2017-05-19
local smb = require "smb"
local vulns = require "vulns"
local stdnse = require "stdnse"
local string = require "string"
description = [[
Attempts to detect if a Microsoft SMBv1 server is vulnerable to a remote code
execution vulnerability (ms17-010).
The script connects to the $IPC tree, executes a transaction on FID 0 and
checks if the error "STATUS_INSUFF_SERVER_RESOURCES" is returned to
determine if the target is not patched against ms17-010.
Tested on a vulnerable Windows 7\. We might have some issues with v2 protocols with
signing enabled.
References:
* https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
* https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/
* https://msdn.microsoft.com/en-us/library/ee441489.aspx
* https://github......
阅读全文 →
2017-05-19
local smb = require "smb"
local vulns = require "vulns"
local stdnse = require "stdnse"
local string = require "string"
description = [[
Attempts to detect if a Microsoft SMBv1 server is vulnerable to a remote code
execution vulnerability (ms17-010).
The script connects to the $IPC tree, executes a transaction on FID 0 and
checks if the error "STATUS_INSUFF_SERVER_RESOURCES" is returned to
determine if the target is not patched against ms17-010.
Tested on a vulnerable Windows 7\. We might have some issues with v2 protocols with
signing enabled.
References:
* https://technet.microsoft.com/en-us/library/security/ms17-010.aspx
* https://blogs.technet.microsoft.com/msrc/2017/05/12/customer-guidance-for-wannacrypt-attacks/
* https://msdn.microsoft.com/en-us/library/ee441489.aspx
* https://github......
阅读全文 →
2017-05-08
尼玛折腾了半天看网上各种网站都是告诉我这么解决的
Add these line to the end of file:
SecAuditLogDirMode 1733
SecAuditLogFileMode 0550
SecAuditLogType Concurrent
SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
Check the directory of /usr/local/apache/logs/modsec_audit for proper permissions of : 1733
折腾了半天 还是提示
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "localhost.localdomain"] [uri "/favicon.ico"] [unique_id "AhAcAcAcAcAcAcAcpcAcAcAc"]
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to unlock global mutex......
阅读全文 →
2017-05-08
尼玛折腾了半天看网上各种网站都是告诉我这么解决的
Add these line to the end of file:
SecAuditLogDirMode 1733
SecAuditLogFileMode 0550
SecAuditLogType Concurrent
SecAuditLogStorageDir /usr/local/apache/logs/modsec_audit
Check the directory of /usr/local/apache/logs/modsec_audit for proper permissions of : 1733
折腾了半天 还是提示
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to lock global mutex: Permission denied [hostname "localhost.localdomain"] [uri "/favicon.ico"] [unique_id "AhAcAcAcAcAcAcAcpcAcAcAc"]
2017/05/08 11:09:04 [error] 26844#0: [client ] ModSecurity: Audit log: Failed to unlock global mutex......
阅读全文 →
2017-04-06
各位小伙伴求一个完整企业版
阅读全文 →
2017-04-06
各位小伙伴求一个完整企业版
阅读全文 →
2016-10-25
这几天打算搞点事:)
然后弄了台服务器，打算用四哥的工具搞搞
修改完四哥的软件（因为这个软件默认是在windows上用所以要改改才能在linux上用）
然后总出错如下：
我就毙了狗了，难道不兼容？
看了看代码，并没有什么不兼容啊。
然......
阅读全文 →
2016-10-25
这几天打算搞点事:)
然后弄了台服务器，打算用四哥的工具搞搞
修改完四哥的软件（因为这个软件默认是在windows上用所以要改改才能在linux上用）
然后总出错如下：
我就毙了狗了，难道不兼容？
看了看代码，并没有什么不兼容啊。
然......
阅读全文 →
2016-04-14
评论区：
大安全： 回复 rasca1'blog：反正不太好用。。我已经回滚了。。 [2016-05-18 15:31:40]
rasca1： 有编码问题的吧 linux一般都是utf8 win10中文版是gbk 特别坑 [2016-04-14 18:58:54]
......
阅读全文 →
2016-04-14
评论区：
大安全： 回复 rasca1'blog：反正不太好用。。我已经回滚了。。 [2016-05-18 15:31:40]
rasca1： 有编码问题的吧 linux一般都是utf8 win10中文版是gbk 特别坑 [2016-04-14 18:58:54]
......
阅读全文 →
2015-06-16
v1.6.18
This release updates the Scanner to enable it to find blind XML external entity (XXE) injection vulnerabilities. See today's blog post for more details.
The following bugs have been fixed:
A bug in the display of Scanner issues which prevented the configured font size from being correctly used.
A false negative in the detection of certain edge-case OS command injection vulnerabilities.
A bug in the Burp Proxy listeners options panel, which prevented newly added listeners from being correctly displayed.
Some performance improvements have been made to the Burp Collaborator server, and the metrics page now splits......
阅读全文 →
2015-06-16
v1.6.18
This release updates the Scanner to enable it to find blind XML external entity (XXE) injection vulnerabilities. See today's blog post for more details.
The following bugs have been fixed:
A bug in the display of Scanner issues which prevented the configured font size from being correctly used.
A false negative in the detection of certain edge-case OS command injection vulnerabilities.
A bug in the Burp Proxy listeners options panel, which prevented newly added listeners from being correctly displayed.
Some performance improvements have been made to the Burp Collaborator server, and the metrics page now splits......
阅读全文 →
2015-05-28
这两天看了看1password感觉不错，准备把Chrome密码迁移过去
然后发现1password不支持导入chrome的密码于是写了个工具来辅助导入
不多说代码如下：
Public Class DPAPI
' Wrapper for DPAPI CryptProtectData function.
