Ricter Zheng

https://ricterz.me [email protected]

Independent Security Researcher uid=1337(ricter) groups=1001(hacker),1002(acg),1003(security)

Results 16 issues of


                                            Ricter Zheng

Simple fix the xss of markdown #9

False positives of Alias Traversal

4

comment

``` Description: Using alias in a prefixed location that doesn't ends with directory separator could lead to path traversal vulnerability. Additional info: https://github.com/yandex/gixy/blob/master/docs/en/plugins/aliastraversal.md Pseudo config: server { server_name xxx; location...

储存数据库报错：NULL not allowed for column "IS_OPTIMIZE"

1

comment

```java Caused by: org.h2.jdbc.JdbcSQLIntegrityConstraintViolationException: NULL not allowed for column "IS_OPTIMIZE"; SQL statement: insert into call (invoker_type, line_num, polluted_position, real_call_type, source, target, id) values (?, ?, ?, ?, ?, ?, ?)...

下载地址失效

1

comment

RT，提示403了

Remove .idea from your repo

1

comment

bug

密码规则：Shift+数字

1

comment

基于 http://drops.wooyun.org/tips/10641 重构

genpAss 密码规则

求各种

后台

2

comment

用户自定义接收参数

这个好难的说 ![QAQ](http://mmmoe.info/1.jpg)

1
2
›