<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[qq_51143406的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/qq_51143406</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; qq_51143406]]></copyright><item><title><![CDATA[【vulhub】tomcat CVE-2020-1938（AJP漏洞）]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/146198994</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/146198994</guid><author>qq_51143406</author><pubDate>Wed, 12 Mar 2025 10:46:36 +0800</pubDate><description><![CDATA[cve-2020-1938 任意文件读写
ghostcat 漏洞复现]]></description><category></category></item><item><title><![CDATA[【vulhub】tomcat CVE-2017-12615（任意写入文件）]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/145947109</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/145947109</guid><author>qq_51143406</author><pubDate>Sat, 01 Mar 2025 14:01:32 +0800</pubDate><description><![CDATA[CVE-2017-12615
tomcat 任意写入文件 漏洞复现]]></description><category></category></item><item><title><![CDATA[【vulhub】redis CVE-2022-0543（redis沙盒逃逸）]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/145880913</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/145880913</guid><author>qq_51143406</author><pubDate>Wed, 26 Feb 2025 15:53:22 +0800</pubDate><description><![CDATA[CVE-2022-0543
redis沙盒逃逸
漏洞复现]]></description><category></category></item><item><title><![CDATA[【vulhub】redis 4-unacc （redis未授权访问）]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/145865995</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/145865995</guid><author>qq_51143406</author><pubDate>Wed, 26 Feb 2025 00:14:08 +0800</pubDate><description><![CDATA[vulhub/redis/4-unacc 漏洞复现
redis未授权访问]]></description><category></category></item><item><title><![CDATA[【渗透测试】Vulnhub Corrosion : 1]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/135647010</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/135647010</guid><author>qq_51143406</author><pubDate>Wed, 17 Jan 2024 12:22:07 +0800</pubDate><description><![CDATA[chmod +s /bin/bash  是设置bash的setuid位，让用户在运行bash的过程中暂时获得拥有者的权限，运行easysysinfo时调用的是我们写的cat，就会让bash的setuid被设置，随后就可以以特权身份运行bash。看了其他师傅们的文章，这里是有一个文件包含漏洞，但是我们不知道传什么参，因此我们fuzz以下，参数值就设置为。，查看一下，发现easysysinfo会调用cat，而且没有使用绝对路径，那么我们就可以重写一个。开放了22和80端口，访问80端口，可以正常访问。]]></description><category></category></item><item><title><![CDATA[IPv6通过公网共享文件（Windows）]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/135559881</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/135559881</guid><author>qq_51143406</author><pubDate>Fri, 12 Jan 2024 18:47:43 +0800</pubDate><description><![CDATA[IPv6实现Windows文件共享，公网可访问]]></description><category></category></item><item><title><![CDATA[IPv6实现内网穿透，极低成本保姆级教程]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/135463334</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/135463334</guid><author>qq_51143406</author><pubDate>Mon, 08 Jan 2024 18:01:00 +0800</pubDate><description><![CDATA[使用IPv6实现内网穿透，只需要一个域名。]]></description><category></category></item><item><title><![CDATA[【渗透测试】Vulnhub EMPIRE BREAKOUT]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/132549833</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/132549833</guid><author>qq_51143406</author><pubDate>Mon, 28 Aug 2023 22:56:17 +0800</pubDate><description><![CDATA[对Vulnhub empire: breakout 进行渗透]]></description><category></category></item><item><title><![CDATA[【渗透测试】 Vulnhub JANGOW 1.0.1]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/132405578</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/132405578</guid><author>qq_51143406</author><pubDate>Mon, 21 Aug 2023 12:06:12 +0800</pubDate><description><![CDATA[Vulnhub Jangow 做题记录]]></description><category></category></item><item><title><![CDATA[【环境搭建】docker+nginx部署PHP]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/131852726</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/131852726</guid><author>qq_51143406</author><pubDate>Fri, 21 Jul 2023 15:21:31 +0800</pubDate><description><![CDATA[【环境搭建】docker+nginx部署PHP]]></description><category></category></item><item><title><![CDATA[【渗透测试】Cobalt Strike制作钓鱼邮件渗透Windows]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/131827979</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/131827979</guid><author>qq_51143406</author><pubDate>Thu, 20 Jul 2023 13:36:25 +0800</pubDate><description><![CDATA[使用cobalt strike制作钓鱼邮件进行渗透]]></description><category></category></item><item><title><![CDATA[【渗透测试】利用Cobalt Strike渗透Windows]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/131731099</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/131731099</guid><author>qq_51143406</author><pubDate>Fri, 14 Jul 2023 21:52:55 +0800</pubDate><description><![CDATA[使用Cobalt Strike对Windows进行渗透]]></description><category></category></item><item><title><![CDATA[【环境搭建】docker+nginx部署PHP]]></title><link>https://blog.youkuaiyun.com/qq_51143406/article/details/131730677</link><guid>https://blog.youkuaiyun.com/qq_51143406/article/details/131730677</guid><author>qq_51143406</author><pubDate>Fri, 14 Jul 2023 20:08:49 +0800</pubDate><description><![CDATA[在linux中使用docker+nginx部署PHP网页]]></description><category></category></item></channel></rss>