https://y4er.com/categories/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/tags/dnlib/2023-10-26T15:39:15+08:00weekly0.5 https://y4er.com/posts/dnlib-usage/2023-10-26T15:39:15+08:00weekly0.5 https://y4er.com/tags/dotnet/2023-10-26T15:39:15+08:00weekly0.5 https://y4er.com/tags/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/categories/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/posts/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/tags/activemq/2023-12-08T15:22:35+08:00weekly0.5 https://y4er.com/posts/apache-activemq-rce/2023-12-08T15:22:35+08:00weekly0.5 https://y4er.com/tags/rce/2023-12-08T15:22:35+08:00weekly0.5 https://y4er.com/posts/dotnet-new-gadget/2023-10-23T16:51:13+08:00weekly0.5 https://y4er.com/tags/cve/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/posts/cve-2023-42793-jetbrains-teamcity-auth-bypass-rce/2023-12-08T15:20:26+08:00weekly0.5 https://y4er.com/tags/jetbrains/2023-12-08T15:20:26+08:00weekly0.5 https://y4er.com/tags/teamcity/2023-12-08T15:20:26+08:00weekly0.5 https://y4er.com/posts/lg-simple-editor-rce/2023-12-08T15:17:52+08:00weekly0.5 https://y4er.com/tags/devtunnel/2023-09-01T11:30:36+08:00weekly0.5 https://y4er.com/posts/devtunnel-the-tunneling-tool-of-microsoft/2023-09-01T11:30:36+08:00weekly0.5 https://y4er.com/tags/%E5%B7%A5%E5%85%B7/2023-09-01T11:30:36+08:00weekly0.5 https://y4er.com/categories/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/2023-09-01T11:30:36+08:00weekly0.5 https://y4er.com/tags/%E9%9A%A7%E9%81%93/2023-09-01T11:30:36+08:00weekly0.5 https://y4er.com/posts/cve-2023-394760-inductive-automation-ignition-javaserializationcodec-deserialization-rce/2023-08-29T11:25:15+08:00weekly0.5 https://y4er.com/tags/deserialization/2023-08-29T11:25:15+08:00weekly0.5 https://y4er.com/tags/ignition/2023-08-29T11:25:15+08:00weekly0.5 https://y4er.com/posts/cve-2023-2611-advantech-r-seenet-hardcode/2023-08-26T11:22:48+08:00weekly0.5 https://y4er.com/tags/r-seenet/2023-08-26T11:22:48+08:00weekly0.5 https://y4er.com/posts/cve-2023-37895-apache-jackrabbit-rmi-rce/2023-07-28T11:11:10+08:00weekly0.5 https://y4er.com/tags/jackrabbit/2023-07-28T11:11:10+08:00weekly0.5 https://y4er.com/tags/rmi/2023-07-28T11:11:10+08:00weekly0.5 https://y4er.com/posts/cve-2023-38646-metabase-pre-auth-rce/2023-07-26T11:20:21+08:00weekly0.5 https://y4er.com/tags/metabase/2023-07-26T11:20:21+08:00weekly0.5 https://y4er.com/posts/cve-2023-3224-nuxt-dev-mode-rce/2023-06-20T08:52:20+08:00weekly0.5 https://y4er.com/tags/nuxt/2023-06-20T08:52:20+08:00weekly0.5 https://y4er.com/tags/java/2023-12-08T09:42:15+08:00weekly0.5 https://y4er.com/series/2023-12-08T09:42:15+08:00weekly0.5 https://y4er.com/series/vmware/2023-12-08T09:42:15+08:00weekly0.5 https://y4er.com/posts/vmware-vrealize-network-insight-command-inject-and-directory-traversal/2023-06-08T17:41:26+08:00weekly0.5 https://y4er.com/tags/vrni/2023-06-08T17:41:26+08:00weekly0.5 https://y4er.com/tags/nacos/2023-06-08T09:54:59+08:00weekly0.5 https://y4er.com/posts/nacos-hessian-rce/2023-06-08T09:54:59+08:00weekly0.5 https://y4er.com/tags/bypass/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/tags/jwt/2023-05-26T10:24:35+08:00weekly0.5 https://y4er.com/posts/mxsecurity-command-injection-and-hardcoded-credential/2023-05-26T10:24:35+08:00weekly0.5 https://y4er.com/tags/python/2023-05-26T10:24:35+08:00weekly0.5 https://y4er.com/tags/getshell/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/tags/php/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/posts/trend-micro-mobile-security-rce/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/tags/upload/2023-12-08T17:20:42+08:00weekly0.5 https://y4er.com/tags/harmony/2023-05-11T17:15:36+08:00weekly0.5 https://y4er.com/posts/harmony-dotnet-patch/2023-05-11T17:15:36+08:00weekly0.5 https://y4er.com/tags/messagepack/2023-04-24T08:46:13+08:00weekly0.5 