方术与方术师

字数统计: 775字   |   阅读时长≈ 2分 

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
🎵
叶えるために 生きてるんだって
存活于世，我即是为追逐梦想
叫びたくなるよ 聞こえていますか?
多想大声喊出 你听到了吗？
無難になんて やってられないから
就此平庸终生，我可无法接受
…帰る場所もないの
…反正我已无路可退
優しさには いつも感謝してる
对你的温柔，我一直心怀感激
だから強くなりたい(I'm on the way)
所以我才对坚强心生向往(I'm on the way)
懐かしくなる こんな痛みも歓迎じゃん
令我勾起过往怀念种种 这些痛楚，我就算欢迎又有何妨？

展开全文 >>

展开全文 >>

2021/3/30的修行

字数统计: 784字   |   阅读时长≈ 3分

shodan打折了。原价45刀现价4刀。血赚，必买。

https://shodan.io

1. 上班

2. 继续学习《深入理解Java虚拟机》

3. 博客关闭browser sync的错误影响

4. 博客网易云音乐的高度从固定改为比例

5. 继续跟进vfs的bug修复

https://github.com/apache/commons-vfs/pull/168

6. HackTheBox Alive 【Delivery】 放弃

判断。超过目前段位。终止尝试。

展开全文 >>

展开全文 >>

2021/3/29的修行

字数统计: 1.3k字   |   阅读时长≈ 7分

1. 上班

2. 塑形课

3. 继续学习《设计模式之禅》

4. SDL_GameControllerDB_Util发新版本

5. HackTheBox Retired 【Bashed】打掉

5.1 gobuster

。。。因为昨天htb的网络条件太糟糕了所以数据太脏了，得洗一下

gobuster输出

写个java脚本洗一下吧

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
package com.xenoamess;

import org.apache.commons.io.IOUtils;

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.util.regex.Pattern;

public class Main {

    public static void main(String[] args) throws IOException {
        Pattern pattern = Pattern.compile("^/\\w*\\s*\\(Status: ");

        try (BufferedReader reader = IOUtils.buffer(new InputStreamReader(Main.class.getClassLoader().getResourceAsStream("1.txt")))) {
            while (true) {
                String line = reader.readLine();
                if (line == null) {
                    break;
                }
                if (pattern.matcher(line).find()) {
                    System.out.println(line);
                }
            }
        }
    }
}

展开全文 >>

展开全文 >>

HackTheBox开桥

字数统计: 215字   |   阅读时长≈ 1分

打开从htb官方下载下来的ovpn文件

在<ca>上面添加一行socks-proxy IP 端口

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
client
dev tun
proto udp
remote edge-us-dedivip-1.hackthebox.eu 1337
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
comp-lzo
verb 3
cipher AES-128-CBC
auth SHA256
key-direction 1
socks-proxy 127.0.0.1 1089
<ca>
......

