我如何发现ucweb.com的两个XSS

Track-SSG   ·   发表于 2018-12-05 10:58:23   ·   漏洞文章
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

打赏我,让我更有动力~

1 条回复   |  直到 2020-4-15 | 1653 次浏览

夜羽
发表于 2020-4-15

PHA+5oSf6LCi5YiG5LqrPC9wPg==

评论列表

  • 加载数据中...

编写评论内容
登录后才可发表内容
返回顶部 投诉反馈

© 2016 - 2025 掌控者 All Rights Reserved.