<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[qq_61529962的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/qq_61529962</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; qq_61529962]]></copyright><item><title><![CDATA[Python爬虫案例（多线程+消息队列初阶）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/135829137</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/135829137</guid><author>qq_61529962</author><pubDate>Wed, 24 Jan 2024 20:46:06 +0800</pubDate><description><![CDATA[基于python的爬虫案例，对网页指定数据进行爬取，多线程、消息队列、正则表达式、python爬虫常见库]]></description><category></category></item><item><title><![CDATA[越权漏洞（基于catfishcms靶场的垂直越权、水平越权）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/135092565</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/135092565</guid><author>qq_61529962</author><pubDate>Tue, 19 Dec 2023 19:36:02 +0800</pubDate><description><![CDATA[垂直越权


	创建一个普通用户test、和管理员用户admin页面的url对比，未发现任何越权url
	
	
	创建一个后台用户test1、和管理员用户admin页面的url对比

	
		test1后台页面，只有内容管理
		
		
		
		admin后台管理页面
		
		
		
		在页面管理的新建页面的url和test1用户做比较，多了admin/index/newpage.html
		
		
		
		在test1用户管理页面的url后加上admin/index/newpage.html
	]]></description><category></category></item><item><title><![CDATA[duomi靶场（变量覆盖）获取webshell]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/135070774</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/135070774</guid><author>qq_61529962</author><pubDate>Mon, 18 Dec 2023 20:24:50 +0800</pubDate><description><![CDATA[靶场小练习，理解变量覆盖]]></description><category></category></item><item><title><![CDATA[网络安全之XXE漏洞总结（pikachu靶场案例解析）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/135013543</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/135013543</guid><author>qq_61529962</author><pubDate>Fri, 15 Dec 2023 12:47:13 +0800</pubDate><description><![CDATA[xxe漏洞原理解析，php靶场案例，pikachu靶场]]></description><category></category></item><item><title><![CDATA[SCMS系统基于PHP的XXE漏洞分析]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/135012683</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/135012683</guid><author>qq_61529962</author><pubDate>Fri, 15 Dec 2023 11:20:20 +0800</pubDate><description><![CDATA[xml漏洞，XXE，SCMS漏洞分析，PHP，附带靶场代码]]></description><category></category></item><item><title><![CDATA[Typecho靶场PHP反序列化漏洞解析]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/135001237</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/135001237</guid><author>qq_61529962</author><pubDate>Thu, 14 Dec 2023 18:24:29 +0800</pubDate><description><![CDATA[Typecho靶场中基于PHP的反序列化漏洞解析（获取到php探针为例）]]></description><category></category></item><item><title><![CDATA[文件上传漏洞常见方法]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134862255</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134862255</guid><author>qq_61529962</author><pubDate>Thu, 07 Dec 2023 18:48:07 +0800</pubDate><description><![CDATA[00截断是操作系统层的漏洞，由于操作系统是C语言或汇编语言编写的，这两种语言在定义字符串时，都是以\0（即0x00）作为字符串的结尾。00截断通常用来绕过web软waf的白名单限制。仅支持服务器为windows，在windows的时候如果文件名+"::$DATA"会把::$DATA之后的数据当成文件流处理,不会检测后缀名，且保持::$DATA之前的文件名，他的目的就是不检查后缀名。例如:"phpinfo.php::$DATA" Windows会自动去掉末尾的::$DATA变成"phpinfo.php"]]></description><category></category></item><item><title><![CDATA[Linux安装部署Docker]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134838837</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134838837</guid><author>qq_61529962</author><pubDate>Wed, 06 Dec 2023 19:21:21 +0800</pubDate><description><![CDATA[如何在虚拟机上配置docker环境安装docker服务？]]></description><category></category></item><item><title><![CDATA[centos7/centos6.8单用户模式修改密码]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134817358</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134817358</guid><author>qq_61529962</author><pubDate>Wed, 06 Dec 2023 18:49:22 +0800</pubDate><description><![CDATA[centos7

