https://fireline.fun/icon.png 2023-11-11T11:45:49.830Z https://fireline.fun/ yhy Hexo https://fireline.fun/2023/11/09/%E6%9B%B4%E4%BC%98%E9%9B%85%E7%9A%84BurpSuite%E8%A2%AB%E5%8A%A8%E6%89%AB%E6%8F%8F%E6%B5%81%E9%87%8F%E8%BD%AC%E5%8F%91%E6%8F%92%E4%BB%B6%E5%AE%9E%E7%8E%B0/ 2023-11-09T14:15:51.000Z 2023-11-11T11:45:49.830Z

<blockquote> <p> 小朋友真是活跃，走个不停，要时刻盯着</p> </blockquote> <p>本文首发于先知社区:<a

https://fireline.fun/2023/05/20/%E6%89%BF%E5%BD%B1/ 2023-05-20T09:20:00.000Z 2023-05-20T15:42:45.223Z

<h2 id="承影"><a href="#承影" class="headerlink" title="承影"></a>承影</h2><p align="center"> 将旦昧爽之交，日夕昏明之际，北面而察之，淡淡焉若有物存，莫识其状。其所触也，窃窃然有声，经物而物不疾也。

https://fireline.fun/2023/04/14/%E6%89%AB%E6%8F%8F%E5%99%A8%20debug%20%E8%B0%83%E4%BC%98%E8%AE%B0%E5%BD%95/ 2023-04-14T12:22:10.000Z 2023-04-14T12:52:01.070Z

<blockquote> <p> 啥时候我能写一个安全行业人手一个工具</p> </blockquote> <p>go 有个恶心的地方，就是不能捕获子进程的 panic, 每个子进程都使用

https://fireline.fun/2023/03/06/Jie%20%E6%89%AB%E6%8F%8F%E5%99%A8/ 2023-03-06T15:15:10.000Z 2023-03-06T15:26:44.966Z

<h2 id="劫-开发中-持续更新中"><a href="#劫-开发中-持续更新中" class="headerlink" title="劫(开发中,持续更新中)"></a>劫(开发中,持续更新中)</h2><p>具体漏洞开发详情，请移步 <a

https://fireline.fun/2023/02/18/harbor%E5%8E%86%E5%8F%B2%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ 2023-02-18T14:30:00.000Z 2023-02-18T14:40:45.562Z

harbor历史漏洞分析

https://fireline.fun/2023/02/18/%E7%9B%97%E7%81%AB%E8%80%85Prometheus/ 2023-02-18T14:00:00.000Z 2023-02-20T03:09:19.210Z

盗火者Prometheus

https://fireline.fun/2022/12/27/%E5%BC%88%20-%20Codeql%20%E8%87%AA%E5%8A%A8%E8%BF%90%E8%A1%8C%E5%92%8C%E9%A1%B9%E7%9B%AE%E7%9B%91%E6%8E%A7%E5%B7%A5%E5%85%B7/ 2022-12-27T09:58:07.000Z 2023-03-06T15:15:22.947Z

<h1 id="前言"><a href="#前言" class="headerlink" title="前言"></a>前言</h1><p>代码审计总是离不开一些神器，笔者常用 <a

https://fireline.fun/2022/08/11/GRPC%20%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/ 2022-08-11T06:54:10.000Z 2023-03-05T02:32:03.805Z

<h2 id="简介"><a href="#简介" class="headerlink" title="简介"></a>简介</h2><p>gRPC 是 Google 开源的一个远程过程调用(Remote Procedure Call) 框架，在 gRPC

https://fireline.fun/2021/08/19/ExpDemo-JavaFX%E5%B7%A5%E5%85%B7%E6%96%B0%E5%A2%9E%E6%BC%8F%E6%B4%9E%E7%BC%96%E5%86%99%E6%95%99%E7%A8%8B/ 2021-08-19T01:00:00.000Z 2023-02-18T13:54:52.224Z

<blockquote> <p> 为了提高大佬们提交PR的积极性，我也是拼了（<del>这样我就可以名正言顺的偷懒了</del>）</p> </blockquote> <h2 id="0x01-选漏洞，新建文件"><a href="#0x01-选漏洞，新建文件"

https://fireline.fun/2021/08/09/git%20%E8%9C%9C%E7%BD%90%E5%A4%8D%E7%8E%B0/ 2021-08-09T12:30:00.000Z 2023-02-18T14:28:22.595Z

git 蜜罐复现

https://fireline.fun/2021/07/01/Java%20ysoserial%E5%AD%A6%E4%B9%A0%E4%B9%8BCommonsCollections5(%E5%9B%9B)/ 2021-07-01T13:18:00.000Z 2023-02-18T13:47:55.014Z

