Skip to content

Commit

Permalink
update 2021年12月15日 16:35:39
Browse files Browse the repository at this point in the history
  • Loading branch information
No-Github committed Dec 15, 2021
1 parent c3ee45b commit 267adbb
Show file tree
Hide file tree
Showing 46 changed files with 816 additions and 550 deletions.
2 changes: 1 addition & 1 deletion 1earn/Develop/正则/regex.md
Original file line number Diff line number Diff line change
Expand Up @@ -92,4 +92,4 @@ NFA 是按着正则式去比文本,吃掉一个字符,就把它跟正则式

**Source & Reference**
- [正则表达式](https://zh.wikipedia.org/wiki/%E6%AD%A3%E5%88%99%E8%A1%A8%E8%BE%BE%E5%BC%8F)
- [ReDOS初探](http://th1e.com/article/26)
- [ReDOS初探](http://www.lmxspace.com/2019/02/16/ReDOS%E5%88%9D%E6%8E%A2/)
1 change: 1 addition & 0 deletions 1earn/Integrated/Linux/Speed-Linux.md
Original file line number Diff line number Diff line change
Expand Up @@ -143,6 +143,7 @@ env

cat /proc/1/environ
cat /proc/$PID/environ
cat /proc/self/environ
```

- 图形模式登录时,顺序读取 : `/etc/profile``~/.profile`
Expand Down
10 changes: 5 additions & 5 deletions 1earn/Integrated/Windows/Secure-Win.md
Original file line number Diff line number Diff line change
Expand Up @@ -189,11 +189,11 @@ REG query HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ HKEY_CLASSES_ROOT\
系统日志基本知识见 [日志](./笔记/日志.md)
**导出日志**
- 文章
- 相关文章
- [Export corrupts Windows Event Log files](https://blog.fox-it.com/2019/06/04/export-corrupts-windows-event-log-files/) - 导出损坏的 Windows 事件日志文件
**恢复 eventlogedit 删除的记录**
- 文章
- 相关文章
- [Detection and recovery of NSA’s covered up tracks](https://blog.fox-it.com/2017/12/08/detection-and-recovery-of-nsas-covered-up-tracks/)
- 工具
Expand All @@ -211,7 +211,7 @@ REG query HKLM\Software\Microsoft\Windows\CurrentVersion\Run\ HKEY_CLASSES_ROOT\
`logparser` 是一款 windows 日志分析工具,访问这里下载 https://www.microsoft.com/en-us/download/details.aspx?id=24659
- 文章
- 相关文章
- [windows安全日志分析之logparser篇](https://wooyun.js.org/drops/windows%E5%AE%89%E5%85%A8%E6%97%A5%E5%BF%97%E5%88%86%E6%9E%90%E4%B9%8Blogparser%E7%AF%87.html)
- 使用
Expand Down Expand Up @@ -371,7 +371,7 @@ qprocess 显示有关在远程桌面会话主机服务器上运行的
- **[dnsdataview](https://www.nirsoft.net/utils/dns_records_viewer.html)** - 记录 DNS 记录
**DNS cache log**
- 文章
- 相关文章
- [开启DNS Client Service日志](http://blog.nsfocus.net/open-dns-client-service-log/)
- 开启命令
Expand All @@ -396,7 +396,7 @@ windows 8.1 和 windows server 2012 R2 及以上版本的操作系统,可以
微软官方文档 : https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn800669(v=ws.11)
