diff --git "a/1earn/\345\274\200\345\217\221/Python/\346\226\271\346\241\210-\345\256\236\344\276\213/\346\211\253\346\217\217/\347\253\257\345\217\243\346\211\253/IP_Port_192.168.37.150.txt" "b/1earn/\345\274\200\345\217\221/Python/\346\226\271\346\241\210-\345\256\236\344\276\213/\346\211\253\346\217\217/\347\253\257\345\217\243\346\211\253/IP_Port_192.168.37.150.txt" deleted file mode 100644 index a21b36e4..00000000 --- "a/1earn/\345\274\200\345\217\221/Python/\346\226\271\346\241\210-\345\256\236\344\276\213/\346\211\253\346\217\217/\347\253\257\345\217\243\346\211\253/IP_Port_192.168.37.150.txt" +++ /dev/null @@ -1,4 +0,0 @@ -192.168.37.150:80 -192.168.37.150:139 -192.168.37.150:135 -192.168.37.150:445 diff --git "a/1earn/\346\270\227\351\200\217/Speed-PenTest.md" "b/1earn/\346\270\227\351\200\217/Speed-PenTest.md" index 1194221f..2469c422 100644 --- "a/1earn/\346\270\227\351\200\217/Speed-PenTest.md" +++ "b/1earn/\346\270\227\351\200\217/Speed-PenTest.md" @@ -1530,6 +1530,8 @@ D:\>mimikatz.exe ""privilege::debug"" ""sekurlsa::logonpasswords full"" exit >> - 案例:[destoon无限制增加帐号资金 ](http://www.anquan.us/static/bugs/wooyun-2014-050481.html) +- 案例:[大疆某处支付逻辑漏洞可1元买无人机](http://www.anquan.us/static/bugs/wooyun-2016-0194751.html) + **商品数量篡改** 抓包修改商品数量等字段,将请求中的商品数量修改成任意数额,如负数并提交,查看能否以修改后的数量完成业务流程。