如果你的连接是http则相应为

展开全文 >>

展开全文 >>

2021/3/26的修行

字数统计: 4k字   |   阅读时长≈ 23分

1. 上班

2. 修正博客样式

3. SDL_GameControllerDB_Util发新版本

4. HackTheBox Retired 【Devel】打掉 （试过 没思路 最终看了tutorial……哭）

4.1 nmap

惯例nmap

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
$ nmap -v -A -Pn 10.129.123.162 
Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times will be slower.
Starting Nmap 7.91 ( https://nmap.org ) at 2021-03-27 00:32 CST
NSE: Loaded 153 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 00:32
Completed NSE at 00:32, 0.00s elapsed
Initiating NSE at 00:32
Completed NSE at 00:32, 0.00s elapsed
Initiating NSE at 00:32
Completed NSE at 00:32, 0.00s elapsed
Initiating Parallel DNS resolution of 1 host. at 00:32
Completed Parallel DNS resolution of 1 host. at 00:32, 0.01s elapsed
Initiating Connect Scan at 00:32
Scanning 10.129.123.162 [1000 ports]
Discovered open port 21/tcp on 10.129.123.162
Discovered open port 80/tcp on 10.129.123.162
Completed Connect Scan at 00:33, 25.62s elapsed (1000 total ports)
Initiating Service scan at 00:33
Scanning 2 services on 10.129.123.162
Completed Service scan at 00:33, 6.65s elapsed (2 services on 1 host)
NSE: Script scanning 10.129.123.162.
Initiating NSE at 00:33
NSE: [ftp-bounce] PORT response: 501 Server cannot accept argument.
Completed NSE at 00:33, 6.72s elapsed
Initiating NSE at 00:33
Completed NSE at 00:33, 4.78s elapsed                                                                                                                                                                                                                                                    
Initiating NSE at 00:33                                                                                                                                                                                                                                                                  
Completed NSE at 00:33, 0.00s elapsed                                                                                                                                                                                                                                                    
Nmap scan report for 10.129.123.162                                                                                                                                                                                                                                                      
Host is up (0.25s latency).                                                                                                                                                                                                                                                              
Not shown: 998 filtered ports                                                                                                                                                                                                                                                            
PORT   STATE SERVICE VERSION                                                                                                                                                                                                                                                             
21/tcp open  ftp     Microsoft ftpd                                                                                                                                                                                                                                                      
| ftp-anon: Anonymous FTP login allowed (FTP code 230)                                                                                                                                                                                                                                   
| 03-18-17  01:06AM       <DIR>          aspnet_client                                                                                                                                                                                                                                   
| 03-17-17  04:37PM                  689 iisstart.htm                                                                                                                                                                                                                                    
|_03-17-17  04:37PM               184946 welcome.png                                                                                                                                                                                                                                     
| ftp-syst:                                                                                                                                                                                                                                                                              
|_  SYST: Windows_NT                                                                                                                                                                                                                                                                     
80/tcp open  http    Microsoft IIS httpd 7.5                                                                                                                                                                                                                                             
| http-methods:                                                                                                                                                                                                                                                                          
|   Supported Methods: OPTIONS TRACE GET HEAD POST                                                                                                                                                                                                                                       
|_  Potentially risky methods: TRACE                                                                                                                                                                                                                                                     
|_http-server-header: Microsoft-IIS/7.5                                                                                                                                                                                                                                                  
|_http-title: IIS7                                                                                                                                                                                                                                                                       
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows                                                                                                                                                                                                                                 
                                                                                                                                                                                                                                                                                         
NSE: Script Post-scanning.                                                                                                                                                                                                                                                               
Initiating NSE at 00:33                                                                                                                                                                                                                                                                  
Completed NSE at 00:33, 0.00s elapsed                                                                                                                                                                                                                                                    
Initiating NSE at 00:33                                                                                                                                                                                                                                                                  
Completed NSE at 00:33, 0.00s elapsed                                                                                                                                                                                                                                                    
Initiating NSE at 00:33                                                                                                                                                                                                                                                                  
Completed NSE at 00:33, 0.00s elapsed                                                                                                                                                                                                                                                    
Read data files from: /usr/bin/../share/nmap                                                                                                                                                                                                                                             
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .                                                                                                                                                                                           
Nmap done: 1 IP address (1 host up) scanned in 44.61 seconds

4.2 信息搜集

google Microsoft IIS httpd 7.5 cve

得到 https://www.cvedetails.com/vulnerability-list/vendor_id-26/product_id-63/version_id-250989/Microsoft-Internet-Information-Server-7.5.html

展开全文 >>

展开全文 >>

2021/3/24的修行

字数统计: 988字   |   阅读时长≈ 5分

说了要在2022/3/12前拿到OSCP那么就要在2022/3/12前拿到OSCP。

呵。吾等绝不会输，至少不会输给自己。

1. 上班

2. 继续学习《深入理解Java虚拟机》

3. HackTheBox Challenge 【ScriptKiddie】 再次努力了，再次没打掉

爆破了一天，没有爆掉。收手吧阿祖.jpg

4. SDL_GameControllerDB_Util发新版本

5. 康复

6. HackTheBox Challenge 【Netmon】 没看教程拿到user，看教程提权拿root

6.1 nmap

惯例nmap

展开全文 >>

展开全文 >>

tag:

    缺失模块。
    1、请确保node版本大于6.2
    2、在博客根目录（注意不是yilia-plus根目录）执行以下命令：
    npm i hexo-generator-json-content --save

    3、在根目录_config.yml里添加配置： 

      jsonContent:
    meta: false
    pages: false
    posts:
      title: true
      date: true
      path: true
      text: false
      raw: false
      content: false
      slug: false
      updated: false
      comments: false
      link: false
      permalink: false
      excerpt: false
      categories: false
      tags: true

自称为XenoAmess的方术师。

为了得到【意义】而进行各种各样的修行。

Hack The Box