PageSourceSearch

https://okaytc.github.io/archives/

html okaytc.github.io collected 2026-10-03 09:42:33 UTC 22,684 bytes, 715 lines download raw bytes

1<!DOCTYPE html>
2<html lang="zh-CN" color-mode="light">
3
4  <head>
5  <meta charset="utf-8">
6  <meta name="viewport" content="width=device-width, initial-scale=1" />
7  <meta name="keywords" content="" />
8  <meta name="author" content="Okaytc" />
9  <meta name="description" content="生活 健身 学习 沉淀" />
10  
11  
12  <title>
13    
14      归档 
15      
16      
17      |
18    
19     Okaytc
20  </title>
21
22  
23    <link rel="apple-touch-icon" href="/images/head-3.jpg">
24    <link rel="icon" href="/images/head-3.jpg">
25  
26
27  <!-- Raleway-Font -->
28  <link href="https://fonts.googleapis.com/css?family=Raleway&display=swap" rel="stylesheet">
29
30  <!-- hexo site css -->
31  <link rel="stylesheet" href="/css/main.css" />
32  <link rel="stylesheet" href="//at.alicdn.com/t/font_1886449_67xjft27j1l.css" />
33  <!-- 代码块风格 -->
34  
35    
36<link rel="stylesheet" href="/css/figcaption/mac-block.css">
37
38  
39
40  <!-- jquery3.3.1 -->
41  
42    
42<script defer type="text/javascript" src="/plugins/jquery.min.js"></script>
42
43  
44
45  <!-- fancybox -->
46  
47    <link href="/plugins/jquery.fancybox.min.css" rel="stylesheet">
48    
48<script defer type="text/javascript" src="/plugins/jquery.fancybox.min.js"></script>
48
49  
50  
51<script src="/js/fancybox.js"></script>
51
52
53
54  
55
56  
57
58  
58<script>
59    var html = document.documentElement
60    const colorMode = localStorage.getItem('color-mode')
61    if (colorMode) {
62      document.documentElement.setAttribute('color-mode', colorMode)
63    }
64  </script>
64
65<meta name="generator" content="Hexo 6.3.0"></head>
66
67
68  <body>
69    <div id="app">
70      <div class="header">
71  <div class="avatar">
72    <a href="/">
73      <!-- 头像取消懒加载,添加no-lazy -->
74      
75        <img src="/images/head-3.jpg" alt="">
76      
77    </a>
78    <div class="nickname"><a href="/">Okaytc</a></div>
79  </div>
80  <div class="navbar">
81    <ul>
82      
83        <li class="nav-item" data-path="/">
84          <a href="/">主页</a>
85        </li>
86      
87        <li class="nav-item" data-path="/archives/">
88          <a href="/archives/">文章</a>
89        </li>
90      
91        <li class="nav-item" data-path="/tags/">
92          <a href="/tags/">标签</a>
93        </li>
94      
95        <li class="nav-item" data-path="/friends/">
96          <a href="/friends/">友链</a>
97        </li>
98      
99        <li class="nav-item" data-path="/about/">
100          <a href="/about/">关于</a>
101        </li>
102      
103    </ul>
104  </div>
105</div>
106
107
108<script src="/js/activeNav.js"></script>
108
109
110
111
112      <div class="flex-container">
113        <!-- 归档页,展示本站所有文章,按照年份降序归类,url形式:https://yoursite/archives/ -->
114
115<!-- last: 按年份把文章分组,当前遍历到的年份 -->
116<!-- now: 当前遍历到的文章的发布年份 -->
117
118<div class="container archives">
119  <div class="post-list">
120    
121        <!-- 后续文章的发布年份呈现 -->
122        <div class="content-title">
123          <h2>
124            <span>2023</span>
125          </h2>
126        </div>
127      
128      <div class="post-item" title="Apache-RocketMQ远程代码执行漏洞(CVE-2023-37582)原理分析">
129        <div class="time-m-d">07-25</div>
130        <div class="title">
131          <a href="/posts/6ddf0279.html">
132            <span>Apache-RocketMQ远程代码执行漏洞(CVE-2023-37582)原理分析</span>
133          </a>
134        </div>
135      </div>
136    
137      <div class="post-item" title="Apache-NiFi反序列化漏洞(CVE-2023-34212)原理分析">
138        <div class="time-m-d">06-30</div>
139        <div class="title">
140          <a href="/posts/4660f8a4.html">
141            <span>Apache-NiFi反序列化漏洞(CVE-2023-34212)原理分析</span>
142          </a>
143        </div>
