y4er.com/note/https://y4er.com/posts/https://y4er.com/posts/apache-activemq-rce/https://y4er.com/posts/apache-dubbo-cve-2019-17564/https://y4er.com/posts/apache-flink-cve-2020-17518-17519-rce/https://y4er.com/posts/apache-geode-vmware-gemfire-deserialize-rce/https://y4er.com/posts/apache-nginx-webshell/https://y4er.com/posts/apache-storm-two-cve/https://y4er.com/posts/as_req-and-as_rep-security-issues/https://y4er.com/posts/aspnet-getshell-tips/https://y4er.com/posts/attack-java-jndi-rmi-ldap-1/https://y4er.com/posts/attack-java-jndi-rmi-ldap-2/https://y4er.com/posts/awd-note/https://y4er.com/posts/blockdlls/https://y4er.com/posts/bypass-jep290/https://y4er.com/posts/bypass-mysql-safedog/https://y4er.com/posts/bypass-mysql-yunsuo/https://y4er.com/posts/bypassuac-with-icmluautil/https://y4er.com/posts/bytecodedl/https://y4er.com/posts/certutil-powershell-write-file/https://y4er.com/posts/citrix-sharefile-cve-2021-22941-rce/https://y4er.com/posts/cloudflare-tunnel/https://y4er.com/posts/cloudflare-zerotrust-proxy/https://y4er.com/posts/cobalt-strike-powershell-bypass/https://y4er.com/posts/code-exec/https://y4er.com/posts/command-inject-ctf/https://y4er.com/posts/commvault-command-center-pre-auth-rce/https://y4er.com/posts/csharp-dns-server-shellcode/https://y4er.com/posts/csharp-shellcode-loader/https://y4er.com/posts/cve-2017-8570/https://y4er.com/posts/cve-2019-3799-spring-cloud-config-server/https://y4er.com/posts/cve-2020-7961-liferay-portal-rce/https://y4er.com/posts/cve-2020-9484-tomcat-session-rce/https://y4er.com/posts/cve-2020-10189-zoho-manageengine-rce/https://y4er.com/posts/cve-2021-21234-spring-boot-actuator-logview-directory-traversal/https://y4er.com/posts/cve-2021-34992-orckestra-c1-cms-deserialization-rce/https://y4er.com/posts/cve-2021-35215-solarwinds-orion-platform-actionpluginbaseview-rce/https://y4er.com/posts/cve-2021-35216-solarwinds-patch-manager-edittopxx-rce/https://y4er.com/posts/cve-2021-35217-solarwinds-patch-manager-wsasyncexecutetasks-rce/https://y4er.com/posts/cve-2021-35218-solarwinds-patch-manager-orion-chart-rce/https://y4er.com/posts/cve-2021-42631-printerlogic-web-stack-unserialize-rce/https://y4er.com/posts/cve-2021-44077-zoho-manageengine-servicedesk-plus-pre-auth-rce/https://y4er.com/posts/cve-2021-44521-apache-cassandra-udf-rce/https://y4er.com/posts/cve-2021-45232-apache-apisix-dashboard-unauthorized-access-vulnerability/https://y4er.com/posts/cve-2021-45456-apache-kylin-command-injection/https://y4er.com/posts/cve-2022-2143-advantech-iview-networkservlet-command-inject-rce/https://y4er.com/posts/cve-2022-21445-oracle-adf-faces-deserialization-rce/https://y4er.com/posts/cve-2022-22733-apache-shardingsphere-elasticjob-ui-rce/https://y4er.com/posts/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/https://y4er.com/posts/cve-2022-22954-vmware-workspace-one-access-server-side-template-injection-rce/https://y4er.com/posts/cve-2022-22955-vmware-workspace-one-access-oauth2tokenresourcecontroller-auth-bypass/https://y4er.com/posts/cve-2022-22972-vmware-workspace-one-access-authentication-bypass-rce/https://y4er.com/posts/cve-2022-23131-zabbix-web-frontend-bypassing-the-saml-sso-authentication/https://y4er.com/posts/cve-2022-26134-confluence-server-data-center-ognl-rce/https://y4er.com/posts/cve-2022-26500-veeam-backup-replication-rce/https://y4er.com/posts/cve-2022-26503-veeam-agent