Java ysoserial学习之CommonsCollections5(四)

https://fireline.fun/2021/06/27/Java%20ysoserial%E5%AD%A6%E4%B9%A0%E4%B9%8BCommonsCollections6(%E4%B8%89)/ 2021-06-27T14:09:00.000Z 2023-02-18T13:45:34.770Z

<blockquote> <p> 争取明年有一个上千star的项目</p> </blockquote> <h2 id="0x00-前言"><a href="#0x00-前言" class="headerlink" title="0x00 前言"></a>0x00

https://fireline.fun/2021/06/11/Java%20ysoserial%E5%AD%A6%E4%B9%A0%E4%B9%8BCommonsCollections1(%E4%BA%8C)/ 2021-06-11T12:30:00.000Z 2023-02-18T13:45:10.512Z

<blockquote> <p> 超长预警</p> </blockquote> <h2 id="0x01-前言"><a href="#0x01-前言" class="headerlink" title="0x01 前言"></a>0x01 前言</h2><p>Apache

https://fireline.fun/2021/06/04/Java%20ysoserial%E5%AD%A6%E4%B9%A0%E4%B9%8BURLDNS(%E4%B8%80)/ 2021-06-04T12:30:00.000Z 2023-02-18T13:49:09.665Z

<blockquote> <p> 雄关漫道真如铁 而今迈步从头越</p> </blockquote> <h2 id="0x01-前言"><a href="#0x01-前言" class="headerlink" title="0x01 前言"></a>0x01

https://fireline.fun/2021/05/29/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90(%E4%BA%8C)-Shiro550/ 2021-05-29T12:30:00.000Z 2023-02-18T13:21:27.915Z

<blockquote> <p> 这是一篇失败的文章，要学的东西太多了，高看我自己了。终究是纸上得来终觉浅，绝知此事要躬行</p> </blockquote> <h2 id="0x00-纠错"><a href="#0x00-纠错" class="headerlink"

https://fireline.fun/2021/05/21/Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90(%E4%B8%80)-Shiro550/ 2021-05-21T02:30:00.000Z 2023-02-18T13:50:34.974Z

<blockquote> <p> 本菜鸡算是第一次正式分析这种玩意，很烂，都是跟着网上的分析教程走一遍，算是打响java反序列化漏洞的第一枪。我还欠了两篇文章，记着呢。</p> </blockquote> <h2 id="0x01-前言"><a href="#0x01-前言"

https://fireline.fun/2021/05/02/%E5%88%9D%E6%8E%A2Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E(%E4%BA%8C)/ 2021-05-02T14:10:00.000Z 2023-02-18T14:15:28.329Z

<blockquote> <p> 不能食言，再晚也要写</p> </blockquote> <h2 id="0x01-Java反射"><a href="#0x01-Java反射" class="headerlink" title="0x01 Java反射"></a>0x01

https://fireline.fun/2021/04/16/%E5%88%9D%E6%8E%A2Java%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E(%E4%B8%80)/ 2021-04-16T14:10:00.000Z 2023-02-18T14:17:39.171Z

<blockquote> <p> 学无止境，参考着资料边学边记录吧。</p> </blockquote> <h2 id="0x01-Java序列化与反序列化"><a href="#0x01-Java序列化与反序列化" class="headerlink"

https://fireline.fun/2021/04/04/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0-F5%20BIG-IP%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2021-22986)/ 2021-04-04T08:00:00.000Z 2023-02-18T14:03:30.219Z

<blockquote> <p> 燕子来时新社，梨花落后清明。</p> </blockquote> <h2 id="0x01-漏洞描述"><a href="#0x01-漏洞描述" class="headerlink" title="0x01 漏洞描述"></a>0x01

https://fireline.fun/2021/03/23/%E5%9B%BE%E5%BD%A2%E5%8C%96%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8Demo-JavaFX%E7%89%88/ 2021-03-23T02:43:40.611Z 2023-03-06T15:15:06.231Z

<h2 id="0x01-这是个嘛？"><a href="#0x01-这是个嘛？" class="headerlink" title="0x01 这是个嘛？"></a>0x01