<DllImport("crypt32.dll", SetLastError:=True, CharSet:=CharSet.Auto)> _
Private Shared Function CryptProtectData _
( _
ByRef pPlainText As DATA_BLOB, _
ByVal szDescription As String, _
ByRef pEntropy As DATA_BLOB, _
ByVal pReserved As IntPtr......
阅读全文 →
2015-05-28
这两天看了看1password感觉不错，准备把Chrome密码迁移过去
然后发现1password不支持导入chrome的密码于是写了个工具来辅助导入
不多说代码如下：
Public Class DPAPI
' Wrapper for DPAPI CryptProtectData function.
<DllImport("crypt32.dll", SetLastError:=True, CharSet:=CharSet.Auto)> _
Private Shared Function CryptProtectData _
( _
ByRef pPlainText As DATA_BLOB, _
ByVal szDescription As String, _
ByRef pEntropy As DATA_BLOB, _
ByVal pReserved As IntPtr......
阅读全文 →
2015-05-18
首先去
http://sourceforge.net/projects/getgnuwin32/?source=typ_redirect
下载GetGnuWin32-0.6.3.exe
下载后运行
会解压到刚刚界面提示的路径我这里是C:\Users\MythHack\Downloads\GetGnuWin32 这个路径下
然后进入bin目录里面有个wget.ini
设置wget代理 http_proxy = http://127.0.0.1:6666/（因为国内访问不了sf）
之后运......
阅读全文 →
2015-05-18
首先去
http://sourceforge.net/projects/getgnuwin32/?source=typ_redirect
下载GetGnuWin32-0.6.3.exe
下载后运行
会解压到刚刚界面提示的路径我这里是C:\Users\MythHack\Downloads\GetGnuWin32 这个路径下
然后进入bin目录里面有个wget.ini
设置wget代理 http_proxy = http://127.0.0.1:6666/（因为国内访问不了sf）
之后运......
阅读全文 →
2015-04-29
之前很多人没有关注过DNS方面相关的技术手段，但最近发现很多社区网站、wooyun里有很多人在搞子域名的收集或者其他的DNS相关的技术。
子域名工具我大致看了看不外乎通过第三方网站查询、暴力枚举子域名。这些我之前我也写过相关的工具，但是效果着实......
阅读全文 →
2015-04-29
之前很多人没有关注过DNS方面相关的技术手段，但最近发现很多社区网站、wooyun里有很多人在搞子域名的收集或者其他的DNS相关的技术。
子域名工具我大致看了看不外乎通过第三方网站查询、暴力枚举子域名。这些我之前我也写过相关的工具，但是效果着实......
阅读全文 →
2015-04-19
首先吐槽一下这玩意不能自动合并相同IP的端口挺蛋疼的..实现这个功能废了不少脑细胞.
由于比较仓促变量名以及注释没怎么搞(没有注释) :)
基本原理就是酱紫~如果需要添加什么入库啊、什么添加banner字段啊、添加各种字段啊，相信各位码神......
阅读全文 →
2015-04-19
首先吐槽一下这玩意不能自动合并相同IP的端口挺蛋疼的..实现这个功能废了不少脑细胞.
由于比较仓促变量名以及注释没怎么搞(没有注释) :)
基本原理就是酱紫~如果需要添加什么入库啊、什么添加banner字段啊、添加各种字段啊，相信各位码神......
阅读全文 →
2015-04-18
1.
-- The Head Section --
description = "Script to detect MS15-034 on HTTP port"
author = "Prajwal Panchmahalkar based on script from billbillthebillbill"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
categories = {"default", "safe"}
local shortport = require "shortport"
local http = require "http"
local nmap = require "nmap"
local stdnse = require "stdnse"
local string = require "string"
-- The Rule Section --
portrule = shortport.http
-- The Action Section --
action = function(host, port)
local uri="/"
local options = {header={}}
options['header']['Host'] = "hostattack"
options['......
阅读全文 →
2015-04-18
1.
-- The Head Section --
description = "Script to detect MS15-034 on HTTP port"
author = "Prajwal Panchmahalkar based on script from billbillthebillbill"
license = "Same as Nmap--See http://nmap.org/book/man-legal.html"
categories = {"default", "safe"}
local shortport = require "shortport"
local http = require "http"
local nmap = require "nmap"
local stdnse = require "stdnse"
local string = require "string"
-- The Rule Section --
portrule = shortport.http
-- The Action Section --
action = function(host, port)
local uri="/"
local options = {header={}}
options['header']['Host'] = "hostattack"
options['......
阅读全文 →
2015-01-02
sudo pip install virtualenv
sudo pip install setuptools
git clone https://github.com/KxCode/3102.git
virtualenv venv
sudo pip install -U pip
sudo easy_install argparse==1.2.1
sudo easy_install attrdict==1.1.0
sudo easy_install requests==2.4.3
sudo pip install config
现在还不能正常运行会爆如下错误
Traceback (most recent call last):
File "./run3102.py", line 13, in
from core.controller import start
File "/Users/MythHack/3102/core/controller.py", line 29, in
from plugins.icp import ICP
File "/Users/MythHack/3102/plugins/icp.py", line 13, in
from comm.config import ICP_API_CONFIG
原因是有个import写......
阅读全文 →
2015-01-02
sudo pip install virtualenv
sudo pip install setuptools
git clone https://github.com/KxCode/3102.git
virtualenv venv
sudo pip install -U pip
sudo easy_install argparse==1.2.1
sudo easy_install attrdict==1.1.0
sudo easy_install requests==2.4.3
sudo pip install config
现在还不能正常运行会爆如下错误
Traceback (most recent call last):
File "./run3102.py", line 13, in
from core.controller import start
File "/Users/MythHack/3102/core/controller.py", line 29, in
from plugins.icp import ICP
File "/Users/MythHack/3102/plugins/icp.py", line 13, in
from comm.config import ICP_API_CONFIG
原因是有个import写......
