Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit b068ec6

Browse files
No-GithubNo-Github
committed
update 2022年01月20日 10:35:30
1 parent 27236f1 commit b068ec6

24 files changed

Lines changed: 1088 additions & 65 deletions

File tree

‎1earn/Integrated/Linux/Speed-Linux.md‎

Lines changed: 16 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1635,6 +1635,12 @@ rm /var/lib/dpkg/updates/*
16351635
apt-get update
16361636
```
16371637

1638+
**debconf: DbDriver "config": /var/cache/debconf/config.dat is locked by another process: Resource temporarily unavailable**
1639+
```bash
1640+
rm /var/cache/debconf/*.dat
1641+
apt --fix-broken install
1642+
```
1643+
16381644
**禁用 Ubuntu 自动更新**
16391645
```bash
16401646
nano /etc/apt/apt.conf.d/20auto-upgrades
@@ -1821,7 +1827,10 @@ yum install -y dnf
18211827
```bash
18221828
dpkg -i xxxxx.deb # 安装软件
18231829
dpkg -R /usr/local/src # 安装路径下所有包
1824-
dpkg -L # 查看软件安装位置
1830+
dpkg -L xxxx # 查看软件安装位置
1831+
1832+
dpkg -l # 查看已经安装的软件
1833+
dpkg -r xxxx # 卸载
18251834
```
18261835

18271836
### Pacman
@@ -2676,8 +2685,8 @@ Linux 中每个硬件都被当做一个文件，包括磁盘。磁盘以磁盘
26762685

26772686
**分区**
26782687
```bash
2679-
fdisk -l # 查看磁盘情况
2680-
fdisk /dev/sdb # 创建系统分区
2688+
fdisk -l # 查看磁盘情况
2689+
fdisk /dev/sdb # 创建系统分区
26812690
n # 添加一个分区
26822691
p # 建立主分区
26832692
1 # 分区号
@@ -2739,10 +2748,10 @@ shred -zvu -n 5 <File> # 主要用于文件覆盖内容,也可以删除
27392748
du [options] [arguments ...]
27402749

27412750
# e.g.
2742-
du -h . | sort # 以人类可读的格式进行显示,排序显示
2743-
du -hd 1 / | sort -hr
2744-
du -sh /etc/yum # 特定目录的总使用量
2745-
du --max-depth=1 -h # 查看文件夹下各个文件夹的磁盘占用
2751+
du -H . | sort # 以人类可读的格式进行显示,排序显示
2752+
du -Hd 1 / | sort -hr
2753+
du -sH /etc/yum # 特定目录的总使用量
2754+
du --max-depth=1 -H # 查看文件夹下各个文件夹的磁盘占用
27462755
```
27472756

27482757
**dd**

‎1earn/Integrated/Linux/实验/Nginx.md‎

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -190,3 +190,48 @@ server {
190190
service nginx restart
191191
service firewalld stop
192192
```
193+
194+
---
195+
196+
## 流媒体服务
197+
198+
```
199+
apt install nginx
200+
```
201+
202+
获取 RTMP 模块
203+
```
204+
add-apt-repository universe
205+
apt install libnginx-mod-rtmp
206+
```
207+
208+
```diff
209+
vim /etc/nginx/nginx.conf
210+
211+
++ rtmp {
212+
++ server {
213+
++ listen 1935;
214+
++ chunk_size 4096;
215+
++ application live {
216+
++ live on;
217+
++ record off;
218+
++ }
219+
++ }
220+
++ }
221+
```
222+
223+
```
224+
systemctl restart nginx
225+
```
226+
227+
obs 上设置
228+
229+
![](../../../../assets/img/Integrated/Linux/实验/nginx/1.png)
230+
231+
然后开始推流即可
232+
233+
---
234+
235+
## Source & Reference
236+
237+
- https://linux.cn/article-14159-1.html

‎1earn/Integrated/Linux/笔记/工具.md‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -800,3 +800,35 @@ UsageCount=1
800800
$ usql odbc+DB2://user:pass@localhost/dbname
801801
$ usql odbc+PostgreSQL+ANSI://user:pass@localhost/dbname?TraceFile=/path/to/trace.log
802802
```
803+
804+
**croc**
805+
806+
> Easily and securely send things from one computer to another
807+
808+
- https://github.com/schollz/croc
809+
810+
A : send file
811+
```
812+
croc send xxx.txt
813+
814+
Code is: xxxx-xxxx
815+
```
816+
817+
B : receive file
818+
```
819+
croc xxxx-xxxx
820+
```
821+
822+
**magic-wormhole**
823+
824+
> get things from one computer to another, safely
825+
826+
- https://github.com/magic-wormhole/magic-wormhole
827+
828+
**fq**
829+
830+
> jq for binary formats
831+
832+
```
833+
fq . file.mp3
834+
```