144      </div>
145    
146      <div class="post-item" title="Apache-RocketMQ远程代码执行漏洞(CVE-2023-33246)原理分析">
147        <div class="time-m-d">06-09</div>
148        <div class="title">
149          <a href="/posts/835f317c.html">
150            <span>Apache-RocketMQ远程代码执行漏洞(CVE-2023-33246)原理分析</span>
151          </a>
152        </div>
153      </div>
154    
155      <div class="post-item" title="用友NC(NCMessageServlet)反序列化漏洞原理分析">
156        <div class="time-m-d">06-07</div>
157        <div class="title">
158          <a href="/posts/27bfb602.html">
159            <span>用友NC(NCMessageServlet)反序列化漏洞原理分析</span>
160          </a>
161        </div>
162      </div>
163    
164      <div class="post-item" title="泛微Ecology(CheckServer-SQL注入)漏洞原理分析">
165        <div class="time-m-d">05-24</div>
166        <div class="title">
167          <a href="/posts/825f317c.html">
168            <span>泛微Ecology(CheckServer-SQL注入)漏洞原理分析</span>
169          </a>
170        </div>
171      </div>
172    
173      <div class="post-item" title="Linux Kernel 权限提升(CVE-2023-32233)漏洞复现">
174        <div class="time-m-d">05-18</div>
175        <div class="title">
176          <a href="/posts/148ffc03.html">
177            <span>Linux Kernel 权限提升(CVE-2023-32233)漏洞复现</span>
178          </a>
179        </div>
180      </div>
181    
182      <div class="post-item" title="Linux Kernel 权限提升(CVE-2023-0386)漏洞复现">
183        <div class="time-m-d">05-07</div>
184        <div class="title">
185          <a href="/posts/542fc3b7.html">
186            <span>Linux Kernel 权限提升(CVE-2023-0386)漏洞复现</span>
187          </a>
188        </div>
189      </div>
190    
191      <div class="post-item" title="Weblogic远程代码执行漏洞(CVE-2023-21839)原理分析">
192        <div class="time-m-d">05-05</div>
193        <div class="title">
194          <a href="/posts/942fc3b7.html">
195            <span>Weblogic远程代码执行漏洞(CVE-2023-21839)原理分析</span>
196          </a>
197        </div>
198      </div>
199    
200      <div class="post-item" title="Weblogic远程代码执行漏洞(CVE-2023-21931)原理分析">
201        <div class="time-m-d">04-28</div>
202        <div class="title">
203          <a href="/posts/5a99c827.html">
204            <span>Weblogic远程代码执行漏洞(CVE-2023-21931)原理分析</span>
205          </a>
206        </div>
207      </div>
208    
209      <div class="post-item" title="Apache-Superset身份认证绕过漏洞(CVE-2023-27524)原理分析">
210        <div class="time-m-d">04-27</div>
211        <div class="title">
212          <a href="/posts/e817cb11.html">
213            <span>Apache-Superset身份认证绕过漏洞(CVE-2023-27524)原理分析</span>
214          </a>
215        </div>
216      </div>
217    
218      <div class="post-item" title="Apache-Solr-RCE(CNVD-2023-27598)漏洞原理分析">
219        <div class="time-m-d">04-23</div>
220        <div class="title">
221          <a href="/posts/5a99c826.html">
222            <span>Apache-Solr-RCE(CNVD-2023-27598)漏洞原理分析</span>
223          </a>
224        </div>
225      </div>
226    
227      <div class="post-item" title="瑞友天翼应用虚拟化系统远程代码执行漏洞原理分析">
228        <div class="time-m-d">04-13</div>
229        <div class="title">
230          <a href="/posts/4669a499.html">
231            <span>瑞友天翼应用虚拟化系统远程代码执行漏洞原理分析</span>
232          </a>
233        </div>
234      </div>
235    
236      <div class="post-item" title="Fineract-SQL注入漏洞(CVE-2023-25197)原理分析">
237        <div class="time-m-d">04-10</div>
238        <div class="title">
239          <a href="/posts/4669a496.html">
240            <span>Fineract-SQL注入漏洞(CVE-2023-25197)原理分析</span>
241          </a>
242        </div>
243      </div>
244    
245      <div class="post-item" title="Dubbo反序列化漏洞(CVE-2023-23638)原理分析">
246        <div class="time-m-d">03-31</div>
247        <div class="title">
248          <a href="/posts/3e6cbad8.html">
249            <span>Dubbo反序列化漏洞(CVE-2023-23638)原理分析</span>
250          </a>
