MS17-010 Attack bat

X1r0z published on 2018-06-03 included in category 内网渗透

需要提取 NSA 工具包里的 Eternalblue.exe 和 Doublepulsar.exe 还有一堆必备的 xml 文件.

绕过 360 添加用户

X1r0z published on 2018-06-02 included in category 内网渗透

参考 Lz1y 大佬的代码, 自己改了改.

完美过 360.

用 Pyinstaller 打包大约 4mb 左右.

X1r0z published on 2018-05-31 included in category Web安全

MSSQL 读取文件

X1r0z published on 2018-05-20 included in category Writeup

你们 520 在撩妹而我却在做题

X1r0z published on 2018-05-16 included in category Writeup

题目主要为 PHP 伪随机数种子爆破.

X1r0z published on 2018-05-14 included in category 编程

LDAP: Lightweight Directory Access Protocol 轻量级目录访问协议.

X1r0z published on 2018-05-13 included in category Web安全

序列化 (serialize) 指将 PHP 变量/数组/函数/类转换为可保存或传输的过程, 再通过反序列化 (unserialize) 转换为原来的数据使用.