‎1earn/Security/BlueTeam/应急.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,7 @@
6666
- [追踪活动中相遇CobaltStrike的故事](https://bbs.pediy.com/thread-260923.htm)
6767
- [Whitelist Me, Maybe? “Netbounce” Threat Actor Tries A Bold Approach To Evade Detection](https://www.fortinet.com/blog/threat-research/netbounce-threat-actor-tries-bold-approach-to-evade-detection?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+fortinet%2Fblog%2Fthreat-research+%28Fortinet+Threat+Research+Blog%29)
6868
- [APT29—觊觎全球情报的国家级黑客组织（中）](https://mp.weixin.qq.com/s/Ln7iBm-Go17CQhIaRNHD0Q)
69+
- [Fake dnSpy - 当黑客也不讲伍德](https://paper.seebug.org/1812/)
6970

7071
**僵尸网络**
7172
- [白名单之殇：Specter僵尸网络滥用ClouDNS服务，github.com无辜躺枪](https://mp.weixin.qq.com/s/Wh_8RmPRmk7DhE1LZ6m-zQ)

‎1earn/Security/Crypto/Crypto.md‎

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2288,7 +2288,7 @@ I have deposited in the county of Bedford...
22882288
22892289
---
22902290
2291-
# 其他编码
2291+
# 其他编码/语言
22922292
#### Brainfuck/Ook
22932293
22942294
**在线工具**
@@ -2387,3 +2387,13 @@ PPEncode可以把Perl代码转换成只有英文字母的字符串。
23872387
23882388
**在线工具**
23892389
- [Dissection Font](http://erikdemaine.org/fonts/dissect/)
2390+
2391+
#### 文言文编程语言
2392+
2393+
- [wenyan-lang/wenyan](https://github.com/wenyan-lang/wenyan)
2394+
- https://ide.wy-lang.org/
2395+
2396+
#### 威妥玛拼音
2397+
2398+
**在线工具**
2399+
- [威妥玛拼音转换](https://www.chineseconverter.com/zh-cn/convert/wade-giles-to-chinese)

‎1earn/Security/MobileSec/Android安全.md‎

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -190,5 +190,8 @@ SSL/TLS Pinning 提供了两种锁定方式： Certificate Pinning 和 Public Ke
190190
191191
---
192192
193-
**Source & Reference**
194-
- [免费好用的APP安全在线检测平台](https://mp.weixin.qq.com/s/fs89OeeVWxURRNiIBv4JYg)
193+
## ADB调试
194+
195+
**相关文章**
196+
- [How to hack Android device with ADB (Android debugging bridge)](https://www.hackeracademy.org/how-to-hack-android-device-with-adb-android-debugging-bridge/)
197+
- [[渗透测试]记一次5555端口渗透实战](https://www.cnblogs.com/Ky1226/p/14198581.html)

