corpus.blog
56,966 blogs · [ { "id": "01a08c61-feba-7025-8175-1c707b7afc0f", "title": "From context_handle to type confusion", "url": "https://whereisk0shl.top/post/From%20context_handle%20to%20type%20confusion/", "published_at": "2026-06-26T02:27:16+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707ba93a04", "title": "A trick, the story of CVE-2024-26230", "url": "https://whereisk0shl.top/post/A%20trick,%20the%20story%20of%20CVE-2024-26230/", "published_at": "2024-04-10T09:43:24+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707bb0561e", "title": "Isolate me from sandbox - Explore elevation of privilege of CNG Key Isolation", "url": "https://whereisk0shl.top/post/Isolate%20me%20from%20sandbox%20-%20Explore%20elevation%20of%20privilege%20of%20CNG%20Key%20Isolation/", "published_at": "2023-09-01T11:18:04+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707bdaf443", "title": "Break me out of sandbox in old pipe - CVE-2022-22715 Windows Dirty Pipe", "url": "https://whereisk0shl.top/post/Break%20me%20out%20of%20sandbox%20in%20old%20pipe%20-%20CVE-2022-22715%20Windows%20Dirty%20Pipe/", "published_at": "2022-08-25T03:09:53+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707c4c5939", "title": "The Story Of CVE-2021-1648", "url": "https://whereisk0shl.top/post/The_story_of_CVE_2021_1648/", "published_at": "2021-01-13T02:29:43+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707c926a52", "title": "StorSvc writeup and introduction about my analysis script", "url": "https://whereisk0shl.top/post/StorSvc_writeup_and_introduction_about_my_analysis_script/", "published_at": "2020-07-27T06:39:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707caeccc5", "title": "Segment Heap的简单分析和Windbg Extension", "url": "https://whereisk0shl.top/post/segment_heap_ext/", "published_at": "2020-07-10T01:56:03+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707cd3f8b8", "title": "VSFTPD v2.3.4 后门分析", "url": "https://whereisk0shl.top/post/VSFTPD%20v2.3.4后门分析/", "published_at": "2020-02-10T13:24:37+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707d198882", "title": "ProFTPD 1.3.3c 后门分析", "url": "https://whereisk0shl.top/post/Proftpd-1.3.3c后门分析/", "published_at": "2020-02-10T13:24:35+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707d998fd1", "title": "LShell", "url": "https://whereisk0shl.top/post/LShell%3C=0.9.15远程代码执行漏洞/", "published_at": "2020-02-10T13:24:34+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707e63267e", "title": "JCG 路由命令执行漏洞分析", "url": "https://whereisk0shl.top/post/JCG路由命令执行漏洞分析/", "published_at": "2020-02-10T13:24:34+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707e7aa3d8", "title": "HTML Help Workshop .SEH 本地代码执行漏洞", "url": "https://whereisk0shl.top/post/HTML%20Help%20Workshop%20.SEH本地代码执行漏洞/", "published_at": "2020-02-10T13:24:34+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707eab090d", "title": "[质量局!!]HITB GSEC CTF Win Pwn解题全记录之babystack", "url": "https://whereisk0shl.top/post/hitb_gsec_ctf_babystack_writeup/", "published_at": "2020-02-10T13:24:34+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707ef2ff97", "title": "A simple story of DsSvc, \"Live and Die\"", "url": "https://whereisk0shl.top/post/a-simple-story-of-DsSvc/", "published_at": "2020-02-10T13:24:29+00:00" }, { "id": "01a08c61-feba-7025-8175-1c707fa26eaf", "title": "[博客搬家啦!] CVE-2011-3478 Symantec pcAnywhere 远程代码执行漏洞", "url": "https://whereisk0shl.top/post/[博客搬家啦!]CVE-2011-3478%20Symantec%20pcAnywhere远程代码执行漏洞/", "published_at": "2020-02-10T13:22:16+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7080281f70", "title": "[CVE-2016-0111] IE SetAttributeStringAndPointer 释放后重用漏洞分析 [MS16-023]", "url": "https://whereisk0shl.top/post/[CVE-2016-0111]IE%20SetAttributeStringAndPointer释放后重用漏洞分析[MS16-023]/", "published_at": "2020-02-10T13:22:15+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70803e1e3b", "title": "[CVE-2013-0658] Schneider Electric Accutech 工控服务堆溢出漏洞分析", "url": "https://whereisk0shl.top/post/[CVE-2013-0658]Schneider%20Electirc%20Accutech工控服务堆溢出漏洞分析/", "published_at": "2020-02-10T13:22:15+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7080ca914e", "title": "Microsoft Hardlink缓解机制简单分析", "url": "https://whereisk0shl.top/post/2019-06-08/", "published_at": "2019-06-07T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7081ae0583", "title": "DfMarshal系列漏洞CVE-2018-8550调试记录", "url": "https://whereisk0shl.top/post/2019-05-11/", "published_at": "2019-05-10T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708211a186", "title": "写在98篇漏洞分析之后---2019.03.09", "url": "https://whereisk0shl.top/post/2019-03-09/", "published_at": "2019-03-08T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70826f62b6", "title": "[CVE-2016-5108]VideoLAN VLC Media Player 2.2.1越界写拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2019-03-09-01/", "published_at": "2019-03-08T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708341e294", "title": "Internet Download Accelerator 6.10.1.1527 远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2019-03-02/", "published_at": "2019-03-01T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70837a7b05", "title": "ConQuest DICOM Server 1.4.17d 远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2019-02-24/", "published_at": "2019-02-23T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70842646ed", "title": "Serva 3.0.0 HTTP Server整数溢出远程拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2019-02-16/", "published_at": "2019-02-15T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70852400d0", "title": "[破五～]Dual DHCP DNS Server 7.29远程拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2019-02-09/", "published_at": "2019-02-08T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70854715ea", "title": "[拜年啦！]