https://y4er.com/posts/messagepack-csharp-typeless-mode-deserialization-rce/2023-04-24T08:46:13+08:00weekly0.5 https://y4er.com/posts/python-pth-file-write-getshell/2023-04-17T09:37:55+08:00weekly0.5 https://y4er.com/tags/bean/2023-12-08T09:42:15+08:00weekly0.5 https://y4er.com/posts/vmware-vrops-rce-of-java-bean/2023-12-08T09:42:15+08:00weekly0.5 https://y4er.com/tags/vrops/2023-12-08T09:42:15+08:00weekly0.5 https://y4er.com/posts/vmware-vrops-fileread-to-rce/2023-12-08T09:39:44+08:00weekly0.5 https://y4er.com/tags/%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/2023-12-08T09:39:44+08:00weekly0.5 https://y4er.com/tags/dnspy/2023-04-08T09:34:33+08:00weekly0.5 https://y4er.com/posts/modify-code-using-dnspy/2023-04-08T09:34:33+08:00weekly0.5 https://y4er.com/posts/minio-cve-2023-28432/2023-03-24T16:39:34+08:00weekly0.5 https://y4er.com/tags/minio/2023-03-24T16:39:34+08:00weekly0.5 https://y4er.com/posts/cve-2023-27532-veeam-backup-replication-leaked-credentials/2023-03-17T15:48:34+08:00weekly0.5 https://y4er.com/series/veeam/2023-03-17T15:48:34+08:00weekly0.5 https://y4er.com/posts/dongtai-iast/2023-02-24T17:11:58+08:00weekly0.5 https://y4er.com/tags/iast/2023-02-24T17:11:58+08:00weekly0.5 https://y4er.com/posts/apache-geode-vmware-gemfire-deserialize-rce/2023-12-08T09:31:03+08:00weekly0.5 https://y4er.com/tags/gemfire/2023-12-08T09:31:03+08:00weekly0.5 https://y4er.com/tags/geode/2023-12-08T09:31:03+08:00weekly0.5 https://y4er.com/tags/deserialize/2023-02-06T09:28:31+08:00weekly0.5 https://y4er.com/tags/goanywhere/2023-02-06T09:28:31+08:00weekly0.5 https://y4er.com/posts/goanywhere-preauth-rce/2023-02-06T09:28:31+08:00weekly0.5 https://y4er.com/posts/simple-use-of-the-java-static-analysis-framework-tai-e/2023-01-18T10:08:12+08:00weekly0.5 https://y4er.com/tags/tai-e/2023-01-18T10:08:12+08:00weekly0.5 https://y4er.com/series/%E9%9D%99%E6%80%81%E8%BD%AF%E4%BB%B6%E5%88%86%E6%9E%90/2023-01-18T10:08:12+08:00weekly0.5 https://y4er.com/tags/%E6%B1%A1%E7%82%B9%E5%88%86%E6%9E%90/2023-01-18T10:08:12+08:00weekly0.5 https://y4er.com/tags/%E8%87%AA%E5%8A%A8%E5%8C%96/2023-01-18T10:08:12+08:00weekly0.5 https://y4er.com/tags/p2p/2023-01-04T09:42:39+08:00weekly0.5 https://y4er.com/tags/tailscale/2023-01-04T09:42:39+08:00weekly0.5 https://y4er.com/posts/tailscale/2023-01-04T09:42:39+08:00weekly0.5 https://y4er.com/tags/%E5%86%85%E7%BD%91%E7%A9%BF%E9%80%8F/2023-01-04T09:42:39+08:00weekly0.5 https://y4er.com/categories/%E7%9E%8E%E6%8A%98%E8%85%BE/2023-01-04T09:42:39+08:00weekly0.5 https://y4er.com/posts/dotnet-host-startup-hook/2023-01-03T15:27:34+08:00weekly0.5 https://y4er.com/posts/cve-2022-43781-bitbucket-server-rce/2022-11-28T10:21:31+08:00weekly0.5 https://y4er.com/posts/zk-framework-auth-bypass-case-r1soft-rce/2022-11-17T10:18:04+08:00weekly0.5 https://y4er.com/posts/infrasuite-device-master-cves/2022-11-08T17:12:47+08:00weekly0.5 https://y4er.com/tags/cloudflare/2022-11-06T22:42:45+08:00weekly0.5 https://y4er.com/posts/cloudflare-zerotrust-proxy/2022-11-06T22:42:45+08:00weekly0.5 https://y4er.com/posts/cve-2022-41828-amazon-redshift-jdbc-driver-rce/2022-10-28T12:48:08+08:00weekly0.5 https://y4er.com/tags/jdbc/2022-10-28T12:48:08+08:00weekly0.5 https://y4er.com/posts/cve-2022-42889-apache-commons-text-rce/2022-10-13T19:12:46+08:00weekly0.5 https://y4er.com/tags/jmx/2022-09-30T11:30:21+08:00weekly0.5 https://y4er.com/tags/pentest/2022-09-30T11:30:21+08:00weekly0.5 https://y4er.com/posts/from-jmx-to-rce/2022-09-30T11:30:21+08:00weekly0.5 https://y4er.com/posts/cloudflare-tunnel/2022-09-30T11:26:43+08:00weekly0.5 https://y4er.com/tags/tunnel/2022-09-30T11:26:43+08:00weekly0.5 https://y4er.com/series/fastjson/2022-09-20T09:43:30+08:00weekly0.5 https://y4er.com/posts/fastjson-1.2.80/2022-09-20T09:43:30+08:00weekly0.5 https://y4er.com/tags/doop/2022-09-08T16:31:59+08:00weekly0.5 