‎1earn/Security/Power-PenTest.md‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -461,6 +461,7 @@
461461
- [List of bug bounty writeups · Pentester Land](https://pentester.land/list-of-bug-bounty-writeups.html) - 巨多的案例,真的看不完
462462
- [reddelexc/hackerone-reports](https://github.com/reddelexc/hackerone-reports)
463463
- [giteshnxtlvl/YourNextBugTip](https://github.com/giteshnxtlvl/YourNextBugTip)
464+
- [120 Days of High Frequency Hunting](https://kuldeep.io/posts/120-days-of-high-frequency-hunting/)
464465
465466
---
466467
@@ -546,9 +547,8 @@ Charles Web 调试代理是用 Java 编写的跨平台 HTTP 调试代理服务
546547
**钓鱼案例**
547548
- [指尖博弈——FBI竟建立虚假联邦快递网站](https://www.anquanke.com/post/id/166650)
548549
- [Cookie Maker:隐藏在Google Docs中的恶意网络](https://www.anquanke.com/post/id/165033)
549-
- [利用QQ钓鱼或者定位女友是否回家](http://www.freebuf.com/articles/web/140111.html)
550-
- [QQ定位女友是否回家系列二之定位系统的打造](http://www.freebuf.com/news/141038.html)
551550
- [利用斯拉夫字母辅助社会工程学攻击思路](https://bbs.ichunqiu.com/thread-46462-1-2.html)
551+
- [XXXX第X次内部红蓝对抗](https://xz.aliyun.com/t/10731)
552552
553553
**社工案例**
554554
- [一个精壮的代购骗子被我彻底征服](https://bbs.ichunqiu.com/thread-37565-1-3.html)
@@ -668,7 +668,7 @@ Charles Web 调试代理是用 Java 编写的跨平台 HTTP 调试代理服务
668668
### 字典
669669
670670
**Tips**
671-
1. 按场景来看,敏感的场景,目标或业务量大的场景,字典不是越多越好,力求精简,求快,不要把功夫全放在 fuzz 上,条件允许的话就针对目标专门定制一个字典,这可能涉及到一些社工的技巧,可以参考 [空间测绘](./笔记/RedTeam/信息收集/空间测绘.md) 里的案例.
671+
1. 按场景来看,敏感的场景,目标或业务量大的场景,字典不是越多越好,力求精简,求快,不要把功夫全放在 fuzz 上,条件允许的话就针对目标专门定制一个字典,这可能涉及到一些社工的技巧.
672672
2. 如果没有安全设备,那就随便搞吧,先来个 [TOP10]*[TOP10000] 再说.
673673
3. 字典还是自己收集整理的最好,有空的话,建议把 github 上的自己分分类,把什么 `Hentai`、`pussy`、`dick` 这种奇奇怪怪的密码早点删了🤣.
674674
4. 数据库是管理字典的好帮手,善用统计、去重功能有奇效.
@@ -1268,6 +1268,7 @@ DNS 协议属于 OSI 第七层，DNS 劫持指控制域名解析权限，比如
12681268
- [授权测试一个java网站](https://www.t00ls.net/articles-59170.html)
12691269
- [绕过不能执行大部分系统命令和微软杀毒](https://mp.weixin.qq.com/s/xTiudjr033c5urrPD9izAA)
12701270
- [记一次某大学渗透过程](https://xz.aliyun.com/t/10657)
1271+
- [攻防纪实｜从任意文件下载到命令执行](https://mp.weixin.qq.com/s/T7oZrWBaDSEjhPt7NBOt8w)
12711272
12721273
**相关文章**
12731274
- [谈谈对后台登录页面的渗透测试](https://www.anquanke.com/post/id/185426)

‎1earn/Security/RedTeam/OS安全/OS-Exploits.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -861,6 +861,10 @@ i586-mingw32msvc-gcc useradd.c -o useradd.exe
861861
- POC | Payload | exp
862862
- [0vercl0k/CVE-2021-31166](https://github.com/0vercl0k/CVE-2021-31166) - Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.
863863
864+
**CVE-2022-21907**
865+
- POC | Payload | exp
866+
- [p0dalirius/CVE-2022-21907-http.sys](https://github.com/p0dalirius/CVE-2022-21907-http.sys)
867+
864868
---
865869
866870
## 域

0 commit comments

Comments
 (0)