57uv6Z6g

前言

A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time.（维基百科）

A directory traversal, path traversal, or dot-dot-slash attack exploits insufficient security validation or sanitization of user-supplied file names, such that characters representing “traverse to parent directory” are passed through to the operating system’s file system API. An affected application can be exploited to gain unauthorized access to the file system.（维基百科）

前言

跨站请求伪造（英语：Cross-site request forgery），也被称为one-click attack或者session riding，通常缩写为CSRF或者XSRF，是一种挟制用户在当前已登录的Web应用程序上执行非本意的操作的攻击方法。（维基百科）

Server-side request forgery (SSRF) is a computer security vulnerability that enables an attacker to send requests from a vulnerable server to internal or external systems or the server itself.（维基百科）

前言

任意命令执行（Arbitrary Command Execution）
远程命令执行（Remote Command Execution）

前言

Excel批量删除指定行

前言

Burp爆破网站GET请求的登录密码

前言

Damn Vulnerable Web Application (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid both students & teachers to learn about web application security in a controlled class room environment.（Github）

前言

sqlmap is a software utility for automated discovering of SQL injection vulnerabilities in web applications.（维基百科）

前言

破解Burp Suite Professional

前言

Android通过Room简化SQLite数据库的访问

前言

通过JS脚本创建一个活动任务，通过IE浏览器运行JS脚本，实现删除注册表项