阅读全文 →
2014-11-25
如果数据很大请选择X64
Imports System.Text.RegularExpressions
Imports System.IO
Module Module1
Public myemail As New List(Of String)
Sub Main()
Dim reader As New StreamReader("all2.txt")
Dim my1 As String = String.Empty
While reader.Peek > -1
my1 = reader.ReadLine
If isemail(my1.Split("|")(0)) Then'格式是 email | password
If my1.Split("@")(0).Length - 1 <= 64 Then'判断name是否大于64个字符
myemail.Add(my1)
End If
End If
End While
reader.Close()
Dim write As New StreamWriter("done.txt")
For......
阅读全文 →
2014-11-25
如果数据很大请选择X64
Imports System.Text.RegularExpressions
Imports System.IO
Module Module1
Public myemail As New List(Of String)
Sub Main()
Dim reader As New StreamReader("all2.txt")
Dim my1 As String = String.Empty
While reader.Peek > -1
my1 = reader.ReadLine
If isemail(my1.Split("|")(0)) Then'格式是 email | password
If my1.Split("@")(0).Length - 1 <= 64 Then'判断name是否大于64个字符
myemail.Add(my1)
End If
End If
End While
reader.Close()
Dim write As New StreamWriter("done.txt")
For......
阅读全文 →
2014-10-16
核心源码:
Private Sub CheckPoodle(ByVal Domain As String, Optional ByVal port As Integer = 443)
Dim client As New TcpClient
client.Connect(Domain, port)
Dim Result As String = String.Empty
Try
Using ssl As SslStream = New SslStream(client.GetStream)
ssl.AuthenticateAsClient(Domain, Nothing, System.Security.Authentication.SslProtocols.Ssl3, False)
Console.ForegroundColor = ConsoleColor.Yellow
Result = String.Format("{0}---开启SSLv3", Domain)
Console.WriteLine(Result)
End Using
Catch ex1 As AuthenticationException
Console.ForegroundColor = ConsoleColor.Green
Result = String.Format("{0}---未开启SSLv3", Domain)
Console.WriteLine(Result)
Finally
CheckResult.Add(Result)
Console.ResetColor()
client......
阅读全文 →
2014-10-16
核心源码:
Private Sub CheckPoodle(ByVal Domain As String, Optional ByVal port As Integer = 443)
Dim client As New TcpClient
client.Connect(Domain, port)
Dim Result As String = String.Empty
Try
Using ssl As SslStream = New SslStream(client.GetStream)
ssl.AuthenticateAsClient(Domain, Nothing, System.Security.Authentication.SslProtocols.Ssl3, False)
Console.ForegroundColor = ConsoleColor.Yellow
Result = String.Format("{0}---开启SSLv3", Domain)
Console.WriteLine(Result)
End Using
Catch ex1 As AuthenticationException
Console.ForegroundColor = ConsoleColor.Green
Result = String.Format("{0}---未开启SSLv3", Domain)
Console.WriteLine(Result)
Finally
CheckResult.Add(Result)
Console.ResetColor()
client......
阅读全文 →
2014-09-01
0×01 开发原因
话说使用wvs、appscan很多年，但发现wvs等大型扫描器扫描大型网络或伪静态太多的时候发现扫描非常慢，严重的还会卡死。
这2天研究了一下发现可以开发软件进行各种优化。于是我动手写了个软件。
0×02 功能包括
冗余链接、冗余参数、多余参数......
阅读全文 →
2014-09-01
0×01 开发原因
话说使用wvs、appscan很多年，但发现wvs等大型扫描器扫描大型网络或伪静态太多的时候发现扫描非常慢，严重的还会卡死。
这2天研究了一下发现可以开发软件进行各种优化。于是我动手写了个软件。
0×02 功能包括
冗余链接、冗余参数、多余参数......
阅读全文 →
2014-06-24
AppScan FixPack 9.0.0.1
New Rules:
==========
N/A
http://pan.baidu.com/s/1qW4UoxA
解压密码:www.secbig.com
阅读全文 →
2014-06-24
AppScan FixPack 9.0.0.1
New Rules:
==========
N/A
http://pan.baidu.com/s/1qW4UoxA
解压密码:www.secbig.com
阅读全文 →
2014-05-25
发现OsmocomBB官方无法访问了，找了一会终于找到了gnu-arm-build.2.sh
#!/bin/sh
ROOT=`pwd`
SRCDIR=$ROOT/src
BUILDDIR=$ROOT/build
PREFIX=$ROOT/install
GCC_SRC=gcc-4.5.2.tar.bz2
GCC_VERSION=4.5.2
GCC_DIR=gcc-$GCC_VERSION
BINUTILS_SRC=binutils-2.21.1a.tar.bz2
BINUTILS_VERSION=2.21.1
BINUTILS_DIR=binutils-$BINUTILS_VERSION
NEWLIB_SRC=newlib-1.19.0.tar.gz
NEWLIB_VERSION=1.19.0
NEWLIB_DIR=newlib-$NEWLIB_VERSION
#INSIGHT_SRC=insight-6.8-1.tar.bz2
#INSIGHT_VERSION=6.8-1
#INSIGHT_DIR=insight-$INSIGHT_VERSION
echo "I will build an arm-elf cross-compiler:
Prefix: $PREFIX
Sources: $SRCDIR
Build files: $BUILDDIR
Press ^C now if you do NOT want to do this."
read IGNORE......
