agoago_2009的专栏

自不待言，你懂得： 1.http://zone.wooyun.org/content/2507#0-douban-1-3625-8281435cf7fd5566f1df466eda875057 2.http://security.tencent.com/index.php/blog/msg/10 3.警惕QQ链路层劫持盗取QQ帐号新手法

点击打开链接

一、安装ettercap要安装ettercap，需要先安装：1.libnet-1.1.2.1.tar.gz2.libpcap-1.0.0.tar.gz3.ettercap-NG-0.7.3.tar.gz4.更新gtk2： yum install curl-devel gtk2-devel boost-devel (不然报错Package requirements (gtk+-2

SQL注入实例：$unsafe_variable = $_POST['user_input']; mysql_query("INSERT INTO `table` (`column`) VALUES ('$unsafe_variable')");当的内容

Hijacking HTTP traffic on your home subnet using ARP and iptableshttps://blogs.oracle.com/ksplice/entry/hijacking_http_traffic_on_your

1.登陆机制：if(isset($_COOKIE["LoginState"]) && $_COOKIE["LoginState"]=='on'){ $state = 0; $_SESSION["login"] = "YES"; setcookie("LoginState", "on" ,time()+3600*3); //过期时间为3小时 echo "已经成功登陆！";}

1.https://baoz.net/fun-with-ettercap-filters/ 2.http://www.linuxexpert.ro/Security/sniff-ssl-passwords-with-ettercap.html 3.http://www.tech-juice.org/2011/06/20/man-in-the-middle-attacks-with-ette

详见：Hash碰撞导致的denial of service(一) Hash碰撞导致的denial of service（二） 利用：邪恶的JAVA HASH DOS攻击 Java构建HashCode相同字符串算法：http://ldbjakyo.iteye.com/blog/1340153

URL Hacking - 前端猥琐流:http://drops.wooyun.org/tips/750

1.http://support.citrix.com/article/CTX135121 2.http://www.backtrack-linux.org/forums/forum.php?s=7c1db433453d171daee8a92642bd62f8 3.http://wiki.wireshark.org/SSL

=======================================================使用的是标准的XMPP协议进行通信