<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[f1gure的博客]]></title><description><![CDATA[技术爱好者]]></description><link>https://blog.youkuaiyun.com/kali3426</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; kali3426]]></copyright><item><title><![CDATA[security+备考经验]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/81456004</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/81456004</guid><author>kali3426</author><pubDate>Mon, 06 Aug 2018 16:09:33 +0800</pubDate><description><![CDATA[经过一个月的艰苦奋斗，终于将security+拿到手，这门考试涉及面颇广，却都点到为止，但是对于了解安全整个行业的涉及面起到很大的作用。经过这次复习备考，我在巩固了渗透基础知识的同时，还掌握了企业中的安全产品实践、企业安全建设管理和密码学的知识，也算是“不虚此行”。下面分享一下我的备考经验，希望对后面的学员起到一些帮助。
   
  首先，每次的直播课最好不要落，在听课前把这节课要上的内容先看一遍...]]></description><category></category></item><item><title><![CDATA[windows后门]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80910130</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80910130</guid><author>kali3426</author><pubDate>Wed, 04 Jul 2018 11:42:52 +0800</pubDate><description><![CDATA[1、打开记事本，输入下列文本：Windows Registry Editor Version 5.00[HKEY_CLASSES_ROOT\*\shell\runas]@=&quot;获取权限&quot;&quot;NoWorkingDirectory&quot;=&quot;&quot;[HKEY_CLASSES_ROOT\*\shell\runas\command]@=&quot;cmd.exe /c takeown /f \&quot;%1\&quot; &amp;amp;&amp;amp; i...]]></description><category></category></item><item><title><![CDATA[iscc中的一道misc隐写杂项题WP]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80316328</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80316328</guid><author>kali3426</author><pubDate>Mon, 14 May 2018 22:29:30 +0800</pubDate><description><![CDATA[下载附件发现是个zip，里面还有个flag.txt，打开需要密码，看完题目，猜测是zip伪加密。 Zip文件由压缩源文件数据区、压缩源文件目录区、压缩源文件目录结束标志构成数据区：目录区：结束标志区：把zip丢进winhex：数据区的全局方式位标记和目录区的全局方式位标记都遭到修改，把它修改回00 00：保存。 Flag.txt直接打开了，发现里面有个字符串：“vfppjrnerpbzva”猜测是...]]></description><category></category></item><item><title><![CDATA[破解wifi并实施中间人攻击]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80297491</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80297491</guid><author>kali3426</author><pubDate>Sun, 13 May 2018 23:23:32 +0800</pubDate><description><![CDATA[无线安全小组给的任务，自己搭实验环境完成一下~首先搭建环境，没有路由器就用手机热点装一下嘿嘿，设个密码zxcvbnm4567.     然后用win10主机做受害者，kali虚拟机做攻击者。   首先开始破解wifi，破解wifi呢有很多种方法：1.抓取握手包，用字典穷举破解，玄学破解法，要看字典强度和运气2.如果wifi开启了wps功能，可以穷举pin码的方式破解，成功率很高，但是很费时间！3....]]></description><category></category></item><item><title><![CDATA[绕waf技巧之sql注入]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80287108</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80287108</guid><author>kali3426</author><pubDate>Sat, 12 May 2018 12:38:16 +0800</pubDate><description><![CDATA[waf，全名web application firewall，名为web应用防火墙，其实就是市面上的狗、锁、盾、神、宝等等。。可以保护主机、监控流量等。]]></description><category></category></item><item><title><![CDATA[zip密码爆破脚本-----python3]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80232933</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80232933</guid><author>kali3426</author><pubDate>Mon, 07 May 2018 22:49:42 +0800</pubDate><description><![CDATA[import zipfile
from threading import Thread
def extractFile(filename, password):
    try:
        filename.extractall(pwd=password.encode('utf-8'))
        print(&quot;密码找到，是：&quot;+password)
    except:
