https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/Recent content in Xman3夏令营 on 蛇索尼 AidenHugo -- gohugo.iozh-CNshesl-meow@qq.com (佘崧林)shesl-meow@qq.com (佘崧林)Tue, 30 Jul 2019 11:01:03 +0800https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day2/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day2/0x00: Recon 信息搜集 → 社会工程学 0x01: Encode What is encoding? (From Stack-Overflow) The only thing that a computer can store is bytes. To store anything in a computer, you must first encode it. An encoding is a format to represent audio, images, text, etc in bytes. 二进制编码 Python中与二进制相https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day9/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day9/OS命令注入 与OS命令注入攻击相关的模块：eval()、os.system()、os.popen*、subprocess.popenos.shttps://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day5/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day5/所需知识 HTTP抓包/修改：Http请求、响应流程 web前端：Cookie、缓存、跨域问题、编码（url编码、html实体编码、js编码） whttps://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day6/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day6/sql注入 sql盲注脚本 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 import requests import re import sys p = re.compile(r'''ID: (.+?)&nbspx:''') ans = '' for pos in range(1,33): l = 0 r = 127 cookies = {"PHPSESSID":"tf7511brt2272n9ne5i8dj6o35"} data = {"x": "1",https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day13/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day13/Https下的Web同源安全问题研究 XSS Cookie基础 → 同源策略 Cookie SOP相比Web SOP： 仅以domain/path作为同源限制 不区分端口 不https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day7/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day7/前置知识 Http协议 url说明 协议 http + 用户密码 user@pass +ip地址 127.0.0.1 + 端口port 8080 + 页面 index.php + 参数 ?id=123 + 锚点 #123 Http(s)协议：URL、HOST、Uhttps://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day8/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day8/PHP代码审计 什么是代码审计：是指对源代码进行检查，寻找代码的bug，这里主要寻找可以导致安全漏洞的bug 代码审计的技巧（程序的两大根本：变https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day12/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day12/XSS XSS自动化挖掘。重点在于输入与输出。 SQl注入 Cookie、header、url、请求参数中均有可能触发。 PS：mysql常见的延时注入https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day3/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day3/密码学简介 一般来说，密码学的设计者根本目标是保障信息以及信息系统的以下几个方面的特性： 机密性（Confidentiality）、完整性（Inhttps://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day4/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day4/模数攻击https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day15/Tue, 30 Jul 2019 11:01:03 +0800shesl-meow@qq.com (佘崧林)https://blog.haitai-social.com/note/%E7%B3%BB%E7%BB%9F%E7%90%86%E8%AE%BA%E8%AF%BE%E7%A8%8B/xman3%E5%A4%8F%E4%BB%A4%E8%90%A5/day15/Fake AP