<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[冷却]]></title><description><![CDATA[专注安全与编程]]></description><link>https://blog.youkuaiyun.com/leng_que</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; leng_que]]></copyright><item><title><![CDATA[Microsoft SQL Server 任意命令执行]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/99734110</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/99734110</guid><author>leng_que</author><pubDate>Mon, 19 Aug 2019 16:11:18 +0800</pubDate><description><![CDATA[xp_cmdshell]]></description><category></category></item><item><title><![CDATA[净化]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/79698722</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/79698722</guid><author>leng_que</author><pubDate>Mon, 26 Mar 2018 15:28:33 +0800</pubDate><description><![CDATA[干净一点点……]]></description><category></category></item><item><title><![CDATA[winter @ OS X 10.11.6 MacBook Pro (Retina, 13-inch, Early 2015)]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/67634830</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/67634830</guid><author>leng_que</author><pubDate>Tue, 28 Mar 2017 13:35:22 +0800</pubDate><description><![CDATA[冬天MBP经常充不进电，原因是温度太低。平时喜欢通过运行flash程序让电脑发热，比如看看优酷视频什么的，但是如果是在公司上班时间呢？看片总不太好吧……]]></description><category></category></item><item><title><![CDATA[Oracle 任意命令执行]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/67634724</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/67634724</guid><author>leng_que</author><pubDate>Tue, 28 Mar 2017 13:20:23 +0800</pubDate><description><![CDATA[假如有一天你通过端口扫描＋口令暴破的方法拿下了一台Oracle服务器，那么，如何才能扩大战果，实现“任意命令执行”呢？]]></description><category></category></item><item><title><![CDATA[WordPress密码哈希破解]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/51404846</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/51404846</guid><author>leng_que</author><pubDate>Sat, 14 May 2016 11:19:32 +0800</pubDate><description><![CDATA[WordPress密码哈希破解]]></description><category></category></item><item><title><![CDATA[http_cracker.sh]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/50223377</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/50223377</guid><author>leng_que</author><pubDate>Tue, 08 Dec 2015 20:02:57 +0800</pubDate><description><![CDATA[HTTP Cracker v1.0 (20151206)]]></description><category></category></item><item><title><![CDATA[rdp_cracker.py]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/48838921</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/48838921</guid><author>leng_que</author><pubDate>Thu, 01 Oct 2015 01:54:55 +0800</pubDate><description><![CDATA[RDP Cracker v2.0 (leng_que@20151211)]]></description><category></category></item><item><title><![CDATA[字典合并小工具 @ OS X 10.10 Yosemite]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/48838607</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/48838607</guid><author>leng_que</author><pubDate>Thu, 01 Oct 2015 01:41:12 +0800</pubDate><description><![CDATA[用途：将当前目录下收集到的字典合并，同时去掉重复项。
备注：仅去掉同一个字典文件内的重复项，如果多个不同字典文件内有重复的项目，则是会合并到一块的，而要解决这样的重复项，很简单，再单独合并一次结果文件自身即可。]]></description><category></category></item><item><title><![CDATA[AccessWindowsShare.bat]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/48838433</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/48838433</guid><author>leng_que</author><pubDate>Thu, 01 Oct 2015 01:34:22 +0800</pubDate><description><![CDATA[@echo OFF

rem 说明：“这是一个简单的Windows共享资源映射批处理脚本”

set /p var_ip="请输入目标IP："
set /p var_user="请输入用户名："
set /p var_pass="请输入口令："

net use * /d /y>NUL

net use \\%var_ip%\IPC$ /u:%var_user% %var_pass%>NUL
if]]></description><category></category></item><item><title><![CDATA[PE_BuildTime.html]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/48838115</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/48838115</guid><author>leng_que</author><pubDate>Thu, 01 Oct 2015 01:25:28 +0800</pubDate><description><![CDATA[function show()
{
    //JavaScript Date对象 1970年1月1日午夜
    //PE TimeDateStamp 文件日期时间戳,指这个pe文件生成的时间,它的值是从1969年12月31日16:00:00以来的秒数.
    //北京时间 +8时区
    var s = parseInt(document.getElementById("TimeDateS]]></description><category></category></item><item><title><![CDATA[lcx]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/46240833</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/46240833</guid><author>leng_que</author><pubDate>Fri, 29 May 2015 21:30:10 +0800</pubDate><description><![CDATA[// htran.cpp
// 冷却整理 2015-05-29 21:28:51

/*
用法说明：
[Usage of Packet Transmit:]  lcx.exe -  [-log logfile]