-for-microsoft-windows-lpe/https://y4er.com/posts/cve-2022-28219-zoho-manageengine-adaudit-plus-xxe-rce/https://y4er.com/posts/cve-2022-31656-vmware-workspace-one-access-urlrewritefilter-auth-bypass/https://y4er.com/posts/cve-2022-35405-zoho-password-manager-pro-xml-rpc-rce/https://y4er.com/posts/cve-2022-36923-manageengine-opmanager-getuserapikey-authentication-bypass/https://y4er.com/posts/cve-2022-41828-amazon-redshift-jdbc-driver-rce/https://y4er.com/posts/cve-2022-42889-apache-commons-text-rce/https://y4er.com/posts/cve-2022-43781-bitbucket-server-rce/https://y4er.com/posts/cve-2023-2611-advantech-r-seenet-hardcode/https://y4er.com/posts/cve-2023-3224-nuxt-dev-mode-rce/https://y4er.com/posts/cve-2023-27532-veeam-backup-replication-leaked-credentials/https://y4er.com/posts/cve-2023-37895-apache-jackrabbit-rmi-rce/https://y4er.com/posts/cve-2023-38646-metabase-pre-auth-rce/https://y4er.com/posts/cve-2023-42793-jetbrains-teamcity-auth-bypass-rce/https://y4er.com/posts/cve-2023-394760-inductive-automation-ignition-javaserializationcodec-deserialization-rce/https://y4er.com/posts/devtunnel-the-tunneling-tool-of-microsoft/https://y4er.com/posts/discuz-ml-exec-code/https://y4er.com/posts/dnlib-usage/https://y4er.com/posts/dongtai-iast/https://y4er.com/posts/doop-1/https://y4er.com/posts/dotnet-deserialize-bypass-binder/https://y4er.com/posts/dotnet-host-startup-hook/https://y4er.com/posts/dotnet-new-gadget/https://y4er.com/posts/download-shell/https://y4er.com/posts/dump-clipboard-image/https://y4er.com/posts/dump-plaintext-credentials-from-termservice/https://y4er.com/posts/encrypt-reverse-shell/https://y4er.com/posts/faka-hack/https://y4er.com/posts/fastjson-1280/https://y4er.com/posts/fastjson-bypass-autotype-1268/https://y4er.com/posts/fastjson-learn/https://y4er.com/posts/fileupload-bypass-with-dotnet/https://y4er.com/posts/follina-microsoft-office-rce-with-ms-msdt-protocol/https://y4er.com/posts/from-hop-by-hop-to-cve-2022-1388/https://y4er.com/posts/from-jmx-to-rce/https://y4er.com/posts/fuck-qiandao/https://y4er.com/posts/goanywhere-preauth-rce/https://y4er.com/posts/guangdong-qwbctf-writeup/https://y4er.com/posts/harmony-dotnet-patch/https://y4er.com/posts/hello-world/https://y4er.com/posts/hook-eval/https://y4er.com/posts/infrasuite-device-master-cves/https://y4er.com/posts/insterest-shell/https://y4er.com/posts/iscc-2019/https://y4er.com/posts/java-deserialization-1/https://y4er.com/posts/java-deserialization-echo/https://y4er.com/posts/java-deserialization-inject-behinder-memshell-note/https://y4er.com/posts/java-exec-command/https://y4er.com/posts/java-expression-injection/https://y4er.com/posts/java-proxy/https://y4er.com/posts/java-rmi/https://y4er.com/posts/java-servlet/https://y4er.com/posts/java-xmldecoder/https://y4er.com/posts/javaagent-tomcat-memshell/https://y4er.com/posts/javassist-learn/https://y4er.com/posts/jboss-4446-rce-and-rpc-echo-response/https://y4er.com/posts/kerberos-as_req-and-as_rep/https://y4er.com/posts/kerberos-bronze-bit-attack/https://y4er.com/posts/kerberos-constrained-delegation/https://y4er.com/posts/kerberos-golden-ticket-and-silver-ticket/https://y4er.com/posts/kerberos-kerberoasting-spn/https://y4er.com/posts/kerberos-pac/https://y4er.com/posts/kerberos-resource-based-constrained-delegation/https://y4er.com/posts/kerberos-tgs_req-and-tgs_rep/https://y4er.com/posts/kerberos-unconstrained-delegation/https://y4er.com/posts/laravel58-pop-chain/https://y4er.com/posts/lg-simple-editor-rce/https://y4er.com/posts/linux-backdoor-pam/https://y4er.com/posts/messagepack-csharp-typeless-mode-deserialization-rce/https://y4er.com/posts/metersphere-plugincontroller-pre-auth-rce/https://y4er.com/posts/metinfo7-sql-tips/https://y4er.com/posts/minio-cve-2023-28432/https://y4er.com/posts/modify-code-using-dnspy/https://y4er.com/posts/mssql-execute-command-with-clr-assemblies/https://y4er.com/posts/mssql-getshell/https://y4er.com/posts/mssql-injection-learn/https://y4er.com/posts/mxsecurity-command-injection-and-hardcoded-credential/https://y4er.com/posts/mysql-injection-learn/https://y4er.com/posts/mysql-read-client-file/https://y4er.com/posts/nacos-hessian-rce/https://y4er.com/posts/nginx-lua-backdoor/https://y4er.com/posts/nginx-rewrite/https://y4er.com/posts/niushop-getshell/https://y4er.com/posts/no-column-name-injection/https://y4er.com/posts/ntlm-and-net-ntlm-hash/https://y4er.com/posts/ntlm-hash-and-lm-hash/https://y4er.com/posts/oecms-audit/https://y4er.com/posts/oracle-sql-inject/https://y4er.com/posts/page/2/https://y4er.com/posts/page/3/https://y4er.com/posts/page/4/https://y4er.com/posts/page/5/https://y4er.com/posts/page/6/https://y4er.com/posts/page/7/https://y4er.com/posts/page/8/https://y4er.com/posts/page/9/https://y4er.com/posts/page/10/https://y4er.com/posts/page/11/https://y4er.com/posts/pentest-03-12/https://y4er.com/posts/pentest-03-14/https://y4er.com/posts/pentest-idea-sharing-file/https://y4er.com/posts/pentest-idea-sharing-sql/https://y4er.com/posts/php-anti-cross-site-dir/https://y4er.com/posts/php-preg-replace-getshell/https://y4er.com/posts/phpcms2008-type-getshell/https://y4er.com/posts/phpmyadmin-any-file-include/https://y4er.com/posts/port-forwarding/https://y4er.com/posts/python-logging/https://y4er.com/posts/python-pth-file-write-getshell/https://y4er.com/posts/real-wolrd-ctf-old-system-new-getter-jndi-gadget/https://y4er.com/posts/reverse-shell-bypass/https://y4er.com/posts/scms-blind-injection/https://y4er.com/posts/scms-sql-download/https://y4er.com/posts/seacmsv72-anyfile-del-getshell/https://y4er.com/posts/seekbook-adblock/https://y4er.com/posts/several-other-gadgets-of-dotnet/https://y4er.com/posts/shiro-rememberme-rce/https://y4er.com/posts/simple-use-of-the-java-static-analysis-framework-tai-e/https://y4er.com/posts/slack-golang-c2/https://y4er.com/posts/smarterstats-grpc-rce/https://y4er.com/posts/solve-the-problem-of-godzilla-memory-shell-pagecontext/https://y4er.com/posts/spring-cloud-snakeyaml-shell-regeorg/https://y4er.com/posts/sqlmap-tamper/https://y4er.com/posts/tailscale/https://y4er.com/posts/tgs_req-and-tgs_rep-security-issues/https://y4er.com/posts/thinkphp-upload-file/https://y4er.com/posts/thinkphp3-vuln/https://y4er.com/posts/thinkphp5-rce/https://y4er.com/posts/thinkphp5-source-read/https://y4er.com/posts/tomcat-upgrade-memshell/https://y4er.com/posts/tongda-fake-user/https://y4er.com/posts/tongda-oa-rce/https://y4er.com/posts/trend-micro-mobile-security-rce/https://y4er.com/posts/typora-exec/https://y4er.com/posts/ubuntu-dirty-sock/https://y4er.com/posts/unserialize/https://y4er.com/posts/use-local-factory-bypass-jdk-to-jndi/https://y4er.com/posts/using-csharp-to-develop-the-iis-module-backdoor/https://y4er.com/posts/using-csharp-to-syscall/https://y4