Web 安全与 CTF 方向的个人博客，记录复现、踩坑与思考。https://tangjin.xyz/https://tangjin.xyz/posts/2026-10-12-iscc%E8%B4%A6%E5%8F%B7%E5%9B%9E%E5%A4%8D%E5%A4%A7%E5%86%92%E9%99%A9wp/https://tangjin.xyz/posts/2026-10-12-iscc%E8%B4%A6%E5%8F%B7%E5%9B%9E%E5%A4%8D%E5%A4%A7%E5%86%92%E9%99%A9wp/脚本是ai的Mon, 12 Oct 2026 06:35:30 GMThttps://tangjin.xyz/posts/2026-10-10-%E6%88%90%E5%8A%9F%E4%B8%8A%E4%BC%A0webshell-%E5%90%8E%E4%BD%BF%E7%94%A8msf%E6%8F%90%E6%9D%83%E7%9A%84%E4%B8%80%E8%88%AC%E6%96%B9%E6%B3%95%E4%B8%80/https://tangjin.xyz/posts/2026-10-10-%E6%88%90%E5%8A%9F%E4%B8%8A%E4%BC%A0webshell-%E5%90%8E%E4%BD%BF%E7%94%A8msf%E6%8F%90%E6%9D%83%E7%9A%84%E4%B8%80%E8%88%AC%E6%96%B9%E6%B3%95%E4%B8%80/Sat, 10 Oct 2026 15:22:45 GMThttps://tangjin.xyz/posts/2026-10-09-jwt%E7%9A%84%E6%94%BB%E5%87%BB%E6%96%B9%E6%B3%95/https://tangjin.xyz/posts/2026-10-09-jwt%E7%9A%84%E6%94%BB%E5%87%BB%E6%96%B9%E6%B3%95/JWT（JSON Web Token） 是一种广泛用于身份认证和授权的技术，但其安全性可能因配置不当或实现漏洞而受到威胁。以下是关于 JWT常见攻击方法的说明。Fri, 09 Oct 2026 05:08:39 GMT