<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[likfishdn的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/likfishdn</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; likfishdn]]></copyright><item><title><![CDATA[实训Day-2 流量分析与安全杂项]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/147410773</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/147410773</guid><author>likfishdn</author><pubDate>Tue, 22 Apr 2025 19:34:32 +0800</pubDate><description><![CDATA[掌握文件分析的基本方法。5.在tpl_manage 页面有一个 POST 请求，追踪该请求的 http 流，观察提交的内容和响应的内容。发现并不在我们要的flag，这些时因该思考是否存存在其他问题，再结合题目我们猜测可能在数据包中，在仔细查看数据包的二进制文件后发现了里面存在一个zip的压缩包，我们将其保存出来。1.筛选http数据包，发现前面的是正常的，在345开始出现大量head请求和404响应，由此我们可以判断出，192.168.177.1 这个 IP 在对网站进行目录爆破。掌握文件分析的基本方法。]]></description><category></category></item><item><title><![CDATA[实训Day-1 漏洞攻击实战]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/147397977</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/147397977</guid><author>likfishdn</author><pubDate>Mon, 21 Apr 2025 18:04:31 +0800</pubDate><description><![CDATA[1.在拿到靶机时首先可以进行目录扫描，查看是否存在可以目录2.在存在过滤时可以尝试双写等方式绕过3.存在前端JS过滤时可以直接禁用4.]]></description><category></category></item><item><title><![CDATA[文件上传漏洞]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/147012173</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/147012173</guid><author>likfishdn</author><pubDate>Sun, 20 Apr 2025 18:30:01 +0800</pubDate><description><![CDATA[Webshell（网页后门）是一种基于Web脚本语言（如PHP、ASP、JSP）编写的恶意程序，通常由攻击者通过漏洞（如文件上传漏洞、远程代码执行漏洞）植入到目标服务器中。其核心功能是建立攻击者与服务器之间的隐蔽通信通道，使攻击者能够绕过正常权限限制，远程操控服务器（例如执行系统命令、窃取数据、植入其他恶意软件等）。Webshell因其隐蔽性、灵活性和破坏性，成为渗透攻击中最常见的工具之一。]]></description><category></category></item><item><title><![CDATA[ XSS靶场闯关小游戏]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146987696</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146987696</guid><author>likfishdn</author><pubDate>Sat, 05 Apr 2025 11:21:06 +0800</pubDate><description><![CDATA[这里试了下之前的方法" type="text" onclick="alert('xss')不可以直接执行，此时我们看一些cookie。此时在页面上添加一个按钮click" type="button" onclick="alert(/xss/)这里将ref的内容替换成" type="text" onclick="alert('xss')改为user=" onclick="alert('xss')" type="text"使用"onmouseover="alert(/xss/)"]]></description><category></category></item><item><title><![CDATA[XXS漏洞零基础学习到入门]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146834815</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146834815</guid><author>likfishdn</author><pubDate>Thu, 03 Apr 2025 19:38:33 +0800</pubDate><description><![CDATA[恶意攻击者利用web页面的漏洞，插入一些恶意代码， 当用户访问页面的时候，代码就会执行，这个时候就 达到了攻击的目的。HTTP（超文本传输协议）定义了多种请求方法，用于指示客户端希望服务器对资源执行的操作。由于页面的DOM结构被恶意构造的代码篡改，导致用户操作引发恶意脚本执行，攻击过程不涉及服务器端变化。：用于向服务器提交数据，通常用于创建新资源或提交表单数据。类似于GET，但只请求资源的头部信息，不返回实际内容。如：检查资源是否存在或获取元数据。：用于更新指定资源，或者如果资源不存在则创建新资源。]]></description><category></category></item><item><title><![CDATA[SQL注入之sqlmap]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146804582</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146804582</guid><author>likfishdn</author><pubDate>Mon, 31 Mar 2025 12:32:20 +0800</pubDate><description><![CDATA[sqlmap
]]></description><category></category></item><item><title><![CDATA[SQL注入零基础学习五WAF绕过]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146799275</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146799275</guid><author>likfishdn</author><pubDate>Mon, 31 Mar 2025 11:01:03 +0800</pubDate><description><![CDATA[WAF拦截原理：WAF从规则库中匹配敏感字符进行拦截。]]></description><category></category></item><item><title><![CDATA[SQL注入零基础学习四查询方式及报错注入]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146658403</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146658403</guid><author>likfishdn</author><pubDate>Sat, 29 Mar 2025 16:49:26 +0800</pubDate><description><![CDATA[基于时间的SQL盲注 - 延时注入；布尔盲注；加解密注入；堆叠注入]]></description><category></category></item><item><title><![CDATA[SQL注入零基础学习三数据类型与提交方式]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146564258</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146564258</guid><author>likfishdn</author><pubDate>Sat, 29 Mar 2025 12:25:27 +0800</pubDate><description><![CDATA[SQL注入之数据类型,Less11,Less20,Cookie注入]]></description><category></category></item><item><title><![CDATA[Burp