https://dnjs15.github.io/Recent content on CoinsheepHugo -- gohugo.iozh-cn2509432917@qq.com (Coinsheep)2509432917@qq.com (Coinsheep)© 2026 CoinsheepSun, 01 Nov 2026 20:00:00 +0800https://dnjs15.github.io/posts/weber-self-cultivation-2/Sun, 01 Nov 2026 20:00:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/weber-self-cultivation-2/<h1 class="relative group">前言 <div id="前言" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e8%a8%80" aria-label="锚点">#</a> </span> </h1> <p>一个 Web 狗的自我修养。</p>https://dnjs15.github.io/posts/xuanji-walkthrough/Tue, 27 Oct 2026 21:15:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/xuanji-walkthrough/<figure><img class="my-0 rounded-md" loading="lazy" decoding="async" fetchpriority="auto" alt="" width="638" height="163" src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png" srcset="https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png 800w, https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png 1280w" sizes="(min-width: 768px) 50vw, 65vw" data-zoom-src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png"></figure> <p>80口看看服务</p> <figure><img class="my-0 rounded-md" loading="lazy" decoding="async" fetchpriority="auto" alt="" width="1919" height="874" src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-02_hu_9130024d0a80f260.png" srcset="https://dnjs15.github.io/posts/xuanji-walkthrough/image-02_hu_9130024d0a80f260.png 800w, https://dnjs15.github.io/posts/xuanji-walkthrough/image-02_hu_1a0cb132f537b84.png 1280w" sizes="(min-width: 768px) 50vw, 65vw" data-zoom-src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-02.png"></figure> <p>中间件是个安全版本，dirsearch扫一下目录</p>https://dnjs15.github.io/posts/horse-walkthrough/Tue, 27 Oct 2026 21:10:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/horse-walkthrough/<p>namp扫出来</p> <figure><img class="my-0 rounded-md" loading="lazy" decoding="async" fetchpriority="auto" alt="" width="1029" height="218" src="https://dnjs15.github.io/posts/horse-walkthrough/image-01_hu_6ac1ac8ed65bed2e.png" srcset="https://dnjs15.github.io/posts/horse-walkthrough/image-01_hu_6ac1ac8ed65bed2e.png 800w, https://dnjs15.github.io/posts/horse-walkthrough/image-01.png 1280w" sizes="(min-width: 768px) 50vw, 65vw" data-zoom-src="https://dnjs15.github.io/posts/horse-walkthrough/image-01.png"></figure> <p>8080端口的http代理服务还有22的ssh服务</p>https://dnjs15.github.io/posts/cve-2026-21858/Tue, 27 Oct 2026 14:20:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/cve-2026-21858/<h1 class="relative group">一、环境搭建 <div id="一环境搭建" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e4%b8%80%e7%8e%af%e5%a2%83%e6%90%ad%e5%bb%ba" aria-label="锚点">#</a> </span> </h1> <p>cmd 执行 <code>git clone https://github.com/Chocapikk/CVE-2026-21858.git</code>。</p>https://dnjs15.github.io/posts/weber-self-cultivation-1/Tue, 27 Oct 2026 11:20:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/weber-self-cultivation-1/<h1 class="relative group">前言 <div id="前言" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e8%a8%80" aria-label="锚点">#</a> </span> </h1> <p>一个 Web 狗的自我修养。</p>https://dnjs15.github.io/posts/php2shell/Thu, 22 Oct 2026 19:00:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/php2shell/<h1 class="relative group">前言 <div id="前言" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e8%a8%80" aria-label="锚点">#</a> </span> </h1> <p>2026‑10‑20，PHP 官方发了个预告，说第二天要出紧急安全补丁，修两个代号 PHP2Shell 的高危漏洞，CVE‑2026‑109618、CVE‑2026‑109619，CVSSv4 都是 9.2，无需认证的远程代码执行。10‑21 补丁如期放出。网传这次是因为细节提前泄露才提前准备的，官方原文倒没坐实，只留了句&quot;细节公开或出现在野利用就提前发&quot;。在此之前网上的信息很杂，吹得沸沸扬扬，说什么运行时与框架无关、无条件 RCE。但 PoC 后来公开出来我一看，好像不是这个样子，就来简单浅析一下这玩意吧。</p>https://dnjs15.github.io/links/Mon, 01 Jan 0001 00:00:00 +00002509432917@qq.com (Coinsheep)https://dnjs15.github.io/links/<!-- 添加友链：编辑仓库根目录的 data/friends.yaml，按下面格式追加一条即可（保存后 git push 上线）： - name: 昵称 url: https://example.com/ description: 一句话介绍 avatar: img/friends/xxx.jpg # 头像放到 assets/img/friends/ 下，留空则显示昵称首字母 --> <div class="friend-grid not-prose"> <a class="friend-card" href="https://bin9chn.github.io/" target="_blank" rel="noopener noreferrer external" title="Bin9chn"> <img class="friend-card__avatar nozoom" src="https://dnjs15.github.io/img/friends/bin9chn_hu_da41bac1b7ba1504.webp" alt="Bin9chn" width="52" height="52" loading="lazy" decoding="async" /> <span class="friend-card__body"> <span class="friend-card__name"> Bin9chn<span class="friend-card__arrow">&#8599;</span> </span> <span class="friend-card__desc">网络安全方向的学习与工程笔记，关注协议安全、离线数据处理和密码学工具</span> </span> </a> <a class="friend-card" href="https://asd12542.github.io/" target="_blank" rel="noopener noreferrer external" title="Jay"> <img class="friend-card__avatar nozoom" src="https://dnjs15.github.io/img/friends/asd12542_hu_1e22bc8295b06ee7.webp" alt="Jay" width="52" height="52" loading="lazy" decoding="async" /> <span class="friend-card__body"> <span class="friend-card__name"> Jay<span class="friend-card__arrow">&#8599;</span> </span> <span class="friend-card__desc">CTF 玩家 / Web 安全学习者，记录每一道题的思路与复现过程</span> </span> </a> <a class="friend-card" href="https://tsvmv.github.io" target="_blank" rel="noopener noreferrer external" title="VMV"> <img class="friend-card__avatar nozoom" src="https://dnjs15.github.io/img/friends/tsvmv_hu_631033521b3ff1d1.webp" alt="VMV" width="52" height="52" loading="lazy" decoding="async" /> <span class="friend-card__body"> <span class="friend-card__name"> VMV<span class="friend-card__arrow">&#8599;</span> </span> <span class="friend-card__desc">大佬 DDW</span> </span> </a> </div>