https://y4er.com/posts/doop-1/2022-09-08T16:31:59+08:00weekly0.5 https://y4er.com/tags/bytecodedl/2022-09-01T10:46:09+08:00weekly0.5 https://y4er.com/posts/bytecodedl/2022-09-01T10:46:09+08:00weekly0.5 https://y4er.com/posts/cve-2022-36923-manageengine-opmanager-getuserapikey-authentication-bypass/2022-09-01T10:36:39+08:00weekly0.5 https://y4er.com/series/manageengine/2022-09-01T10:36:39+08:00weekly0.5 https://y4er.com/tags/opmanager/2022-09-01T10:36:39+08:00weekly0.5 https://y4er.com/tags/ctf/2022-08-27T15:15:32+08:00weekly0.5 https://y4er.com/tags/hessian/2022-08-27T15:15:32+08:00weekly0.5 https://y4er.com/posts/wangdingbei-badbean-hessian2/2022-08-27T15:15:32+08:00weekly0.5 https://y4er.com/tags/shell/2022-08-24T15:16:59+08:00weekly0.5 https://y4er.com/tags/tomcat/2022-08-24T15:16:59+08:00weekly0.5 https://y4er.com/posts/tomcat-upgrade-memshell/2022-08-24T15:16:59+08:00weekly0.5 https://y4er.com/posts/cve-2022-22955-vmware-workspace-one-access-oauth2tokenresourcecontroller-auth-bypass/2022-08-14T13:17:47+08:00weekly0.5 https://y4er.com/posts/cve-2022-31656-vmware-workspace-one-access-urlrewritefilter-auth-bypass/2022-08-14T13:11:18+08:00weekly0.5 https://y4er.com/friends/2022-08-13T00:00:00+00:00weekly0.5 https://y4er.com/posts/cve-2022-35405-zoho-password-manager-pro-xml-rpc-rce/2022-07-21T10:16:07+08:00weekly0.5 https://y4er.com/posts/cve-2022-2143-advantech-iview-networkservlet-command-inject-rce/2022-07-06T14:13:51+08:00weekly0.5 https://y4er.com/posts/dotnet-deserialize-bypass-binder/2022-07-04T10:26:00+08:00weekly0.5 https://y4er.com/tags/adaudit/2022-06-30T16:38:11+08:00weekly0.5 https://y4er.com/posts/cve-2022-28219-zoho-manageengine-adaudit-plus-xxe-rce/2022-06-30T16:38:11+08:00weekly0.5 https://y4er.com/tags/xxe/2022-06-30T16:38:11+08:00weekly0.5 https://y4er.com/posts/cve-2022-21445-oracle-adf-faces-deserialization-rce/2022-06-29T16:19:41+08:00weekly0.5 https://y4er.com/tags/oracle/2022-06-29T16:19:41+08:00weekly0.5 https://y4er.com/tags/smarterstats/2022-06-29T16:16:59+08:00weekly0.5 https://y4er.com/posts/smarterstats-grpc-rce/2022-06-29T16:16:59+08:00weekly0.5 https://y4er.com/tags/confluence/2022-06-08T10:42:27+08:00weekly0.5 https://y4er.com/posts/cve-2022-26134-confluence-server-data-center-ognl-rce/2022-06-08T10:42:27+08:00weekly0.5 https://y4er.com/tags/follina/2022-06-02T09:36:15+08:00weekly0.5 https://y4er.com/posts/follina-microsoft-office-rce-with-ms-msdt-protocol/2022-06-02T09:36:15+08:00weekly0.5 https://y4er.com/tags/msdt/2022-06-02T09:36:15+08:00weekly0.5 https://y4er.com/tags/office/2022-06-02T09:36:15+08:00weekly0.5 https://y4er.com/posts/cve-2022-22972-vmware-workspace-one-access-authentication-bypass-rce/2022-05-27T11:31:24+08:00weekly0.5 https://y4er.com/tags/hop-by-hop/2022-05-13T09:29:04+08:00weekly0.5 https://y4er.com/posts/from-hop-by-hop-to-cve-2022-1388/2022-05-13T09:29:04+08:00weekly0.5 https://y4er.com/posts/jboss-4446-rce-and-rpc-echo-response/2022-04-29T10:23:08+08:00weekly0.5 https://y4er.com/posts/solve-the-problem-of-godzilla-memory-shell-pagecontext/2022-04-15T09:48:42+08:00weekly0.5 https://y4er.com/tags/%E5%86%85%E5%AD%98%E9%A9%AC/2022-04-15T09:48:42+08:00weekly0.5 https://y4er.com/posts/cve-2022-22954-vmware-workspace-one-access-server-side-template-injection-rce/2022-04-09T16:17:37+08:00weekly0.5 https://y4er.com/tags/ssti/2022-04-09T16:17:37+08:00weekly0.5 https://y4er.com/posts/java-deserialization-inject-behinder-memshell-note/2022-04-02T09:40:37+08:00weekly0.5 https://y4er.com/tags/%E5%86%B0%E8%9D%8E/2022-04-02T09:40:37+08:00weekly0.5 https://y4er.com/posts/cve-2022-26503-veeam-agent-for-microsoft-windows-lpe/2022-03-22T14:43:02+08:00weekly0.5 https://y4er.com/tags/lpe/2022-03-22T14:43:02+08:00weekly0.5 https://y4er.com/posts/cve-2022-26500-veeam-backup-replication-rce/2022-03-17T10:43:02+08:00weekly0.5 