NetCat【nc】 0.7.1 远程拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2019-02-04/", "published_at": "2019-02-03T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7085e3597a", "title": "Easy Internet Sharing Proxy Server 2.2整数溢出远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2019-01-26/", "published_at": "2019-01-25T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7086395f61", "title": "WinaXe 7.7 远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2019-01-19/", "published_at": "2019-01-18T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70866ac1f0", "title": "Axessh 4.2拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2019-01-13/", "published_at": "2019-01-12T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70876646fd", "title": "uSQLite1.0.0远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2019-01-06/", "published_at": "2019-01-05T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70884152a7", "title": "[元旦快乐]GNU GTypist 2.9.5-2本地拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2018-12-31/", "published_at": "2018-12-30T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7088671c0c", "title": "Network Scanner 4.0.0本地代码执行漏洞分析", "url": "https://whereisk0shl.top/post/2018-12-22/", "published_at": "2018-12-21T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c70892390b5", "title": "[CVE-2013-3299]RealPlayer拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2018-12-15/", "published_at": "2018-12-14T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7089ad0c59", "title": "LanSpy 2.0.0.155本地代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-12-08/", "published_at": "2018-12-07T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7089b4845f", "title": "[CVE-2016-2776]BIND 9 ‘buffer.c’拒绝服务漏洞", "url": "https://whereisk0shl.top/post/2018-12-01/", "published_at": "2018-11-30T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7089b8b5f3", "title": "Microsoft Internet Explorer 11.0.9600.18482 - Use After Free", "url": "https://whereisk0shl.top/post/2018-11-24/", "published_at": "2018-11-23T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c7089e5f9a3", "title": "WDK 8.1 kill.exe内存破坏漏洞", "url": "https://whereisk0shl.top/post/2018-11-17/", "published_at": "2018-11-16T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708a1c0c01", "title": "Disk Pulse Enterprise远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-10-22/", "published_at": "2018-10-21T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708a86a7d4", "title": "php 5.0 tidy_parse_file缓冲区溢出漏洞", "url": "https://whereisk0shl.top/post/2018-10-13/", "published_at": "2018-10-12T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708aa2dbc5", "title": "EKG Gadu 本地代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-10-06/", "published_at": "2018-10-05T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708b297cbf", "title": "【中秋牛逼暴富】阿里旺旺2010远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-09-24/", "published_at": "2018-09-23T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708b4a6f27", "title": "LamaHub 0.0.62远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-09-16/", "published_at": "2018-09-15T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708c40c949", "title": "NScan 0.91 本地代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-09-01/", "published_at": "2018-08-31T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708cc59515", "title": "EasyFTP Server 1.7.0.11 APPE远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-07-28/", "published_at": "2018-07-27T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708d11bdaf", "title": "[MS16-063]IE11浏览器释放后重用漏洞", "url": "https://whereisk0shl.top/post/2018-07-20/", "published_at": "2018-07-19T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708de5af57", "title": "Halliburton LogView Pro 9.7.5远程代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-07-15/", "published_at": "2018-07-14T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708ee1b883", "title": "nrss reader 0.3.9本地代码执行漏洞", "url": "https://whereisk0shl.top/post/2018-07-01/", "published_at": "2018-06-30T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708f2a87b8", "title": "MediaCoder 0.8.43.5852 - .m3u缓冲区溢出漏洞", "url": "https://whereisk0shl.top/post/2018-06-23/", "published_at": "2018-06-22T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708f6141c2", "title": "[端午安康]CoolPlayer+ Portable 2.19.6 - .m3u缓冲区溢出漏洞", "url": "https://whereisk0shl.top/post/2018-06-17/", "published_at": "2018-06-16T16:00:00+00:00" }, { "id": "01a08c61-feba-7025-8175-1c708f6901d6", "title": "TFTP Server 1.4远程代码执行漏洞分析", "url": "https://whereisk0shl.top/post/2018-06-03/", "published_at": "2018-06-02T16:00:00+00:00" } ] posts Claim your blog
Back to whereisk0shl.top
Blog · corpus.blog/blogs/whereisk0shl.top/posts

