Fastjson 1.x 终局之战：CVE-2026-16723 无 Gadget RCE 深度分析
fastjson 1.2.68–1.2.83 全线沦陷：无需开启 AutoType、无需 classpath gadget，默认配置即可远程代码执行。本文从 checkAutoType 的资源探测缺陷出发，完整拆解 @JSONType 信任绕过与 /proc/self/fd 攻击链，并给出可落地的修复方案。
Sh3nL1n's Blog Halo , Welcome to Sh3nL1n's Blog
Litos is a clean and modern Astro blog theme focused on content presentation and reading experience. More than just a blog, it's a personal space to showcase your skills, projects, and life.
Built with Tailwind CSS for elegant responsive design and React components for smooth interactions. Features light/dark theme switching, multiple article layouts, GitHub contribution charts, and more. Inspired by @needim, redesigned by @神林 based on Astro.
Spotlight
GitHub contributions in the past year:
Skills
It's not just skills, but also tools:
Posts
Recent 2 posts, worth a look.