**DNS Client Cached**
- 文章
- 相关文章
- [Getting DNS Client Cached Entries with CIM/WMI](https://www.darkoperator.com/blog/2020/1/14/getting-dns-client-cached-entries-with-cimwmi)
- 工具
Expand Down
4 changes: 2 additions & 2 deletions 1earn/Plan/Misc-Plan.md
Original file line number Diff line number Diff line change
Expand Up @@ -364,7 +364,7 @@ ffmpeg -f concat -i filelist.txt -c copy output.mkv
ffmpeg.exe -i in.mp4 -r 10 -b:a 32k out.mp4
```
推荐用法
其他用法
```bash
ffmpeg -y -i /mnt/sdcard/demo1.mp4 -strict -2 -vcodec libx264 -preset ultrafast -crf 24 -acodec aac -ar 44100 -ac 2 -b:a 96k -s 360x640 -aspect 16:9 /mnt/sdcard/democompress.mp4
```
Expand Down Expand Up @@ -392,7 +392,7 @@ ffmpeg -y -i in.out -vcodec xvid -s 176x144 -r 29.97 -b 1500 -acodec aac -ac 2 -
# -acodec aac 音频编码用 AAC
# -ac 2 声道数 1 或 2
# -ar 48000 声音的采样频率
# -ab 128 音频数据流量, 一般选择 32、64、96、128 # -vol 200 200% 的音量, 可更改 (如果源文件声音很小, 可以提升 10 到 20 倍 (1000%~2000%), 我试过, 效果还行! 但不能太大, 200000% 我也试验过, 但嘈杂声太大了)
# -ab 128 音频数据流量, 一般选择 32、64、96、128 # -vol 200 200% 的音量, 可更改 (如果源文件声音很小, 可以提升 10 到 20 倍 (1000%~2000%))
```
---
Expand Down
6 changes: 3 additions & 3 deletions 1earn/Security/BlueTeam/加固.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
- [re4lity/Benchmarks](https://github.com/re4lity/Benchmarks) - 常用服务器、数据库、中间件安全配置基线
- [trimstray/linux-hardening-checklist](https://github.com/trimstray/linux-hardening-checklist) - linux 安全配置的核查

**工具**
**相关工具**
- [lis912/CapOS](https://github.com/lis912/CapOS) - 等级保护测评 windows 基线检查
- [lis912/Evaluation_tools](https://github.com/lis912/Evaluation_tools) - 安全基线检查工具
- [xiaoyunjie/Shell_Script](https://github.com/xiaoyunjie/Shell_Script) - Linux 系统检测和加固脚本
Expand All @@ -50,7 +50,7 @@

- [Secure-Win](../../Integrated/Windows/Secure-Win.md)

**文章**
**相关文章**
- [Windows安全加固](https://www.freebuf.com/column/201869.html)
- [Windows服务器主机加固分享](https://www.freebuf.com/articles/system/215787.html)
- [windows安全防护](https://www.freebuf.com/column/195870.html)
Expand All @@ -62,7 +62,7 @@

# web服务和中间件

**文章**
**相关文章**
- [PHP安全我见](https://www.leavesongs.com/PENETRATION/php-secure.html)

---
Expand Down
4 changes: 2 additions & 2 deletions 1earn/Security/BlueTeam/取证.md
Original file line number Diff line number Diff line change
Expand Up @@ -722,7 +722,7 @@ TTL隐写中用到四个值:00 111111(63),01 111111(127),10 111111(1

## 浏览器取证

**工具**
**相关工具**
- [obsidianforensics/hindsight](https://github.com/obsidianforensics/hindsight) - chrome历史访问记录取证工具(真是不给人留条活路)
