2020-12-14
An unsuccessful expressjs SSTI story
Recon
Response Header x-powered-by: express. An expressjs website.
阅读全文 →
h4fan security
blog about security, tech
2020-11-05
2020-10-24
alert(23) to win - eval(location.pathname)
while surfing the internet for some sec news, a xss challenge came across.
challenge address https://renwax23.github.io/X/chal/oct22/
阅读全文 →