门酱想玩什么呢？
在评论区xss
然后把评论区的链接给他就可以了
<script>window.open("https://www.example.com","test")</script>是另外开一个标签页就没过
Becomeroot
根据hint知道是zerodium后门漏洞
直接弹shell
但是flag在/root下，我们要提权，给了提示是sudo提权
搜索得到CVE-2021-3156，输入sudoedit -s /验证
确实有，但是会报下面的错
后面试了搜到的两个payload，全都报这个错然后失败
看大家的wp发现是用CVE-2021-3156非交互式执行命令
写木马上传payload
These summaries were made available to the oncologist to review during the consultation cost of amoxicillin clavulanate without insurance The human gene encoding TYMP is located on chromosome 22q13
what bugs does augmentin cover 3 天前