当前位置:网站首页>Supporting title of the book from 0 to 1: ctfer's growth road (Zhou Geng)
Supporting title of the book from 0 to 1: ctfer's growth road (Zhou Geng)
2022-07-06 06:52:00 【Borrow ZJ article [de]bvxie】
Here is the custom directory title
Common collection
Release prompt :
Use dirbuster Tool for web directory scanning ,⼯ Yes kali⾃ belt ,
cd /usr/share/dirbuster
java -jar DirBuster-1.0-RC1.jar
use URL Fuzz, You can specify a directory , Specify scan admin All the files under the directory ,dir Represents every line of the dictionary
/admin/{dir}.php This is blasting admin All under directory php file
perhaps
Or is it dirsearch course ,
forehead , The environment was also checked ,,, Didn't sweep it out , Try to do it yourself
/robots.txt
Get a hint , Visit available :flag1:n1book{info_1
/index.php~
Get a hint , Visit available :flag2:s_v3ry_im
.index.php.swp
You'll get a file
I read this question wp, The software still doesn't understand , Try again in a few days .
Careless Xiao Li
Git test , Use GitHack The script tests it , course !kali It has its own Git、Python2 and Python3. Switch to virtual machine … Mainly in the second half of the day GitHack, Failed all the time !
We found the reason !!! Not solve , Looking around for information, I found another tool scrabble Can replace it , Tutorial links !
Open terminal in folder ,
./scrabble + website ls
see
cat + file
SQL Inject -1
Find the injection point ,
边栏推荐
- Chapter 7 - thread pool of shared model
- The ECU of 21 Audi q5l 45tfsi brushes is upgraded to master special adjustment, and the horsepower is safely and stably increased to 305 horsepower
- AI on the cloud makes earth science research easier
- Pallet management in SAP SD delivery process
- hydra常用命令
- Embed UE4 program into QT interface display
- Successfully solved typeerror: data type 'category' not understood
- ROS学习_基础
- 【软件测试进阶第1步】自动化测试基础知识
- UNIPRO Gantt chart "first experience": multi scene exploration behind attention to details
猜你喜欢
18.多级页表与快表
《从0到1:CTFer成长之路》书籍配套题目(周更)
Traffic encryption of red blue confrontation (OpenSSL encrypted transmission, MSF traffic encryption, CS modifying profile for traffic encryption)
LeetCode - 152 乘积最大子数组
Windows Server 2016 standard installing Oracle
云上有AI,让地球科学研究更省力
Chapter 7 - thread pool of shared model
What are the characteristics of trademark translation and how to translate it?
Phishing & filename inversion & Office remote template
AI on the cloud makes earth science research easier
随机推荐
26岁从财务转行软件测试,4年沉淀我已经是25k的测开工程师...
librosa音频处理教程
At the age of 26, I changed my career from finance to software testing. After four years of precipitation, I have been a 25K Test Development Engineer
同事上了个厕所,我帮产品妹子轻松完成BI数据产品顺便得到奶茶奖励
Day 239/300 注册密码长度为8~14个字母数字以及标点符号至少包含2种校验
因高额网络费用,Arbitrum 奥德赛活动暂停,Nitro 发行迫在眉睫
P5706 [deep foundation 2. Example 8] redistributing fat house water -- February 13, 2022
The registration password of day 239/300 is 8~14 alphanumeric and punctuation, and at least 2 checks are included
After sharing the clone remote project, NPM install reports an error - CB () never called! This is an error with npm itself.
GET 和 POST 请求类型的区别
Fedora/REHL 安装 semanage
E-book CHM online CS
How to translate professional papers and write English abstracts better
Changes in the number of words in English papers translated into Chinese
Database basics exercise part 2
The ECU of 21 Audi q5l 45tfsi brushes is upgraded to master special adjustment, and the horsepower is safely and stably increased to 305 horsepower
Data security -- 13 -- data security lifecycle management
Do you really know the use of idea?
接口自动化测试框架:Pytest+Allure+Excel
AttributeError: Can‘t get attribute ‘SPPF‘ on <module ‘models. common‘ from ‘/home/yolov5/models/comm