开机出现此页面按e


键盘控制往下翻找到 ro 改为 rw init=sysroot/bin/sh；




按 Ctrl+x 执行
	进入如下界面后输入chroot /sysroot回车


输入passwd根据提示输入两次新密码回车确认


完成后输入 touch /.autorelabel 更新系统信息
	退出 exit


然后输入reboot命令重启用root账户和刚才设置的密码登录即可；


centos6.8

与上面centos7相似，开机出现系统选项时按e
	在以下界面]]></description><category></category></item><item><title><![CDATA[Linux软件包管理、进程管理、用户权限、特殊权限管理]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134815619</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134815619</guid><author>qq_61529962</author><pubDate>Tue, 05 Dec 2023 20:36:49 +0800</pubDate><description><![CDATA[Linux软件包管理Centos/Ubuntu、进程管理分析、用户权限管理umask、特殊权限管理SetUID、SetGID、Sticky BIT操作]]></description><category></category></item><item><title><![CDATA[Linux的磁盘分区与扩容（centos7）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134814537</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134814537</guid><author>qq_61529962</author><pubDate>Tue, 05 Dec 2023 19:36:40 +0800</pubDate><description><![CDATA[以下为fdiskLinux磁盘挂载分区创建LVM逻辑卷。]]></description><category></category></item><item><title><![CDATA[VMware、Linux网络配置]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134651402</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134651402</guid><author>qq_61529962</author><pubDate>Mon, 27 Nov 2023 20:07:12 +0800</pubDate><description><![CDATA[学习了解Linux系统的网络通信。]]></description><category></category></item><item><title><![CDATA[ls: cannot open directory ‘.‘: Permission denied（docker容器中root用户对挂载文件没有权限）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134604901</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134604901</guid><author>qq_61529962</author><pubDate>Fri, 24 Nov 2023 21:50:51 +0800</pubDate><description><![CDATA[在Linux系统中，控制资源访问权限的一般是判断一个用户是否拥有这个文件的读写执行权限，在这种情况下，root用户就显得无所不能，只要拿到拿到root权限，你的服务器就完完全全的沦陷了。为了避免这种情况，就出现了SELinux模块。它会去匹配你这个进程是否对这个资源有访问权限，就算你是root用户也得经过SELinux的审核。]]></description><category></category></item><item><title><![CDATA[Linux系统中MYSQL服务如何创建用户并设置权限以及数据库忘记密码如何登录修改密码]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134584095</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134584095</guid><author>qq_61529962</author><pubDate>Thu, 23 Nov 2023 20:25:22 +0800</pubDate><description><![CDATA[本文讲解MySQL服务中不同的用户对不同的数据库操作的权限的配置，如何跳过密码验证登录数据库。]]></description><category></category></item><item><title><![CDATA[搭建LAPM （Linux、Apache、PHP、MYSQL）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134520168</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134520168</guid><author>qq_61529962</author><pubDate>Tue, 21 Nov 2023 18:42:27 +0800</pubDate><description><![CDATA[本篇文章讲解了如何在Linux系统上搭建自己的web服务，并在windows浏览器中展示。安装各个模块，配置虚拟机与主机之间的通信网络（DHCP、static、桥接等）]]></description><category></category></item><item><title><![CDATA[快速搭建WAMP（Windows、Apache、MySQL、PHP）]]></title><link>https://blog.youkuaiyun.com/qq_61529962/article/details/134479073</link><guid>https://blog.youkuaiyun.com/qq_61529962/article/details/134479073</guid><author>qq_61529962</author><pubDate>Sat, 18 Nov 2023 16:01:27 +0800</pubDate><description><![CDATA[在windows系统快速搭建WAMP，搭建自己的服务器和网站。]]></description><category></category></item></channel></rss>