<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[追风少年亚索的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/fatherddd</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; fatherddd]]></copyright><item><title><![CDATA[powershell技术]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/145831758</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/145831758</guid><author>fatherddd</author><pubDate>Mon, 24 Mar 2025 11:01:12 +0800</pubDate><description><![CDATA[一旦攻击者可以在计算机上运行代码，就会下载powershell脚本文件到磁盘中执行，甚至无须写到磁盘中执行，直接在内存中运行，利用这些特点，攻击者可以持续攻击。为什么要学习powershellwindows的GUI有明显的优点和缺点，GUI给用户带来了操作上的编译，但是给系统管理员带来繁琐的操作步骤，比如修改Windows系统的登录密码，需要依次单击控制面板-用户账号-修改密码等一系列选项，如果需要修改100台PC，将耗费大量时间。]]></description><category></category></item><item><title><![CDATA[Metasploit技术]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/144546329</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/144546329</guid><author>fatherddd</author><pubDate>Wed, 05 Mar 2025 08:49:07 +0800</pubDate><description><![CDATA[Metasploit由著名黑客H.D.moore开发，后被Rapid7收购，继续开源。特点：1.简单易用，可安装在Windows、Linux、Macos等不同操作系统中2.漏洞库全面3.开源免费4.模块化设计：1.Auxiliaries（辅助信息收集模块）用于信息收集，能够执行漏洞扫描、数据嗅探、指纹识别等2.Exploit（漏洞利用模块）]]></description><category></category></item><item><title><![CDATA[内存取证1]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/144266957</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/144266957</guid><author>fatherddd</author><pubDate>Wed, 11 Dec 2024 20:58:47 +0800</pubDate><description><![CDATA[总结一下CTF中misc的内存取证，总结一下MemProcFS和Volatility2、3和lovelymen和Mangnet AXIOM等工具的使用，将来会总结一下检材的工具]]></description><category></category></item><item><title><![CDATA[md5绕过]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/144208051</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/144208051</guid><author>fatherddd</author><pubDate>Wed, 04 Dec 2024 22:35:29 +0800</pubDate><description><![CDATA[介绍ctf中md5绕过方式]]></description><category></category></item><item><title><![CDATA[vulhub之fastjson]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143902991</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143902991</guid><author>fatherddd</author><pubDate>Thu, 21 Nov 2024 23:32:02 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[vulhub之nacos]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143866237</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143866237</guid><author>fatherddd</author><pubDate>Wed, 20 Nov 2024 09:16:35 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[vulhub之log4j]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143830982</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143830982</guid><author>fatherddd</author><pubDate>Mon, 18 Nov 2024 16:00:55 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[vulhub之shiro]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143573832</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143573832</guid><author>fatherddd</author><pubDate>Sun, 17 Nov 2024 13:05:57 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[vulhub之zabbix]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143498695</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143498695</guid><author>fatherddd</author><pubDate>Wed, 06 Nov 2024 10:46:36 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[vulhub之phpmyadmin]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143426580</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143426580</guid><author>fatherddd</author><pubDate>Mon, 04 Nov 2024 21:11:21 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[vulhub之Spring篇]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143354825</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143354825</guid><author>fatherddd</author><pubDate>Fri, 01 Nov 2024 10:24:40 +0800</pubDate><description><![CDATA[免责声明： 本人所有文章均为技术分享，均用于防御为目的的记录，所有操作均在实验环境下进行，请勿用于其他用途，否则后果自负。]]