https://gugesay.com/blog 骨哥说事公众号首发地 zh-CN undefined (Guge) undefined (Guge) Sat, 07 Oct 2023 01:38:14 GMT https://gugesay.com/blog/2023 Microsoft Office XSS https://gugesay.com/blog/2023 Microsoft Office XSS undefined Sat, 07 Oct 2023 01:38:14 GMT undefined (Guge) bugbountyMSRCOfficeXSS白帽故事 https://gugesay.com/blog/burpsuite-intruder-自动化测试反射型-xss https://gugesay.com/blog/burpsuite-intruder-自动化测试反射型-xss undefined Sat, 18 Jun 2022 07:36:31 GMT undefined (Guge) bugbountyburpsuiteXSS白帽故事 https://gugesay.com/blog/chrome-新的xss攻击向量：cve-2023-5480 https://gugesay.com/blog/chrome-新的xss攻击向量：cve-2023-5480 undefined Tue, 30 Jan 2024 01:51:56 GMT undefined (Guge) bugbountyChromeCVEXSS白帽故事 https://gugesay.com/blog/hackerone上top5的开放重定向漏洞 https://gugesay.com/blog/hackerone上top5的开放重定向漏洞 undefined Fri, 16 Aug 2024 06:50:52 GMT undefined (Guge) bugbountyhackeroneXSS开放重定向白帽故事 https://gugesay.com/blog/swagger-ui-从xss到账户接管 https://gugesay.com/blog/swagger-ui-从xss到账户接管 undefined Tue, 24 May 2022 07:27:47 GMT undefined (Guge) bugbountySwaggerUIXSS白帽故事 https://gugesay.com/blog/xss-waf绕过的一些基本思考 https://gugesay.com/blog/xss-waf绕过的一些基本思考 undefined Fri, 14 Jun 2024 11:55:58 GMT undefined (Guge) bugbountybypassXSS白帽故事 https://gugesay.com/blog/xss！一次对抗akamai-waf的经历 https://gugesay.com/blog/xss！一次对抗akamai-waf的经历 undefined Mon, 30 Oct 2023 03:27:49 GMT undefined (Guge) akamaibugbountybypassXSS未分类 https://gugesay.com/blog/【500】将dom-xss升级为存储型xss https://gugesay.com/blog/【500】将dom-xss升级为存储型xss undefined Mon, 25 Dec 2023 08:20:26 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/【cve-2025-4123】：grafana-ssrf-和帐户接管利用 https://gugesay.com/blog/【cve-2025-4123】：grafana-ssrf-和帐户接管利用 undefined Fri, 23 May 2025 03:16:56 GMT undefined (Guge) CVE-2025–4123GrafanassrfXSS白帽故事 https://gugesay.com/blog/【文末有吐槽】如何将一个无害-xss-提升为现实中的 https://gugesay.com/blog/【文末有吐槽】如何将一个无害-xss-提升为现实中的 undefined Tue, 30 Dec 2025 02:47:19 GMT undefined (Guge) XSS白帽故事钓鱼 https://gugesay.com/blog/【白帽故事】8000赏金奖励：opera浏览器从xss-到-rce https://gugesay.com/blog/【白帽故事】8000赏金奖励：opera浏览器从xss-到-rce undefined Tue, 18 Jan 2022 08:03:37 GMT undefined (Guge) bugbountyOperaXSS白帽故事 https://gugesay.com/blog/一则绕过-cloudflare-waf-实现-xss-的案例 https://gugesay.com/blog/一则绕过-cloudflare-waf-实现-xss-的案例 undefined Tue, 15 Jul 2025 04:04:15 GMT undefined (Guge) bypassXSS白帽故事 https://gugesay.com/blog/一处价值-2500-的-dom-xss-漏洞 https://gugesay.com/blog/一处价值-2500-的-dom-xss-漏洞 undefined Thu, 29 May 2025 07:30:44 GMT undefined (Guge) bypassXSS白帽故事 https://gugesay.com/blog/一种新奇另类的文件上传利用 https://gugesay.com/blog/一种新奇另类的文件上传利用 undefined Mon, 29 Sep 2025 02:08:28 GMT undefined (Guge) outlookXSS文件上传白帽故事钓鱼 https://gugesay.com/blog/仅用google-dork快速发现2枚微软xss https://gugesay.com/blog/仅用google-dork快速发现2枚微软xss undefined Fri, 11 Aug 2023 11:29:50 GMT undefined (Guge) google dorkXSS白帽故事 https://gugesay.com/blog/从-self-xss-到-rce https://gugesay.com/blog/从-self-xss-到-rce undefined Fri, 11 Apr 2025 01:47:24 GMT undefined (Guge) rceXSS白帽故事 https://gugesay.com/blog/从adobe的vip赏金计划中获得近50000美元奖励的故事 https://gugesay.com/blog/从adobe的vip赏金计划中获得近50000美元奖励的故事 undefined Tue, 02 Jan 2024 09:52:37 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/从self-xss-到账户接管 https://gugesay.com/blog/从self-xss-到账户接管 undefined Fri, 22 Dec 2023 06:54:44 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/使用-google-脚本资源绕过-portswigger上的-csp https://gugesay.com/blog/使用-google-脚本资源绕过-portswigger上的-csp undefined Tue, 27 Feb 2024 07:46:07 GMT undefined (Guge) bugbountybypasscspXSS白帽故事 https://gugesay.com/blog/使用工具快速发现-ssrf、lfi、xss https://gugesay.com/blog/使用工具快速发现-ssrf、lfi、xss