https://y4er.com/posts/cve-2022-22947-springcloud-gateway-spel-rce-echo-response/2022-03-03T14:37:17+08:00weekly0.5 https://y4er.com/tags/spring/2022-03-03T14:37:17+08:00weekly0.5 https://y4er.com/tags/fileupload/2022-02-25T16:41:32+08:00weekly0.5 https://y4er.com/tags/waf/2022-02-25T16:41:32+08:00weekly0.5 https://y4er.com/posts/fileupload-bypass-with-dotnet/2022-02-25T16:41:32+08:00weekly0.5 https://y4er.com/posts/cve-2022-23131-zabbix-web-frontend-bypassing-the-saml-sso-authentication/2022-02-22T10:39:25+08:00weekly0.5 https://y4er.com/tags/zabbix/2022-02-22T10:39:25+08:00weekly0.5 https://y4er.com/posts/cve-2021-44521-apache-cassandra-udf-rce/2022-02-12T17:04:39+08:00weekly0.5 https://y4er.com/tags/udf/2022-02-12T17:04:39+08:00weekly0.5 https://y4er.com/posts/cve-2021-42631-printerlogic-web-stack-unserialize-rce/2022-01-28T11:23:16+08:00weekly0.5 https://y4er.com/tags/printerlogic/2022-01-28T11:23:16+08:00weekly0.5 https://y4er.com/tags/unserialize/2022-01-28T11:23:16+08:00weekly0.5 https://y4er.com/posts/cve-2022-22733-apache-shardingsphere-elasticjob-ui-rce/2022-01-21T15:22:00+08:00weekly0.5 https://y4er.com/posts/several-other-gadgets-of-dotnet/2022-01-21T11:06:13+08:00weekly0.5 https://y4er.com/posts/cve-2021-45456-apache-kylin-command-injection/2022-01-13T16:06:53+08:00weekly0.5 https://y4er.com/tags/kylin/2022-01-13T16:06:53+08:00weekly0.5 https://y4er.com/posts/metersphere-plugincontroller-pre-auth-rce/2022-01-07T10:38:55+08:00weekly0.5 https://y4er.com/tags/apisix/2021-12-28T10:36:31+08:00weekly0.5 https://y4er.com/posts/cve-2021-45232-apache-apisix-dashboard-unauthorized-access-vulnerability/2021-12-28T10:36:31+08:00weekly0.5 https://y4er.com/posts/cve-2021-44077-zoho-manageengine-servicedesk-plus-pre-auth-rce/2021-12-07T11:03:48+08:00weekly0.5 https://y4er.com/tags/servicedesk/2021-12-07T11:03:48+08:00weekly0.5 https://y4er.com/posts/cve-2021-34992-orckestra-c1-cms-deserialization-rce/2021-12-04T21:36:49+08:00weekly0.5 https://y4er.com/posts/cve-2021-21234-spring-boot-actuator-logview-directory-traversal/2021-12-01T21:34:33+08:00weekly0.5 https://y4er.com/tags/springboot/2021-12-01T21:34:33+08:00weekly0.5 https://y4er.com/posts/commvault-command-center-pre-auth-rce/2021-11-25T21:32:01+08:00weekly0.5 https://y4er.com/posts/apache-storm-two-cve/2021-11-01T09:36:58+08:00weekly0.5 https://y4er.com/tags/storm/2021-11-01T09:36:58+08:00weekly0.5 https://y4er.com/posts/cve-2021-35218-solarwinds-patch-manager-orion-chart-rce/2021-10-29T09:31:37+08:00weekly0.5 https://y4er.com/series/solarwinds/2021-10-29T09:31:37+08:00weekly0.5 https://y4er.com/posts/cve-2021-35216-solarwinds-patch-manager-edittopxx-rce/2021-10-23T09:29:56+08:00weekly0.5 https://y4er.com/posts/cve-2021-35217-solarwinds-patch-manager-wsasyncexecutetasks-rce/2021-10-23T09:27:23+08:00weekly0.5 https://y4er.com/posts/cve-2021-35215-solarwinds-orion-platform-actionpluginbaseview-rce/2021-10-23T09:25:05+08:00weekly0.5 https://y4er.com/tags/jndi/2021-10-20T09:22:27+08:00weekly0.5 https://y4er.com/posts/use-local-factory-bypass-jdk-to-jndi/2021-10-20T09:22:27+08:00weekly0.5 https://y4er.com/posts/citrix-sharefile-cve-2021-22941-rce/2021-10-20T09:19:07+08:00weekly0.5 https://y4er.com/tags/asp.net/2021-06-28T18:33:43+08:00weekly0.5 https://y4er.com/posts/aspnet-getshell-tips/2021-06-28T18:33:43+08:00weekly0.5 https://y4er.com/posts/dump-plaintext-credentials-from-termservice/2021-05-20T10:43:06+08:00weekly0.5 https://y4er.com/tags/%E6%98%8E%E6%96%87/2021-05-20T10:43:06+08:00weekly0.5 https://y4er.com/tags/backdoor/2021-03-26T11:04:35+08:00weekly0.5 https://y4er.com/tags/%E5%90%8E%E9%97%A8/2021-03-26T11:04:35+08:00weekly0.5 https://y4er.com/tags/%E5%BC%80%E5%8F%91/2021-03-26T11:04:35+08:00weekly0.5 https://y4er.com/posts/using-csharp-to-develop-the-iis-module-backdoor/2021-03-26T11:04:35+08:00weekly0.5 https://y4er.com/tags/serverless/2021-03-20T14:36:07+08:00weekly0.5 