总结性博文
本篇基于博客,公众号,推文等,收录优质文章,白嫖师傅们的思路,不断更新
web篇
sql篇
总结性:
php篇
php反序列化总结性:
https://xz.aliyun.com/t/7570#toc-2 (感谢赵总每天的推送,看到很多好文章)
bypass disable function :
总结 https://www.cnblogs.com/zw1sh/p/12632126.html
蚁剑专题:https://github.com/AntSwordProject/AntSword-Labs/tree/master/bypass_disable_functions
session/令牌
jwt攻击思路:
https://www.freebuf.com/articles/web/181261.html
https://xz.aliyun.com/t/6776#toc-2
node.js篇
Node.js
常见漏洞学习与总结:https://xz.aliyun.com/t/7184
redis篇
Redis中SSRF的利用
浅析Redis中SSRF的利用:https://xz.aliyun.com/t/5665#toc-3
叹之师傅总结的:https://www.cnblogs.com/wangtanzhi/p/12973650.html