undefined Tue, 29 Aug 2023 03:15:33 GMT undefined (Guge) bugbountyLFIssrfXSS工具白帽故事 https://gugesay.com/blog/凭借一手apple-存储xss赚取5000美元的故事 https://gugesay.com/blog/凭借一手apple-存储xss赚取5000美元的故事 undefined Thu, 18 Apr 2024 16:00:49 GMT undefined (Guge) ApplebugbountyXSS白帽故事 https://gugesay.com/blog/利用param-miner挖掘基于缓存中毒的xss漏洞 https://gugesay.com/blog/利用param-miner挖掘基于缓存中毒的xss漏洞 undefined Fri, 10 Feb 2023 02:46:30 GMT undefined (Guge) bugbountyXSS工具白帽故事 https://gugesay.com/blog/化腐朽为神奇：将-self-xss-升级为真正可利用的-xss-漏洞 https://gugesay.com/blog/化腐朽为神奇：将-self-xss-升级为真正可利用的-xss-漏洞 undefined Mon, 21 Jul 2025 07:06:18 GMT undefined (Guge) XSS白帽故事 https://gugesay.com/blog/参数污染的艺术：用javascript注入绕过waf https://gugesay.com/blog/参数污染的艺术：用javascript注入绕过waf undefined Mon, 08 Dec 2025 06:45:13 GMT undefined (Guge) JS注入WAFXSS参数污染白帽故事 https://gugesay.com/blog/另一处xss！荣登微软msrc-2022-q3排行榜 https://gugesay.com/blog/另一处xss！荣登微软msrc-2022-q3排行榜 undefined Wed, 15 Feb 2023 16:00:07 GMT undefined (Guge) bugbountyXSS微软白帽故事 https://gugesay.com/blog/在chatgpt中挖掘xss漏洞实现任意账户接管 https://gugesay.com/blog/在chatgpt中挖掘xss漏洞实现任意账户接管 undefined Fri, 23 Feb 2024 03:19:06 GMT undefined (Guge) bugbountychatgptXSS白帽故事 https://gugesay.com/blog/在一个web网站中获得7000赏金奖励 https://gugesay.com/blog/在一个web网站中获得7000赏金奖励 undefined Wed, 27 Mar 2024 01:32:37 GMT undefined (Guge) bugbountyhackeronerceXSS白帽故事 https://gugesay.com/blog/如何在bugcrowd公共项目中找到50多个xss漏洞 https://gugesay.com/blog/如何在bugcrowd公共项目中找到50多个xss漏洞 undefined Wed, 20 Apr 2022 07:48:49 GMT undefined (Guge) bugbountybugcrowdXSS白帽故事 https://gugesay.com/blog/如何将-dom-xss升级为一键帐户接管（下集） https://gugesay.com/blog/如何将-dom-xss升级为一键帐户接管（下集） undefined Thu, 18 Apr 2024 02:21:17 GMT undefined (Guge) bugbountyXSS帐户接管白帽故事 https://gugesay.com/blog/如何将dom-xss升级为一键帐户接管（上集） https://gugesay.com/blog/如何将dom-xss升级为一键帐户接管（上集） undefined Wed, 17 Apr 2024 16:00:52 GMT undefined (Guge) bugbountyXSS帐户接管白帽故事 https://gugesay.com/blog/如何通过搜索js文件找到存储xss的故事 https://gugesay.com/blog/如何通过搜索js文件找到存储xss的故事 undefined Sat, 15 Mar 2025 09:35:06 GMT undefined (Guge) XSS白帽故事 https://gugesay.com/blog/将selfxss升级为存储xss https://gugesay.com/blog/将selfxss升级为存储xss undefined Mon, 01 Apr 2024 01:38:45 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/将赏金从50变为1000的帐户接管漏洞 https://gugesay.com/blog/将赏金从50变为1000的帐户接管漏洞 undefined Sun, 13 Aug 2023 05:59:16 GMT undefined (Guge) bugbountyXSS白帽故事 https://gugesay.com/blog/最新twitter-xss-csrf-漏洞完整披露 https://gugesay.com/blog/最新twitter-xss-csrf-漏洞完整披露 undefined Wed, 20 Dec 2023 02:03:24 GMT undefined (Guge) bugbountycsrfXSS白帽故事 https://gugesay.com/blog/某android-app中一处有趣的bug https://gugesay.com/blog/某android-app中一处有趣的bug undefined Wed, 12 Jun 2024 06:17:36 GMT undefined (Guge) APPbugbountyXSS白帽故事 https://gugesay.com/blog/致命xss！利用存储xss窃取-oauth-凭证并泄露数据？ https://gugesay.com/blog/致命xss！利用存储xss窃取-oauth-凭证并泄露数据？ undefined Mon, 26 May 2025 02:43:39 GMT undefined (Guge) XSS白帽故事 https://gugesay.com/blog/赚取5w刀的5个顶级xss-poc https://gugesay.com/blog/赚取5w刀的5个顶级xss-poc undefined Thu, 05 Jun 2025 02:12:51 GMT undefined (Guge) XSS白帽故事 https://gugesay.com/blog/逆向-citrix-gateway-发现-xss-漏洞 https://gugesay.com/blog/逆向-citrix-gateway-发现-xss-漏洞 undefined Sun, 13 Aug 2023 02:49:14 GMT undefined (Guge) CitrixXSS白帽故事 https://gugesay.com/blog/通过链式攻击劫持会话获得2500奖励 https://gugesay.com/blog/通过链式攻击劫持会话获得2500奖励 undefined Sat, 12 Aug 2023 09:17:09 GMT undefined (Guge) XSS白帽故事 https://gugesay.com/blog/错过游戏时光，意外在-tiktok-赚取-3000-美元的故事 https://gugesay.com/blog/错过游戏时光，意外在-tiktok-赚取-3000-美元的故事 undefined Mon, 14 Jul 2025 02:28:53 GMT undefined (Guge) bypasstiktokXSS白帽故事