阅读全文 →
2014-05-25
发现OsmocomBB官方无法访问了，找了一会终于找到了gnu-arm-build.2.sh
#!/bin/sh
ROOT=`pwd`
SRCDIR=$ROOT/src
BUILDDIR=$ROOT/build
PREFIX=$ROOT/install
GCC_SRC=gcc-4.5.2.tar.bz2
GCC_VERSION=4.5.2
GCC_DIR=gcc-$GCC_VERSION
BINUTILS_SRC=binutils-2.21.1a.tar.bz2
BINUTILS_VERSION=2.21.1
BINUTILS_DIR=binutils-$BINUTILS_VERSION
NEWLIB_SRC=newlib-1.19.0.tar.gz
NEWLIB_VERSION=1.19.0
NEWLIB_DIR=newlib-$NEWLIB_VERSION
#INSIGHT_SRC=insight-6.8-1.tar.bz2
#INSIGHT_VERSION=6.8-1
#INSIGHT_DIR=insight-$INSIGHT_VERSION
echo "I will build an arm-elf cross-compiler:
Prefix: $PREFIX
Sources: $SRCDIR
Build files: $BUILDDIR
Press ^C now if you do NOT want to do this."
read IGNORE......
阅读全文 →
2014-05-23
Burp Suite 是用于攻击web 应用程序的集成平台。它包含了许多工具，并为这些工具设计了许多接口，以促进加快攻击应用程序的过程。所有的工具都共享一个能处理并显示HTTP 消息，持久性，认证，代理，日志，警报的一个强大的可扩展的框架。
链接: http://pan......
阅读全文 →
2014-05-23
Burp Suite 是用于攻击web 应用程序的集成平台。它包含了许多工具，并为这些工具设计了许多接口，以促进加快攻击应用程序的过程。所有的工具都共享一个能处理并显示HTTP 消息，持久性，认证，代理，日志，警报的一个强大的可扩展的框架。
链接: http://pan......
阅读全文 →
2014-04-22
Download Link
6.45后的1星期Nmap再次更新为6.46
下面是6.45和6.46的更新内容:P
Nmap 6.46
o [NSE] Made numerous improvements to ssl-heartbleed to provide
more reliable detection of the vulnerability.
o [Zenmap] Fixed a bug which caused this crash message:
IOError: [Errno socket error] [Errno 10060] A connection attempt failed
because the connected party did not properly respond after a period of
time, or established connection failed because connected host has
failed to
respond
The bug was caused by us adding a......
阅读全文 →
2014-04-22
Download Link
6.45后的1星期Nmap再次更新为6.46
下面是6.45和6.46的更新内容:P
Nmap 6.46
o [NSE] Made numerous improvements to ssl-heartbleed to provide
more reliable detection of the vulnerability.
o [Zenmap] Fixed a bug which caused this crash message:
IOError: [Errno socket error] [Errno 10060] A connection attempt failed
because the connected party did not properly respond after a period of
time, or established connection failed because connected host has
failed to
respond
The bug was caused by us adding a......
阅读全文 →
2014-04-14
xxxxxx.com记住文章一定要审核！那些特性根本不是AppScan9.0的。
据我所知9.0更新的内容不多。图我就不发了。
http://pan.baidu.com/s/1o6FeE2Q
当回好人吧:P
阅读全文 →
2014-04-14
xxxxxx.com记住文章一定要审核！那些特性根本不是AppScan9.0的。
据我所知9.0更新的内容不多。图我就不发了。
http://pan.baidu.com/s/1o6FeE2Q
当回好人吧:P
阅读全文 →
2014-03-06
为了方便做C段Nmap端口扫描写了个小玩意
输入IP样例
192.168.1.55
输出格式192.168.1.1-255
Code:
Imports System.IO
Imports System.Text
Public Class Main
Private AllIP As New List(Of String)
Private AddAllIP As New List(Of String)
Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
For Each temp1 As String In RichTextBox1.Lines
AllIP.Add(temp1)
Next
Dim ResultBuilder As New StringBuilder
Dim Temp() As String
For Each temp1 As String In AllIP
If AddAllIP.Contains(temp1) = False Then
Temp = temp1.Split("."......
阅读全文 →
2014-03-06
为了方便做C段Nmap端口扫描写了个小玩意
输入IP样例
192.168.1.55
输出格式192.168.1.1-255
Code:
Imports System.IO
Imports System.Text
Public Class Main
Private AllIP As New List(Of String)
Private AddAllIP As New List(Of String)
Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
For Each temp1 As String In RichTextBox1.Lines
AllIP.Add(temp1)
Next
Dim ResultBuilder As New StringBuilder
Dim Temp() As String
For Each temp1 As String In AllIP
If AddAllIP.Contains(temp1) = False Then
Temp = temp1.Split("."......
阅读全文 →
2014-01-19
这几天在搞大型网络的端口扫描，其实也不算很大大概1.1W个主机的全端口扫描。
扫描是扫描完了但是结果看起来很难受。。很多关闭或者过滤的端口它也显示出来了
后来又看了看Nmap的参数 发现了--open参数，这个参数是只显示&输出 开放端口的参数。但光看......
阅读全文 →
2014-01-19
这几天在搞大型网络的端口扫描，其实也不算很大大概1.1W个主机的全端口扫描。
扫描是扫描完了但是结果看起来很难受。。很多关闭或者过滤的端口它也显示出来了
后来又看了看Nmap的参数 发现了--open参数，这个参数是只显示&输出 开放端口的参数。但光看......
阅读全文 →
2014-01-05
NetStress是一个DDoS攻击和网络压力测试工具。
SF下载地址：http://sourceforge.net/projects/netstressng/
直接下载地址: https://s.yunio.com/17Tx4z
NetStress支持以下攻击方式:
SYN Flood Attacks
SYN flood 静态源端口
SYN flood 随机源端口
SYN flood 静态源IP
SYN flood 随机源IP
SYN flood 碎片包
ACK Flood Attacks
ACK Flood 静态源端口
ACK Flood 随机源端口
ACK Flood 静态源IP
ACK Flood 随机源IP
ACK Flood 碎......