- [x899/chrome_password_grabber](https://github.com/x899/chrome_password_grabber) - 从 Chrome 获取未加密的“保存的密码”
- [m0rv4i/SharpCookieMonster](https://github.com/m0rv4i/SharpCookieMonster) - 从 Chrome 中提取 cookie
Expand Down Expand Up @@ -843,7 +843,7 @@ TTL隐写中用到四个值:00 111111(63),01 111111(127),10 111111(1
# WEB取证
**文章**
**相关文章**
- [比敌人更了解敌人 [ 取证入门 web篇 ]](https://www.freebuf.com/column/147929.html)
- [记一次IIS劫持处置](https://www.freebuf.com/articles/web/222060.html)
Expand Down
4 changes: 2 additions & 2 deletions 1earn/Security/BlueTeam/应急.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@

---

**文章**
**相关文章**
- [应急响应日志分析小脚本](https://www.freebuf.com/sectool/223446.html)
- [【应急响应】一文了解应急响应中常用的日志收集方法](https://mp.weixin.qq.com/s/ZY3gqly-z-L8XFW9ML5aow)

Expand Down Expand Up @@ -220,7 +220,7 @@ Passive DNS 对安全研究非常重要,因为它可以在前期帮助我们
- [sroberts/awesome-iocs](https://github.com/sroberts/awesome-iocs) - IOC相关资源的合集

**APT事件**
- **文章**
- **相关文章**
- [APT攻击:模拟一次网络战过程](https://www.anquanke.com/post/id/103265)
- [毒云藤 (APT-C-01) 军政情报刺探者揭露](http://www.freebuf.com/articles/system/185155.html)
- [APT10又曝光了,这次是因为?](https://www.secpulse.com/archives/75623.html)
Expand Down
8 changes: 4 additions & 4 deletions 1earn/Security/BlueTeam/监察.md
Original file line number Diff line number Diff line change
Expand Up @@ -100,7 +100,7 @@

## RASP

**文章**
**相关文章**
- [浅谈RASP技术攻防之基础篇](https://www.freebuf.com/articles/web/197823.html)

**产品**
Expand All @@ -111,13 +111,13 @@

## IDS-IPS

**文章**
**相关文章**
- [IDS 和 IPS 的部署细节科普](https://www.freebuf.com/149445.html)
- [入侵检测术语全接触](https://zhuanlan.zhihu.com/p/30434636)
- [流量分析在安全攻防上的探索实践](https://security.tencent.com/index.php/blog/msg/148)
- [Snort VS Suricata](https://zhuanlan.zhihu.com/p/34329072)

**工具**
**相关工具**
- [snort](https://www.snort.org/) - 开源的 IPS 产品,效果不错
- [snort 安装过程与使用记录](./实验/安防设施搭建使用.md#snort)
- [Suricata](https://suricata-ids.org/) - 免费开源 IDS,IPS 和 NSM 引擎。
Expand All @@ -144,7 +144,7 @@

## WAF-CDN

**文章**
**相关文章**
- [WAF 产品的探索](https://zhuanlan.zhihu.com/p/25307262)

---
Expand Down
72 changes: 72 additions & 0 deletions 1earn/Security/CTF/CTF.md
Original file line number Diff line number Diff line change
Expand Up @@ -205,6 +205,12 @@ AWD
**2021**
- [第五届“强网杯”全国网络安全挑战赛-线上赛Writeup](https://mochu.blog.csdn.net/article/details/117847706)
- [强网杯青少年专项赛选拔赛 wp](https://mp.weixin.qq.com/s/8AAkbk--b8ojA7Ffb8XAQw)
- [广东省强网杯企业组easy_pgsql writeup](https://mp.weixin.qq.com/s/NPD4cvlm9yJeL77ZvgStxA)