https://y4er.com/posts/using-serverless-add-watermark/2021-03-20T14:36:07+08:00weekly0.5 https://y4er.com/tags/syscall/2021-03-11T09:52:48+08:00weekly0.5 https://y4er.com/posts/using-csharp-to-syscall/2021-03-11T09:52:48+08:00weekly0.5 https://y4er.com/tags/ysoserial/2021-02-21T13:19:40+08:00weekly0.5 https://y4er.com/posts/ysoserial-aspectjweaver-gadget/2021-02-21T13:19:40+08:00weekly0.5 https://y4er.com/series/weblogic/2021-01-27T09:29:42+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2020-14756/2021-01-27T09:29:42+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2021-2109-jndi-rce/2021-01-27T07:36:01+08:00weekly0.5 https://y4er.com/posts/apache-flink-cve-2020-17518-17519-rce/2021-01-20T11:53:27+08:00weekly0.5 https://y4er.com/tags/flink/2021-01-20T11:53:27+08:00weekly0.5 https://y4er.com/posts/real-wolrd-ctf-old-system-new-getter-jndi-gadget/2021-01-14T09:25:45+08:00weekly0.5 https://y4er.com/posts/blockdlls/2021-01-14T09:23:17+08:00weekly0.5 https://y4er.com/tags/%E5%85%8D%E6%9D%80/2021-01-14T09:23:17+08:00weekly0.5 https://y4er.com/posts/csharp-dns-server-shellcode/2021-01-14T09:20:05+08:00weekly0.5 https://y4er.com/tags/dns/2021-01-14T09:20:05+08:00weekly0.5 https://y4er.com/tags/shellcode/2021-01-14T09:20:05+08:00weekly0.5 https://y4er.com/tags/kerberos/2020-12-22T10:51:18+08:00weekly0.5 https://y4er.com/posts/kerberos-bronze-bit-attack/2020-12-22T10:51:18+08:00weekly0.5 https://y4er.com/series/windows%E5%8D%8F%E8%AE%AE/2020-12-22T10:51:18+08:00weekly0.5 https://y4er.com/about/2020-12-22T00:00:00+00:00weekly0.5 https://y4er.com/note/2020-12-22T00:00:00+00:00weekly0.5 https://y4er.com/words/2020-12-22T00:00:00+00:00weekly0.5 https://y4er.com/posts/xxe-to-dc-replay/2020-12-12T12:50:28+08:00weekly0.5 https://y4er.com/posts/kerberos-resource-based-constrained-delegation/2020-12-12T12:47:18+08:00weekly0.5 https://y4er.com/tags/linux/2020-12-12T12:43:41+08:00weekly0.5 https://y4er.com/posts/linux-backdoor-pam/2020-12-12T12:43:41+08:00weekly0.5 https://y4er.com/tags/pam/2020-12-12T12:43:41+08:00weekly0.5 https://y4er.com/posts/kerberos-constrained-delegation/2020-12-12T12:42:02+08:00weekly0.5 https://y4er.com/posts/kerberos-unconstrained-delegation/2020-12-12T12:38:52+08:00weekly0.5 https://y4er.com/tags/kerberoasting/2020-11-13T11:51:28+08:00weekly0.5 https://y4er.com/posts/kerberos-kerberoasting-spn/2020-11-13T11:51:28+08:00weekly0.5 https://y4er.com/tags/spn/2020-11-13T11:51:28+08:00weekly0.5 https://y4er.com/posts/kerberos-golden-ticket-and-silver-ticket/2020-11-12T11:41:51+08:00weekly0.5 https://y4er.com/posts/kerberos-pac/2020-11-12T11:39:57+08:00weekly0.5 https://y4er.com/posts/tgs_req-and-tgs_rep-security-issues/2020-11-12T11:38:47+08:00weekly0.5 https://y4er.com/posts/kerberos-tgs_req-and-tgs_rep/2020-11-12T11:37:42+08:00weekly0.5 https://y4er.com/posts/as_req-and-as_rep-security-issues/2020-11-12T11:36:02+08:00weekly0.5 https://y4er.com/posts/kerberos-as_req-and-as_rep/2020-11-12T11:34:09+08:00weekly0.5 https://y4er.com/tags/ntlm/2020-11-12T11:32:07+08:00weekly0.5 https://y4er.com/posts/ntlm-and-net-ntlm-hash/2020-11-12T11:32:07+08:00weekly0.5 https://y4er.com/posts/ntlm-hash-and-lm-hash/2020-11-12T11:29:48+08:00weekly0.5 https://y4er.com/tags/c2/2020-10-03T23:57:50+08:00weekly0.5 https://y4er.com/tags/go/2020-10-03T23:57:50+08:00weekly0.5 https://y4er.com/tags/slack/2020-10-03T23:57:50+08:00weekly0.5 https://y4er.com/posts/slack-golang-c2/2020-10-03T23:57:50+08:00weekly0.5 https://y4er.com/tags/agent/2020-09-30T11:24:47+08:00weekly0.5 https://y4er.com/posts/javaagent-tomcat-memshell/2020-09-30T11:24:47+08:00weekly0.5 https://y4er.com/tags/certutil/2020-09-28T14:54:25+08:00weekly0.5 https://y4er.com/tags/powershell/2020-09-28T14:54:25+08:00weekly0.5 https://y4er.com/posts/certutil-powershell-write-file/2020-09-28T14:54:25+08:00weekly0.5 