251        </div>
252      </div>
253    
254      <div class="post-item" title="MinIO信息泄露(CVE-2023-28432)复现与原理分析">
255        <div class="time-m-d">03-24</div>
256        <div class="title">
257          <a href="/posts/3e6cbad7.html">
258            <span>MinIO信息泄露(CVE-2023-28432)复现与原理分析</span>
259          </a>
260        </div>
261      </div>
262    
263      <div class="post-item" title="java安全-CB1&CB2无依赖CC链学习与分析">
264        <div class="time-m-d">03-22</div>
265        <div class="title">
266          <a href="/posts/638f8ee9.html">
267            <span>java安全-CB1&CB2无依赖CC链学习与分析</span>
268          </a>
269        </div>
270      </div>
271    
272      <div class="post-item" title="Nacos身份认证绕过漏洞(QVD-2023-6271)原理分析">
273        <div class="time-m-d">03-15</div>
274        <div class="title">
275          <a href="/posts/ad3be142.html">
276            <span>Nacos身份认证绕过漏洞(QVD-2023-6271)原理分析</span>
277          </a>
278        </div>
279      </div>
280    
281      <div class="post-item" title="java安全-CC11链学习与分析">
282        <div class="time-m-d">03-14</div>
283        <div class="title">
284          <a href="/posts/7e9687c7.html">
285            <span>java安全-CC11链学习与分析</span>
286          </a>
287        </div>
288      </div>
289    
290      <div class="post-item" title="java安全-Log4j2漏洞原理学习与分析">
291        <div class="time-m-d">03-09</div>
292        <div class="title">
293          <a href="/posts/6e79ce8b.html">
294            <span>java安全-Log4j2漏洞原理学习与分析</span>
295          </a>
296        </div>
297      </div>
298    
299      <div class="post-item" title="java安全-Shiro550漏洞原理学习与分析">
300        <div class="time-m-d">02-20</div>
301        <div class="title">
302          <a href="/posts/10575800.html">
303            <span>java安全-Shiro550漏洞原理学习与分析</span>
304          </a>
305        </div>
306      </div>
307    
308      <div class="post-item" title="java安全-Fastjson-JdbcRowSetImpl利用链及高版本绕过分析">
309        <div class="time-m-d">02-15</div>
310        <div class="title">
311          <a href="/posts/ad3be000.html">
312            <span>java安全-Fastjson-JdbcRowSetImpl利用链及高版本绕过分析</span>
313          </a>
314        </div>
315      </div>
316    
317      <div class="post-item" title="java安全-RMI&LDAP&JNDI原理分析学习">
318        <div class="time-m-d">02-09</div>
319        <div class="title">
320          <a href="/posts/ad3be040.html">
321            <span>java安全-RMI&LDAP&JNDI原理分析学习</span>
322          </a>
323        </div>
324      </div>
325    
326      <div class="post-item" title="php7内核rfc1867协议对文件上传的过滤浅析">
327        <div class="time-m-d">01-14</div>
328        <div class="title">
329          <a href="/posts/9fa41563.html">
330            <span>php7内核rfc1867协议对文件上传的过滤浅析</span>
331          </a>
332        </div>
333      </div>
334    
335      <div class="post-item" title="java安全-fastjson及其TemplatesImpl链学习与分析">
336        <div class="time-m-d">01-04</div>
337        <div class="title">
338          <a href="/posts/ad3be047.html">
339            <span>java安全-fastjson及其TemplatesImpl链学习与分析</span>
340          </a>
341        </div>
342      </div>
343    
344        <!-- 后续文章的发布年份呈现 -->
345        <div class="content-title">
346          <h2>
347            <span>2022</span>
348          </h2>
349        </div>
350      
351      <div class="post-item" title="java安全-CC7链学习与分析">
352        <div class="time-m-d">12-26</div>
353        <div class="title">
354          <a href="/posts/40ba40f0.html">
355            <span>java安全-CC7链学习与分析</span>
356          </a>
357        </div>
358      </div>
359    
360      <div class="post-item" title="java安全-CC6链学习与分析">
361        <div class="time-m-d">12-18</div>
362        <div class="title">
363          <a href="/posts/9758c0a8.html">
364            <span>java安全-CC6链学习与分析</span>
365          </a>
366        </div>
367      </div>
