File contains vulnerability

I think the File Inclusion Vulnerability is a bit like the ssrf vulnerability. The ssrf vulnerability obtains information through the curl() function but does not filter it, so as to access the intranet and cause harm. The File Inclusion Vulnerability obtains files through the include() function. The attacker inputs sensitive files and causes s ...

Posted by gevensen on Fri, 19 Nov 2021 00:46:33 -0800

Detailed explanation of log4j configuration file ----- self study

Let's start with a configuration file---- log4j.rootLogger=debug,stdout,logfile log4j.appender.stdout=org.apache.log4j.ConsoleAppender log4j.appender.stdout.Target=System.err log4j.appender.stdout.layout=org.apache.log4j.SimpleLayout log4j.appender.logfile=org.apache.log4j.FileAppender log4j.appender.logfile.File=d:/msb.log log4j.appender.logf ...

Posted by bpops on Thu, 18 Nov 2021 21:06:48 -0800

Perl - list and array 2

1. Array interpolation in string Like scalars, the contents of an array can also be interpolated into a string caused by double quotes During interpolation, spaces for separation are automatically added between the elements of the array @rocks = qw{ flitstone slate rubble }; print "quartz @rocks limestone\n"; After the array is interpolated ...

Posted by grumpy on Fri, 15 Oct 2021 12:34:42 -0700

PHP learning part I

PHP program running sequence PHP basic syntax With <? php ...?> Structural frame Fill in the code at Use; End statement echo multiple output print word output Comments / / multiline comments / **/ variable 1. Start with $ 2. No space is allowed in the middle 3. Cannot start with a number Common nomenclature: hello_world,HelloWord, ...

Posted by jeger003 on Sun, 03 Oct 2021 13:44:44 -0700

Tsung million pressure test II: environment construction, configuration file preparation and operation, report generation

Tsung installation Tsung running environment installation Check the installation of dependent packages to avoid errors during installation. (when the software packages of the operating system are fully installed, these packages are usually installed, and all can also be skipped. This step can be solved one by one in case of problems later.) ...

Posted by NArc0t1c on Sat, 18 Sep 2021 14:46:20 -0700

sed advanced command N, D

sed advanced command brief introduction Sed is a stream editor. It is a very important tool in text processing. It can be used perfectly with regular expressions and has extraordinary functions. During processing, the currently processed line is stored in a temporary buffer called "pattern space", and then the contents in the bu ...

Posted by lmninfo on Fri, 17 Sep 2021 02:50:47 -0700