Delayed injection Due to network problems and other reasons, if the timeout is too short, the blasting may be inaccurate, but if the timeout is set too long, the blasting time cost will increase. Principle Through the condition in if, if it is true, it will sleep, otherwise it will not sleep Here, the first […]
Tag: blas
Brute force cracking [Verification code bypass, token blast-proof] shooting range experiment
Practical pre-statement The procedures (methods) involved in the article may be offensive and are only for security research and learning purposes. If readers use the information for other purposes, the user shall bear all legal and joint liability. The author of the article does not assume any legal and joint liability. 1. Introduction to BurpSuite […]
Using python to implement zip blasting
Experimental principle The Python zipfile module is used to compress and decompress zip format encoding. To perform related operations, you first need to instantiate a ZipFile object. ZipFile accepts a compressed package name in string format as its required parameter. The second parameter is an optional parameter, indicating the open mode, similar to file operations. […]
Dirty data bypasses WAF, Yakit blasts base64-encoded passwords, and SSH passwordless login to the victim host
Article directory waf, Yakit, ssh skills waf dirty data bypass Yakit tools Explode plaintext passwords in base64-encoded format SSH Practical operation waf, Yakit, ssh skills waf dirty data bypass Take the file upload function of pikachu shooting range as an example Upload a Trojan image Shows blocked. Find the form-data; field, add a semicolon, and […]
How to detect BLASTPASS vulnerabilities in WebP files
Author: Matt Suiche Translator: Doris Liu Please indicate for reprinting Introduction Compression algorithms show us once again that they are taking over the Internet. My first exposure to compression algorithms was in 2007, when I was reversing Windows hibernation files to reimplement the now well-known Microsoft LZXpress algorithm. Later I discovered that most of Microsoft’s […]
CUDA–cublas–inverse of matrix (0)
There are many ways to use CUDA to solve the inverse of a matrix. You can also write your own kernel function to implement it. I checked the CSDN Cublas’s method for solving matrix inverses, but the author’s writing is rather cumbersome, and other people who watch and learn will find it difficult to understand. […]
Completely blasted MyBatis-Plus? Come and experience the elegance and charm of MyBatis-Flex!
Popular articles from past issues: 1. Javalin: a lightweight Web Framework 2. MySQL index failure cannot escape these 8 scenarios 3. MyBatis plug-in + annotation to easily achieve data desensitization 4. Selection of 8 mainstream data migration tool technologies, yyds! 5. After using Stream, the code becomes uglier and uglier? 1. What is Mybatis-Flex? Mybatis-Flex […]
Dumb: A fast and scalable domain blasting tool
About Dumb Dumb is a powerful and fast-running domain name blasting tool, which can help researchers to quickly blast and enumerate target domain names, and supports custom function extensions. Subdomain Explosion If the domain name you provide is DUMB.dumain.com, where DUMB is the subdomain name Mask, the content of the dictionary is as follows: www […]
5 Tips to Blast Your React Components
Recently, I read some Ant Design component source codes and learned some useful skills. Let me share them in this article. First, we create a React project with create-react-app (select the typescript template): npx create-react-app –template=typescript component-test Enter the project directory and run the development service: npm run start Then import antd: npm install –save […]
Intranet lateral movement-&Exchange service&with account CVE vulnerability&without account password blasting
Intranet horizontal movement – & amp; Exchange service & amp; Account CVE vulnerability & amp; No account password blasting 1. Introduction to Exchange 2. Exchange test case 2.1. Intranet Exchange Test Case 2.1.1. Service detection 2.1.1.1. SPN scanning 2.1.1.2. Port scanning 2.1.2. Script probes 2.1.2.1. Proxy login 2.1.2.2. Probe test 2.1.3. Intranet blasting 2.1.3.1. Collection […]