whereisk0shl.top

whereisk0shl.top

2026

From context_handle to type confusionoriginal ↗
26 Jun 2026

2024

A trick, the story of CVE-2024-26230original ↗
10 Apr 2024

2023

Isolate me from sandbox - Explore elevation of privilege of CNG Key Isolationoriginal ↗
1 Sept 2023

2022

Break me out of sandbox in old pipe - CVE-2022-22715 Windows Dirty Pipeoriginal ↗
25 Aug 2022

2021

The Story Of CVE-2021-1648original ↗
13 Jan 2021

2020

StorSvc writeup and introduction about my analysis scriptoriginal ↗
27 Jul 2020
Segment Heap的简单分析和Windbg Extensionoriginal ↗
10 Jul 2020
VSFTPD v2.3.4 后门分析original ↗
10 Feb 2020
ProFTPD 1.3.3c 后门分析original ↗
10 Feb 2020
LShelloriginal ↗
10 Feb 2020
JCG 路由命令执行漏洞分析original ↗
10 Feb 2020
HTML Help Workshop .SEH 本地代码执行漏洞original ↗
10 Feb 2020
[质量局!!]HITB GSEC CTF Win Pwn解题全记录之babystackoriginal ↗
10 Feb 2020
A simple story of DsSvc, "Live and Die"original ↗
10 Feb 2020
[博客搬家啦!] CVE-2011-3478 Symantec pcAnywhere 远程代码执行漏洞original ↗
10 Feb 2020
[CVE-2016-0111] IE SetAttributeStringAndPointer 释放后重用漏洞分析 [MS16-023]original ↗
10 Feb 2020
[CVE-2013-0658] Schneider Electric Accutech 工控服务堆溢出漏洞分析original ↗
10 Feb 2020

2019

Microsoft Hardlink缓解机制简单分析original ↗
7 Jun 2019
DfMarshal系列漏洞CVE-2018-8550调试记录original ↗
10 May 2019
写在98篇漏洞分析之后---2019.03.09original ↗
8 Mar 2019
[CVE-2016-5108]VideoLAN VLC Media Player 2.2.1越界写拒绝服务漏洞original ↗
8 Mar 2019
Internet Download Accelerator 6.10.1.1527 远程代码执行漏洞original ↗
1 Mar 2019
ConQuest DICOM Server 1.4.17d 远程代码执行漏洞original ↗
23 Feb 2019
Serva 3.0.0 HTTP Server整数溢出远程拒绝服务漏洞original ↗
15 Feb 2019
[破五～]Dual DHCP DNS Server 7.29远程拒绝服务漏洞original ↗
8 Feb 2019
[拜年啦！]NetCat【nc】 0.7.1 远程拒绝服务漏洞original ↗
3 Feb 2019
Easy Internet Sharing Proxy Server 2.2整数溢出远程代码执行漏洞original ↗
25 Jan 2019
WinaXe 7.7 远程代码执行漏洞original ↗
18 Jan 2019
Axessh 4.2拒绝服务漏洞original ↗
12 Jan 2019
uSQLite1.0.0远程代码执行漏洞original ↗
5 Jan 2019

2018

[元旦快乐]GNU GTypist 2.9.5-2本地拒绝服务漏洞original ↗
30 Dec 2018
Network Scanner 4.0.0本地代码执行漏洞分析original ↗
21 Dec 2018
[CVE-2013-3299]RealPlayer拒绝服务漏洞original ↗
14 Dec 2018
LanSpy 2.0.0.155本地代码执行漏洞original ↗
7 Dec 2018
[CVE-2016-2776]BIND 9 ‘buffer.c’拒绝服务漏洞original ↗
30 Nov 2018
Microsoft Internet Explorer 11.0.9600.18482 - Use After Freeoriginal ↗
23 Nov 2018
WDK 8.1 kill.exe内存破坏漏洞original ↗
16 Nov 2018
Disk Pulse Enterprise远程代码执行漏洞original ↗
21 Oct 2018
php 5.0 tidy_parse_file缓冲区溢出漏洞original ↗
12 Oct 2018
EKG Gadu 本地代码执行漏洞original ↗
5 Oct 2018
【中秋牛逼暴富】阿里旺旺2010远程代码执行漏洞original ↗
23 Sept 2018
LamaHub 0.0.62远程代码执行漏洞original ↗
15 Sept 2018
NScan 0.91 本地代码执行漏洞original ↗
31 Aug 2018
EasyFTP Server 1.7.0.11 APPE远程代码执行漏洞original ↗
27 Jul 2018
[MS16-063]IE11浏览器释放后重用漏洞original ↗
19 Jul 2018
Halliburton LogView Pro 9.7.5远程代码执行漏洞original ↗
14 Jul 2018
nrss reader 0.3.9本地代码执行漏洞original ↗
30 Jun 2018
MediaCoder 0.8.43.5852 - .m3u缓冲区溢出漏洞original ↗
22 Jun 2018
[端午安康]CoolPlayer+ Portable 2.19.6 - .m3u缓冲区溢出漏洞original ↗
16 Jun 2018
TFTP Server 1.4远程代码执行漏洞分析original ↗
2 Jun 2018