></description><category></category></item><item><title><![CDATA[[极客大挑战 2019]FinalSQL]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/143333925</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/143333925</guid><author>fatherddd</author><pubDate>Tue, 29 Oct 2024 20:19:52 +0800</pubDate><description><![CDATA[试了很长时间发现注入点不在这里，看见了题目提示，选择正确的神秘代码即可获得flag，出现了id的注入点，重新FUZZ一下，发现单双引号是没有被过滤的，and被过滤了or没有被过滤，输入单引号出现Error，输入1^0出现NO!#payload="''or(ascii(substr(database(),%d,1))>%d)"%(i,tmp) #第一个%d对于的i，第二个%d对应的tmp，的值回到32，这意味着我们到达了字符范围的开始，这通常表示我们已经找到了完整的字符串，因此退出循环。]]></description><category></category></item><item><title><![CDATA[Windows和Linux等保加固测评（2）]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/139075820</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/139075820</guid><author>fatherddd</author><pubDate>Tue, 29 Oct 2024 09:31:33 +0800</pubDate><description><![CDATA[本文以等保2.0为标准，三级等保要求，centos7.6.1810系统为例进行演示。]]></description><category></category></item><item><title><![CDATA[redis未授权访问]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/140195034</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/140195034</guid><author>fatherddd</author><pubDate>Tue, 22 Oct 2024 20:32:48 +0800</pubDate><description><![CDATA[Redis 是一个高性能的key-value数据库。redis的出现，很大程度补偿了memcached这类key/value存储的不足。Redis支持主从同步。数据可以从主服务器向任意数量的从服务器上同步，从服务器可以是关联其他从服务器的主服务器。这使得Redis可执行单层树复制。存盘可以有意无意的对数据进行写操作。由于完全实现了发布/订阅机制，使得从数据库在任何地方同步树时，可订阅一个频道并接收主服务器完整的消息发布记录。同步对读取操作的可扩展性和数据冗余很有帮助。]]></description><category></category></item><item><title><![CDATA[Windows和Linux等保加固测评（1）]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/138865151</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/138865151</guid><author>fatherddd</author><pubDate>Sun, 19 May 2024 13:20:43 +0800</pubDate><description><![CDATA[磁盘分区与选择Windows安装位置选中。]]></description><category></category></item><item><title><![CDATA[【THM】Windows Privilege Escalation（Windows权限提升）-初级渗透测试]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/138091763</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/138091763</guid><author>fatherddd</author><pubDate>Wed, 24 Apr 2024 11:58:12 +0800</pubDate><description><![CDATA[撰写本文目的仅仅提供个人查看笔记用途，大家可以去官网查看，都一样的]]></description><category></category></item><item><title><![CDATA[【THM】Linux Privilege Escalation（权限提升）-初级渗透测试]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/137654925</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/137654925</guid><author>fatherddd</author><pubDate>Mon, 22 Apr 2024 20:44:41 +0800</pubDate><description><![CDATA[撰写本文目的仅仅提供个人查看笔记用途，大家可以去官网查看，都一样的]]></description><category></category></item><item><title><![CDATA[【THM】What the Shell?（什么是壳？）-初级渗透测试]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/137598082</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/137598082</guid><author>fatherddd</author><pubDate>Thu, 11 Apr 2024 21:47:58 +0800</pubDate><description><![CDATA[撰写本文目的仅仅提供个人查看笔记用途，大家可以去官网查看，都一样的]]></description><category></category></item><item><title><![CDATA[【THM】Metasploit：Meterpreter-初级渗透测试]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/137516563</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/137516563</guid><author>fatherddd</author><pubDate>Wed, 10 Apr 2024 16:46:45 +0800</pubDate><description><![CDATA[撰写本文目的仅仅提供个人查看笔记用途，大家可以去官网查看，都一样的]]></description><category></category></item><item><title><![CDATA[【THM】Metasploit: Exploitation（利用）-初级渗透测试]]></title><link>https://blog.youkuaiyun.com/fatherddd/article/details/137469695</link><guid>https://blog.youkuaiyun.com/fatherddd/article/details/137469695</guid><author>fatherddd</author><pubDate>Mon, 08 Apr 2024 17:11:09 +0800</pubDate><description><![CDATA[撰写本文目的仅仅提供个人查看笔记用途，大家可以去官网查看，都一样的
]]></description><category></category></item></channel></rss>