<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[leo788的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/leo788</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; leo788]]></copyright><item><title><![CDATA[【CTF】USB流量分析详解]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/145846474</link><guid>https://blog.youkuaiyun.com/leo788/article/details/145846474</guid><author>leo788</author><pubDate>Thu, 27 Feb 2025 10:19:28 +0800</pubDate><description><![CDATA[USB流量即USB设备接口的流量，CTF中主要以键盘和鼠标流量为主。]]></description><category></category></item><item><title><![CDATA[【个人经验】python执行程序报错解决-ModuleNotFoundError：No module named ‘xxx‘]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/140325788</link><guid>https://blog.youkuaiyun.com/leo788/article/details/140325788</guid><author>leo788</author><pubDate>Wed, 10 Jul 2024 15:50:36 +0800</pubDate><description><![CDATA[解决python执行程序时出现的module缺失的报错]]></description><category></category></item><item><title><![CDATA[vulnhub-ripper（易）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/131535936</link><guid>https://blog.youkuaiyun.com/leo788/article/details/131535936</guid><author>leo788</author><pubDate>Tue, 04 Jul 2023 17:06:33 +0800</pubDate><description><![CDATA[Ripper靶场很简单，可以用来熟悉打靶场的流程，同时掌握信息搜索能力。]]></description><category></category></item><item><title><![CDATA[解决Vmware上的kali找不到virtualbox上的靶机的问题]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/130950852</link><guid>https://blog.youkuaiyun.com/leo788/article/details/130950852</guid><author>leo788</author><pubDate>Tue, 30 May 2023 16:33:21 +0800</pubDate><description><![CDATA[解决kali找不到靶场ip问题的完整方法]]></description><category></category></item><item><title><![CDATA[vulhub-Jarbas（易）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128482433</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128482433</guid><author>leo788</author><pubDate>Mon, 29 May 2023 15:45:30 +0800</pubDate><description><![CDATA[jarbas靶场很简单，可以用来熟悉打靶场的流程，同时掌握反弹shell的使用。]]></description><category></category></item><item><title><![CDATA[【PortSwigger】SQL注入实验全记录]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/130585190</link><guid>https://blog.youkuaiyun.com/leo788/article/details/130585190</guid><author>leo788</author><pubDate>Fri, 12 May 2023 13:41:30 +0800</pubDate><description><![CDATA[靶场是Burp自带的网站中提供的，本篇主要对sql注入部分进行练习和记录。]]></description><category></category></item><item><title><![CDATA[【PTE练习】综合题-机智图片管理系统]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/130368152</link><guid>https://blog.youkuaiyun.com/leo788/article/details/130368152</guid><author>leo788</author><pubDate>Tue, 25 Apr 2023 16:39:17 +0800</pubDate><description><![CDATA[综合题练习]]></description><category></category></item><item><title><![CDATA[【PTE练习】34051,34061,34073,34074,34075]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/130367541</link><guid>https://blog.youkuaiyun.com/leo788/article/details/130367541</guid><author>leo788</author><pubDate>Tue, 25 Apr 2023 16:22:20 +0800</pubDate><description><![CDATA[cisp-pte考试，34051,34061,34073,34074,34075练习以及总结]]></description><category></category></item><item><title><![CDATA[【PTE练习】34041-34045]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/130367315</link><guid>https://blog.youkuaiyun.com/leo788/article/details/130367315</guid><author>leo788</author><pubDate>Tue, 25 Apr 2023 16:06:42 +0800</pubDate><description><![CDATA[cisp-pte考试练习靶场：34041-34045习题及过程总结]]></description><category></category></item><item><title><![CDATA[vulnhub-Raven2靶场（中）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/129329613</link><guid>https://blog.youkuaiyun.com/leo788/article/details/129329613</guid><author>leo788</author><pubDate>Sat, 04 Mar 2023 21:13:31 +0800</pubDate><description><![CDATA[通过raven2靶场练习对mysql提权中udf提权的方式的掌握。]]></description><category></category></item><item><title><![CDATA[Vulnhub--hacksudo（thor）靶场]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128890611</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128890611</guid><author>leo788</author><pubDate>Sat, 04 Mar 2023 01:07:49 +0800</pubDate><description><![CDATA[hacksudo靶机中涉及使用：利用开源源码泄露以及默认管理员信息、路径爬取获得隐藏页面的登录，发现业务逻辑层面的漏洞。