<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[m0_70489261的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/m0_70489261</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; m0_70489261]]></copyright><item><title><![CDATA[CVE-2024-23897 JenKins任意文件读取漏洞复现]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/136323087</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/136323087</guid><author>m0_70489261</author><pubDate>Tue, 27 Feb 2024 15:27:23 +0800</pubDate><description><![CDATA[Jenkins提供了一个命令行的接口，用户可以在下载一个命令行客户端jenkins-cli.jar到本地，并调用该客户端来执行一些Jenkins的功能。]]></description><category></category></item><item><title><![CDATA[CVE-2020-1938 Vulhub复现之Tomcat文件包含漏洞复现]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/136314158</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/136314158</guid><author>m0_70489261</author><pubDate>Tue, 27 Feb 2024 14:38:06 +0800</pubDate><description><![CDATA[CVE-2020-1938、CNVD-2020-10487
漏洞描述：Apache Tomcat文件包含漏洞是由Tomcat AJP协议存在缺陷而导致，可利用该漏洞通过构造特定参数进行文件包含操作，进而读取受影响Tomcat服务器上的Web应用目录下的任意文件，如配置文件或源代码等。]]></description><category></category></item><item><title><![CDATA[kali扫不出靶场IP]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/133787311</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/133787311</guid><author>m0_70489261</author><pubDate>Thu, 12 Oct 2023 11:53:15 +0800</pubDate><description><![CDATA[基于kali扫不到靶机IP]]></description><category></category></item><item><title><![CDATA[DC-3靶场渗透测试]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/129629328</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/129629328</guid><author>m0_70489261</author><pubDate>Fri, 17 Mar 2023 23:46:11 +0800</pubDate><description><![CDATA[DC靶场，主要是通过web渗透技术，拿到web服务器的权限，会有flag做为标记，以拿到最终的flag为目标。]]></description><category></category></item><item><title><![CDATA[利用kali对DC-9靶场进行渗透测试]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/129321027</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/129321027</guid><author>m0_70489261</author><pubDate>Fri, 03 Mar 2023 16:29:35 +0800</pubDate><description><![CDATA[DC靶场，主要是通过web渗透技术，拿到web服务器的权限，会有flag做为标记，以拿到最终的flag为目标。]]></description><category></category></item><item><title><![CDATA[server2003某网站SQL注入（二）SQLmap]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/129279578</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/129279578</guid><author>m0_70489261</author><pubDate>Wed, 01 Mar 2023 14:50:52 +0800</pubDate><description><![CDATA[SQLmap是一款强大的自动化SQL注入工具，其主要的功能是对目标产品进行扫描，并利用给定的URL进行SQL注入。]]></description><category></category></item><item><title><![CDATA[Server2003某网站sql注入]]></title><link>https://blog.youkuaiyun.com/m0_70489261/article/details/129260356</link><guid>https://blog.youkuaiyun.com/m0_70489261/article/details/129260356</guid><author>m0_70489261</author><pubDate>Tue, 28 Feb 2023 15:24:30 +0800</pubDate><description><![CDATA[SQL之简要的SQL注入]]></description><category></category></item></channel></rss>