- [2021广东强网杯|WEB及Crypto方向WP](https://mp.weixin.qq.com/s/VT2Ub7RmDPg1tzjQ__x23w)
- [2021广东强网杯|Reverse及PWN方向WP](https://mp.weixin.qq.com/s/TWKQKMpV_UvJuVjHXywXzA)
- [2021广东强网杯|MISC方向WP](https://mp.weixin.qq.com/s/kQtqYLlsuaEvr7-iEv9mBg)
- [“强网”拟态防御国际精英挑战赛 WP](https://mp.weixin.qq.com/s/2RErninC7_C_SzKEYfuUJw)
**2019**
- [2019 第三届强网杯 Web 部分 WriteUp + 复现环境](https://www.zhaoj.in/read-5873.html)
Expand Down Expand Up @@ -312,6 +318,7 @@ AWD
**2021**
- [2021年“羊城杯”网络安全大赛部分Writeup](https://blog.csdn.net/qq_42815161/article/details/120260053)
- [羊城杯wp](https://mp.weixin.qq.com/s/6i5iel2I9rMV2BtwMRZfPQ)
**2020**
- [羊城杯-Reverse-WP](https://www.zrzz.site/2020/09/11/%E7%BE%8A%E5%9F%8E%E6%9D%AF-Reverse-WP/)
Expand All @@ -337,6 +344,10 @@ AWD
### 湖湘杯
**2021**
- [湖湘杯-WriteUp](https://mp.weixin.qq.com/s/qbUbBBTYi_7ODxGmQKhABA)
- [第七届“湖湘杯”网络安全大赛线下总决赛WP](https://mp.weixin.qq.com/s/NpnqcUzFQqvKe1jDHAkUWQ)
**2020**
- [湖湘杯-WriteUp](https://mp.weixin.qq.com/s/MEX8eJ6LqO0ubnLMGN3K9w)
Expand Down Expand Up @@ -389,13 +400,34 @@ AWD
**2021**
- [2021鹤城杯|WEB部分WP全](https://mp.weixin.qq.com/s/_9acgNlTA_yqMqZK_Std-A)
- [鹤城杯-WriteUp](https://mp.weixin.qq.com/s/TZt0oUkmgJYe21SbcS5Ybw)
- [2021鹤城杯|PWN部分WP全](https://mp.weixin.qq.com/s/WGEjSSNDJuZcnqJJev5zGQ)
- [2021鹤城杯|Reverse及MISC部分WP全](https://mp.weixin.qq.com/s/4ZbYy_Kl3A5XTmi1AlpPfQ)
---
### 长城杯
**2021**
- [长城杯线上赛WP](https://mp.weixin.qq.com/s/LxPQDJ8xvBq4Qc-89td1_A)
- [第一届"长城杯"网络安全大赛WP](https://mp.weixin.qq.com/s/CUJDx3x7nXpDYU8UdVOXfQ)
---
### 赣网杯
**2021**
- [2021赣网杯WEB题目WP](https://mp.weixin.qq.com/s/OU5mnVCeCXwQ-oVnGkwW7Q)
- [2021年第二届赣网杯网络安全大赛MISC-Writeup](https://mp.weixin.qq.com/s/I_OyYVvlNOzmG2JnAGuYdg)
- [赣网杯 MISC Writeup](https://mp.weixin.qq.com/s/mbguu98sNMGM8IEjLHNNpg)
---
### 长安杯
**2021**
- [2021长安杯|Web & Crypto 部分wp合集](https://mp.weixin.qq.com/s/OWLoMnaxfKcpP4-7QiBktw)
- [2021 长安杯 wp](https://mp.weixin.qq.com/s/tYcLkQ0Ay9_IYt1XJF9EFA)
- [长安杯-WriteUp](https://mp.weixin.qq.com/s/gORwuwOIZvwD6mZQePTHYQ)
---
Expand All @@ -405,6 +437,11 @@ AWD
- [西湖论剑-WriteUp](https://mp.weixin.qq.com/s/HSLnu1pmTZ7AYxMM8oNBaw)
- [西湖论剑 部分wp](https://mp.weixin.qq.com/s/S_t02JOYnSg2ZB71WlhErA)
- [2021 西湖论剑CTF-wp](https://mp.weixin.qq.com/s/TR8FJ8ObZR3puQlZ9gIZOw)
- [西湖论剑2021中国杭州网络安全技能大赛writeup](https://mp.weixin.qq.com/s/q1KNC5F8qHDpTTZQcFaWZA)
**2021 第五空间**
- [第五空间-2021 部分WriteUp](https://mp.weixin.qq.com/s/9QzrQxy_oIqiZpFlld3oyw)
- [第三届第五空间网络安全大赛WP](https://mp.weixin.qq.com/s/0UwX26Ofi0exLv38kqFt_A)
---
Expand Down Expand Up @@ -452,6 +489,16 @@ AWD