阅读全文 →
2014-01-05
NetStress是一个DDoS攻击和网络压力测试工具。
SF下载地址：http://sourceforge.net/projects/netstressng/
直接下载地址: https://s.yunio.com/17Tx4z
NetStress支持以下攻击方式:
SYN Flood Attacks
SYN flood 静态源端口
SYN flood 随机源端口
SYN flood 静态源IP
SYN flood 随机源IP
SYN flood 碎片包
ACK Flood Attacks
ACK Flood 静态源端口
ACK Flood 随机源端口
ACK Flood 静态源IP
ACK Flood 随机源IP
ACK Flood 碎......
阅读全文 →
2013-02-27
看了下破解方法 大概是逆出了算法然后反射破解的(以前我也搞了很久- -可惜不会java蛋疼了最后放弃了)
下载地址:http://s.yunio.com/gg!PDe
解压密码:www.secbig.com
package larry.lau;
import burp.StartBurp;
import java.lang.reflect.Field;
import java.util.prefs.Preferences;
import javax.swing.JOptionPane;
public class BurpLoader
{
/* public static final String readme1 = "------------------------------------------";
public static final String readme2 = " 码农......
阅读全文 →
2013-02-27
看了下破解方法 大概是逆出了算法然后反射破解的(以前我也搞了很久- -可惜不会java蛋疼了最后放弃了)
下载地址:http://s.yunio.com/gg!PDe
解压密码:www.secbig.com
package larry.lau;
import burp.StartBurp;
import java.lang.reflect.Field;
import java.util.prefs.Preferences;
import javax.swing.JOptionPane;
public class BurpLoader
{
/* public static final String readme1 = "------------------------------------------";
public static final String readme2 = " 码农......
阅读全文 →
2013-02-16
首先感谢大家对我这个小站的支持
逆这个很简单详细很多大牛都逆出来了 放手上好久了 各位想写扫描器的可以看看源码学习下:)
下载地址：http://pan.baidu.com/share/link?shareid=243665&uk=2114106857
解压密码:www.secbig.com
阅读全文 →
2013-02-16
首先感谢大家对我这个小站的支持
逆这个很简单详细很多大牛都逆出来了 放手上好久了 各位想写扫描器的可以看看源码学习下:)
下载地址：http://pan.baidu.com/share/link?shareid=243665&uk=2114106857
解压密码:www.secbig.com
阅读全文 →
2013-02-07
下载地址：http://pan.baidu.com/share/link?shareid=238366&uk=2114106857
Imports System.IO
Module Module1
Sub Main()
Console.Title = "SuperDeduplication V1.0 By:MythHack"
Try
Dim dir As String = AppDomain.CurrentDomain.BaseDirectory
Dim proc_self As Process = Process.GetCurrentProcess()
Console.Write("请输入文件名(不要加路径): ")
Dim filename As String = Console.ReadLine
Dim file1 As StreamReader = New StreamReader(dir & filename)
Dim set1 As New HashSet(Of String)
While file1.Peek > -1
set1.Add(file1.ReadLine)
End While
file1.Close()
Dim file2 As StreamWriter = New StreamWriter(dir &......
阅读全文 →
2013-02-07
下载地址：http://pan.baidu.com/share/link?shareid=238366&uk=2114106857
Imports System.IO
Module Module1
Sub Main()
Console.Title = "SuperDeduplication V1.0 By:MythHack"
Try
Dim dir As String = AppDomain.CurrentDomain.BaseDirectory
Dim proc_self As Process = Process.GetCurrentProcess()
Console.Write("请输入文件名(不要加路径): ")
Dim filename As String = Console.ReadLine
Dim file1 As StreamReader = New StreamReader(dir & filename)
Dim set1 As New HashSet(Of String)
While file1.Peek > -1
set1.Add(file1.ReadLine)
End While
file1.Close()
Dim file2 As StreamWriter = New StreamWriter(dir &......
阅读全文 →
2013-01-24
今天查了几个C段打算扫下端口但手头也没有生成C段的工具就没事自己搞了个比较简单for嵌套
Public Class Form1
Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
If RichTextBox1.TextLength > 0 Then
RichTextBox1.Text = String.Empty
End If
For z As Integer = CInt(TextBox2.Text) To CInt(TextBox3.Text)
For i As Integer = 0 To 255
If z = CInt(TextBox3.Text) And i = 255 Then
RichTextBox1.AppendText(TextBox1.Text &......
阅读全文 →
2013-01-24
今天查了几个C段打算扫下端口但手头也没有生成C段的工具就没事自己搞了个比较简单for嵌套
Public Class Form1
Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
If RichTextBox1.TextLength > 0 Then
RichTextBox1.Text = String.Empty
End If
For z As Integer = CInt(TextBox2.Text) To CInt(TextBox3.Text)
For i As Integer = 0 To 255
If z = CInt(TextBox3.Text) And i = 255 Then
RichTextBox1.AppendText(TextBox1.Text &......
阅读全文 →
2012-12-01
Fyodor: 大家好，时隔五个月我们又推出了新版本，这是给大家的圣诞礼物！Nmap 6.25包含数百项功能改进：新增85个NSE脚本、近千个OS和服务检测指纹，提供更高的性能、更好的IPv6 traceroute，支持Windows 8等等。特别感谢Google编程之夏5名学生和他们的mentor对新版本......
阅读全文 →
2012-12-01
Fyodor: 大家好，时隔五个月我们又推出了新版本，这是给大家的圣诞礼物！Nmap 6.25包含数百项功能改进：新增85个NSE脚本、近千个OS和服务检测指纹，提供更高的性能、更好的IPv6 traceroute，支持Windows 8等等。特别感谢Google编程之夏5名学生和他们的mentor对新版本......
阅读全文 →
2012-11-22
以前我发过这个工具 非常不错 对各种编码解码转换很牛X
但是看着一堆英文有点蛋疼 所以就汉化了一下:)
PS：英文不好很多词貌似有点问题 各位大牛将用吧:P
下载地址：http://kuai.xunlei.com/d/BOCKVSPQBKGY
解压密码:www.secbig.com
评论区：
DK： appscan8.6的下载地址麻烦给我一下 [2012-12-09 16......
