Starr

文章目录1. 信息搜集主机发现端口扫描目录扫描2. Exploitftp/sshhttp提权文章目录1. 信息搜集主机发现端口扫描目录扫描2. Exploitftp/sshhttp提权靶场地址：https://www.vulnhub.com/entry/ch4inrulz-101,247/1. 信息搜集主机发现arp-scan10.10.10.167 00:0c:29:c5:a1:1a VMware, Inc.端口扫描sudo nmap -Pn -O -sV 10.10.

文章目录@[toc]Binary Exploitation1. Registers2. The Stack2.1 Uses3. Calling Conventions3.1 cdecl3.2 SysV3.3 other conventions4. Global Offset Table (GOT)4.1 PLT5. Buffers5.1 Buffer OverflowPassing an imp...

Reverse Engineering文章目录Reverse Engineering1. Assembly / Machine Code1.1 From Source to Compilation1.2 x86-641.2.1 x86-64 Registers1.2.2 Instructions1.2.3 Execution1.2.4 Examples1.2.5 Example Ex...

Web Exploitation文章目录Web Exploitation1. SQL Injection2. Command InjectionExample Payloads3. Directory Traversal4. Cross Site Request ForgeryUsing CSRF5. Cross Site ScriptingReflected XSSStored XSSDOM ...