<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[AmeV_ll的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/AmeV_ll</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; AmeV_ll]]></copyright><item><title><![CDATA[如果有一条告警流量你会怎么分析，请详细说明？]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129916021</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129916021</guid><author>AmeV_ll</author><pubDate>Sun, 02 Apr 2023 20:06:28 +0800</pubDate><description><![CDATA[如果有一条告警流量你会怎么分析，请详细说明？？？]]></description><category></category></item><item><title><![CDATA[复现apache log4j2(CVE-2021-44228)漏洞]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129867080</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129867080</guid><author>AmeV_ll</author><pubDate>Thu, 30 Mar 2023 22:17:30 +0800</pubDate><description><![CDATA[JNDI (Java Naming and Directory Interface) 是一组应用程序接口，它为开发人员查找和访问各种资源提供了统一的通用接口，可以用来定位用户、网络、机器、对象和服务等各种资源。JNDI底层支持RMI远程对象，RMI注册的服务可以通过JNDI接口来访问和调用。JNDI接口在初始化时，可以将RMI URL作为参数传入，而JNDI注入就出现在客户端的lookup()函数中，如果lookup()的参数可控就可能被攻击，导致日志在记录用户输入地数据时，触发了注入漏洞，该漏洞可导致远程]]></description><category></category></item><item><title><![CDATA[复现shiro721漏洞]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129780430</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129780430</guid><author>AmeV_ll</author><pubDate>Sun, 26 Mar 2023 16:40:00 +0800</pubDate><description><![CDATA[Apache Shiro框架提供了（RememberMe），用户登录成功后会生成经过加密并编码的cookie，cookie的key为RememberMe，cookie的值是经过相关信息进行序列化，然后使用AES加密（对称），最后再使用Base64编码处理
服务端在接收cookie时：
1、检索RememberMe Cookie的值
2、Base64解码
3、AES解密（加密密钥硬编码）
4、进行反序列化操作（未过滤处理）
5、攻击者可以使用Shiro的默认密钥构造恶意序列化对象进行编码来伪造]]></description><category></category></item><item><title><![CDATA[复现vulhub mysql身份认证绕过漏洞]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129534879</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129534879</guid><author>AmeV_ll</author><pubDate>Tue, 14 Mar 2023 20:47:33 +0800</pubDate><description><![CDATA[当连接MariaDB/MySQL时，输入的密码会与期望的正确密码比较，由于不正确的处理，会导致即便是memcmp()返回一个非零值，也会使MySQL认为两个密码是相同的。也就是说只要知道用户名，不断尝试就能够直接登入SQL数据库。]]></description><category></category></item><item><title><![CDATA[docker 搭建 vulhub靶场]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129532923</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129532923</guid><author>AmeV_ll</author><pubDate>Tue, 14 Mar 2023 17:28:40 +0800</pubDate><description><![CDATA[Vulhub是一个基于docker和docker-compose的漏洞环境集合，进入对应目录并执行一条语句即可启动一个全新的漏洞环境，让漏洞复现变得更加简单，让安全研究者更加专注于漏洞原理本身。
官方地址：
Vulhub - Docker-Compose file for vulnerability environment
Vulhub的github地址：
GitHub - vulhub/vulhub: Pre-Built Vulnerable Environments Based on Docke]]></description><category></category></item><item><title><![CDATA[复现xss挑战之旅level 1-level 10]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129485009</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129485009</guid><author>AmeV_ll</author><pubDate>Mon, 13 Mar 2023 10:12:30 +0800</pubDate><description><![CDATA[1-10通关]]></description><category></category></item><item><title><![CDATA[使用docker搭建xss挑战之旅环境]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129484878</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129484878</guid><author>AmeV_ll</author><pubDate>Mon, 13 Mar 2023 09:13:57 +0800</pubDate><description><![CDATA[XSS，即跨站脚本攻击，是指攻击者利用Web服务器中的应用程序或代码漏洞，在页面中嵌入客户端脚本（通常是一段由JavaScript编写的恶意代码，少数情况下还有ActionScript、VBScript等语言），当信任此Web服务器的用户访问Web站点中含有恶意脚本代码的页面或打开收到的URL链接时，用户浏览器会自动加载并执行该恶意代码，从而达到攻击的目的。

当应用程序没有对用户提交的内容进行验证和重新编码，而是直接呈现给网站的访问者时，就可能会触发XSS攻击。]]></description><category></category></item><item><title><![CDATA[Ubuntu安装vim编译器]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129393119</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129393119</guid><author>AmeV_ll</author><pubDate>Tue, 07 Mar 2023 22:17:51 +0800</pubDate><description><![CDATA[vim编译器]]></description><category></category></item><item><title><![CDATA[使用docker搭建dvwa环境]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129317196</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129317196</guid><author>AmeV_ll</author><pubDate>Fri, 03 Mar 2023 11:51:21 +0800</pubDate><description><![CDATA[DVWA全称为Damn Vulnerable Web Application，意为存在糟糕漏洞的web应用。它是一个基于PHP/MySQL开发的存在糟糕漏洞的web应用，旨在为专业的安全人员提供一个合法的环境，来测试他们的工具和技能。]]