<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[RealIiikun的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/RealIiikun</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; RealIiikun]]></copyright><item><title><![CDATA[XXE的学习记录以及ctfshow_XXE模块练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/130841146</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/130841146</guid><author>RealIiikun</author><pubDate>Wed, 24 May 2023 10:06:18 +0800</pubDate><description><![CDATA[XXE（XML External Entity）即XML外部实体攻击。DTD（文档类型定义）的作用是定义 XML 文档的合法构建模块。DTD 可以在 XML 文档内声明，也可以外部引用。1，内部声明： ex:> <!!!!!!> <]]></description><category></category></item><item><title><![CDATA[node.js的学习以及ctfshow_node.js模块的练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/130495073</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/130495073</guid><author>RealIiikun</author><pubDate>Thu, 04 May 2023 20:55:18 +0800</pubDate><description><![CDATA[Node.js是JavaScript语言的服务器运行环境个人理解就是可以将 javascript 作为后端语言运行的一个环境服务器 – 后端浏览器 – 前端。]]></description><category></category></item><item><title><![CDATA[node.js]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/130178925</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/130178925</guid><author>RealIiikun</author><pubDate>Sun, 16 Apr 2023 09:25:20 +0800</pubDate><description><![CDATA[原型链是实现。]]></description><category></category></item><item><title><![CDATA[sqlmap的学习使用记录]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/130019686</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/130019686</guid><author>RealIiikun</author><pubDate>Fri, 07 Apr 2023 20:13:20 +0800</pubDate><description><![CDATA[这篇文章写得好，看这篇。]]></description><category></category></item><item><title><![CDATA[ctfshow web系列]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/130019599</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/130019599</guid><author>RealIiikun</author><pubDate>Fri, 07 Apr 2023 20:10:36 +0800</pubDate><description><![CDATA[源代码要求v1为为字母，v2为数字，并且v1与v2的md5值相同md5漏洞介绍：PHP在处理字符串时，它把每一个以“0E”开头的哈希值都解释为0所以只要v1与v2的md5值以0E开头即可。常见的0e开头的MD5和原值QNKCDZO240610708。]]></description><category></category></item><item><title><![CDATA[sqlmap的学习使用记录]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/130019553</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/130019553</guid><author>RealIiikun</author><pubDate>Fri, 07 Apr 2023 20:01:48 +0800</pubDate><description><![CDATA[这篇文章写得好，看这篇。]]></description><category></category></item><item><title><![CDATA[XSS的相关学习以及相关靶场的练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129865370</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129865370</guid><author>RealIiikun</author><pubDate>Thu, 30 Mar 2023 20:05:27 +0800</pubDate><description><![CDATA[​		XSS（Cross Site Script）攻击，作为一种HTML注入攻击，XSS攻击的核心思想就是在HTML页面中注入恶意代码，而XSS采用的注入方式是非常巧妙的。在XSS攻击中，一般有三个角色参与：攻击者、目标服务器、受害者的浏览器。​		由于有的服务器并没有对用户的输入进行安全方面的验证，攻击者就可以很容易地通过正常的输入手段，夹带进一些恶意的HTML脚本代码。当受害者的浏览器访 问目标服务器上被注入恶意脚本的页面后，由于它对目标服务器的信任，这段恶意脚本的执行不会受到什么阻碍。]]></description><category></category></item><item><title><![CDATA[文件包含漏洞详解与ctfshow文件包含漏洞模块的练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129770861</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129770861</guid><author>RealIiikun</author><pubDate>Sat, 25 Mar 2023 19:03:27 +0800</pubDate><description><![CDATA[​		服务器执行PHP文件时，可以通过文件包含函数加载另一个文件中的PHP代码，并且当PHP来执行，这会为开发者节省大量的时间。这意味着您可以创建供所有网页引用的标准页眉或菜单文件。当页眉需要更新时，您只更新一个包含文件就可以了，或者当您向网站添加一张新页面时，仅仅需要修改一下菜单文件（而不是更新所有网页中的链接）。]]></description><category></category></item><item><title><![CDATA[反序列化的学习以及ctfsow_反序列化模块的练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129598537</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129598537</guid><author>RealIiikun</author><pubDate>Thu, 16 Mar 2023 20:41:27 +0800</pubDate><description><![CDATA[1.序列化：把对象转换为字节序列的过程，即把对象转换为可以存储或传输的数据的过程。例如将内存中的对象转换为二进制数据流或文件，在网络传输过程中，可以是字节或是XML等格式。2.反序列化：把字节序列恢复为对象的过程，即把可以存储或传输的数据转换为对象的过程。例如将二进制数据流或文件加载到内存中还原为对象。​		对象序列化成的字节序列会包含对象的类型信息、对象的数据等，说白了就是包含了描述这个对象的所有信息，能根据这些信息“复刻”出一个和原来一模一样的对象。]]></description><category></category></item><item><title><![CDATA[记录一次wifi图标消失，无法连接问题的解决方法（报错代码56）]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129478336</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129478336</guid><author>RealIiikun</author><pubDate>Sun, 12 Mar 2023 17:22:50 +0800</pubDate><description><![CDATA[wifi图标消失，报错代码56]]></description><category></category></item><item><title><![CDATA[CTFSHOW、SSTI模块]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129456542</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129456542</guid><author>RealIiikun</author><pubDate>Fri, 10 Mar 2023 23:39:09 +0800</pubDate><description><![CDATA[ctfshow_ssti模块]]></description><category></category></item><item><title><![CDATA[sql的学习以及sqli-lab靶场练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129389267</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129389267</guid><author>RealIiikun</author><pubDate>Tue, 07 Mar 2023 19:29:35 +0800</pubDate><description><![CDATA[sqlilab的靶场练习]]></description><category></category></item><item><title><![CDATA[dvwa靶场练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/129011006</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/129011006</guid><author>RealIiikun</author><pubDate>Mon, 13 Feb 2023 16:13:37 +0800</pubDate><description><![CDATA[dvwa个人练习]]></description><category></category></item><item><title><![CDATA[文件上传漏洞详解与upload靶场的练习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/127905700</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/127905700</guid><author>RealIiikun</author><pubDate>Sat, 19 Nov 2022 23:20:23 +0800</pubDate><description><![CDATA[文件上传漏洞与upload靶场的练习]]></description><category></category></item><item><title><![CDATA[php的相关学习]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/127904622</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/127904622</guid><author>RealIiikun</author><pubDate>Sat, 19 Nov 2022 23:19:07 +0800</pubDate><description><![CDATA[php的相关学习]]></description><category></category></item><item><title><![CDATA[计网学习记录，burp抓包等学习记录]]></title><link>https://blog.youkuaiyun.com/RealIiikun/article/details/127562584</link><guid>https://blog.youkuaiyun.com/RealIiikun/article/details/127562584</guid><author>RealIiikun</author><pubDate>Thu, 27 Oct 2022 23:40:12 +0800</pubDate><description><![CDATA[攻防实验室第一周任务学习收获]]></description><category></category></item></channel></rss>