https://y4er.com/posts/spring-cloud-snakeyaml-shell-regeorg/2020-09-24T18:48:16+08:00weekly0.5 https://y4er.com/tags/%E5%86%85%E5%AD%98shell/2020-09-24T18:48:16+08:00weekly0.5 https://y4er.com/posts/cobalt-strike-powershell-bypass/2020-08-27T11:40:54+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2020-14645/2020-07-20T11:58:04+08:00weekly0.5 https://y4er.com/posts/command-inject-ctf/2020-07-10T13:49:28+08:00weekly0.5 https://y4er.com/tags/%E6%B8%97%E9%80%8F%E6%B5%8B%E8%AF%95/2020-07-10T13:49:28+08:00weekly0.5 https://y4er.com/posts/pentest-idea-sharing-file/2020-06-23T10:40:13+08:00weekly0.5 https://y4er.com/tags/sql%E6%B3%A8%E5%85%A5/2020-06-19T11:34:24+08:00weekly0.5 https://y4er.com/tags/%E6%B8%97%E9%80%8F/2020-06-19T11:34:24+08:00weekly0.5 https://y4er.com/posts/pentest-idea-sharing-sql/2020-06-19T11:34:24+08:00weekly0.5 https://y4er.com/posts/fastjson-bypass-autotype-1268/2020-06-16T11:22:00+08:00weekly0.5 https://y4er.com/posts/ysoserial-jdk7u21/2020-06-10T11:13:52+08:00weekly0.5 https://y4er.com/posts/cve-2019-3799-spring-cloud-config-server/2020-06-05T14:30:48+08:00weekly0.5 https://y4er.com/posts/bypass-jep290/2020-05-29T11:27:08+08:00weekly0.5 https://y4er.com/posts/cve-2020-9484-tomcat-session-rce/2020-05-25T10:23:34+08:00weekly0.5 https://y4er.com/tags/bypassuac/2020-05-21T09:58:33+08:00weekly0.5 https://y4er.com/posts/bypassuac-with-icmluautil/2020-05-21T09:58:33+08:00weekly0.5 https://y4er.com/tags/icmluautil/2020-05-21T09:58:33+08:00weekly0.5 https://y4er.com/posts/java-deserialization-echo/2020-05-16T00:00:17+08:00weekly0.5 https://y4er.com/posts/win10-wsreset-bypassuac/2020-05-09T10:32:20+08:00weekly0.5 https://y4er.com/tags/el%E8%A1%A8%E8%BE%BE%E5%BC%8F/2020-05-08T11:40:36+08:00weekly0.5 https://y4er.com/posts/java-expression-injection/2020-05-08T11:40:36+08:00weekly0.5 https://y4er.com/tags/shiro/2020-04-29T11:49:36+08:00weekly0.5 https://y4er.com/posts/shiro-rememberme-rce/2020-04-29T11:49:36+08:00weekly0.5 https://y4er.com/tags/%E6%AD%A3%E5%88%99/2020-04-28T10:45:36+08:00weekly0.5 https://y4er.com/posts/php-preg-replace-getshell/2020-04-28T10:45:36+08:00weekly0.5 https://y4er.com/posts/fastjson-learn/2020-04-26T11:54:56+08:00weekly0.5 https://y4er.com/tags/%E9%80%9A%E8%BE%BEoa/2020-04-24T09:35:02+08:00weekly0.5 https://y4er.com/posts/tongda-fake-user/2020-04-24T09:35:02+08:00weekly0.5 https://y4er.com/posts/javassist-learn/2020-04-20T11:21:05+08:00weekly0.5 https://y4er.com/posts/ysoserial-commonscollections-2/2020-04-17T10:48:27+08:00weekly0.5 https://y4er.com/posts/java-xmldecoder/2020-04-13T09:25:15+08:00weekly0.5 https://y4er.com/tags/ldap/2020-04-03T10:06:44+08:00weekly0.5 https://y4er.com/posts/attack-java-jndi-rmi-ldap-2/2020-04-03T10:06:44+08:00weekly0.5 https://y4er.com/posts/java-proxy/2020-04-03T10:02:04+08:00weekly0.5 https://y4er.com/tags/%E4%BB%A3%E7%90%86%E6%A8%A1%E5%BC%8F/2020-04-03T10:02:04+08:00weekly0.5 https://y4er.com/posts/cve-2020-7961-liferay-portal-rce/2020-03-29T20:58:20+08:00weekly0.5 https://y4er.com/posts/cve-2020-10189-zoho-manageengine-rce/2020-03-21T18:40:25+08:00weekly0.5 https://y4er.com/posts/tongda-oa-rce/2020-03-18T21:04:03+08:00weekly0.5 https://y4er.com/posts/oracle-sql-inject/2020-03-18T20:58:02+08:00weekly0.5 https://y4er.com/tags/%E6%B3%A8%E5%85%A5/2020-03-18T20:58:02+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2020-2555/2020-03-09T18:26:22+08:00weekly0.5 https://y4er.com/tags/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1/2020-03-09T18:26:22+08:00weekly0.5 https://y4er.com/posts/attack-java-jndi-rmi-ldap-1/2020-03-05T15:34:28+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2020-2551/2020-02-28T13:23:36+08:00weekly0.5 https://y4er.com/tags/jrmp/2020-02-26T20:30:20+08:00weekly0.5 https://y4er.com/posts/weblogic-jrmp/2020-02-26T20:30:20+08:00weekly0.5 https://y4er.com/posts/csharp-shellcode-loader/2020-02-25T23:46:39+08:00weekly0.5 