></description><category></category></item><item><title><![CDATA[xshell连接Ubuntu]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129316583</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129316583</guid><author>AmeV_ll</author><pubDate>Fri, 03 Mar 2023 11:22:28 +0800</pubDate><description><![CDATA[Secure Shell(SSH) 是由 IETF(The Internet Engineering Task Force) 制定的建立在应用层基础上的安全网络协议。它是专为远程登录会话(甚至可以用Windows远程登录Linux服务器进行文件互传)和其他网络服务提供安全性的协议.]]></description><category></category></item><item><title><![CDATA[upload-labs靶场第一关——第九关]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129188735</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129188735</guid><author>AmeV_ll</author><pubDate>Thu, 23 Feb 2023 21:46:40 +0800</pubDate><description><![CDATA[Upload-Labs是一个使用PHP语言编写、专注于文件上传漏洞的闯关式网络安全靶场。练习该靶场可以有效地了解并掌握文件上传漏洞的原理、利用方法和修复方案。]]></description><category></category></item><item><title><![CDATA[复现Apache SSI 远程命令执行漏洞]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129118970</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129118970</guid><author>AmeV_ll</author><pubDate>Mon, 20 Feb 2023 10:00:53 +0800</pubDate><description><![CDATA[漏洞原理：
SSI就是在HTML文件中，可以通过注释行调用的命令或指针，即允许通过在HTML页面注入脚本或远程执行任意命令。
]]></description><category></category></item><item><title><![CDATA[怎么从phpstudy进入cmd下mysql]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129108176</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129108176</guid><author>AmeV_ll</author><pubDate>Sun, 19 Feb 2023 10:40:51 +0800</pubDate><description><![CDATA[MySQL]]></description><category></category></item><item><title><![CDATA[Unable to lock directory /var/lib/apt/lists/（解决）]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129057069</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129057069</guid><author>AmeV_ll</author><pubDate>Thu, 16 Feb 2023 11:09:36 +0800</pubDate><description><![CDATA[更新源时遇到问题及其解决方案]]></description><category></category></item><item><title><![CDATA[使用phpstudy搭建sqli-lab靶场]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129016076</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129016076</guid><author>AmeV_ll</author><pubDate>Mon, 13 Feb 2023 20:02:55 +0800</pubDate><description><![CDATA[靶场搭建]]></description><category></category></item><item><title><![CDATA[docker安装]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/129003202</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/129003202</guid><author>AmeV_ll</author><pubDate>Mon, 13 Feb 2023 12:20:06 +0800</pubDate><description><![CDATA[掌握Ubuntu搭建docker以及一些实用操作]]></description><category></category></item><item><title><![CDATA[配置kali的静态IP(nat模式下)，要求配置完后可上网。]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/128967960</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/128967960</guid><author>AmeV_ll</author><pubDate>Fri, 10 Feb 2023 12:34:04 +0800</pubDate><description><![CDATA[配置IP要根据对应的网络模式下对应的网络段进行配置，才能保证Kali与别的主机正常通信
桥接网络模式，需要先看一下宿主机的网络IP地址]]></description><category></category></item><item><title><![CDATA[Linux学习笔记]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/128890341</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/128890341</guid><author>AmeV_ll</author><pubDate>Sun, 05 Feb 2023 14:22:20 +0800</pubDate><description><![CDATA[关于一些Linux常用命令]]></description><category></category></item><item><title><![CDATA[510cms网站渗透测试]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/128754484</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/128754484</guid><author>AmeV_ll</author><pubDate>Mon, 23 Jan 2023 22:31:20 +0800</pubDate><description><![CDATA[利用漏洞进行攻击分为漏洞挖掘、漏洞分析和漏洞利用三个步骤。漏洞挖掘是其他两个步骤的前提和基础，所以对于网络的攻防具有重要的意义。漏洞挖掘，顾名思义就是寻找漏洞，主要是通过综合应用各种技术和工具，尽可能地找出软件中的潜在漏洞，然而这并非一件很容易的事情，在很大程度上依赖于个人经验。根据分析对象的不同，漏洞挖掘技术可以分为基于源码的漏洞挖掘技术和基于目标代码的漏洞挖掘技术。

]]></description><category></category></item><item><title><![CDATA[复现永恒之蓝漏洞（ms17-010）]]></title><link>https://blog.youkuaiyun.com/AmeV_ll/article/details/128699192</link><guid>https://blog.youkuaiyun.com/AmeV_ll/article/details/128699192</guid><author>AmeV_ll</author><pubDate>Sun, 15 Jan 2023 23:42:19 +0800</pubDate><description><![CDATA[永恒之蓝漏洞（MS17-010），它的爆发源于 WannaCry 勒索病毒的诞生，该病毒是不法分子利用NSA（National Security Agency，美国国家安全局）泄露的漏洞 “EternalBlue”（永恒之蓝）进行改造而成 。]]></description><category></category></item></channel></rss>