368    
369      <div class="post-item" title="java安全-CC5链学习与分析">
370        <div class="time-m-d">12-09</div>
371        <div class="title">
372          <a href="/posts/340e4601.html">
373            <span>java安全-CC5链学习与分析</span>
374          </a>
375        </div>
376      </div>
377    
378      <div class="post-item" title="java安全-CC4链学习与分析">
379        <div class="time-m-d">12-07</div>
380        <div class="title">
381          <a href="/posts/e3ecc659.html">
382            <span>java安全-CC4链学习与分析</span>
383          </a>
384        </div>
385      </div>
386    
387      <div class="post-item" title="java安全-CC3链学习与分析">
388        <div class="time-m-d">12-05</div>
389        <div class="title">
390          <a href="/posts/a9d24d12.html">
391            <span>java安全-CC3链学习与分析</span>
392          </a>
393        </div>
394      </div>
395    
396      <div class="post-item" title="java安全-CC2链学习与分析">
397        <div class="time-m-d">11-29</div>
398        <div class="title">
399          <a href="/posts/7e30cd4a.html">
400            <span>java安全-CC2链学习与分析</span>
401          </a>
402        </div>
403      </div>
404    
405      <div class="post-item" title="java安全-CC1链学习与分析">
406        <div class="time-m-d">11-09</div>
407        <div class="title">
408          <a href="/posts/dd664be3.html">
409            <span>java安全-CC1链学习与分析</span>
410          </a>
411        </div>
412      </div>
413    
414      <div class="post-item" title="java安全-URLDNS链学习与分析">
415        <div class="time-m-d">10-25</div>
416        <div class="title">
417          <a href="/posts/643c7e53.html">
418            <span>java安全-URLDNS链学习与分析</span>
419          </a>
420        </div>
421      </div>
422    
423      <div class="post-item" title="java安全-初识java反射">
424        <div class="time-m-d">10-18</div>
425        <div class="title">
426          <a href="/posts/7a787d86.html">
427            <span>java安全-初识java反射</span>
428          </a>
429        </div>
430      </div>
431    
432      <div class="post-item" title="记一次普通的攻击溯源排查">
433        <div class="time-m-d">10-11</div>
434        <div class="title">
435          <a href="/posts/777da932.html">
436            <span>记一次普通的攻击溯源排查</span>
437          </a>
438        </div>
439      </div>
440    
441      <div class="post-item" title="java安全-初识反序列化">
442        <div class="time-m-d">09-27</div>
443        <div class="title">
444          <a href="/posts/45180cd1.html">
445            <span>java安全-初识反序列化</span>
446          </a>
447        </div>
448      </div>
449    
450  </div>
451</div>
452
453        
454<div class="footer">
455  <div class="social">
456    <ul>
457      
458        <li>
459          <a title="github" target="_blank" rel="noopener" href="https://github.com/Okaytc">
460            <i class="iconfont icon-github"></i>
461          </a>
462        </li>
463      
464    </ul>
465  </div>
466  
467    
468    <div class="footer-more">
469      
470        <a href="https://okaytc.github.io/">Copyright © Okaytc 2022</a>
471        
472    </div>
473  
474    
475    <div class="footer-more">
476      
477        <a href="https://okaytc.github.io/">一个热爱健身的脚本小子</a>
478        
479    </div>
480  
481  
482</div>
483
484      </div>
485
486      <div class="tools-bar">
487        <div class="back-to-top tools-bar-item hidden">
488  <a href="javascript: void(0)">
489    <i class="iconfont icon-chevronup"></i>
490  </a>
491</div>
492
493
494<script src="/js/backtotop.js"></script>
494
495
496
497
498        
499  <div class="search-icon tools-bar-item" id="search-icon">
500    <a href="javascript: void(0)">
501      <i class="iconfont icon-search"></i>
502    </a>
503  </div>
504
505  <div class="search-overlay hidden">
506    <div class="search-content" tabindex="0">
507      <div class="search-title">