https://y4er.com/categories/%E4%BB%A3%E7%A0%81%E7%89%87%E6%AE%B5/2020-02-25T23:46:39+08:00weekly0.5 https://y4er.com/posts/apache-dubbo-cve-2019-17564/2020-02-16T16:59:54+08:00weekly0.5 https://y4er.com/tags/dubbo/2020-02-16T16:59:54+08:00weekly0.5 https://y4er.com/posts/java-rmi/2020-02-15T23:11:20+08:00weekly0.5 https://y4er.com/tags/classloader/2020-02-14T20:17:12+08:00weekly0.5 https://y4er.com/posts/weblogic-uses-classloader-and-rmi-to-display-command-execution-results/2020-02-14T20:17:12+08:00weekly0.5 https://y4er.com/posts/ysoserial-urldns/2020-02-12T22:28:34+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2016-3510/2020-02-12T22:22:01+08:00weekly0.5 https://y4er.com/categories/%E4%BA%8C%E8%BF%9B%E5%88%B6/2020-02-02T21:11:52+08:00weekly0.5 https://y4er.com/posts/hook-eval/2020-02-02T21:11:52+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2016-0638/2020-02-01T19:43:06+08:00weekly0.5 https://y4er.com/posts/weblogic-cve-2015-4852/2020-01-30T16:08:39+08:00weekly0.5 https://y4er.com/posts/java-exec-command/2020-01-30T15:59:40+08:00weekly0.5 https://y4er.com/posts/ysoserial-commonscollections-5/2020-01-19T19:23:13+08:00weekly0.5 https://y4er.com/tags/sql/2019-12-11T10:06:42+08:00weekly0.5 https://y4er.com/tags/weiphp/2019-12-11T10:06:42+08:00weekly0.5 https://y4er.com/posts/weiphp-exp-sql/2019-12-11T10:06:42+08:00weekly0.5 https://y4er.com/posts/weiphp5-unauthorized/2019-12-10T20:50:24+08:00weekly0.5 https://y4er.com/series/thinkphp/2019-11-27T21:55:25+08:00weekly0.5 https://y4er.com/posts/thinkphp5-source-read/2019-11-27T21:55:25+08:00weekly0.5 https://y4er.com/posts/thinkphp5-rce/2019-11-27T21:39:54+08:00weekly0.5 https://y4er.com/posts/thinkphp3-vuln/2019-11-27T21:22:13+08:00weekly0.5 https://y4er.com/posts/sqlmap-tamper/2019-11-18T21:20:09+08:00weekly0.5 https://y4er.com/posts/mssql-execute-command-with-clr-assemblies/2019-10-23T21:26:20+08:00weekly0.5 https://y4er.com/posts/thinkphp-upload-file/2019-10-23T20:58:17+08:00weekly0.5 https://y4er.com/posts/java-deserialization-1/2019-10-14T20:55:59+08:00weekly0.5 https://y4er.com/categories/bypass/2019-10-12T22:46:46+08:00weekly0.5 https://y4er.com/posts/bypass-mysql-yunsuo/2019-10-12T22:46:46+08:00weekly0.5 https://y4er.com/posts/bypass-mysql-safedog/2019-10-10T21:58:09+08:00weekly0.5 https://y4er.com/tags/code/2019-09-28T22:11:39+08:00weekly0.5 https://y4er.com/posts/metinfo7-sql-tips/2019-09-28T22:11:39+08:00weekly0.5 https://y4er.com/categories/ctf%E7%AC%94%E8%AE%B0/2019-09-12T09:06:02+08:00weekly0.5 https://y4er.com/posts/guangdong-qwbctf-writeup/2019-09-12T09:06:02+08:00weekly0.5 https://y4er.com/posts/nginx-lua-backdoor/2019-09-01T17:35:59+08:00weekly0.5 https://y4er.com/posts/encrypt-reverse-shell/2019-08-26T12:55:07+08:00weekly0.5 https://y4er.com/tags/reverse/2019-08-26T12:55:07+08:00weekly0.5 https://y4er.com/posts/no-column-name-injection/2019-08-22T20:41:24+08:00weekly0.5 https://y4er.com/posts/laravel58-pop-chain/2019-08-22T13:58:08+08:00weekly0.5 https://y4er.com/posts/zzzphp-rce/2019-08-21T22:28:44+08:00weekly0.5 https://y4er.com/posts/unserialize/2019-08-17T13:52:31+08:00weekly0.5 https://y4er.com/posts/webshell-bypass/2019-08-12T21:10:02+08:00weekly0.5 https://y4er.com/posts/dump-clipboard-image/2019-07-30T08:57:16+08:00weekly0.5 https://y4er.com/tags/portforward/2019-07-23T10:40:37+08:00weekly0.5 https://y4er.com/posts/port-forwarding/2019-07-23T10:40:37+08:00weekly0.5 https://y4er.com/posts/reverse-shell-bypass/2019-07-19T09:24:46+08:00weekly0.5 https://y4er.com/posts/scms-blind-injection/2019-07-16T13:02:33+08:00weekly0.5 https://y4er.com/posts/discuz-ml-exec-code/2019-07-11T20:48:12+08:00weekly0.5 https://y4er.com/tags/exec/2019-07-11T20:48:12+08:00weekly0.5 https://y4er.com/tags/nginx/2019-07-07T18:27:56+08:00weekly0.5 https://y4er.com/posts/nginx-rewrite/2019-07-07T18:27:56+08:00weekly0.5 