Suite从入门到实战之代理设置和各模块使用方法]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146570383</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146570383</guid><author>likfishdn</author><pubDate>Sat, 29 Mar 2025 10:03:12 +0800</pubDate><description><![CDATA[代理设置，各模块使用方法]]></description><category></category></item><item><title><![CDATA[Burp Suite从入门到实战之配置启动]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146568325</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146568325</guid><author>likfishdn</author><pubDate>Thu, 27 Mar 2025 20:19:35 +0800</pubDate><description><![CDATA[Burp Suite配置启动]]></description><category></category></item><item><title><![CDATA[SQL注入零基础学习二MYSQL手工注入]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146483065</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146483065</guid><author>likfishdn</author><pubDate>Wed, 26 Mar 2025 20:13:29 +0800</pubDate><description><![CDATA[1.sqli-labs环境搭建;2.MySQL手工注入;3.4高权限注入;5文件读写6基础防御
]]></description><category></category></item><item><title><![CDATA[SQL注入零基础学习一]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146481091</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146481091</guid><author>likfishdn</author><pubDate>Mon, 24 Mar 2025 18:31:26 +0800</pubDate><description><![CDATA[sql注入概念，sql中的Mysql语句语法，Mysql系统库]]></description><category></category></item><item><title><![CDATA[Kali域名解析失败解决]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/146014972</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/146014972</guid><author>likfishdn</author><pubDate>Tue, 04 Mar 2025 14:27:41 +0800</pubDate><description><![CDATA[当我们遇见如下问题域名解析失败时可以通过以下方法解决。目前里面只有默认网关。在这里添加DNS即可。]]></description><category></category></item><item><title><![CDATA[Linux软件安装]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/145875019</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/145875019</guid><author>likfishdn</author><pubDate>Mon, 03 Mar 2025 14:14:24 +0800</pubDate><description><![CDATA[脚本：不需要编译：Javascript、Python、Ruby……程序：需要编译的：C、C++、Swift、Kotlin、Go……mysql -uroot -p （有密码登录）基于rpm，解决安装依赖包的问题。编译型：计算机可以直接执行。./configure配置。查找root用户初始密码。yum list 包名。解释型：边解释边执行。修改后重启mysql。]]></description><category></category></item><item><title><![CDATA[Linux文本编译器]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/145833380</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/145833380</guid><author>likfishdn</author><pubDate>Wed, 26 Feb 2025 10:54:06 +0800</pubDate><description><![CDATA[文本编译器VIM]]></description><category></category></item><item><title><![CDATA[Linux查看和处理文件内容]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/145871089</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/145871089</guid><author>likfishdn</author><pubDate>Wed, 26 Feb 2025 10:33:39 +0800</pubDate><description><![CDATA[有字符集编码的文件如：ASCII、UTF-8、Unicode、ANSI等常见的文本文件txt、xml、conf、properties、yml等配置文件、日志文 件、源代码。]]></description><category></category></item><item><title><![CDATA[Linux文件压缩与解压缩]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/145869395</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/145869395</guid><author>likfishdn</author><pubDate>Wed, 26 Feb 2025 10:05:22 +0800</pubDate><description><![CDATA[文件压缩与解压缩]]></description><category></category></item><item><title><![CDATA[Linux的文件与目录管理]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/145868509</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/145868509</guid><author>likfishdn</author><pubDate>Wed, 26 Feb 2025 09:09:17 +0800</pubDate><description><![CDATA[文件与目录管理]]></description><category></category></item><item><title><![CDATA[Linux的常用操作]]></title><link>https://blog.youkuaiyun.com/likfishdn/article/details/145862756</link><guid>https://blog.youkuaiyun.com/likfishdn/article/details/145862756</guid><author>likfishdn</author><pubDate>Tue, 25 Feb 2025 21:53:15 +0800</pubDate><description><![CDATA[设置生效：source ~/.bashrc。设置别名：vim ~/.bashrc。系统变量：/etc/profile。查看单个变量：echo $XXX。用户变量：~/.bashrc。查看别名：alias。查看全部变量：env。]]></description><category></category></item></channel></rss>