508        <span class="search-icon-input">
509          <a href="javascript: void(0)">
510            <i class="iconfont icon-search"></i>
511          </a>
512        </span>
513        
514          <input type="text" class="search-input" id="search-input" placeholder="搜索...">
515        
516        <span class="search-close-icon" id="search-close-icon">
517          <a href="javascript: void(0)">
518            <i class="iconfont icon-close"></i>
519          </a>
520        </span>
521      </div>
522      <div class="search-result" id="search-result"></div>
523    </div>
524  </div>
525
526  
526<script type="text/javascript">
527    var inputArea = document.querySelector("#search-input")
528    var searchOverlayArea = document.querySelector(".search-overlay")
529
530    inputArea.onclick = function() {
531      getSearchFile()
532      this.onclick = null
533    }
534
535    inputArea.onkeydown = function() {
536      if(event.keyCode == 13)
537        return false
538    }
539
540    function openOrHideSearchContent() {
541      let isHidden = searchOverlayArea.classList.contains('hidden')
542      if (isHidden) {
543        searchOverlayArea.classList.remove('hidden')
544        document.body.classList.add('hidden')
545        // inputArea.focus()
546      } else {
547        searchOverlayArea.classList.add('hidden')
548        document.body.classList.remove('hidden')
549      }
550    }
551
552    function blurSearchContent(e) {
553      if (e.target === searchOverlayArea) {
554        openOrHideSearchContent()
555      }
556    }
557
558    document.querySelector("#search-icon").addEventListener("click", openOrHideSearchContent, false)
559    document.querySelector("#search-close-icon").addEventListener("click", openOrHideSearchContent, false)
560    searchOverlayArea.addEventListener("click", blurSearchContent, false)
561
562    var searchFunc = function (path, search_id, content_id) {
563      'use strict';
564      var $input = document.getElementById(search_id);
565      var $resultContent = document.getElementById(content_id);
566      $resultContent.innerHTML = "<ul><span class='local-search-empty'>首次搜索,正在载入索引文件,请稍后……<span></ul>";
567      $.ajax({
568        // 0x01. load xml file
569        url: path,
570        dataType: "xml",
571        success: function (xmlResponse) {
572          // 0x02. parse xml file
573          var datas = $("entry", xmlResponse).map(function () {
574            return {
575              title: $("title", this).text(),
576              content: $("content", this).text(),
577              url: $("url", this).text()
578            };
579          }).get();
580          $resultContent.innerHTML = "";
581
582          $input.addEventListener('input', function () {
583            // 0x03. parse query to keywords list
584            var str = '<ul class=\"search-result-list\">';
585            var keywords = this.value.trim().toLowerCase().split(/[\s\-]+/);
586            $resultContent.innerHTML = "";
587            if (this.value.trim().length <= 0) {
588              return;
589            }
590            // 0x04. perform local searching
591            datas.forEach(function (data) {
592              var isMatch = true;
593              var content_index = [];
594              if (!data.title || data.title.trim() === '') {
595                data.title = "Untitled";
596              }
597              var orig_data_title = data.title.trim();
598              var data_title = orig_data_title.toLowerCase();
599              var orig_data_content = data.content.trim().replace(/<[^>]+>/g, "");
600              var data_content = orig_data_content.toLowerCase();
601              var data_url = data.url;
602              var index_title = -1;
603              var index_content = -1;
604              var first_occur = -1;
605              // only match artiles with not empty contents
