h4fan
blog about security, tech...
  • Index
  • Tags
  • Archive
  • Tech
  • HackerDefense
  • FabDefense
  • Tools

h4fan security

blog about security, tech

2020-12-25

Learning SSTI with gosecure

环境地址 gosecure 的ssti教程地址template-injection-workshop
ssti websec
阅读全文 →
2020-12-15

Intigriti XSS Challenge-2020 Writeup

Intigriti’s December XSS Challenge https://challenge-1220.intigriti.io/
xss
阅读全文 →
2020-12-14

An unsuccessful expressjs SSTI story

Recon Response Header x-powered-by: express. An expressjs website.
ssti expressjs
阅读全文 →
2020-11-05

alert 1337 - jquery prototype pollution

challenge here https://msrkp.github.io/
xss prototype pollution
阅读全文 →
2020-10-24

alert(23) to win - eval(location.pathname)

while surfing the internet for some sec news, a xss challenge came across. challenge address https://renwax23.github.io/X/chal/oct22/
xss
阅读全文 →
← 上一页

© 2026 h4fan  ·  基于 Beautiful Jekyll 重新设计