devme4f's blog

Find me on , and .

• 2026-01-23
  New Approach to RCE Zimbra Mail Server with admin access (CVE-2025-68645)
• 2024-12-31
  Optimizing Tomcat MemShell compatibility
• 2024-10-17
  Quick note Spring Boot Fat Jar file writing to RCE
• 2024-08-16
  Analyzing CVE-2024-34750 Apache Tomcat DoS
• 2024-03-28
  Spring Web Flow past vulnerabilities research
• 2024-03-27
  Jasig CAS past vulnerabilities research
• 2024-01-30
  TetCTF-2024 Ctf Writeup - J4v4 Censored nginx unintended solution
• 2023-12-22
  SVATTT-2023 Ctf Writeup - The new Waf Deser
• 2023-09-19
  Quick Note Spring Memshell
• 2023-09-12
  Java Deserialization p1 - TemplateImpl class and its utilization chain