<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Massimo__JAVA的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/Massimo__JAVA</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; Massimo__JAVA]]></copyright><item><title><![CDATA[RCE(远程命令/代码执行)]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/132091050</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/132091050</guid><author>Massimo__JAVA</author><pubDate>Fri, 04 Aug 2023 13:54:54 +0800</pubDate><description><![CDATA[系统对用户输入的参数过滤不严，导致用户可以输入&、|、||等命令连接符，拼接并执行命令。]]></description><category></category></item><item><title><![CDATA[log4j漏洞复现]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/132059842</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/132059842</guid><author>Massimo__JAVA</author><pubDate>Thu, 03 Aug 2023 15:34:49 +0800</pubDate><description><![CDATA[Log4j是由Apache提供的日志操作包，用于帮助用户处理日志信息。通过Log4j，可以控制日志信息输送的目的地是控制台、文件、GUI组件、甚至是套接口服务器等各种地方。]]></description><category></category></item><item><title><![CDATA[Fastjson反序列化漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131744042</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131744042</guid><author>Massimo__JAVA</author><pubDate>Sun, 16 Jul 2023 20:43:50 +0800</pubDate><description><![CDATA[Fastjson是一款广泛应用于Java开发的JSON解析库，它提供了高效、方便、安全的序列化和反序列化功能。通过对Fastjson漏洞的研究，发现在其默认配置下，Fastjson存在高危漏洞，攻击者可以利用该漏洞执行任意代码，从而实现远程代码执行攻击。]]></description><category></category></item><item><title><![CDATA[JBoss反序列化]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131743795</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131743795</guid><author>Massimo__JAVA</author><pubDate>Sat, 15 Jul 2023 20:48:02 +0800</pubDate><description><![CDATA[jBoss是一个基于J2EE的开发源代码的应用服务器。JBoss代码遵循LGPL许可， 可以在任何商业应用中免费使用。JBoss是一个管理EJB的容器和服务器，支持EJB1.1、 EJB 2.0和EJB3的规范。但JBoss核心服务不包括支持servlet/JSP的WEB容器,一般与Tomcat或Jetty绑定使用。]]></description><category></category></item><item><title><![CDATA[Struts2命令执行]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131731465</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131731465</guid><author>Massimo__JAVA</author><pubDate>Sat, 15 Jul 2023 20:27:28 +0800</pubDate><description><![CDATA[Struts2是一个基于MVC设计模式的JavaWeb应用框架，是在Struts和WebWork的技术的基础上进行合并的全新框架。]]></description><category></category></item><item><title><![CDATA[Shiro反序列化]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131641923</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131641923</guid><author>Massimo__JAVA</author><pubDate>Fri, 14 Jul 2023 21:03:59 +0800</pubDate><description><![CDATA[Shiro是一套用于执行认证、授权、加密和会话管理的Java安全框架。]]></description><category></category></item><item><title><![CDATA[ThinkPHP代码执行漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131494360</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/131494360</guid><author>Massimo__JAVA</author><pubDate>Sat, 01 Jul 2023 21:29:01 +0800</pubDate><description><![CDATA[特征：被检测系统报错页面出现“十年磨一剑-为API开发设计的高性能框架”，则判定该系统使用ThinkPHP5开发。]]></description><category></category></item><item><title><![CDATA[WebLogic反序列化漏洞&SSRF漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130753480</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130753480</guid><author>Massimo__JAVA</author><pubDate>Fri, 19 May 2023 19:32:42 +0800</pubDate><description><![CDATA[1）、特征在被检测应用系统url后随机添加字符串，出现的404页面如下：说明被检测系统的中间件为WebLogic2）、利用启动环境访问AsyncResponseService说明存在漏洞kali开启监听抓取访问AsyncResponseService 的数据包，发送到重发模块，并替换如下出现202说明发送成功成功反弹shell。]]></description><category></category></item><item><title><![CDATA[渗透测试之逻辑漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130494960</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130494960</guid><author>Massimo__JAVA</author><pubDate>Thu, 18 May 2023 18:54:55 +0800</pubDate><description><![CDATA[业务没有按正常逻辑而出现的漏洞核心：绕过真实用户身份或正常业务流程达到预期的目的。]]></description><category></category></item><item><title><![CDATA[SQL注入]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130456605</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130456605</guid><author>Massimo__JAVA</author><pubDate>Wed, 03 May 2023 22:21:57 +0800</pubDate><description><![CDATA[SQL注入漏洞是一种常见的网络攻击方式，攻击者通过构造恶意的SQL语句来执行未经授权的操作，如非法查询、修改或删除数据。]]></description><category></category></item><item><title><![CDATA[文件包含漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130443093</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130443093</guid><author>Massimo__JAVA</author><pubDate>Mon, 01 May 2023 15:51:20 +0800</pubDate><description><![CDATA[程序开发人员通常出于灵活性的考虑，会将被包含的文件设置成变量，然后动态调用这些文件。