Larry Aker

icon location My name is Larry Aker, I am a college student and most of the time have to study. I enjoy music and Cyber security, as well as playing football.

Results 2 issues of Larry Aker

change the user password by brute force cracking

2 comment

The impact code in IceCMS/IceWk-ment/src/main/java/com/ttice/icewkment/controller/UserController.java： if(!claims){ //前端接收后进行处理 Result.fail(403,"Token已过期",null); } //验证之前密码是否正确 QueryWrapper wrapper = new QueryWrapper(); wrapper.eq("user_id",userid); User usercheak = userMapper.selectOne(wrapper); String password = usercheak.getPassword(); if(Objects.equals(password, yuanPassWord)) { User user =...

Arbitrary file upload

In the updateimage path of the imageApi file, the upload file type is not restricted, causing any file to be uploaded. At the same time, it is set to store...