      ...]]></description><category></category></item><item><title><![CDATA[玄魂培训第一期ctf题实战]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80142262</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80142262</guid><author>kali3426</author><pubDate>Sun, 29 Apr 2018 12:15:56 +0800</pubDate><description><![CDATA[IP：10.9.0.201 先上nmap：PORT  STATE SERVICE22/tcp  open   ssh3306/tcp  open mysql7777/tcp  open cbt8888/tcp  open sun-answerbookMAC Address: 00:FF:18:CA:FB:2E (Unknown)Device type: bridge|general purpose...]]></description><category></category></item><item><title><![CDATA[源IP隐藏后的寻找方法]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80087203</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80087203</guid><author>kali3426</author><pubDate>Wed, 25 Apr 2018 22:59:37 +0800</pubDate><description><![CDATA[        国内网址ip会有cdn服务加速节点混淆源ip。也可能有盾机服务，让虚假ip映射到真实ip上，让你在信息收集阶段得到虚假ip，毫无疑问对渗透造成了很大的影响，列举以下方法找到真实ip:1.大部分cdn服务混淆ip只针对国内上网情况，所以使用国外dns服务器解析网站即可获得真实ip：（附国外dns服务列表：https://www.douban.com/group/topic/70892...]]></description><category></category></item><item><title><![CDATA[sqlmap使用手册]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80075644</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80075644</guid><author>kali3426</author><pubDate>Wed, 25 Apr 2018 10:50:07 +0800</pubDate><description><![CDATA[get方式检查方法：sqlmap -u &quot;网址&quot; post方法检查方法：1.sqlmap -u &quot;网址&quot; --data &quot;post参数=post数据&quot;2.sqlmap -r x.txt   直接根据请求包注入，在请求包里每个消息头最后加*，就是添加对该信息头的注入cookie方式检测方法：sqlmap -u &quot;网址&quot; --cookie &quot;cookie值&quot;不同数据库注入方法：access数据库：判断...]]></description><category></category></item><item><title><![CDATA[个人渗透测试流程]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80047627</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80047627</guid><author>kali3426</author><pubDate>Mon, 23 Apr 2018 12:00:14 +0800</pubDate><description><![CDATA[七个阶段：第一阶段：前期交互阶段1.预估整体项目的时间周期2.确定ip和域名范围第二阶段：情报搜集1.确定版本信息2.出错信息3.端口扫描4.解析DNS服务器5.防御机制识别6.域名信息收集7.反向查询ip，子域名爆破，查找旁注目标第三阶段：危险建模1.分析可用的渗透代码和攻击载荷2.分析社会工程学对象第四阶段：漏洞分析1.web应用扫描器扫描（awvs、w3af、OWASP_ZPA等）2.服务器...]]></description><category></category></item><item><title><![CDATA[利用esp-8266实现wifi攻击]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/80001636</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/80001636</guid><author>kali3426</author><pubDate>Thu, 19 Apr 2018 11:15:28 +0800</pubDate><description><![CDATA[0x00 前言之前在b站上看到这个wifi模块的攻击视频感觉挺有意思，就在某宝上入了一个拿回来玩玩0x01 外观转接头需要自己另外买0x03 编译程序https://anky.cc/esp8266-deauther-wifi-jammer/这里有教程，我用的是贴吧大神张馆长的固件http://tieba.baidu.com/p/50843537990x04 实验连上充电宝，打开手机wifi，连接设...]]></description><category></category></item><item><title><![CDATA[sql注入漏洞]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79929656</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79929656</guid><author>kali3426</author><pubDate>Fri, 13 Apr 2018 15:32:20 +0800</pubDate><description><![CDATA[基于布尔的检测• 1’ and ‘1’=‘1  /  1’and ‘1 • 1’ and ‘1’=‘2  /  1’and ‘0看查询几个字段：• ‘ order by 9--               (-- )是查询字段联合查询：• ’ union select 1,2--+    看第一个字段和第二个字段名称• ’ union all select database(),2--+Selec...]]></description><category></category></item><item><title><![CDATA[sql应知应会笔记]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79809728</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79809728</guid><author>kali3426</author><pubDate>Tue, 03 Apr 2018 21:41:54 +0800</pubDate><description><![CDATA[]]></description><category></category></item><item><title><![CDATA[python写个端口扫描器]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79809341</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79809341</guid><author>kali3426</author><pubDate>Tue, 03 Apr 2018 21:12:18 +0800</pubDate><description><![CDATA[第一天接触socket模块，写个单线程端口扫描器from socket import *def portScan(ip,port):    try:        s=socket(AF_INET,SOCK_STREAM)        result=s.connect_ex((ip,port))        if result==0:            print(&quot;%d is open&quot;...]]