57uv6Z6g

前言

Linux系统信息信息收集

前言

The Social-Engineer Toolkit (SET) is an open-source Python-driven tool aimed at penetration testing around Social-Engineering.（Kali）

前言

BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser.（官网）

前言

文件上传漏洞

前言

Java使用Javafx包实现音频播放

注意：因为Oracle从JDK11开始，就宣布JavaFX将作为独立模块从JDK中分离出来，以使JavaFX更易于被采用。也就是说从JDK11开始，里面将不包含JavaFx。

前言

A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time.（维基百科）

A directory traversal, path traversal, or dot-dot-slash attack exploits insufficient security validation or sanitization of user-supplied file names, such that characters representing “traverse to parent directory” are passed through to the operating system’s file system API. An affected application can be exploited to gain unauthorized access to the file system.（维基百科）

前言

跨站请求伪造（英语：Cross-site request forgery），也被称为one-click attack或者session riding，通常缩写为CSRF或者XSRF，是一种挟制用户在当前已登录的Web应用程序上执行非本意的操作的攻击方法。（维基百科）

Server-side request forgery (SSRF) is a computer security vulnerability that enables an attacker to send requests from a vulnerable server to internal or external systems or the server itself.（维基百科）

前言

任意命令执行（Arbitrary Command Execution）
远程命令执行（Remote Command Execution）

前言

Excel批量删除指定行

前言

Burp爆破网站GET请求的登录密码