https://y4er.com/tags/app/2019-07-02T14:56:03+08:00weekly0.5 https://y4er.com/categories/app%E7%9B%B8%E5%85%B3/2019-07-02T14:56:03+08:00weekly0.5 https://y4er.com/posts/seekbook-adblock/2019-07-02T14:56:03+08:00weekly0.5 https://y4er.com/posts/insterest-shell/2019-06-30T13:29:56+08:00weekly0.5 https://y4er.com/tags/awd/2019-06-18T08:48:13+08:00weekly0.5 https://y4er.com/posts/awd-note/2019-06-18T08:48:13+08:00weekly0.5 https://y4er.com/tags/note/2019-06-18T08:48:13+08:00weekly0.5 https://y4er.com/tags/mysql/2019-05-23T20:31:28+08:00weekly0.5 https://y4er.com/posts/mysql-read-client-file/2019-05-23T20:31:28+08:00weekly0.5 https://y4er.com/tags/download/2019-05-23T14:11:16+08:00weekly0.5 https://y4er.com/posts/download-shell/2019-05-23T14:11:16+08:00weekly0.5 https://y4er.com/tags/mssql/2019-05-21T22:19:55+08:00weekly0.5 https://y4er.com/posts/mssql-getshell/2019-05-21T22:19:55+08:00weekly0.5 https://y4er.com/posts/mssql-injection-learn/2019-05-17T12:46:13+08:00weekly0.5 https://y4er.com/posts/downimg2local/2019-05-09T17:34:21+08:00weekly0.5 https://y4er.com/tags/%E5%9B%BE%E5%BA%8A/2019-05-09T17:34:21+08:00weekly0.5 https://y4er.com/posts/variable-coverage/2019-05-09T13:09:07+08:00weekly0.5 https://y4er.com/posts/iscc-2019/2019-05-01T18:02:17+08:00weekly0.5 https://y4er.com/tags/injection/2019-04-30T16:05:52+08:00weekly0.5 https://y4er.com/posts/mysql-injection-learn/2019-04-30T16:05:52+08:00weekly0.5 https://y4er.com/tags/audit/2019-04-15T13:06:38+08:00weekly0.5 https://y4er.com/posts/oecms-audit/2019-04-15T13:06:38+08:00weekly0.5 https://y4er.com/posts/code-exec/2019-04-10T19:56:16+08:00weekly0.5 https://y4er.com/tags/vip/2019-04-03T13:18:55+08:00weekly0.5 https://y4er.com/posts/faka-hack/2019-04-03T13:18:55+08:00weekly0.5 https://y4er.com/posts/php-anti-cross-site-dir/2019-03-29T15:53:11+08:00weekly0.5 https://y4er.com/posts/pentest-03-14/2019-03-14T21:04:09+08:00weekly0.5 https://y4er.com/posts/pentest-03-12/2019-03-12T21:11:41+08:00weekly0.5 https://y4er.com/tags/ubuntu/2019-02-16T14:55:14+08:00weekly0.5 https://y4er.com/posts/ubuntu-dirty-sock/2019-02-16T14:55:14+08:00weekly0.5 https://y4er.com/categories/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/2019-02-16T14:55:14+08:00weekly0.5 https://y4er.com/tags/apache/2019-01-25T21:20:47+08:00weekly0.5 https://y4er.com/posts/apache-nginx-webshell/2019-01-25T21:20:47+08:00weekly0.5 https://y4er.com/tags/logging/2019-01-13T12:17:40+08:00weekly0.5 https://y4er.com/posts/python-logging/2019-01-13T12:17:40+08:00weekly0.5 https://y4er.com/posts/seacmsv72-anyfile-del-getshell/2019-01-10T21:17:21+08:00weekly0.5 https://y4er.com/posts/cve-2017-8570/2019-01-07T23:01:31+08:00weekly0.5 https://y4er.com/posts/niushop-getshell/2019-01-07T15:37:37+08:00weekly0.5 https://y4er.com/posts/fuck-qiandao/2018-12-23T22:44:13+08:00weekly0.5 https://y4er.com/tags/include/2018-12-20T08:34:43+08:00weekly0.5 https://y4er.com/tags/phpmyadmin/2018-12-20T08:34:43+08:00weekly0.5 https://y4er.com/posts/phpmyadmin-any-file-include/2018-12-20T08:34:43+08:00weekly0.5 https://y4er.com/tags/command/2018-12-20T08:30:03+08:00weekly0.5 https://y4er.com/tags/remote/2018-12-20T08:30:03+08:00weekly0.5 https://y4er.com/tags/typora/2018-12-20T08:30:03+08:00weekly0.5 https://y4er.com/posts/typora-exec/2018-12-20T08:30:03+08:00weekly0.5 https://y4er.com/posts/scms-sql-download/2018-12-18T21:23:03+08:00weekly0.5 https://y4er.com/posts/phpcms2008-type-getshell/2018-12-16T19:21:52+08:00weekly0.5 https://y4er.com/posts/java-servlet/2018-12-16T14:31:11+08:00weekly0.5 https://y4er.com/tags/web/2018-12-16T14:31:11+08:00weekly0.5 https://y4er.com/posts/hello-world/2018-12-08T12:32:42+08:00weekly0.5 https://y4er.com/tags/hugo/2018-12-08T12:32:42+08:00weekly0.5 https://y4er.com/authors/weekly0.5 https://y4er.com/offline/weekly0.5 https://y4er.com/showcase/weekly0.5