er.com/posts/using-serverless-add-watermark/https://y4er.com/posts/variable-coverage/https://y4er.com/posts/vmware-vrealize-network-insight-command-inject-and-directory-traversal/https://y4er.com/posts/vmware-vrops-fileread-to-rce/https://y4er.com/posts/vmware-vrops-rce-of-java-bean/https://y4er.com/posts/wangdingbei-badbean-hessian2/https://y4er.com/posts/weblogic-cve-2015-4852/https://y4er.com/posts/weblogic-cve-2016-0638/https://y4er.com/posts/weblogic-cve-2016-3510/https://y4er.com/posts/weblogic-cve-2020-2551/https://y4er.com/posts/weblogic-cve-2020-2555/https://y4er.com/posts/weblogic-cve-2020-14645/https://y4er.com/posts/weblogic-cve-2020-14756/https://y4er.com/posts/weblogic-cve-2021-2109-jndi-rce/https://y4er.com/posts/weblogic-jrmp/https://y4er.com/posts/weblogic-uses-classloader-and-rmi-to-display-command-execution-results/https://y4er.com/posts/webshell-bypass/https://y4er.com/posts/weiphp-exp-sql/https://y4er.com/posts/weiphp5-unauthorized/https://y4er.com/posts/win10-wsreset-bypassuac/https://y4er.com/posts/xxe-to-dc-replay/https://y4er.com/posts/ysoserial-aspectjweaver-gadget/https://y4er.com/posts/ysoserial-commonscollections-2/https://y4er.com/posts/ysoserial-commonscollections-5/https://y4er.com/posts/ysoserial-jdk7u21/https://y4er.com/posts/ysoserial-urldns/https://y4er.com/posts/zk-framework-auth-bypass-case-r1soft-rce/https://y4er.com/posts/zzzphp-rce/https://y4er.com/tags/https://y4er.com/tags/.NET/https://y4er.com/tags/%E4%BA%91%E9%94%81/https://y4er.com/tags/%E4%BB%A3%E7%90%86%E6%A8%A1%E5%BC%8F/https://y4er.com/tags/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/https://y4er.com/tags/%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/https://y4er.com/tags/%E5%85%8D%E6%9D%80/https://y4er.com/tags/%E5%86%85%E5%AD%98%E9%A9%AC/https://y4er.com/tags/%E5%86%85%E5%AD%98shell/https://y4er.com/tags/%E5%86%85%E7%BD%91%E7%A9%BF%E9%80%8F/https://y4er.com/tags/%E5%86%B0%E8%9D%8E/https://y4er.com/tags/%E5%90%8E%E9%97%A8/https://y4er.com/tags/%E5%AE%89%E5%85%A8%E7%8B%97/https://y4er.com/tags/%E5%B7%A5%E5%85%B7/https://y4er.com/tags/%E5%BC%80%E5%8F%91/https://y4er.com/tags/%E6%98%8E%E6%96%87/https://y4er.com/tags/%E6%AD%A3%E5%88%99/https://y4er.com/tags/%E6%B1%A1%E7%82%B9%E5%88%86%E6%9E%90/https://y4er.com/tags/%E6%B3%A8%E5%85%A5/https://y4er.com/tags/%E6%B8%97%E9%80%8F/https://y4er.com/tags/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/https://y4er.com/tags/%E8%87%AA%E5%8A%A8%E5%8C%96/https://y4er.com/tags/%E9%9A%A7%E9%81%93/https://y4er.com/tags/%E9%9D%99%E6%80%81%E5%88%86%E6%9E%90/https://y4er.com/tags/%E9%80%9A%E8%BE%BEOA/https://y4er.com/tags/ActiveMQ/https://y4er.com/tags/ADAudit/https://y4er.com/tags/Agent/https://y4er.com/tags/apache/https://y4er.com/tags/APISIX/https://y4er.com/tags/app/https://y4er.com/tags/asp.net/https://y4er.com/tags/audit/https://y4er.com/tags/awd/https://y4er.com/tags/backdoor/https://y4er.com/tags/bean/https://y4er.com/tags/Burp%20Suite/https://y4er.com/tags/bypass/https://y4er.com/tags/bypassuac/https://y4er.com/tags/ByteCodeDL/https://y4er.com/tags/c2/https://y4er.com/tags/Certutil/https://y4er.com/tags/Citrix%20ShareFile/https://y4er.com/tags/ClassLoader/https://y4er.com/tags/Cloudflare/https://y4er.com/tags/code/https://y4er.com/tags/COM/https://y4er.com/tags/command/https://y4er.com/tags/Confluence/https://y4er.com/tags/CTF/https://y4er.com/tags/CVE/https://