一蓑烟雨

Results 33 issues of 一蓑烟雨

``` ─────────────────────────────── Traceback (most recent call last) ────────────────────────────────╮ │ │ │ /home/firmy/.local/bin/cve-bin-tool:8 in │ │ │ │ 5 from cve_bin_tool.cli import main │ │ 6 if __name__ == '__main__': │...

bug
good first issue

Nice project, but the requests library is to slow...

Hi, great work! I want to write my own systemtap scripts and how I can recompile it to insert in the qemu images? thanks.

将Ubuntu从16.04升级到18.04(保持python2的兼容性)或者一步到位20.04(仅支持python3,需重写部分exp),可能需要做大量测试工作,特开此帖白嫖PR :)

Hi friends! When the parameter length is greater than 100 characters of MAX_CHAR, the strcpy function overflows. A length check can be performed to fix the problem. ```c #define MAX_CHAR...

``` ➜ App grep -irF "172.31" temp Binary file temp/resources/classes.dex matches temp/sources/com/datac/transfer/TransferServiceImpl.java: private final String domain = "http://172.31.2.51:600"; temp/sources/com/datac/transfer/TransferServiceImpl.java: return new Request.Builder().url("http://172.31.2.51:600" + url).post(requestBody).build(); temp/sources/com/datac/g5/G5FileSyncImpl.java: public static final String HOST...

I have an App with compileSdkVersion="31" and targetSdkVersion="30", but the declared permissions include the new permissions in 31 and even the new permissions in 33, so I think it is...

Some conferences seem to have not been updated for a long time because no one cares about them. Do you consider adding crawlers and regularization to automate this process?

type/enhancement

是在一个漏洞案例里发现的,任意URL加载,即导出组件从外部获取Intent,并传入loadUrl() 攻击链:LoginActivity(导出) -> HomeActivity(非导出) -> ARouter(跳转) -> DemoWebActivity(非导出) ```java private void jumpByRouters(String url) { DemoWebBuilder.from() .setWebUrl(url) .start(); ``` ```java public DemoWebBuilder setWebUrl(String mWebUrl) { mBundle.putString(WebViewConst.BUNDLE_KEY.WEB_URL, mWebUrl); return this; } public...