破壳漏洞的原理重点关注cgi-bin目录，再利用curl向服务器发起nc 命令进行打点GTFOBins的利用。]]></description><category></category></item><item><title><![CDATA[vulnhub-doubletrouble靶场]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/129093639</link><guid>https://blog.youkuaiyun.com/leo788/article/details/129093639</guid><author>leo788</author><pubDate>Sat, 18 Feb 2023 21:19:13 +0800</pubDate><description><![CDATA[这个靶场可以学到很多方法：1.使用stegseek工具对于隐写术的密码进行爆破；2.通过searchsploit查找开源CMS对应版本漏洞进行漏洞利用；3.使用sqlmap进行sql注入盲注；4.脏牛提权>FObins提权。]]></description><category></category></item><item><title><![CDATA[vulnhub-Momentum靶场]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/129090473</link><guid>https://blog.youkuaiyun.com/leo788/article/details/129090473</guid><author>leo788</author><pubDate>Fri, 17 Feb 2023 20:00:24 +0800</pubDate><description><![CDATA[学习如何使用redis的未授权漏洞进行权限的提升，以及在线破解工具对于AES加密的破解方法。]]></description><category></category></item><item><title><![CDATA[【每日打靶练习】vulnhub--Billu_b0x（中）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128890882</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128890882</guid><author>leo788</author><pubDate>Thu, 16 Feb 2023 22:06:12 +0800</pubDate><description><![CDATA[主要利用这个靶场对文件包含以及任意文件下载进行巩固。]]></description><category></category></item><item><title><![CDATA[【每日打靶练习】Vulnhub-vikings(中低)]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128883828</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128883828</guid><author>leo788</author><pubDate>Sun, 05 Feb 2023 12:37:59 +0800</pubDate><description><![CDATA[viking靶机中涉及使用：80端路径爬取；john破解加密压缩文件；隐写术以及破解方式（二进制提取）：cyberchef的使用；python实现功能；rpc漏洞提权。]]></description><category></category></item><item><title><![CDATA[【每日打靶练习】vulnhub--Evilbox-One（中低）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128573887</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128573887</guid><author>leo788</author><pubDate>Tue, 24 Jan 2023 15:47:11 +0800</pubDate><description><![CDATA[通过修改/etc/passwd中的root的密码即可，但是这里靶机的vim我无法进行修改，应该是版本问题，所以前面操作仅供参考，后面按照顺序修改完用户密码后即可登录，达到越权目的。利用ffuf来进行模糊匹配，前一个字典用来匹配参数关键字，后一个字典自己定义用来匹配执行，结果是啥也没匹配到，考虑换一个思路，利用是php格式，猜测页面是否存在文件包含漏洞，然后再利用远程包含上传webshell进行提权的思路，测试一下。访问一下80端口，没什么信息，对目录进行扫描。secret页面：空的，查看源码也空。]]></description><category></category></item><item><title><![CDATA[【每日打靶练习】Vulnhub--y0usef(低)]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128564157</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128564157</guid><author>leo788</author><pubDate>Thu, 05 Jan 2023 17:03:55 +0800</pubDate><description><![CDATA[本靶机主要是对于web应用中可能存在的403forbidden进行绕过达到访问控制的失效，其次是对于文件上传漏洞的利用，文件上传有很多种方式，这里并没有详述，只对修改文件格式进行了试验，成功上传后，使用蚁剑对于上传PHP木马进行后门访问来达到获取权限的目的。]]></description><category></category></item><item><title><![CDATA[【每日打靶练习】vulnhub靶机平台--Funbox2（低）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128528349</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128528349</guid><author>leo788</author><pubDate>Thu, 05 Jan 2023 09:54:10 +0800</pubDate><description><![CDATA[本靶机可熟悉ssh公钥登录，利用john工具进行密码破解，rbash逃逸并利用mysql服务提权。]]></description><category></category></item><item><title><![CDATA[【每日打靶练习】vulnhub--cloudav（低）]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128545982</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128545982</guid><author>leo788</author><pubDate>Wed, 04 Jan 2023 16:16:41 +0800</pubDate><description><![CDATA[如何利用suid提权的思路，nc串联的使用，还有在sqlite中的指令，如何查看表]]></description><category></category></item><item><title><![CDATA[kali与靶机网络配置问题]]></title><link>https://blog.youkuaiyun.com/leo788/article/details/128549093</link><guid>https://blog.youkuaiyun.com/leo788/article/details/128549093</guid><author>leo788</author><pubDate>Wed, 04 Jan 2023 16:07:20 +0800</pubDate><description><![CDATA[前提：kali宿主机和靶机都使用的NAT网络配置，然而无论是arp-scan还是nmap还是netdiscover都找不到靶机ip，正常情况下可以找到。]]></description><category></category></item></channel></rss>