—⚠️— 姜子牙钓鱼，愿者上钩 请不要带着脾气进来，也别带着脾气离开 其实我一直有在想做一个文档供自己查阅；反正也没啥人来看，就当给你们分享一些经验吧！ 我分享的工具 请确保无威胁后在下载 分享的工具皆携带密码 Statistical data Visitors (Since 2020/10/25) 团队XRsec ☆天文学上指宇宙间能发光的或反射光的天体；一般指夜间天空中发光的天体：～球。恒～。行（xíng ）～。卫～。披～戴月。 星冉 我希望自己能向星星一样冉冉发光团队名字也叫星冉，可以在漏洞盒子找到我们，目前成员只有几个，专注SRC我曾经建立了一个学习群，结果惹了一身骚，所以以后不会在公益了，吾辈当自强 欢迎关注公众号

靶机介绍目标介绍 ：Debian Linux （目标是个网上在线银行系统） 攻击主机 ： kali Linux 利用技术： shellshock破壳漏洞<–cgi-bin–> GTFOBins提权 github开源源码泄露 打靶开始1.信息收集（偷个懒直接上命令了） sudo arp-scan -lStarting arp-scan 1.9.7 with 256 hosts (https://github.com/royhills/arp-scan)192.168.0.102 08:00:27:c5:88:8d PCS Systemtechnik GmbH$ nmap -p- -sC -sV 192.168.0.102Starting Nmap 7.91 ( https://nmap.org ) at 2021-10-30 02:53 EDTNmap scan report for localhost (192.168.0.102)Host is up (0.0015s latency).Not shown: 65533 closed portsPORT S ...

Docker Action IniTDockerfileLABEL maintainer="xrsec"LABEL mail="troy@zygd.site"LABEL Github="https://github.com/XRSec/Code-Server-Update"RUN apt update -y && apt upgrade -y \ && apt install -y ncurses-bin \ && apt clean -y \ RUN yum update -y && yum upgrade -y \ && yum install ncurses -y \ && yum clean all -y \ WORKDIRENTRYPOINT ["/goby.sh"]EXPOSE 80ENV TZ='Asia/Shanghai'ENV LANG & ...

Centos inityum update -y && yum upgrade -yyum install wget unzip git util-linux-user net-tools iputils util-linux-user zsh ncurses -ychsh -s /usr/bin/zshsh -c "$(wget https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh -O -)"git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlightinggit clone https://github.com/zsh-users/zsh-autosuggestions.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom&# ...

Docker Centos initdocker run -it --name server centos:latest yum update -y && yum upgrade -y && yum install wget git curl sudo net-tools iputils util-linux-user zsh ncurses -ychsh -s /usr/bin/zshsh -c "$(wget https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh -O -)"git clone https://github.com/zsh-users/zsh-syntax-highlighting.git ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlightinggit clone https://github.com/zsh-users/zsh-autosugge ...

趣玩Github Action 在 GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程。 您可以发现、创建和共享操作以执行您喜欢的任何作业（包括 CI/CD），并将操作合并到完全自定义的工作流程中。 Action 能干啥？都能干，前段时间还有人挖矿 下面所有的用户名和仓库用 laowang 和 zhangshan 代替 Actions secrets一些不方便的隐私的东西可以放进去，然后用环境变量代替 https://github.com/laowang/zhangshan/settings/secrets/actions # 推荐变量名DOCKERHUB_PASSWORD 123456 ${{ secrets.DOCKERHUB_PASSWORD }}DOCKERHUB_TOKEN 123456 ${{ secrets.DOCKERHUB_TOKEN }}DOCKERHUB_USERNAME laowang ${{ secrets.DOCKE ...

Github Action Public_PrivateThis is a set of communication interactions between Github open source and privacyFunction: Synchronize README.md Sync hub.docker Overview The private warehouse is successfully constructed and the information is sent to the public warehouse to complete the construction Build containers and push to Aliyun, Hub.docker, etc. Open source warehouse receives signal to update README 这是一套关于Github 开源和隐私之间的通信交互功能： 同步 README.md 同步 hub.docker 的 Overview 私有仓库构建成功发送信息到公有仓库 ...