但正是因为调用的灵活性导致用户可能调用一些恶意文件，造成文件包含漏洞。]]></description><category></category></item><item><title><![CDATA[文件上传漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130416298</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130416298</guid><author>Massimo__JAVA</author><pubDate>Sat, 29 Apr 2023 11:07:19 +0800</pubDate><description><![CDATA[文件上传漏洞是Web应用程序中有一个安全漏洞点，攻击者可以利用这一漏洞上传一个包含恶意代码的文件到服务器上，然后通过执行该文件来攻击服务器端应用程序。]]></description><category></category></item><item><title><![CDATA[反弹shell]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130394007</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130394007</guid><author>Massimo__JAVA</author><pubDate>Thu, 27 Apr 2023 22:02:09 +0800</pubDate><description><![CDATA[环境：攻击者kali：192.168.116.128受害者centos：192.168.116.95kali监听本地7777端口目标机执行反弹shell命令命令解释为：将目标主机的bash shell以-i交互式的方式，标准输出+错误输出重定向到192.168.116.128:7777，而在192.168.116.128:7777的标准输入命令会重定向到192.168.116.128:7777的标准输出中简言而知，就是将目标主机的标准输入、标准输出、错误输出全都重定向到攻击端上。]]></description><category></category></item><item><title><![CDATA[命令注入漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130393285</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130393285</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 20:06:49 +0800</pubDate><description><![CDATA[命令注入漏洞是一种常见的Web安全漏洞，也被称为OS命令注入漏洞。它允许攻击者在应用程序中执行恶意的操作，从而可能导致服务器上的数据和系统被未经授权的访问和修改。]]></description><category></category></item><item><title><![CDATA[SSRF漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130392728</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130392728</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 19:29:25 +0800</pubDate><description><![CDATA[SSRF（Server-side Request Forgery：服务器端请求伪造）它可以让攻击者在攻击者无法直接访问的网络资源上执行非法操作，例如向内部系统发起远程请求，从而可能导致敏感数据泄露或服务被滥用等风险。攻击者可以通过构造恶意请求来欺骗服务器执行不安全的操作，例如：访问内部网络设备的管理界面；向内部系统发起远程请求；扫描内部网络；发起攻击性的端口扫描等行为。]]></description><category></category></item><item><title><![CDATA[XXE漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130385386</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130385386</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 17:22:01 +0800</pubDate><description><![CDATA[XXE漏洞全称XML External Entity Injection，即xml外部实体注入漏洞，XXE漏洞发生在应用程序解析XML输入时，没有禁止外部实体的加载，导致可加载恶意外部文件，造成文件读取、命令执行、内网端口扫描、攻击内网网站等危害。]]></description><category></category></item><item><title><![CDATA[CSRF漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130384476</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130384476</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 14:24:10 +0800</pubDate><description><![CDATA[CSRF（Cross-site request forgery）跨站请求伪造，是一种对网站的恶意利用。与XSS不同，XSS利用站点内的信任用户，而CSRF则通过伪装用户的请求来利用网站。]]></description><category></category></item><item><title><![CDATA[XSS漏洞]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130380910</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130380910</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 13:32:16 +0800</pubDate><description><![CDATA[XSS又叫CSS（Cross Site Script），跨站脚本攻击。因与html中的css样式重名，所以称之为XSS。]]></description><category></category></item><item><title><![CDATA[WebShell]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130379957</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130379957</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 10:13:12 +0800</pubDate><description><![CDATA[与shell_exec功能相同，执行shell命令并返回输出的字符串，可以达到system()一样的效果。第二个参数为可选参数，代表完整的返回结果，功能为把结果逐行追加到array的结尾处；该函数只调用命令，不返回任何结果，但会将结果原样直接输出到设备上；第二个为可选参数，为命令执行后的状态码，0代表成功，1代表失败；与system()类似，但不输出结果，而是返回结果的最后一行；第三个参数为执行命令的状态码，0代表成功，1代表失败。第二个参数为命令执行的状态码。第一个参数为给定执行的命令；]]></description><category></category></item><item><title><![CDATA[Windows隐藏用户]]></title><link>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130378785</link><guid>https://blog.youkuaiyun.com/Massimo__JAVA/article/details/130378785</guid><author>Massimo__JAVA</author><pubDate>Wed, 26 Apr 2023 09:54:10 +0800</pubDate><description><![CDATA[环境：win7
打开本地组策略编辑器：cmd+gpedit.msc
密码策略：
交互式登录设置：
图形化打开：控制面板------》所有控制面板项（设置小图标）-------》管理工具---------》本地安全策略命令打开：cmd+secpol.msc1）查看用户
net user
2)创建用户test$  密码123456
加了$符后，再执行net user 就看不到所创建的用户了net user test$ 123456 /add
3)但是图形化查看用户还是能够看到
4）打开注册表
cmd+reged]]></description><category></category></item></channel></rss>