HW of a certain province or city went to play a small hw a few days ago and encountered some things. Please jot them down. 1. A router login interface is found in the target network segment when the router spreads the network safely to collect information This version of the router is usually used for home use, and few enterprises can use it, but it is impossible for this network segment to be a commercial network segment

I have encountered such a situation several times these days. One domain name, one port, but there are files with different suffixes. At that time, the first thing I thought of was port reuse. Although I didn't actually use this word, I knew it should be functional. However, after thinking about it, the general development or operation and maintenance personnel are not skilled, and probably will not use port reuse. Until yesterday

ATT&CK Practical Series - Red Team Assessment (I) Range Note Range Connection Overview: Virtual machine password hongrisec@2019 Reset after login Win7192.168.0.1/24 bridge 192.168.52.0/24 intranet win2003192.168...

ATT&CK actual combat series - Red Team Assessment (V). I am not familiar with the internal network of shooting range notes, so I recently found several shooting range trainers. Here is a record of the process. It doesn't count as wp, it can only count as a random note. If there is something unknown, you can figure it out by yourself. It's not difficult. Range connection Overview: VM password win7 sun\he...

The service provider before RT had all kinds of accidents, and finally my machine disappeared. The data is gone. The data used now was backed up when the pagoda burst (2020-8) In fact, there are also some valuable articles written in the middle, but it's a pity that they are gone. Just vaguely remember a little bit of content, just write about it, maybe there are some things already

The details of this article have been lost CNVD-2020-47676+CNVD-2020-47675 are background xss and database backup files are not authorized to download. In this way, I understand everything

The details of this article have been lost, leaving only the script github

I saw an article recently I was very interested, so I decided to give it a try. According to the information mentioned in the article, the reproduction process is recorded. Recurrence process Attacker: kali 192.168.233.128 Target: win server 2012 192.168.233.130

Pagoda 2020/8/23 – 7.4.2 Version Verification Poc py Practice The verification url does not support, for example, www.baidu. com: 123 Support Type http://www.baidu.com:888 http://...

I just replaced a new computer, reinstalled a bunch of things, and encountered a pit when installing them in burp. Let's write it down here browser: 360 Hormone Browser Edge Browser IE Browser Burp version: v2020.2.1 First, it encountered that the certificate could not be exported. The proxy succeeds and can capture packets, but cannot access http