—⚠️— 姜子牙钓鱼，愿者上钩 请不要带着脾气进来，也别带着脾气离开 其实我一直有在想做一个文档供自己查阅；反正也没啥人来看，就当给你们分享一些经验吧！ 我分享的工具 请确保无威胁后在下载 分享的工具皆携带密码 Statistical data Visitors (Since 2020/10/25) 团队XRsec ☆天文学上指宇宙间能发光的或反射光的天体；一般指夜间天空中发光的天体：～球。恒～。行（xíng ）～。卫～。披～戴月。 星冉 我希望自己能向星星一样冉冉发光团队名字也叫星冉，可以在漏洞盒子找到我们，目前成员只有几个，专注SRC我曾经建立了一个学习群，结果惹了一身骚，所以以后不会在公益了，吾辈当自强 欢迎关注公众号

狗东西的防黑之路 本文章基于 SSH 出发 作者很随性，随缘写文 涉及知识面：openssh ,proxy ,fwknop ,docker OPENSSHOpenSSH (also known as OpenBSD Secure Shell[a]) is a suite of secure networking utilities based on the Secure Shell (SSH) protocol, which provides a secure channel over an unsecured network in a client–server architecture.[4][5] OpenSSH started as a fork of the free SSH program developed by Tatu Ylönen; later versions of Ylönen’s SSH were proprietary software offered by SSH Communications Security.[6] OpenSSH was first ...

靶机介绍目标介绍 ：Debian Linux （目标是个网上在线银行系统） 攻击主机 ： kali Linux 利用技术： shellshock破壳漏洞<–cgi-bin–> GTFOBins提权 github开源源码泄露 打靶开始1.信息收集（偷个懒直接上命令了） sudo arp-scan -lStarting arp-scan 1.9.7 with 256 hosts (https://github.com/royhills/arp-scan)192.168.0.102 08:00:27:c5:88:8d PCS Systemtechnik GmbH$ nmap -p- -sC -sV 192.168.0.102Starting Nmap 7.91 ( https://nmap.org ) at 2021-10-30 02:53 EDTNmap scan report for localhost (192.168.0.102)Host is up (0.0015s latency).Not shown: 65533 closed portsPORT S ...

Docker Action IniTDockerfileLABEL maintainer="xrsec"LABEL mail="troy@zygd.site"LABEL Github="https://github.com/XRSec/Code-Server-Update"RUN apt update -y && apt upgrade -y \ && apt install -y ncurses-bin \ && apt clean -y \ RUN yum update -y && yum upgrade -y \ && yum install ncurses -y \ && yum clean all -y \ WORKDIRENTRYPOINT ["/goby.sh"]EXPOSE 80ENV TZ='Asia/Shanghai'ENV LANG & ...

Centos inityum update -y && yum upgrade -yyum install wget unzip git util-linux-user net-tools iputils util-linux-user zsh ncurses -ycurl -s https://gist.githubusercontent.com/ran-xing/0e47c9b793887d201bab9de2a07a740c/raw/83347d6e43e903c4cab8c27d32e401ef856f2bde/zsh_init.sh | bashsource ~/.zshrcsudo yum install -y yum-utilssudo yum remove docker \ docker-client \ docker-client-latest \ docker-common \ docker-latest \ ...

Docker Centos initdocker run -it --name server centos:latest yum update -y && yum upgrade -y && yum install wget git curl sudo net-tools iputils util-linux-user zsh ncurses -ychsh -s /usr/bin/zshsh -c "$(wget https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh -O -)"git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlightinggit clone https://github.com/zsh-users/zsh-autosugge ...

趣玩Github Action 在 GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程。 您可以发现、创建和共享操作以执行您喜欢的任何作业（包括 CI/CD），并将操作合并到完全自定义的工作流程中。 Action 能干啥？都能干，前段时间还有人挖矿 下面所有的用户名和仓库用 laowang 和 zhangshan 代替 Actions secrets一些不方便的隐私的东西可以放进去，然后用环境变量代替 https://github.com/laowang/zhangshan/settings/secrets/actions # 推荐变量名DOCKERHUB_PASSWORD 123456 ${{ secrets.DOCKERHUB_PASSWORD }}DOCKERHUB_TOKEN 123456 ${{ secrets.DOCKERHUB_TOKEN }}DOCKERHUB_USERNAME laowang ${{ secrets.DOCKE ...