Please compile manually, github action may time out USEFROM xrsec/php:latest | FROM xrsec/php:5.6 | FROM xrsec/php:7.4 | FROM xrsec/php:initLABEL From="xrsec"ARG TARGETPLATFORM RUN mkdir -p /www /www/server /www/bak /www/server/php74 /www/server/php56COPY --from=xrsec/php:7.4 /www/server/php74 /www/server/php74COPY --from=xrsec/php:5.6 /www/server/php56 /www/server/php56 RUN ln -sf /www/server/php74/bin/php /www/env/php74 \ && ln -sf /www/server/php74/sbin/php-fpm ...

README This warehouse code and container are prohibited from commercial use OracleJava Dockerfile official Oracle Java Step Download Split split -b 50m jdk-8u301-linux-x64.rpm jdk-8u301-linux-amd64-split -b 50m jdk-11.0.12_linux-x64_bin.rpm jdk-11.0.12_linux-amd64-split -b 50m jdk-11.0.12_linux-aarch64_bin.rpm jdk-11.0.12_linux-arm64-split -b 50m jdk-16.0.2_linux-x64_bin.rpm jdk-16.0.2_linux-amd64-split -b 50m jdk-16.0.2_linux-aarch64_bin.rpm jdk-16.0.2_linux-arm64-split -b 50m jdk-17_li ...

用于格式化 Markdown，粘贴到微信公众号的工具。 在线使用地址https://wxweb.zygd.site/ Docker 部署docker run -it -d --restart=always -p 5052:80 --name wxweb wxweb:latest 问题反馈 & 建议https://github.com/softwarefly/online-markdown/issues/new 致谢 @Phodal @barretlee @dyc87112 @softwarefly

Run VS Code on any machine anywhere and access it in the browser. Highlights Code on any device with a consistent development environment Use cloud servers to speed up tests, compilations, downloads, and more Preserve battery life when you’re on the go; all intensive tasks run on your server RequirementsSee requirements for minimum specs, as well as instructions on how to set up a Google VM on which you can install code-server. TL;DR: Linux machine with WebSockets enabled, 1 GB RAM, and ...

About Attack surface mapping The new generation of network security technology achieves rapid security emergency through the establishment of a complete asset database for the target. Info127.0.0.1:15001Username: gobyPassword: docker logs goby | grep " Goby_PassWord :" Github : https://github.com/XRSec/Goby-Docker.git UseInStalldocker run -it --name goby -p 15001:15001 -e password=password -e port=15001 xrsec/goby:latest# Installing containers or updating goby requires downloading ...

DOCKERHUB_USERNAMEDOCKERHUB_TOKEN Lite versionCanvas_Docker_Build.ymlname: Canvas Docker Buildon: push: branches: - main schedule: - cron: '0 0 * * MON'jobs: Canvas_Docker_Build: name: Canvas Docker Build runs-on: ubuntu-latest steps: - name: Private Actions Checkout uses: actions/checkout@v2.3.4 - name: Docker Setup QEMU uses: docker/setup-qemu-action@v1.2.0 - name: Docker Setup Buildx uses: docker/se ...

刷机恩山无线论坛 小米路由器4C 刷 OpenWrt 废话不多说哈 dd if=/dev/mtd0 of=/tmp/all.bindd if=/dev/mtd1 of=/tmp/bootloader.bindd if=/dev/mtd3 of=/tmp/eeprom.bin#nc -l 9995 > all.bin[ mi4c ] nc 10.0.1.162 9995 < /tmp/all.binnc -l 9995 > bootloader.bin[ mi4c ] nc 10.0.1.162 9995 < /tmp/bootloader.binnc -l 9995 > eeprom.bin[ mi4c ] nc 10.0.1.162 9995 < /tmp/eeprom.bin## 注意方向[ mi4c ] nc -l 9995 < eeprom.binnc 10.0.1.162 9995 > /tmp/eeprom.bin OpenWrt 无线中继爱一枝梅 CSDN 配置爱远眺 # 屏蔽关键字 因为你懂得过期时间/剩余流量/QQ群/ ...

今天准备整理书签，首选 Visual Studio Code 正则过滤 + Sublime Text 多选删除， 删除到一半，我需要知道目标网址的 description img 等信息， 我想干脆 requests 请求 text 然后再正则很快就搞定了，没想到 请求 CSDN 无内容 requests 请求python3 -c 'import requestsrequests.packages.urllib3.disable_warnings()print(requests.get("https://blog.csdn.net/qq_33451584/article/details/119834318", timeout=5, verify=False).content.decode("utf-8"))' urllib3请求python3 -c 'import urllib3print(urllib3.PoolManager().urlopen("GET", "https://b ...