<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[wocao___的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/wocao___</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; wocao___]]></copyright><item><title><![CDATA[vulhub-S2-008 远程代码执行漏洞-漏洞复现]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/113942076</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/113942076</guid><author>wocao___</author><pubDate>Mon, 22 Feb 2021 17:00:02 +0800</pubDate><description><![CDATA[S2-008 远程代码执行漏洞
影响版本: 2.1.0 - 2.3.1
测试环境搭建
docker-compose up -d

原理

S2-008 涉及多个漏洞，Cookie 拦截器错误配置可造成 OGNL 表达式执行，但是由于大多 Web 容器（如 Tomcat）对 Cookie 名称都有字符限制，一些关键字符无法使用使得这个点显得比较鸡肋。另一个比较鸡肋的点就是在 struts2 应用开启 devMode 模
式后会有多个调试接口能够直接查看对象信息或直接执行命令，正如 kxlzx 所提这种情况在生]]></description><category></category></item><item><title><![CDATA[vulhub struts2漏洞搭建与复现（s2-001  s2-005）]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/113874514</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/113874514</guid><author>wocao___</author><pubDate>Sat, 20 Feb 2021 00:20:02 +0800</pubDate><description><![CDATA[s2-001
github下载vulhub
git clone https://github.com/vulhub/vulhub.git

下载完成后进入目录vulhub/struts2/s2-001
docker-compose up -d       启动
docker ps查看容器运行状态

浏览器访问ip+端口

查看目录vulhub/struts2/s2-001中的readme中文说明

S2-001 远程代码执行漏洞
原理
参考 http://rickgray.me/2016/05/06/rev]]></description><category></category></item><item><title><![CDATA[PYTHON写服务器后门]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/111238538</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/111238538</guid><author>wocao___</author><pubDate>Tue, 15 Dec 2020 19:53:13 +0800</pubDate><description><![CDATA[PYTHON写服务器后门（my_netcat.py）
不用上传后门了，服务器支持python2.7即可写入
#!/usr/bin/python
import sys
import socket
import getopt
import threading
import subprocess

#定义一些全局变量
listen = False
command = False
upload = False
execute = ""
target = ""
upload_destination = ""
port]]></description><category></category></item><item><title><![CDATA[wingIDE7 python2.7 写TCP服务端]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/111213806</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/111213806</guid><author>wocao___</author><pubDate>Tue, 15 Dec 2020 14:57:23 +0800</pubDate><description><![CDATA[wingIDE7 python2.7 写TCP服务端
import socket 
import threading

bind_ip = "0.0.0.0" #监听任意地址
bind_port = 9999    #监听9999端口

server = socket.socket(socket.AF_INET,socket.SOCK_STREAM)

server.bind((bind_ip,bind_port))

server.listen(5)

print "[*] Listening on %s]]></description><category></category></item><item><title><![CDATA[wingIDE7 python2.7 写TCP客户端]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/111201672</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/111201672</guid><author>wocao___</author><pubDate>Tue, 15 Dec 2020 13:01:10 +0800</pubDate><description><![CDATA[wingIDE7 python2.7 写TCP客户端
import socket

target_host = "www.baidu.com"
target_port = 80

#建立socket对象
client = socket.socket(socket.AF_INET,socket.SOCK_STREAM)

#连接客户端
client.connect((target_host,target_port))

#发送数据，请求百度根目录
client.send("GET / HTTP/1.1\r\n]]></description><category></category></item><item><title><![CDATA[Python利用Pexpect实现与ssh进行交互的简单实现原理]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/105228747</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/105228747</guid><author>wocao___</author><pubDate>Tue, 31 Mar 2020 18:38:44 +0800</pubDate><description><![CDATA[假如我们要和一台ssh服务器进行交互ssh ‘xx.xx.xx.xx’
这时会问你Are you sure you want to continue connecting (yes/no)?
那么需要输入yes
接下来会提示输入密码  那么就要输入密码 xxxx
成功进入后执行命令
那么python库中的pexpect进行与输入并且判断做出不同的响应
简单实现原理
`import pexpect
...]]></description><category></category></item><item><title><![CDATA[Python 端口扫描器]]></title><link>https://blog.youkuaiyun.com/wocao___/article/details/105190612</link><guid>https://blog.youkuaiyun.com/wocao___/article/details/105190612</guid><author>wocao___</author><pubDate>Mon, 30 Mar 2020 15:33:29 +0800</pubDate><description><![CDATA[Python 端口扫描器
需要导入的模块socket,optparse
首先要获取输入的主机、端口名用optparse这个库
调用optparse.Optionparse()生成一个参数解析器
再用parser.add_option()指定这个脚本需要解析的参数是什么。
def main():
parser = optparse.OptionParser(“usage%prog” +" -H  -...]]></description><category></category></item></channel></rss>