Github Action Public_PrivateThis is a set of communication interactions between Github open source and privacyFunction: Synchronize README.md Sync hub.docker Overview The private warehouse is successfully constructed and the information is sent to the public warehouse to complete the construction Build containers and push to Aliyun, Hub.docker, etc. Open source warehouse receives signal to update README 这是一套关于Github 开源和隐私之间的通信交互功能： 同步 README.md 同步 hub.docker 的 Overview 私有仓库构建成功发送信息到公有仓库 ...

DRIFTINGBLUES: 6靶机介绍下载地址：https://download.vulnhub.com/driftingblues/driftingblues6_vh.ova难度：Easy运行环境：VirtualBox 攻击主机：kali 2021 目标主机：DRIFTINGBLUES: 6 打靶开始1.主机发现使用ARP扫描可以快速的发现当前网段所有的开启主机 2.端口扫描还是老套路 nmap -sV -sC -p- 192.168.0.104 Starting Nmap 7.91 ( https://nmap.org ) at 2021-10-10 02:06 EDTNmap scan report for 192.168.0.104Host is up (0.0019s latency).Not shown: 65534 closed portsPORT STATE SERVICE VERSION80/tcp open http Apache httpd 2.2.22 ((Debian))| http-robots.txt: 1 d ...

Please compile manually, github action may time out USEFROM xrsec/php:latest | FROM xrsec/php:5.6 | FROM xrsec/php:7.4 | FROM xrsec/php:initLABEL From="xrsec"ARG TARGETPLATFORM RUN mkdir -p /www /www/server /www/bak /www/server/php74 /www/server/php56COPY --from=xrsec/php:7.4 /www/server/php74 /www/server/php74COPY --from=xrsec/php:5.6 /www/server/php56 /www/server/php56 RUN ln -sf /www/server/php74/bin/php /www/env/php74 \ && ln -sf /www/server/php74/sbin/php-fpm ...

README This warehouse code and container are prohibited from commercial use OracleJava Dockerfile official Oracle Java Step Download Split split -b 50m jdk-8u301-linux-x64.rpm jdk-8u301-linux-amd64-split -b 50m jdk-11.0.12_linux-x64_bin.rpm jdk-11.0.12_linux-amd64-split -b 50m jdk-11.0.12_linux-aarch64_bin.rpm jdk-11.0.12_linux-arm64-split -b 50m jdk-16.0.2_linux-x64_bin.rpm jdk-16.0.2_linux-amd64-split -b 50m jdk-16.0.2_linux-aarch64_bin.rpm jdk-16.0.2_linux-arm64-split -b 50m jdk-17_li ...

用于格式化 Markdown，粘贴到微信公众号的工具。 在线使用地址https://wxweb.zygd.site/ Docker 部署docker run -it -d --restart=always -p 5052:80 --name wxweb wxweb:latest 问题反馈 & 建议https://github.com/softwarefly/online-markdown/issues/new 致谢 @Phodal @barretlee @dyc87112 @softwarefly

Run VS Code on any machine anywhere and access it in the browser. Highlights Code on any device with a consistent development environment Use cloud servers to speed up tests, compilations, downloads, and more Preserve battery life when you’re on the go; all intensive tasks run on your server RequirementsSee requirements for minimum specs, as well as instructions on how to set up a Google VM on which you can install code-server. TL;DR: Linux machine with WebSockets enabled, 1 GB RAM, and ...

About Attack surface mapping The new generation of network security technology achieves rapid security emergency through the establishment of a complete asset database for the target. Info127.0.0.1:15001Username: gobyPassword: docker logs goby | grep " Goby_PassWord :" Github : https://github.com/XRSec/Goby-Docker.git UseInStalldocker run -it --name goby -p 15001:15001 -e password=password -e port=15001 xrsec/goby:latest# Installing containers or updating goby requires downloading ...

DOCKERHUB_USERNAMEDOCKERHUB_TOKEN Lite versionCanvas_Docker_Build.ymlname: Canvas Docker Buildon: push: branches: - main schedule: - cron: '0 0 * * MON'jobs: Canvas_Docker_Build: name: Canvas Docker Build runs-on: ubuntu-latest steps: - name: Private Actions Checkout uses: actions/checkout@v2.3.4 - name: Docker Setup QEMU uses: docker/setup-qemu-action@v1.2.0 - name: Docker Setup Buildx uses: docker/se ...