devme4f's blog

Find me on , and .

• 2024-10-17
  Quick note Spring Boot Fat Jar file writing to RCE (writeup)
• 2024-08-16
  Analyzing CVE-2024-34750 Apache Tomcat DoS
• 2024-03-28
  Spring Web Flow past vulnerabilities research
• 2024-03-27
  Jasig CAS past vulnerabilities research
• 2024-01-30
  TetCTF-2024 Ctf Writeup - J4v4 Censored web challenge and unintended solution that break nginx rule
• 2023-12-22
  SVATTT-2023 Ctf Writeup - The new Waf Deser
• 2023-09-19
  Quick Note Spring Memshell
• 2023-09-12
  Java Deserialization p1 - TemplateImpl class and its utilization chain
• 2023-08-28
  SekaiCTF-2023 Ctf Writeup - Frog WAF - EL Injection WAF Bypass
• 2023-08-20
  BKCTF-2023 Ctf Writeup - Texttext - Java deser exploit Text4Shell