<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[Yzz_的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/YINZHE_</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; YINZHE_]]></copyright><item><title><![CDATA[6、baijiacms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136462785</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136462785</guid><author>YINZHE_</author><pubDate>Mon, 04 Mar 2024 21:06:59 +0800</pubDate><description><![CDATA[【代码】6、baijiacms代码审计。]]></description><category></category></item><item><title><![CDATA[5、lxmcms1.40代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136462246</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136462246</guid><author>YINZHE_</author><pubDate>Mon, 04 Mar 2024 20:56:33 +0800</pubDate><description><![CDATA[同样跟踪到query会有报错语句回显。]]></description><category></category></item><item><title><![CDATA[4、通达OA代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136453257</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136453257</guid><author>YINZHE_</author><pubDate>Mon, 04 Mar 2024 15:31:34 +0800</pubDate><description><![CDATA[【代码】4、通达OA代码审计。]]></description><category></category></item><item><title><![CDATA[3、emlog_pro2.0代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136453036</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136453036</guid><author>YINZHE_</author><pubDate>Mon, 04 Mar 2024 15:08:28 +0800</pubDate><description><![CDATA[【代码】3、emlog_pro2.0代码审计。]]></description><category></category></item><item><title><![CDATA[2、Bluecms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136451932</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136451932</guid><author>YINZHE_</author><pubDate>Mon, 04 Mar 2024 14:58:58 +0800</pubDate><description><![CDATA[【代码】2、Bluecms代码审计。]]></description><category></category></item><item><title><![CDATA[1、EmlogCms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136445563</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136445563</guid><author>YINZHE_</author><pubDate>Mon, 04 Mar 2024 11:03:06 +0800</pubDate><description><![CDATA[【代码】1、EmlogCms代码审计。]]></description><category></category></item><item><title><![CDATA[9、taocms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136439370</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136439370</guid><author>YINZHE_</author><pubDate>Sun, 03 Mar 2024 22:32:17 +0800</pubDate><description><![CDATA[无。]]></description><category></category></item><item><title><![CDATA[8、IBOScms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136430760</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136430760</guid><author>YINZHE_</author><pubDate>Sun, 03 Mar 2024 14:01:23 +0800</pubDate><description><![CDATA[【代码】8、IBOScms代码审计。]]></description><category></category></item><item><title><![CDATA[7、Bluecms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136429672</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136429672</guid><author>YINZHE_</author><pubDate>Sun, 03 Mar 2024 13:45:12 +0800</pubDate><description><![CDATA[【代码】7、Bluecms代码审计。]]></description><category></category></item><item><title><![CDATA[6、wuzhicms代码审计]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136423033</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136423033</guid><author>YINZHE_</author><pubDate>Sat, 02 Mar 2024 22:20:16 +0800</pubDate><description><![CDATA[【代码】6、wuzhicms代码审计。]]></description><category></category></item><item><title><![CDATA[5、DVWA代码审计(2)]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136422164</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136422164</guid><author>YINZHE_</author><pubDate>Sat, 02 Mar 2024 21:31:27 +0800</pubDate><description><![CDATA[【代码】5、DVWA代码审计(2)]]></description><category></category></item><item><title><![CDATA[4、DVWA代码审计(1)]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136419820</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136419820</guid><author>YINZHE_</author><pubDate>Sat, 02 Mar 2024 18:29:26 +0800</pubDate><description><![CDATA[闭合单引号。]]></description><category></category></item><item><title><![CDATA[3、皮卡丘代码审计(3)]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136413437</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136413437</guid><author>YINZHE_</author><pubDate>Sat, 02 Mar 2024 13:32:32 +0800</pubDate><description><![CDATA[参考：https://blog.youkuaiyun.com/weixin_45663905/article/details/108026223。]]></description><category></category></item><item><title><![CDATA[2、皮卡丘代码审计(2)]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136413225</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136413225</guid><author>YINZHE_</author><pubDate>Sat, 02 Mar 2024 12:35:14 +0800</pubDate><description><![CDATA[【代码】2、皮卡丘代码审计(2)]]></description><category></category></item><item><title><![CDATA[1、皮卡丘代码审计(1)]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/136412074</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/136412074</guid><author>YINZHE_</author><pubDate>Sat, 02 Mar 2024 12:11:58 +0800</pubDate><description><![CDATA[message不能为空。]]></description><category></category></item><item><title><![CDATA[Mysql数据库笔记（4）]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/121594409</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/121594409</guid><author>YINZHE_</author><pubDate>Sun, 28 Nov 2021 17:20:18 +0800</pubDate><description><![CDATA[表的创建（建表）
建表的语法格式：（建表属于DDL语句，DDL包括：oreate drop alter）

