File contains vulnerability
I think the File Inclusion Vulnerability is a bit like the ssrf vulnerability. The ssrf vulnerability obtains information through the curl() function but does not filter it, so as to access the intranet and cause harm. The File Inclusion Vulnerability obtains files through the include() function. The attacker inputs sensitive files and causes s ...
Posted by gevensen on Fri, 19 Nov 2021 00:46:33 -0800
Detailed explanation of log4j configuration file ----- self study
Let's start with a configuration file----
log4j.rootLogger=debug,stdout,logfile
log4j.appender.stdout=org.apache.log4j.ConsoleAppender
log4j.appender.stdout.Target=System.err
log4j.appender.stdout.layout=org.apache.log4j.SimpleLayout
log4j.appender.logfile=org.apache.log4j.FileAppender
log4j.appender.logfile.File=d:/msb.log
log4j.appender.logf ...
Posted by bpops on Thu, 18 Nov 2021 21:06:48 -0800
Perl - list and array 2
1. Array interpolation in string
Like scalars, the contents of an array can also be interpolated into a string caused by double quotes During interpolation, spaces for separation are automatically added between the elements of the array
@rocks = qw{ flitstone slate rubble };
print "quartz @rocks limestone\n";
After the array is interpolated ...
Posted by grumpy on Fri, 15 Oct 2021 12:34:42 -0700
PHP learning part I
PHP program running sequence
PHP basic syntax
With <? php ...?> Structural frame Fill in the code at Use; End statement echo multiple output print word output Comments / / multiline comments / **/
variable
1. Start with $ 2. No space is allowed in the middle 3. Cannot start with a number Common nomenclature: hello_world,HelloWord,
...
Posted by jeger003 on Sun, 03 Oct 2021 13:44:44 -0700
Tsung million pressure test II: environment construction, configuration file preparation and operation, report generation
Tsung installation
Tsung running environment installation
Check the installation of dependent packages to avoid errors during installation. (when the software packages of the operating system are fully installed, these packages are usually installed, and all can also be skipped. This step can be solved one by one in case of problems later.)
...
Posted by NArc0t1c on Sat, 18 Sep 2021 14:46:20 -0700
sed advanced command N, D
sed advanced command
brief introduction
Sed is a stream editor. It is a very important tool in text processing. It can be used perfectly with regular expressions and has extraordinary functions. During processing, the currently processed line is stored in a temporary buffer called "pattern space", and then the contents in the bu ...
Posted by lmninfo on Fri, 17 Sep 2021 02:50:47 -0700