y4er.com/tags/Datalog/https://y4er.com/tags/Deserialization/https://y4er.com/tags/deserialize/https://y4er.com/tags/devtunnel/https://y4er.com/tags/dnlib/https://y4er.com/tags/dns/https://y4er.com/tags/dnspy/https://y4er.com/tags/doop/https://y4er.com/tags/download/https://y4er.com/tags/Dubbo/https://y4er.com/tags/EL%E8%A1%A8%E8%BE%BE%E5%BC%8F/https://y4er.com/tags/exec/https://y4er.com/tags/fileupload/https://y4er.com/tags/Flink/https://y4er.com/tags/Follina/https://y4er.com/tags/gemfire/https://y4er.com/tags/geode/https://y4er.com/tags/getshell/https://y4er.com/tags/go/https://y4er.com/tags/goanywhere/https://y4er.com/tags/Harmony/https://y4er.com/tags/Hessian/https://y4er.com/tags/hop-by-hop/https://y4er.com/tags/hugo/https://y4er.com/tags/iast/https://y4er.com/tags/ICMLuaUtil/https://y4er.com/tags/Ignition/https://y4er.com/tags/include/https://y4er.com/tags/injection/https://y4er.com/tags/Jackrabbit/https://y4er.com/tags/Java/https://y4er.com/tags/jdbc/https://y4er.com/tags/JetBrains/https://y4er.com/tags/jmx/https://y4er.com/tags/JNDI/https://y4er.com/tags/JRMP/https://y4er.com/tags/jwt/https://y4er.com/tags/Kerberoasting/https://y4er.com/tags/Kerberos/https://y4er.com/tags/Kylin/https://y4er.com/tags/LDAP/https://y4er.com/tags/Linux/https://y4er.com/tags/logging/https://y4er.com/tags/LPE/https://y4er.com/tags/MessagePack/https://y4er.com/tags/metabase/https://y4er.com/tags/minio/https://y4er.com/tags/msdt/https://y4er.com/tags/mssql/https://y4er.com/tags/MySQL/https://y4er.com/tags/nacos/https://y4er.com/tags/nginx/https://y4er.com/tags/note/https://y4er.com/tags/NTLM/https://y4er.com/tags/nuxt/https://y4er.com/tags/office/https://y4er.com/tags/OpManager/https://y4er.com/tags/oracle/https://y4er.com/tags/Oracle/https://y4er.com/tags/p2p/https://y4er.com/tags/PAM/https://y4er.com/tags/pentest/https://y4er.com/tags/PHP/https://y4er.com/tags/phpmyadmin/https://y4er.com/tags/portforward/https://y4er.com/tags/PowerShell/https://y4er.com/tags/PrinterLogic/https://y4er.com/tags/python/https://y4er.com/tags/R-SeeNet/https://y4er.com/tags/RCE/https://y4er.com/tags/remote/https://y4er.com/tags/reverse/https://y4er.com/tags/RMI/https://y4er.com/tags/serverless/https://y4er.com/tags/ServiceDesk/https://y4er.com/tags/shell/https://y4er.com/tags/shellcode/https://y4er.com/tags/shiro/https://y4er.com/tags/Slack/https://y4er.com/tags/SmarterStats/https://y4er.com/tags/SPN/https://y4er.com/tags/Spring/https://y4er.com/tags/springboot/https://y4er.com/tags/SQL/https://y4er.com/tags/SQL%20%E6%B3%A8%E5%85%A5/https://y4er.com/tags/SQL%E6%B3%A8%E5%85%A5/https://y4er.com/tags/ssti/https://y4er.com/tags/Storm/https://y4er.com/tags/syscall/https://y4er.com/tags/tai-e/https://y4er.com/tags/tailscale/https://y4er.com/tags/TeamCity/https://y4er.com/tags/Tomcat/https://y4er.com/tags/Tunnel/https://y4er.com/tags/typora/https://y4er.com/tags/UAC/https://y4er.com/tags/ubuntu/https://y4er.com/tags/UDF/https://y4er.com/tags/unserialize/https://y4er.com/tags/upload/https://y4er.com/tags/vip/https://y4er.com/tags/vRNI/https://y4er.com/tags/vROPS/https://y4er.com/tags/waf/https://y4er.com/tags/WAF%20%E7%BB%95%E8%BF%87/https://y4er.com/tags/WARP/https://y4er.com/tags/web/https://y4er.com/tags/Weiphp/https://y4er.com/tags/Windows/https://y4er.com/tags/XXE/https://y4er.com/tags/ysoserial/https://y4er.com/tags/zabbix/https://y4er.com/tags/Zero%20Trust/