606              if (data_content !== '') {
607                keywords.forEach(function (keyword, i) {
608                  index_title = data_title.indexOf(keyword);
609                  index_content = data_content.indexOf(keyword);
610
611                  if (index_title < 0 && index_content < 0) {
612                    isMatch = false;
613                  } else {
614                    if (index_content < 0) {
615                      index_content = 0;
616                    }
617                    if (i == 0) {
618                      first_occur = index_content;
619                    }
620                    // content_index.push({index_content:index_content, keyword_len:keyword_len});
621                  }
622                });
623              } else {
624                isMatch = false;
625              }
626              // 0x05. show search results
627              if (isMatch) {
628                str += "<li><a href='" + data_url + "' class='search-result-title'>" + orig_data_title + "</a>";
629                var content = orig_data_content;
630                if (first_occur >= 0) {
631                  // cut out 100 characters
632                  var start = first_occur - 20;
633                  var end = first_occur + 80;
634
635                  if (start < 0) {
636                    start = 0;
637                  }
638
639                  if (start == 0) {
640                    end = 100;
641                  }
642
643                  if (end > content.length) {
644                    end = content.length;
645                  }
646
647                  var match_content = content.substr(start, end);
648
649                  // highlight all keywords
650                  keywords.forEach(function (keyword) {
651                    var regS = new RegExp(keyword, "gi");
652                    match_content = match_content.replace(regS, "<span class=\"search-keyword\">" + keyword + "</span>");
653                  });
654
655                  str += "<p class=\"search-result-abstract\">" + match_content + "...</p>"
656                }
657                str += "</li>";
658              }
659            });
660            str += "</ul>";
661            if (str.indexOf('<li>') === -1) {
662              return $resultContent.innerHTML = "<ul><span class='local-search-empty'>没有找到内容,请尝试更换检索词。<span></ul>";
663            }
664            $resultContent.innerHTML = str;
665          });
666        },
667        error: function(xhr, status, error) {
668          $resultContent.innerHTML = ""
669          if (xhr.status === 404) {
670            $resultContent.innerHTML = "<ul><span class='local-search-empty'>未找到search.xml文件,具体请参考:<a href='https://github.com/zchengsite/hexo-theme-oranges#configuration' target='_black'>configuration</a><span></ul>";
671          } else {
672            $resultContent.innerHTML = "<ul><span class='local-search-empty'>请求失败,尝试重新刷新页面或稍后重试。<span></ul>";
673          }
674        }
675      });
676      $(document).on('click', '#search-close-icon', function() {
677        $('#search-input').val('');
678        $('#search-result').html('');
679      });
680    }
681
682    var getSearchFile = function() {
683        var path = "/search.xml";
684        searchFunc(path, 'search-input', 'search-result');
685    }
686  </script>
686
687
688
689
690
691        
692  <div class="tools-bar-item theme-icon" id="switch-color-scheme">
693    <a href="javascript: void(0)">
694      <i id="theme-icon" class="iconfont icon-moon"></i>
695    </a>
696  </div>
697
698  
699<script src="/js/colorscheme.js"></script>
699
700
701
702
703
704
705        
706  
707  
708<script src="/js/shares.js"></script>
708
709
710
711
712      </div>
713    </div>
714  </body>
715</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.