阅读全文 →
2012-11-22
以前我发过这个工具 非常不错 对各种编码解码转换很牛X
但是看着一堆英文有点蛋疼 所以就汉化了一下:)
PS：英文不好很多词貌似有点问题 各位大牛将用吧:P
下载地址：http://kuai.xunlei.com/d/BOCKVSPQBKGY
解压密码:www.secbig.com
评论区：
DK： appscan8.6的下载地址麻烦给我一下 [2012-12-09 16......
阅读全文 →
2012-09-04
Keygen注册方法
1、先安装SecureCRT or SecureFX 7.0；(64位)
2、将相应的kg文件复制到安装目录下、运行（如运行报错缺少.dll文件，则安装vcredist_x86.exe库文件）；
3、运行注册机，先点patch，会替换两个源文件SecureCRT.exe和LicenseHelper.exe，选到相应的文件即可
4、运行SecureCRT.exe，直接点下一步，然后再点Enter License Manually，在弹出的......
阅读全文 →
2012-09-04
Keygen注册方法
1、先安装SecureCRT or SecureFX 7.0；(64位)
2、将相应的kg文件复制到安装目录下、运行（如运行报错缺少.dll文件，则安装vcredist_x86.exe库文件）；
3、运行注册机，先点patch，会替换两个源文件SecureCRT.exe和LicenseHelper.exe，选到相应的文件即可
4、运行SecureCRT.exe，直接点下一步，然后再点Enter License Manually，在弹出的......
阅读全文 →
2012-08-25
下载地址：http://kuai.xunlei.com/d/BIFNUGSBYURG
KeyGen下载地址:http://kuai.xunlei.com/d/BZFHQEGQTEPF
解压密码:www.mythhack.com
阅读全文 →
2012-08-25
下载地址：http://kuai.xunlei.com/d/BIFNUGSBYURG
KeyGen下载地址:http://kuai.xunlei.com/d/BZFHQEGQTEPF
解压密码:www.mythhack.com
阅读全文 →
2012-08-05
支持软件:
UltraEdit V16.X
UltraEdit V18.X
UltraEdit U3/Protable V16.X
UltraEdit U3 V18.X
UEStudio V10.X
UEStudio V11.X
UEStudio V12.X
UltraCompare U3/Protable V7.X
UltraCompare V7.X
UltraCompare V8.X
UltraCompare Mobile V8.x
UltraSentry V6.X
注册方法见：http://www.secbig.com/?p=1278
下载地址:http://kuai.xunlei.com/d/BYIUCYXLLOEC
UltraSentry KeyGen 下载地址:http://kuai.xunlei.com/d/BIAJTVYNYZQZ
解压密码:www.mythhack.com
阅读全文 →
2012-08-05
支持软件:
UltraEdit V16.X
UltraEdit V18.X
UltraEdit U3/Protable V16.X
UltraEdit U3 V18.X
UEStudio V10.X
UEStudio V11.X
UEStudio V12.X
UltraCompare U3/Protable V7.X
UltraCompare V7.X
UltraCompare V8.X
UltraCompare Mobile V8.x
UltraSentry V6.X
注册方法见：http://www.secbig.com/?p=1278
下载地址:http://kuai.xunlei.com/d/BYIUCYXLLOEC
UltraSentry KeyGen 下载地址:http://kuai.xunlei.com/d/BIAJTVYNYZQZ
解压密码:www.mythhack.com
阅读全文 →
2012-07-27
https://svn.nmap.org/nmap/scripts/http-sql-injection.nse
local http = require "http"
local httpspider = require "httpspider"
local io = require "io"
local nmap = require "nmap"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local table = require "table"
local url = require "url"
description = [[
Spiders an HTTP server looking for URLs containing queries vulnerable to an SQL
injection attack. It also extracts forms from found websites and tries to identify
fields that are vulnerable.
The script spiders an HTTP server looking for URLs containing queries. It then
proceeds to combine crafted SQL commands with......
阅读全文 →
2012-07-27
https://svn.nmap.org/nmap/scripts/http-sql-injection.nse
local http = require "http"
local httpspider = require "httpspider"
local io = require "io"
local nmap = require "nmap"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local table = require "table"
local url = require "url"
description = [[
Spiders an HTTP server looking for URLs containing queries vulnerable to an SQL
injection attack. It also extracts forms from found websites and tries to identify
fields that are vulnerable.
The script spiders an HTTP server looking for URLs containing queries. It then
proceeds to combine crafted SQL commands with......
阅读全文 →
2012-07-06
Update 内容
1、升级线程管理机制
2、核心内容改写 效率比V5提高3倍以上
3、修复一些Bug
高清视频下载地址:http://kuai.xunlei.com/d/BKEQZMZGAOAI
注：暂不提供下载
评论区：
匿名： 啥时候发布啊？ [2012-07-11 09:35:38]
传说中的鱼化石： 发我玩玩啊 Myth兄 [2012-07-06 16:46:51]
......
阅读全文 →
2012-07-06
Update 内容
1、升级线程管理机制
2、核心内容改写 效率比V5提高3倍以上
3、修复一些Bug
高清视频下载地址:http://kuai.xunlei.com/d/BKEQZMZGAOAI
注：暂不提供下载
评论区：
匿名： 啥时候发布啊？ [2012-07-11 09:35:38]
传说中的鱼化石： 发我玩玩啊 Myth兄 [2012-07-06 16:46:51]
......
阅读全文 →
2012-07-02
下载地址:http://kuai.xunlei.com/d/BGGJSWYBEUVQ
更新内容：
o [Zenmap] Fixed a hang that would occur on Mac OS X 10.7. A symptom
of the hang was this message in the system console:
"Couldn't recognize the image file format for file
'/Applications/Zenmap.app/Contents/MacOS/../Resources/share/zenmap/pixmaps/radialnet/padlock.png'".
