<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[2401_83237906的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/2401_83237906</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; 2401_83237906]]></copyright><item><title><![CDATA[MSF编码器结合shellcode加载器实现免杀]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/144015249</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/144015249</guid><author>2401_83237906</author><pubDate>Sun, 24 Nov 2024 22:44:43 +0800</pubDate><description><![CDATA[所用环境：免杀技术简介： 免杀技术全称为反杀毒技术， Anti-Virus 简称“免杀”，指是一种能使病毒木马免于被杀毒软件查杀的技术。免杀技术的涉猎面广泛，其中包含反汇编、逆向工程、系统漏洞等技术，内容基本上都是修改病毒、木马的内容改变特征码，从而躲避了杀毒软件的查杀。这里介绍一个网站，这是一个免费的在线服务，它允许用户上传文件或提交网址，以检查它们是否包含恶意软件或其他潜在的安全威胁。VirusTotal 通过使用多种不同的病毒扫描引擎和安全工具来分析提交的文件或链接，从而提供更全面的检测结果。]]></description><category></category></item><item><title><![CDATA[数据库权限提升]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143941668</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143941668</guid><author>2401_83237906</author><pubDate>Sun, 24 Nov 2024 20:10:30 +0800</pubDate><description><![CDATA[DLL（动态链接库，Dynamic Link Library）是微软 Windows 操作系统中用于存储可执行代码和数据的文件格式。它允许不同的程序共享相同的代码和资源，以便更加高效地使用内存和其他计算机资源。]]></description><category></category></item><item><title><![CDATA[Linux提权实战]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143916687</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143916687</guid><author>2401_83237906</author><pubDate>Wed, 20 Nov 2024 17:48:49 +0800</pubDate><description><![CDATA[操作其实很简单：运行脚本创建了一个新的root用户;]]></description><category></category></item><item><title><![CDATA[Linux提权常用命令介绍]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143916051</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143916051</guid><author>2401_83237906</author><pubDate>Wed, 20 Nov 2024 16:04:45 +0800</pubDate><description><![CDATA[—可以用来寻找和获取 Linux 系统提权漏洞和漏洞利用代码（exploit）的在线资源和网站。]]></description><category></category></item><item><title><![CDATA[四大皆空好了]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143345120</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143345120</guid><author>2401_83237906</author><pubDate>Tue, 29 Oct 2024 19:43:51 +0800</pubDate><description><![CDATA[【代码】四大皆空好了。]]></description><category></category></item><item><title><![CDATA[漏洞扫描、命令执行绕过WAF]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143312823</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143312823</guid><author>2401_83237906</author><pubDate>Mon, 28 Oct 2024 22:01:54 +0800</pubDate><description><![CDATA[一被封就换IP；但这玩意要付费；]]></description><category></category></item><item><title><![CDATA[WAF绕过文件上传]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143310407</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143310407</guid><author>2401_83237906</author><pubDate>Mon, 28 Oct 2024 20:30:42 +0800</pubDate><description><![CDATA[waf绕过：对waf来说，不能像针对sql注入和xss一样能对文本进行分析，他只能从接收的数据包中分析；对数据包中的字符串去检测分析，所以那就基于这个绕过；（我是waf管理人员我会关注哪些呢？这也是作为攻击者要揣测的；就是waf基于什么进行的检测；直接上传。]]></description><category></category></item><item><title><![CDATA[BUUCTF [SUCTF 2019]EasySQL1 writeup]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143205163</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143205163</guid><author>2401_83237906</author><pubDate>Fri, 25 Oct 2024 11:16:25 +0800</pubDate><description><![CDATA[很简单的，但是注入条件十分有限，只有调用数据库的函数支持执行多条语句才能够使用，mysqli_multi_query()函数，大多开发人员不会用这个，往往开发用的是mysqli_query函数,只执行一条语句;然后我就想执行select * from Flag嘛，em，可是fuzz得到from关键字是被挡的；实现select *,1 from Flag执行，select **** from Flag不执行。相当于是select 1 from Flag和select flag from Flag。]]></description><category></category></item><item><title><![CDATA[CTF-WEB]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/143186977</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/143186977</guid><author>2401_83237906</author><pubDate>Wed, 23 Oct 2024 18:22:23 +0800</pubDate><description><![CDATA[页面回显正常，但是没有数据的时候要记得打开F12再看看，总之就是不要相信页面；]]></description><category></category></item><item><title><![CDATA[SQL绕waf（safedog）练习]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/142534096</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/142534096</guid><author>2401_83237906</author><pubDate>Thu, 26 Sep 2024 11:58:22 +0800</pubDate><description><![CDATA[concat_ws==>group_concat()                           group_concat(a,b)（列合并成行，行也合并）  concat_ws('分隔符',a,b)（列合并成行，行不合并)（1）普通注释绕过   （减减空格、右边有空格）-- (和#一样截断注释)，#,/**/, -- -                select/**/1;，就是盲注时候ascii函数被禁了，可以换等价函数咯，（（（（（所以对SQL语句越熟，越会sql绕过；]]></description><category></category></item><item><title><![CDATA[upload-labs打靶练习]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/137877684</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/137877684</guid><author>2401_83237906</author><pubDate>Thu, 18 Apr 2024 01:27:52 +0800</pubDate><description><![CDATA[文件上传漏洞练习]]></description><category></category></item><item><title><![CDATA[宽字节注入]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/137689429</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/137689429</guid><author>2401_83237906</author><pubDate>Fri, 12 Apr 2024 17:59:52 +0800</pubDate><description><![CDATA[删去27，那是前端对‘%’进行url编码得来的；还是不行，因为0 and 0当然就假了，想起来要用or了：正常回显欧了，接下来和联合注入一样了。]]></description><category></category></item><item><title><![CDATA[XSS漏洞（dvwa） 笔记]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/137685772</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/137685772</guid><author>2401_83237906</author><pubDate>Fri, 12 Apr 2024 17:41:40 +0800</pubDate><description><![CDATA[alert(2)]]></description><category></category></item><item><title><![CDATA[DVWA靶场SQL注入实测笔记（小白自查）-LOW SECURITY]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/137410731</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/137410731</guid><author>2401_83237906</author><pubDate>Sat, 06 Apr 2024 01:25:50 +0800</pubDate><description><![CDATA[所以联想到把0x7e换成database()是不是也能正常返回值，经过尝试，发现返回空，没报错都，所以这个0x7e不敢丢，直接加也不行，加逗号也不行（两个位置放3个参数），怎么合在一起，把两列变成一列？]]></description><category></category></item><item><title><![CDATA[渗透笔记1（DC-1）]]></title><link>https://blog.youkuaiyun.com/2401_83237906/article/details/137332278</link><guid>https://blog.youkuaiyun.com/2401_83237906/article/details/137332278</guid><author>2401_83237906</author><pubDate>Thu, 04 Apr 2024 18:47:32 +0800</pubDate><description><![CDATA[1.盲目的爆破浪费运存还没啥用；2.清楚此刻目标信息很重要：靶机ip,优先利用端口（我觉得80端口比22端口更优先探索）；3.网页查看版本，可利用漏洞版本最好不过；4.记得ls（ls -a）查看目录啊，别错过flag信息；5.不懂的英文和代码立刻问gpt，事半功倍；6.看到账号密码别急着爆破，说不好有别的方式got，就像这里可修改一样；结束。]]></description><category></category></item></channel></rss>