### 2021
**2021 河南省第三届金盾信安杯**
- [河南省第三届“金盾信安杯”网络安全大赛Writeup](https://mp.weixin.qq.com/s/B6WWQ8aVe3Fb2D9dLWmMZA)
**2021 追日杯**
- [首届安徽"追日杯"大学生网络安全挑战赛WRITEUP](https://mp.weixin.qq.com/s/K5O4ADsQWMI0TEX6cnBNXg)
- [首届安徽"追日杯"大学生网络安全挑战赛wp](https://mp.weixin.qq.com/s/4MiFU0NdGcNchHXojlBsiQ)
**2021 东软杯**
- [东软杯-WriteUp](https://mp.weixin.qq.com/s/KgxHOFH52EE8z7NnMTSIDA)
**2021 安洵杯**
- [安洵杯-WriteUp](https://mp.weixin.qq.com/s/vC2bgJlYfA8wzXcmQFynlA)
Expand Down Expand Up @@ -539,6 +586,7 @@ AWD
- [2021-L3HCTF SpecialRain-Writeup](http://xibai.xyz/2021/11/15/2021-L3HCTF/)
- [L3HCTF luuuuua](https://0wl.site/2021/11/16/L3HCTF-luuuuua/)
- [l3hctf_part_wp](https://yimianweishi.github.io/2021/11/17/l3hctf-part-wp/index.html)
- [L3HCTF 2021 星盟ctf战队](https://mp.weixin.qq.com/s/RVGg0zW6mFBImZpvyMDwvw)
**2021 第四届“强网”拟态防御国际精英挑战赛**
- [第四届“强网”拟态防御国际精英挑战赛_wp(上)](https://mp.weixin.qq.com/s/xWgZKtQdsQ562EXLGiNDlg)
Expand Down Expand Up @@ -664,12 +712,25 @@ AWD
### 2021
**2021 美团CTF**
- [美团CTF-WriteUp](https://mp.weixin.qq.com/s/UKkneDKoFBmmUIlbC6bwvA)
**江西省2021年工业互联网安全技术技能大赛**
- [某省工业互联网安全技术技能大赛Writeup](https://mp.weixin.qq.com/s/W7EQQ8e9j3L-W4Wgmtf5gA)
**2021 天翼杯**
- [2021第二届“天翼杯”网络安全攻防大赛WP](https://mp.weixin.qq.com/s/TE6KokKr9mpjGtQ9mOe2MQ)
**2021 bilibili**
- [程序员节日挑战赛writeup](https://mp.weixin.qq.com/s/3O-fH6fcwEpSCK63yTb0ww)
**2021 春秋杯秋季赛**
- [2021春秋杯秋季赛-Writeup](https://mp.weixin.qq.com/s/9fSrQbSdhykkzoiEYGovJQ)
**2021 深育杯**
- [深育杯-WriteUp](https://mp.weixin.qq.com/s/HvyRjbLVPaMg7DBfdYmdJw)
- [2021深育杯线上初赛官方WriteUp](https://mp.weixin.qq.com/s/Iwj_zNgYZKZvJOYuhmlz3w)
- [深育杯-网络安全大赛专业竞赛WriteUp-IDLab](https://mp.weixin.qq.com/s/NvItuko9ZAUNTJaSzBpNKw)
**陇原战“疫”2021**
- [陇原战_疫_2021网络安全大赛](https://mp.weixin.qq.com/s/Lcq7h8VpZaHX3oFrr2E_uQ)
Expand All @@ -685,6 +746,17 @@ AWD
**2021 Bytectf**
- [ByteCTF-WriteUp](https://mp.weixin.qq.com/s/k8wrSSra_NO165RLM_CrUw)
- [2021ByteCTF 北极星-writeup](https://mp.weixin.qq.com/s/OPWOKA9a9Ji_8vufV6QFYA)
- [ByteCTF 2021 By W&M(WEB)部分](https://mp.weixin.qq.com/s/s59xN-QI9oNPrkjhuXtPyw)
- [ByteCTF 2021 By W&M(PWN)部分](https://mp.weixin.qq.com/s/fqX-ICojKhe-FBGCLhWB0A)
- [ByteCTF 2021 By W&M(Crypto)部分](https://mp.weixin.qq.com/s/LpFb9qlrazb7o-zZFuZufw)
- [ByteCTF 2021 By W&M(MISC)部分](https://mp.weixin.qq.com/s/_A3TjeAZ0yAnpvxyn0wWCA)
- [ByteCTF 2021 By W&M(REVERSE)部分](https://mp.weixin.qq.com/s/h-wTnquhBTB8EzU5pYmPDg)
- [2021ByteCTF决赛wp—北极星战队](https://mp.weixin.qq.com/s/y5152EoQg_W6N7YCNtnNUA)