[David Fifield]
o [Zenmap] Fixed a crash that happened when activating the host filter.
File "zenmapCore\SearchResult.pyo", line 155, in match_os
KeyError: 'osmatches'
[jah]
o Fixed an error that occurred when scanning certain addresses like
192.168.0.0 on Windows XP:
get_srcaddr: can't connect socket: The......
阅读全文 →
2012-07-02
下载地址:http://kuai.xunlei.com/d/BGGJSWYBEUVQ
更新内容：
o [Zenmap] Fixed a hang that would occur on Mac OS X 10.7. A symptom
of the hang was this message in the system console:
"Couldn't recognize the image file format for file
'/Applications/Zenmap.app/Contents/MacOS/../Resources/share/zenmap/pixmaps/radialnet/padlock.png'".
[David Fifield]
o [Zenmap] Fixed a crash that happened when activating the host filter.
File "zenmapCore\SearchResult.pyo", line 155, in match_os
KeyError: 'osmatches'
[jah]
o Fixed an error that occurred when scanning certain addresses like
192.168.0.0 on Windows XP:
get_srcaddr: can't connect socket: The......
阅读全文 →
2012-06-17
程序下载地址:http://kuai.xunlei.com/d/BHYGXSWUWHOZ
KeyGen下载地址:http://kuai.xunlei.com/d/BDPLSXWKCOWX
解压密码:www.mythhack.com
阅读全文 →
2012-06-17
程序下载地址:http://kuai.xunlei.com/d/BHYGXSWUWHOZ
KeyGen下载地址:http://kuai.xunlei.com/d/BDPLSXWKCOWX
解压密码:www.mythhack.com
阅读全文 →
2012-06-12
1、下载软件和KeyGen
软件地址：http://www.ultraedit.com/files/ue_chinese.exe
KeyGen地址：http://kuai.xunlei.com/d/BANJQRMECOYY
KeyGen解压密码:www.mythhack.com
注册方法见http://www.secbig.com/?p=1278
阅读全文 →
2012-06-12
1、下载软件和KeyGen
软件地址：http://www.ultraedit.com/files/ue_chinese.exe
KeyGen地址：http://kuai.xunlei.com/d/BANJQRMECOYY
KeyGen解压密码:www.mythhack.com
注册方法见http://www.secbig.com/?p=1278
阅读全文 →
2012-05-30
音速启动更新了。。。这么多年后竟然更新了。。
今天开音速启动竟然发现自动安装了一个版本。。我开始以为是啥软件更新了。。
结果一看是音速启动。。我顿时激动了。。
然后一看官网竟然更新了。。。
官方http://www.3lsoft.com/
好吧 不管......
阅读全文 →
2012-05-30
音速启动更新了。。。这么多年后竟然更新了。。
今天开音速启动竟然发现自动安装了一个版本。。我开始以为是啥软件更新了。。
结果一看是音速启动。。我顿时激动了。。
然后一看官网竟然更新了。。。
官方http://www.3lsoft.com/
好吧 不管......
阅读全文 →
2012-05-29
下载地址http://kuai.xunlei.com/d/BITCLQTVFLGY
解压密码:www.mythhack.com
阅读全文 →
2012-05-29
下载地址http://kuai.xunlei.com/d/BITCLQTVFLGY
解压密码:www.mythhack.com
阅读全文 →
2012-05-26
离线注册就行了
下载地址：http://kuai.xunlei.com/d/BXYVPZDYDFPL
解压密码:www.mythhack.com
阅读全文 →
2012-05-26
离线注册就行了
下载地址：http://kuai.xunlei.com/d/BXYVPZDYDFPL
解压密码:www.mythhack.com
阅读全文 →
2011-09-29
include "stdafx.h"
include
include
include
define iPort 80//定义端口
define szSign "500 13\t\nServer:Microsoft-IIS/5.0"//根据此标志来检查目标是否有漏洞
pragma comment(lib,"ws2_32.lib")
//定义初始化全局变量
char *SendBuff="Get /NULL.printer\n",
CurrentTarget[52]={0},
turn[4][2]={"-","\","|","/"};
int SendBuffLen=strlen(SendBuff),
iConnTimeOut,//Tcp超时时间
ii=0,//Scan进度
iTotal;//服务器总数
HANDLE hSemaphore=NULL,//信标......
阅读全文 →
2011-09-29
include "stdafx.h"
include
include
include
define iPort 80//定义端口
define szSign "500 13\t\nServer:Microsoft-IIS/5.0"//根据此标志来检查目标是否有漏洞
pragma comment(lib,"ws2_32.lib")
//定义初始化全局变量
char *SendBuff="Get /NULL.printer\n",
CurrentTarget[52]={0},
turn[4][2]={"-","\","|","/"};
int SendBuffLen=strlen(SendBuff),
iConnTimeOut,//Tcp超时时间
ii=0,//Scan进度
iTotal;//服务器总数
HANDLE hSemaphore=NULL,//信标......
阅读全文 →
2011-09-16
下载地址：http://115.com/file/bhikv30h
解压密码:www.mythhack.com
阅读全文 →
2011-09-16
下载地址：http://115.com/file/bhikv30h
解压密码:www.mythhack.com
阅读全文 →
2011-09-14
下载地址：
http://convurl.com/iB2IfS
评论区：
MythHack： VM8KeyGen在这里
http://www.secbig.com/?p=620 [2011-09-18 15:14:18]
MythHack： 可以 [2011-09-16 01:46:51]
献世： VMware Workstation 要key的哦，版主，你有吗 [2011-09-15 23:29:59]
献世： :razz: 谢谢版主所提供的资源，感激。问一下，如果安装过程中，有疑问，可以找你帮助吗？ [2011-09-15 23:02:28]
......
