- 博客(13)
- 收藏
- 关注
RSS订阅原创 you-get 视频下载
1.安装pip install you-get2.使用方法下载视频you-get https://www.视频的网址.com设置代理you-get -x 127.0.0.1:8080 'https://www.youtube.com/'设置路径/文件名you-get -o C:\mp4 -O a.mp4 'https://www.xxx.com'
2021-04-11 15:23:51
107
原创 crunch 字典生成
功能自定义生成各种有规律的密码字典基本语法crunch min max > 1.txt ('>'重定向 默认是用26字母)min 设置最小字符串长度max 设置最大字符串长度可选参数语法功能-o将生成的字段保存在指定文件-t指定密码输出格式-p指定元素组合-f使用模板特殊字符字符功能%代表数字^代表特殊符号@代表小写字母,代表大写字母各种用法crunch min max
2021-03-31 17:25:09
286
原创 upload-labs Pass-05
upload-labs Pass-05先看源码$is_upload = false;$msg = null;if (isset($_POST['submit'])) { if (file_exists(UPLOAD_PATH)) { $deny_ext = array(".php",".php5",".php4",".php3",".php2",".html",".htm",".phtml",".pht",".pHp",".pHp5",".pHp4",".pHp3",".pH
2021-03-29 14:45:37
136
原创 upload-labs Pass-04
upload-labs Pass-04这次的黑名单更加完善了$is_upload = false;$msg = null;if (isset($_POST['submit'])) { if (file_exists(UPLOAD_PATH)) { $deny_ext = array(".php",".php5",".php4",".php3",".php2",".php1",".html",".htm",".phtml",".pht",".pHp",".pHp5",".pHp
2021-03-29 14:43:11
232
原创 upload-labs Pass-03
upload-labs Pass-03先看源码$is_upload = false;$msg = null;if (isset($_POST['submit'])) { if (file_exists(UPLOAD_PATH)) { $deny_ext = array('.asp','.aspx','.php','.jsp'); $file_name = trim($_FILES['upload_file']['name']); $file_n
2021-03-29 14:34:20
182
原创 upload-labs Pass-02
upload-labs Pass-02先传文件试试提示文件类型不正确再次上传 并抓包 将类型改为image/jpeg
2021-03-29 14:28:09
98
原创 upload-labs Pass-01
upload-labs Pass-01先传文件试试开启抓包再传说明文件类型判断是在前端做的直接修改代码再传即可
2021-03-29 14:23:37
64
原创 Sqlilabs Less 8-10 Blind Injection
Sqlilabs Less 8-10 Blind Injection盲注类型题目Less 8 GET - Blind - Boolian Based - Single Quotes无论结果怎样都会显示 “You are in…”报错的时候没有回显这时用基于布尔型的盲注先猜库名长度 (正确时会显示"You are in…" 错误时不会显示) and length(database())=8%23这时知道了库有八个字符 开始猜第一个字符 and ascii(substr(database()
2021-03-29 14:11:03
81
原创 Sqlilabs Less 5-6 Double Injection
Sqlilabs Less 5-6 Double Injection报错注入Less 5 GET - Double Injection - Single Quotes - String给他一个id后出现了 “You are in…”也就是说没有回显点（前4关都有回显点）加上一个 ’ 后报错，也就是说我们得靠报错注入（也可以用盲注，这里先不考虑）十种MySQL报错注入这里我用extractvalue()出现结果，方法可行接下来在这做操作即可后面的操作与前4题差不多，但注意这里只
2021-03-29 10:20:32
79
原创 Sqlilabs Less 1-4
Sqlilabs Less 1-4 practice makes perfect 熟能生巧！Less 1 GET - Error based - Single quotes - String先给他个id在id=1后加上’ 发现注入点判断有几个字段order by x 根据第x个字段排序（如果没有第x个会报错，所以可以根据这个特点来判断有多少个字段）%23 因为编码问题’#‘就是’%23’ 在最后加#号注释掉最后面的语句直接联合查询 发现2,3处可以显示获取库名及基本信息，-1
2021-03-29 09:50:09
58
原创 python表情包爬虫
文章目录一、需要用到的模块二、开始写代码1.创建保存图片的文件夹2.创建请求头3.代码主体4.创建循环完整代码一、需要用到的模块import requests import osfrom bs4 import BeautifulSoup 还需要有一个 lxml库 但不需要导入BeautifulSoup 在 beautifulsoup4 的包下二、开始写代码1.创建保存图片的文件夹if not os.path.isdir("./img/"): #如果当前目录下没有img文件夹 o
2021-03-29 08:54:47
339
3
空空如也
空空如也
TA创建的收藏夹 TA关注的收藏夹
TA关注的人