Solutions for Security Challenges in the 2025御网杯 Competition

The article describes solutions for security challenges in the 2025御网杯 competition, including categories such as misc, crypto, and web. For the WebYWB_Web_xff challenge, it is necessary to modify the IP address to connect, which can be achieved using a plugin to change the IP. For the YWB_Web_未授权访问 challenge, packet capture and URL decoding are required to identify serialized data. By changing the last value from 0 to 1, it is possible to bypass access restrictions. The serialization format is O:5:"Admin":2:{s:4:"name";s:5:"admin";s:7:"isAdmin";b:0;}.