dotnet - 标签 - Y4er的博客

dotnet

2023

MessagePack-CSharp Typeless Mode Deserialization RCE 04-24

CVE-2023-27532 Veeam Backup & Replication leaked credentials 03-17

dotnet host startup hook 01-03

2022

对ZDI公布的InfraSuite Device Master一揽子漏洞的分析 11-08

dotnet反序列化之并不安全的SerializationBinder 07-04

SmarterStats 基于gRPC的RCE 06-29

CVE-2022-26503 Veeam Agent for Microsoft Windows LPE 03-22

CVE-2022-26500 Veeam Backup & Replication RCE 03-17

从dotnet源码看文件上传绕waf 02-25

dotnet 反序列化的另外几个gadget 01-21

2021

CVE-2021-34992 Orckestra C1 CMS Deserialization RCE 12-04

CommVault Command Center Pre-Auth Rce 11-25

使用C#开发IIS模块后门 03-26

使用C#进行直接系统调用syscall 03-11

C#免杀之自实现DNS服务器传输shellcode 01-14