https://dnjs15.github.io/posts/Recent content in Posts on CoinsheepHugo -- gohugo.iozh-cn2509432917@qq.com (Coinsheep)2509432917@qq.com (Coinsheep)© 2026 CoinsheepSun, 01 Nov 2026 20:00:00 +0800https://dnjs15.github.io/posts/weber-self-cultivation-2/Sun, 01 Nov 2026 20:00:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/weber-self-cultivation-2/<h1 class="relative group">前言 <div id="前言" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e8%a8%80" aria-label="锚点">#</a> </span> </h1> <p>一个 Web 狗的自我修养。</p>https://dnjs15.github.io/posts/xuanji-walkthrough/Tue, 27 Oct 2026 21:15:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/xuanji-walkthrough/<figure><img class="my-0 rounded-md" loading="lazy" decoding="async" fetchpriority="auto" alt="" width="638" height="163" src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png" srcset="https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png 800w, https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png 1280w" sizes="(min-width: 768px) 50vw, 65vw" data-zoom-src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-01.png"></figure> <p>80口看看服务</p> <figure><img class="my-0 rounded-md" loading="lazy" decoding="async" fetchpriority="auto" alt="" width="1919" height="874" src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-02_hu_9130024d0a80f260.png" srcset="https://dnjs15.github.io/posts/xuanji-walkthrough/image-02_hu_9130024d0a80f260.png 800w, https://dnjs15.github.io/posts/xuanji-walkthrough/image-02_hu_1a0cb132f537b84.png 1280w" sizes="(min-width: 768px) 50vw, 65vw" data-zoom-src="https://dnjs15.github.io/posts/xuanji-walkthrough/image-02.png"></figure> <p>中间件是个安全版本，dirsearch扫一下目录</p>https://dnjs15.github.io/posts/horse-walkthrough/Tue, 27 Oct 2026 21:10:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/horse-walkthrough/<p>namp扫出来</p> <figure><img class="my-0 rounded-md" loading="lazy" decoding="async" fetchpriority="auto" alt="" width="1029" height="218" src="https://dnjs15.github.io/posts/horse-walkthrough/image-01_hu_6ac1ac8ed65bed2e.png" srcset="https://dnjs15.github.io/posts/horse-walkthrough/image-01_hu_6ac1ac8ed65bed2e.png 800w, https://dnjs15.github.io/posts/horse-walkthrough/image-01.png 1280w" sizes="(min-width: 768px) 50vw, 65vw" data-zoom-src="https://dnjs15.github.io/posts/horse-walkthrough/image-01.png"></figure> <p>8080端口的http代理服务还有22的ssh服务</p>https://dnjs15.github.io/posts/cve-2026-21858/Tue, 27 Oct 2026 14:20:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/cve-2026-21858/<h1 class="relative group">一、环境搭建 <div id="一环境搭建" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e4%b8%80%e7%8e%af%e5%a2%83%e6%90%ad%e5%bb%ba" aria-label="锚点">#</a> </span> </h1> <p>cmd 执行 <code>git clone https://github.com/Chocapikk/CVE-2026-21858.git</code>。</p>https://dnjs15.github.io/posts/weber-self-cultivation-1/Tue, 27 Oct 2026 11:20:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/weber-self-cultivation-1/<h1 class="relative group">前言 <div id="前言" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e8%a8%80" aria-label="锚点">#</a> </span> </h1> <p>一个 Web 狗的自我修养。</p>https://dnjs15.github.io/posts/php2shell/Thu, 22 Oct 2026 19:00:00 +08002509432917@qq.com (Coinsheep)https://dnjs15.github.io/posts/php2shell/<h1 class="relative group">前言 <div id="前言" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e8%a8%80" aria-label="锚点">#</a> </span> </h1> <p>2026‑10‑20，PHP 官方发了个预告，说第二天要出紧急安全补丁，修两个代号 PHP2Shell 的高危漏洞，CVE‑2026‑109618、CVE‑2026‑109619，CVSSv4 都是 9.2，无需认证的远程代码执行。10‑21 补丁如期放出。网传这次是因为细节提前泄露才提前准备的，官方原文倒没坐实，只留了句&quot;细节公开或出现在野利用就提前发&quot;。在此之前网上的信息很杂，吹得沸沸扬扬，说什么运行时与框架无关、无条件 RCE。但 PoC 后来公开出来我一看，好像不是这个样子，就来简单浅析一下这玩意吧。</p>