Vulnerabilities

Vulnerabilities精品文章

• 

  Kali Linux 秘籍 第五章 漏洞评估

  ...模板。 选择扫描策略。这里，我们选择之前创建的Local Vulnerabilities Assessment策略。 选择你的目标，包含下列要点： 目标必须每行输入一个。 你也可以在每行输入目标的范围。 你也可以上传目标文件（如果有的话）或选择 A...

  csRyan 2019-06-21 16:31 评论0 收藏0
• 

  DVWA学习之Brute Force

  ...关 Low 常规爆破 使用attack type为sniper payload positions GET /vulnerabilities/brute/?username=admin&password=§s§&Login=Login HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X ...

  Near_Li 2019-07-31 10:31 评论0 收藏0
• 

  网站渗透DVWA之存储型XSS

  ...。 2，低级代码利用 DVWA Security调到low。 代码位置在dvwa/vulnerabilities/xss_s/source/low.php 内容如下图： 代码解释：trim是去除掉用户输入内容前后的空格。stripslashes是去除反斜杠，两个只会去除一个。mysqli_real_escap_string过滤掉内容中...

  TANKING 2019-06-27 16:20 评论0 收藏0
• 

  codeql 代码审计

  ...language that helps find bugs in source code. Find 9 remote code execution vulnerabilities in the open-source project Das U-Boot, and join the growing community of security researchers using CodeQL...

  plokmju88 2021-10-08 10:04 评论0 收藏0
• 

  Nginx之OCSP stapling配置

  ...nd Nginx No resolver defined to resolve ocsp.int-x3.letsen [Nginx resolver vulnerabilities allow cache poisoning attack]() 版权声明:转载时请注明作者Fundebug以及本文地址：https://blog.fundebug.com/2018/03/07/nginx_o...

  CastlePeaK 2019-07-25 14:13 评论0 收藏0
• 

  使用pipenv代替virtualenv管理python包

  ...ashes are used everywhere, always. Security. Automatically expose security vulnerabilities.Give you insight into your dependency graph (e.g. $ pipenv graph).Streamline development workflow by loadi...

  whidy 2019-07-30 16:23 评论0 收藏0
• 

  Flask Web 测试驱动开发最佳实践 之 开篇

  ...cies: $ pipenv graph Check your installed dependencies for security vulnerabilities: $ pipenv check Install a local setup.py into your virtual environment/Pipfile: $ pipenv install...

  fnngj 2019-07-30 18:32 评论0 收藏0
• 

  Node 连接mysql数据库

  ... mysql@2.16.0 updated 1 package and audited 296 packages in 2.366s found 0 vulnerabilities PS C:UsersmingmDesktop est> npm地址 https://www.npmjs.com/package...github 地址 https://github.com/mysqljs/my...

  qujian 2019-08-23 10:33 评论0 收藏0
• 

  用js简单提供增删改查接口

  ...9 packages from 14 contributors and audited 134 packages in 4.145s found 0 vulnerabilities 在index.js同路径下创建一个db.js专门用来处理数据库连接问题: //db.js var mysql = require(mysql); var pool = mysql.createPool({ //连...

  shadowbook 2019-08-26 13:44 评论0 收藏0