阅读全文 →
2011-09-14
下载地址：
http://convurl.com/iB2IfS
评论区：
MythHack： VM8KeyGen在这里
http://www.secbig.com/?p=620 [2011-09-18 15:14:18]
MythHack： 可以 [2011-09-16 01:46:51]
献世： VMware Workstation 要key的哦，版主，你有吗 [2011-09-15 23:29:59]
献世： :razz: 谢谢版主所提供的资源，感激。问一下，如果安装过程中，有疑问，可以找你帮助吗？ [2011-09-15 23:02:28]
......
阅读全文 →
2011-09-12
Symbian也用Terminal
本想塞班应该没有这样的东西结果在群里得知塞班也可以用Terminal
PuTTY有塞班版本 我这个高兴啊 给大家分享一下把
下载地址：http://bd.kicks-ass.net/koodaus/putty/
评论区：
北京婚纱工作室： 真的好有创意的啊。顶你 [2011-09-13 17:11:44]
韩式婚纱摄影工作室： 图片的东西 ，我都很喜欢呀， 呵呵 [2011-09-13 15:18......
阅读全文 →
2011-09-12
Symbian也用Terminal
本想塞班应该没有这样的东西结果在群里得知塞班也可以用Terminal
PuTTY有塞班版本 我这个高兴啊 给大家分享一下把
下载地址：http://bd.kicks-ass.net/koodaus/putty/
评论区：
北京婚纱工作室： 真的好有创意的啊。顶你 [2011-09-13 17:11:44]
韩式婚纱摄影工作室： 图片的东西 ，我都很喜欢呀， 呵呵 [2011-09-13 15:18......
阅读全文 →
2011-09-02
检测管理员上线就注销自已：
@echo off
:check
choice /C YN /T 10 /D Y
quser find "#16" && del xx.bat logoff
goto check
16 每次运行这个 bat 的时候先quser 一下，看当前的会话id 是多少，然后加1 每连接一次就会加1。以上适应使用管理员帐号时。
下面适应使用拥有管理员权限的其他帐号：
@echo off
logoff 1
del......
阅读全文 →
2011-09-02
检测管理员上线就注销自已：
@echo off
:check
choice /C YN /T 10 /D Y
quser find "#16" && del xx.bat logoff
goto check
16 每次运行这个 bat 的时候先quser 一下，看当前的会话id 是多少，然后加1 每连接一次就会加1。以上适应使用管理员帐号时。
下面适应使用拥有管理员权限的其他帐号：
@echo off
logoff 1
del......
阅读全文 →
2011-09-02
exp内容如下：保存为taskxpl.wsf
crc_table = new Array(
0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419,
0x706AF48F, 0xE963A535, 0x9E6495A3, 0x0EDB8832, 0x79DCB8A4,
0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07,
0x90BF1D91, 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE,
0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7, 0x136C9856,
0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9,
0xFA0F3D63, 0x8D080DF5, 0x3B6E20C8, 0x4C69105E, 0xD56041E4,
0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3,
0x45DF5C75, 0xDCD60DCF, 0xABD13D59, 0x26D930AC, 0x51DE003A,
0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599,
0xB8BDA50F, 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924,
0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D, 0x76DC4190,
0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F,
0x9FBFE4A5, 0xE8B8D433, 0x7807C9A2, 0x0F00F934, 0x9609A88E,
0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED,
0x1B01A57B, 0x8208F4C1, 0xF50FC457, 0x65B0D9C6, 0x12B7E950,
0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3,
0xFBD44C65, 0x4DB26158......
阅读全文 →
2011-09-02
exp内容如下：保存为taskxpl.wsf
crc_table = new Array(
0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419,
0x706AF48F, 0xE963A535, 0x9E6495A3, 0x0EDB8832, 0x79DCB8A4,
0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07,
0x90BF1D91, 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE,
0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7, 0x136C9856,
0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9,
0xFA0F3D63, 0x8D080DF5, 0x3B6E20C8, 0x4C69105E, 0xD56041E4,
0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3,
0x45DF5C75, 0xDCD60DCF, 0xABD13D59, 0x26D930AC, 0x51DE003A,
0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599,
0xB8BDA50F, 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924,
0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D, 0x76DC4190,
0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F,
0x9FBFE4A5, 0xE8B8D433, 0x7807C9A2, 0x0F00F934, 0x9609A88E,
0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED,
0x1B01A57B, 0x8208F4C1, 0xF50FC457, 0x65B0D9C6, 0x12B7E950,
0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3,
0xFBD44C65, 0x4DB26158......
阅读全文 →
2011-08-30
一个强大的手工杀毒工具，支持32位的2000、xp、2003、vista、2008和Win7操作系统。
下载点我(md5:1A84C5839D105600841368C62D3D6A97)
作者QQ微博：http://t.qq.com/linxer 欢迎收听，以后XueTr情况会在这里发布。
本工具目前实现如下功能：
1.进程、线程、进程模块、进程窗口、进程内存、定时器、热......
阅读全文 →
2011-08-30
一个强大的手工杀毒工具，支持32位的2000、xp、2003、vista、2008和Win7操作系统。
下载点我(md5:1A84C5839D105600841368C62D3D6A97)
作者QQ微博：http://t.qq.com/linxer 欢迎收听，以后XueTr情况会在这里发布。
本工具目前实现如下功能：
1.进程、线程、进程模块、进程窗口、进程内存、定时器、热......
阅读全文 →
2011-08-29
下载地址：http://kuai.xunlei.com/d/BBFNRVUZIGEE
解压密码:www.mythhack.com
阅读全文 →
2011-08-29
下载地址：http://kuai.xunlei.com/d/BBFNRVUZIGEE
解压密码:www.mythhack.com
阅读全文 →