- [ByteCTF 2021 Final By W&M(WEB)部分](https://mp.weixin.qq.com/s/2lzx7ly6kB7UsulC1cUl-w)
- [ByteCTF 2021 Final By W&M(​Reverse)部分](https://mp.weixin.qq.com/s/CYiWly4jPYYEBon6xK6WFA)
- [ByteCTF 2021 Final By W&M(Crypto)部分](https://mp.weixin.qq.com/s/mqEM34zkCPhNBZ9sAS85Lg)
- [ByteCTF 2021 Final By W&M(MISC)部分](https://mp.weixin.qq.com/s/IXWBU-vXMan9mHerPCPPjQ)
- [ByteCTF 2021 Final By W&M(Mobile)部分](https://mp.weixin.qq.com/s/7HDLGC4irJZ2M6oKwyXmXg)
**2021年工业信息安全技能大赛**
- [2021年工业信息安全技能大赛线上赛](https://secgxx.com/ctf/competition/2021icsc/)
Expand Down
10 changes: 5 additions & 5 deletions 1earn/Security/Crypto/Crypto.md
Original file line number Diff line number Diff line change
Expand Up @@ -147,7 +147,7 @@
- https://intensecrypto.org/public/
- https://cryptohack.org/

**工具**
**相关工具**
- [ffffffff0x/BerylEnigma](https://github.com/ffffffff0x/BerylEnigma) - 一个为渗透测试与CTF而制作的工具集,主要实现一些加解密的功能。
- [gchq/CyberChef](https://github.com/gchq/CyberChef) - 一个用于加密、编码、压缩和数据分析的网络应用
- [Snowming04/Cipher_Encryption_Type_Identification:.](https://github.com/Snowming04/Cipher_Encryption_Type_Identification) - 对密文的加密类型进行判断的命令行工具
Expand Down Expand Up @@ -178,7 +178,7 @@
- https://cryptii.com/
- https://www.ssleye.com/

**文章**
**相关文章**
- [为什么要在密码里加点"" | Libuchao's blog](https://libuchao.com/2013/07/05/password-salt)
- [CTF中那些脑洞大开的编码和加密 - jack_Meng](https://www.cnblogs.com/mq0036/p/6544055.html)
- [How we recovered over $300K of Bitcoin](https://reperiendi.wordpress.com/2020/04/03/how-i-recovered-over-300k-of-bitcoin/)
Expand Down Expand Up @@ -1010,7 +1010,7 @@ RIPEMD-160("") = 9c1185a5c5e9fc54612808977ee8f548b2258d31
# 现代密码
**文章**
**相关文章**
- [安全体系(一)—— DES算法详解](https://www.cnblogs.com/songwenlong/p/5944139.html)
- [安全体系(零)—— 加解密算法、消息摘要、消息认证技术、数字签名与公钥证书](http://www.cnblogs.com/songwenlong/p/6517165.html)
- [Blowfish (密码学) - 维基百科,自由的百科全书](https://zh.wikipedia.org/wiki/Blowfish_(%E5%AF%86%E7%A0%81%E5%AD%A6))
Expand Down Expand Up @@ -1317,7 +1317,7 @@ SM9主要包括三部分:签名算法、密钥交换算法、加密算法,
# 古典密码
**文章**
**相关文章**
- [Leet - 维基百科,自由的百科全书](https://zh.wikipedia.org/wiki/Leet)
- [纳瓦霍密码](https://baike.baidu.com/item/%E7%BA%B3%E7%93%A6%E9%9C%8D%E5%AF%86%E7%A0%81/9482868)
Expand All @@ -1343,7 +1343,7 @@ SM9主要包括三部分:签名算法、密钥交换算法、加密算法,
- 密文: Teucbonojmsvrhlzdghqikrwfxupoeteayo
**文章**
**相关文章**
- [Practical Cryptography](http://www.practicalcryptography.com/ciphers/classical-era/rail-fence/)
**在线工具**
Expand Down
Loading

0 comments on commit 267adbb

Please sign in to comment.