[option:]
  -listen  
  -tran     
  -slave      

备注：
-listen 后面接的两个端口都是监听功能，即：被动连接
-tran]]></description><category></category></item><item><title><![CDATA[TestOpenGL]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/45050085</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/45050085</guid><author>leng_que</author><pubDate>Tue, 14 Apr 2015 23:39:04 +0800</pubDate><description><![CDATA[又开始练习OpenGL编程了……]]></description><category></category></item><item><title><![CDATA[《白帽子讲Web安全》读书笔记]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/44873791</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/44873791</guid><author>leng_que</author><pubDate>Sat, 04 Apr 2015 16:28:29 +0800</pubDate><description><![CDATA[------

“安全问题的本质是信任的问题”

安全三要素：机密性、完整性、可用性

白帽子兵法：Secure By Default 原则（1：黑白单、白名单 2：最小权限原则）、纵深防御原则、数据与代码分离原则、不可预测性原则

“所有的程序本来也没有漏洞，只有功能，但当一些功能被用于破坏，造成损失时，也就成了漏洞。”

浏览器安全：同源策略、浏览器沙箱（备注：沙箱内的程序要与外界通信时是通过]]></description><category></category></item><item><title><![CDATA[Use After Free]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/44457993</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/44457993</guid><author>leng_que</author><pubDate>Thu, 19 Mar 2015 14:59:48 +0800</pubDate><description><![CDATA[/*
 *  Author: leng_que
 *  Date: 2015-03-19
 *  Description: 简单的演示了UAF漏洞的原理
 */

#include 
#include 
#include 

int main(void)
{
    char* buf_use = (char*)malloc(32);
    printf("buf_use's addr = [0]]></description><category></category></item><item><title><![CDATA[Linux应用程序中出现两次fork的解释]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/44084237</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/44084237</guid><author>leng_que</author><pubDate>Thu, 05 Mar 2015 16:12:35 +0800</pubDate><description><![CDATA[一个进程使用fork创建子进程，如果子进程退出，而父进程并没有调用wait或waitpid获取子进程的状态信息，那么子进程的进程描述符仍然保存在系统中。这种进程称之为僵尸进程。
在一些程序中经常看见使用两次fork创建子进程，原因如下：

以下摘自《UNIX环境高级编程》
如果一个进程fork一个子进程，但不要它等待子进程终止，也不希望子进程处于僵尸状态直到父进程终止，实现这一要求的技巧是]]></description><category></category></item><item><title><![CDATA[TestODBC]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/42750435</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/42750435</guid><author>leng_que</author><pubDate>Thu, 15 Jan 2015 22:21:13 +0800</pubDate><description><![CDATA[复习ODBC数据库编程]]></description><category></category></item><item><title><![CDATA[usage: url_tools.exe [URL] [count] [interval(seconds)]]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/42750191</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/42750191</guid><author>leng_que</author><pubDate>Thu, 15 Jan 2015 22:15:37 +0800</pubDate><description><![CDATA[一个小工具，主要是复习一下网络编程和多线程编程。]]></description><category></category></item><item><title><![CDATA[用Python脚本查询纯真IP库]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/42750095</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/42750095</guid><author>leng_que</author><pubDate>Thu, 15 Jan 2015 22:11:02 +0800</pubDate><description><![CDATA[#!/usr/bin/env python
# coding: utf-8

'''用Python脚本查询纯真IP库

QQWry.Dat的格式如下:

+----------+
|  文件头  |  (8字节)
+----------+
|  记录区  | （不定长）
+----------+
|  索引区  | （大小由文件头决定）
+----------+

文件头：4字节开始索引偏移值+4]]></description><category></category></item><item><title><![CDATA[Bugtraq ID:71333 PoC]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/41829613</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/41829613</guid><author>leng_que</author><pubDate>Tue, 09 Dec 2014 21:12:32 +0800</pubDate><description><![CDATA[# 文件名称：centreon_exec_rce_poc.py
# 编写时间：2014-12-09
# 更新时间：2015-07-04

# 漏洞说明：Centreon 'exec()' 函数远程命令执行漏洞
# 影响版本：Centreon <= 2.5.3]]></description><category></category></item><item><title><![CDATA[授人以渔]]></title><link>https://blog.youkuaiyun.com/leng_que/article/details/38493013</link><guid>https://blog.youkuaiyun.com/leng_que/article/details/38493013</guid><author>leng_que</author><pubDate>Mon, 11 Aug 2014 15:11:46 +0800</pubDate><description><![CDATA[安全网站收集]]></description><category></category></item></channel></rss>