></description><category></category></item><item><title><![CDATA[xss漏洞]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79801816</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79801816</guid><author>kali3426</author><pubDate>Tue, 03 Apr 2018 13:23:22 +0800</pubDate><description><![CDATA[提交的内容被服务器原封不动的返回，则可能出现漏洞。Xss漏洞分为存储型、反射型、DOM型反射型：检测代码：&amp;lt;script&amp;gt; alert(‘XSS’); &amp;lt;/script&amp;gt;    弹出一个警告窗口&amp;lt;a href='' onclick=alert('xss')&amp;gt;type&amp;lt;/a&amp;gt;        建立一个点击，点击后弹出警告窗口&amp;lt;img src=htt...]]></description><category></category></item><item><title><![CDATA[cve-2017-7494复现]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79748708</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79748708</guid><author>kali3426</author><pubDate>Thu, 29 Mar 2018 20:43:51 +0800</pubDate><description><![CDATA[首先是靶机配置：开始攻击：成功。]]></description><category></category></item><item><title><![CDATA[java培训------知识补充]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79681780</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79681780</guid><author>kali3426</author><pubDate>Sat, 24 Mar 2018 21:23:56 +0800</pubDate><description><![CDATA[正则表达式：1，RegEx 正则表达式一. 模糊匹配^ .配输入字符串开始的位置。 $ 匹配输入字符串结尾的位置。* 最少出现0次，最多出现N次。+ 最少出现1次，最多出现N次。? 最少出现0次，最多出现1次。\d 匹配数字          ：数字字符匹配。等效于 [0-9]。\D 匹配非数字        ：非数字字符匹配。等效于 [^0-9]。\w 匹配数字+字母     ：匹配任何字类字符...]]></description><category></category></item><item><title><![CDATA[java培训-----第五天]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79675449</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79675449</guid><author>kali3426</author><pubDate>Sat, 24 Mar 2018 10:39:52 +0800</pubDate><description><![CDATA[最后一天，写个万年历，不会打印出来，借鉴下同学的package figure_day4;import java.util.Scanner;public class test01 {	public final static int YEAR4 = 365 * 3 + 366;	public final static int YEAR = 365;	public static void main(St...]]></description><category></category></item><item><title><![CDATA[java培训-----第四天]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79675407</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79675407</guid><author>kali3426</author><pubDate>Sat, 24 Mar 2018 10:28:59 +0800</pubDate><description><![CDATA[今天学爬虫：老师给的下图片的方法package com.kingswim.file;import java.io.BufferedInputStream;import java.io.ByteArrayOutputStream;import java.io.File;import java.io.FileOutputStream;import java.io.IOException;import ...]]></description><category></category></item><item><title><![CDATA[java培训-----第三天]]></title><link>https://blog.youkuaiyun.com/kali3426/article/details/79644507</link><guid>https://blog.youkuaiyun.com/kali3426/article/details/79644507</guid><author>kali3426</author><pubDate>Wed, 21 Mar 2018 20:10:02 +0800</pubDate><description><![CDATA[homework：定义一“圆”Circle类，圆心为“点”Point类，构造一圆，求圆的周长和面积，并判断某点与圆的关系。定义圆类：public class circle {	private point centPoint;	private double radius;	public final double PI=Math.PI;	public circle(point centPoint,do...]]></description><category></category></item></channel></rss>