create table 表名（
字段名1 数据类型，
字段名2 数据类型，
字段名3 数据类型
）；

表名：建议以t_或者tbl_开始，可读性强。
字段名：见名之意

关于mysql中的数据类型
很多数据类型，我们只需要掌握一些常见的数据类型即可。

	varchar(最长255)
		可变长度的字符串
		比较只能，节省空间
		会根据实际的数据长度动态分配空间
		
		优点：节省空间
		缺]]></description><category></category></item><item><title><![CDATA[Mysql数据库笔记（3）]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/121594287</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/121594287</guid><author>YINZHE_</author><pubDate>Sun, 28 Nov 2021 17:16:55 +0800</pubDate><description><![CDATA[子查询
select 语句中嵌套select语句，被嵌套的语句称为子查询。
子查询都可以出现在哪里？
select
	...(select)
from 
	...(select)
where
	...(select)



where语句中的子查询


  案例：找出比最低工资搞得员工姓名和工资？
  select
  	ename,sal
  from 
  	emp
  where 
  	sal &gt; min(sal);   //会报错

where子句中不能直接使用分组函数
  实现思路：
  ]]></description><category></category></item><item><title><![CDATA[Mysql数据库笔记（2）]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/121594165</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/121594165</guid><author>YINZHE_</author><pubDate>Sun, 28 Nov 2021 17:09:58 +0800</pubDate><description><![CDATA[分组函数：（多行处理函数）
多行处理函数的特点：输入多行，最终输出一行
5个:
	count  计数		  select count(ename)from emp;统计员工数量
	sum	   求和		  select sum(sal)from emp;计算工资和
	avg	   平均值	  select avg(sal)from emp;计算平均工资
	max	   最大值     select max(sal)from emp;找出最高工资
	min    最小值	  select min(sal)fr]]></description><category></category></item><item><title><![CDATA[Mysql数据库笔记（1）]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/121593907</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/121593907</guid><author>YINZHE_</author><pubDate>Sun, 28 Nov 2021 17:03:57 +0800</pubDate><description><![CDATA[**~什么是数据库，什么是数据库管理系统，什么是sql，他们之间的关系是什么**

**数据库**：
英文单词database,简称DB .   按照一定格式存储数据的一些文件的组合。
顾名思义：存储数据的仓库，实际上就是一堆文件。这些文件中存储了具有特定格式的数据。

**数据库管理系统：**
databasemanagement,简称dbms
数据库管理系统是专门用来管理数据库中的数据的，数据库管理系统可以对数据库当中的数据进行增删改查。

常见的数据库管理系统统：Mysql 、oracle、ms、sq]]></description><category></category></item><item><title><![CDATA[App]]></title><link>https://blog.youkuaiyun.com/YINZHE_/article/details/109443916</link><guid>https://blog.youkuaiyun.com/YINZHE_/article/details/109443916</guid><author>YINZHE_</author><pubDate>Mon, 02 Nov 2020 10:27:58 +0800</pubDate><description><![CDATA[app渗透测试原理
 （app渗透测试和web渗透测试基本没有区别）在项目中90%是没有源码的
其实只要web存在得漏洞，app也都存在，比如：sql注入、验证码绕过、越权、支付漏洞、csrf、变量覆盖、反序列化、文件包含、ssrf、xxe、文件上传等。那么渗透测试的核心就是控制传参（把控传参），只有传参了，产生交互了，才可以把网站渗透测试下来。
app实际上的交互是什么，跟app交互的还是服务器，用的还是http协议。&gt;&gt;&gt;app&gt;网站
正常网站的交互是浏览器到网站 &gt;&gt]]></description><category></category></item></channel></rss>