{"id":16912,"date":"2026-04-01T15:11:09","date_gmt":"2026-04-01T07:11:09","guid":{"rendered":"https:\/\/oneai.eu.org\/?p=16912"},"modified":"2026-04-01T15:11:09","modified_gmt":"2026-04-01T07:11:09","slug":"2026-suctf-pwn-%e6%96%b9%e5%90%91-writeup%ef%bc%9a%e5%a0%86%e6%ba%a2%e5%87%ba%e3%80%81%e5%86%85%e6%a0%b8-page-cache-%e7%af%a1%e6%94%b9%e4%b8%8e-v8-%e5%bc%95%e6%93%8e%e5%88%a9%e7%94%a8","status":"publish","type":"post","link":"https:\/\/oneai.eu.org\/?p=16912","title":{"rendered":"2026 SUCTF Pwn \u65b9\u5411 WriteUp\uff1a\u5806\u6ea2\u51fa\u3001\u5185\u6838 Page Cache \u7be1\u6539\u4e0e V8 \u5f15\u64ce\u5229\u7528"},"content":{"rendered":"<p>\u672c\u6587\u590d\u73b0 2026SUCTF \u56db\u9053\u9898\u76ee\uff0c\u6db5\u76d6 glibc 2.41 \u5806\u9898\u3001\u5185\u6838\u9a71\u52a8\u53ca V8 \u5f15\u64ce\u6f0f\u6d1e\u3002SU_minivfs \u5229\u7528 write \u51fd\u6570\u7684 off-by-null \u6c61\u67d3 chunk header\uff0c\u7ed3\u5408 House of Einherjar \u4e0e FSOP \u52ab\u6301\u63a7\u5236\u6d41\uff1bSU_Chronos_R<\/p>","protected":false},"excerpt":{"rendered":"<p>\u672c\u6587\u590d\u73b0 2026SUCTF \u56db\u9053\u9898\u76ee\uff0c\u6db5\u76d6 glibc 2.41 \u5806\u9898\u3001\u5185\u6838\u9a71\u52a8\u53ca V8 \u5f15\u64ce\u6f0f\u6d1e\u3002SU_minivfs \u5229\u7528 write \u51fd\u6570\u7684 off-by-null \u6c61\u67d3 chunk header\uff0c\u7ed3\u5408 House of Einherjar \u4e0e FSOP \u52ab\u6301\u63a7\u5236\u6d41\uff1bSU_Chronos_R<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","footnotes":""},"categories":[81,75],"tags":[],"class_list":["post-16912","post","type-post","status-publish","format-standard","hentry","category-81","category-news"],"_links":{"self":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/16912","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16912"}],"version-history":[{"count":0,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=\/wp\/v2\/posts\/16912\/revisions"}],"wp:attachment":[{"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16912"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16912"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oneai.eu.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16912"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}