<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[qq_43455259的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/qq_43455259</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; qq_43455259]]></copyright><item><title><![CDATA[python随机生成多重集合]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/138270573</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/138270573</guid><author>qq_43455259</author><pubDate>Sun, 28 Apr 2024 10:45:13 +0800</pubDate><description><![CDATA[使用python随机生成一个多重集合]]></description><category></category></item><item><title><![CDATA[有限自动状态机学习笔记]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/132898113</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/132898113</guid><author>qq_43455259</author><pubDate>Fri, 15 Sep 2023 11:11:41 +0800</pubDate><description><![CDATA[有限自动状态机学习笔记]]></description><category></category></item><item><title><![CDATA[Centos7环境下Docker搭建vulhub]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/125782324</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/125782324</guid><author>qq_43455259</author><pubDate>Thu, 14 Jul 2022 15:38:57 +0800</pubDate><description><![CDATA[centos7环境下，安装docker，搭建vulhub。
docker搭建vuhub]]></description><category></category></item><item><title><![CDATA[struts2（s2-001）远程代码执行漏洞docker&&vulhub复现]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/125736839</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/125736839</guid><author>qq_43455259</author><pubDate>Tue, 12 Jul 2022 19:00:00 +0800</pubDate><description><![CDATA[struts2（s2-001）远程代码执行漏洞docker&&vulhub复现]]></description><category></category></item><item><title><![CDATA[文件上传漏洞原理、防御、绕过]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/125064968</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/125064968</guid><author>qq_43455259</author><pubDate>Tue, 31 May 2022 14:43:16 +0800</pubDate><description><![CDATA[文件上传漏洞原理
文件上传漏洞防御
文件上传漏洞防护绕过]]></description><category></category></item><item><title><![CDATA[XSS攻击原理及防御、绕过]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/125064488</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/125064488</guid><author>qq_43455259</author><pubDate>Tue, 31 May 2022 14:19:11 +0800</pubDate><description><![CDATA[XSS攻击原理
XSS攻击防御、绕过]]></description><category></category></item><item><title><![CDATA[什么是SQL注入，防御、绕过]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/125062717</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/125062717</guid><author>qq_43455259</author><pubDate>Tue, 31 May 2022 13:56:38 +0800</pubDate><description><![CDATA[SQL注入的原理
SQL注入的防御
SQL注入的绕过]]></description><category></category></item><item><title><![CDATA[DVWA之SQL注入（低中高级）]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/122603115</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/122603115</guid><author>qq_43455259</author><pubDate>Thu, 20 Jan 2022 15:45:59 +0800</pubDate><description><![CDATA[dvwa之sql注入]]></description><category></category></item><item><title><![CDATA[sqllib-2]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/122602929</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/122602929</guid><author>qq_43455259</author><pubDate>Thu, 20 Jan 2022 15:34:52 +0800</pubDate><description><![CDATA[sqllib-2
数字型注入
192.168.92.129/sqli-labs/Less-2/?id=600 union select 1,20,(select group_concat(username,’:’,password) from users )–+


]]></description><category></category></item><item><title><![CDATA[sqllib-1]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/122602329</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/122602329</guid><author>qq_43455259</author><pubDate>Thu, 20 Jan 2022 15:30:19 +0800</pubDate><description><![CDATA[sqllib-1]]></description><category></category></item><item><title><![CDATA[攻防世界 MISC 高手进阶区 就在其中WP  解题思路]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/105441620</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/105441620</guid><author>qq_43455259</author><pubDate>Fri, 10 Apr 2020 20:48:56 +0800</pubDate><description><![CDATA[1.下载压缩包解压后发现为流量包，打开分析
2.先进行tcp连接，再是FTP传输，应该是一个在传输某些文档的流量包，推测flag应该和传输的文档有关。
3.追踪tcp流，第二个流时发现有一些东西，pub.key引起重视，并且很有可能有私钥，推测会用到私钥加密。进一步坚定上面的猜测，继续追踪。

4.嘿嘿嘿，果然发现私钥

再追踪下去没发现什么有价值的东西。
5.把流量包扔进foremost看看能不...]]></description><category></category></item><item><title><![CDATA[攻防世界 A GOOD  idea WP]]></title><link>https://blog.youkuaiyun.com/qq_43455259/article/details/105347010</link><guid>https://blog.youkuaiyun.com/qq_43455259/article/details/105347010</guid><author>qq_43455259</author><pubDate>Mon, 06 Apr 2020 17:10:19 +0800</pubDate><description><![CDATA[攻防世界 A GOOD idea WP
1.下载压缩包解压后，改图片后缀名为zip打开发现有两张图片一个txt

2.Stegsolve合成两张图片，发现有红色的亮点，仔细看好像二维码

3.Ps调整图片参数，最终发现需要调大曝光度，得到二维码

4.扫描二维码得到flag
NCTF{m1sc_1s_very_funny!!!}

...]]></description><category></category></item></channel></rss>