⚠ UNAUTHORIZED ACCESS GET /api/users HTTP/1.1 192.168.1.105:8080 ! FIREWALL BREACH POST /login 200 OK Authorization: Bearer eyJhbG... TCP SYN-ACK 443 ⚠ INTRUSION DETECTED SELECT * FROM users WHERE... SSH [email protected] Content-Type: application/json ! SECURITY ALERT AES-256 DECRYPTION... Cookie: session_id=7f3a9b2c UDP FLOOD DETECTED ⚠ ADMIN PRIVILEGES X-Forwarded-For: 203.0.113.0 RSA KEY EXCHANGE PORT 22 OPEN ! BYPASS COMPLETE User-Agent: Mozilla/5.0... HTTPS HANDSHAKE JWT TOKEN EXPIRED ⚠ ROOT ACCESS GRANTED DELETE FROM logs WHERE... DNS QUERY A RECORD CORS ORIGIN ALLOWED ! PACKET INJECTION WebSocket CONNECTED ICMP ECHO REQUEST Set-Cookie: auth=true ⚠ ENCRYPTION BROKEN SQL INJECTION ATTEMPT TLS 1.3 NEGOTIATION X-API-Key: sk_live_51... ! BACKDOOR ACTIVE CSRF TOKEN BYPASSED MAC ADDRESS SPOOFED PROXY CHAIN ESTABLISHED ⚠ SYSTEM COMPROMISED KERNEL MODULE LOADED REVERSE SHELL SPAWNED ARP POISONING ACTIVE ! PRIVILEGE ESCALATION BUFFER OVERFLOW EXPLOIT ZERO-DAY VULNERABILITY PAYLOAD DELIVERED ⚠ DEFENSE DISABLED STEALTH MODE ENABLED NETWORK SCAN COMPLETE BRUTE FORCE SUCCESS ! CRITICAL ERROR MEMORY DUMP ACQUIRED KEYLOGGER INSTALLED VPN TUNNEL CREATED ⚠ DATA EXFILTRATION RANSOMWARE DEPLOYED BOTNET CONNECTED DDoS ATTACK INITIATED ! MALWARE DETECTED TROJAN HORSE ACTIVE PHISHING LINK SENT MAN-IN-THE-MIDDLE ⚠ SESSION HIJACKED XSS PAYLOAD INJECTED COMMAND EXECUTION FILE UPLOAD BYPASS ! SANDBOX ESCAPED ANTIVIRUS DISABLED REGISTRY MODIFIED PROCESS INJECTION ⚠ PERSISTENCE ACHIEVED LATERAL MOVEMENT CREDENTIAL HARVESTED HASH CRACKED ! FULL CONTROL REMOTE CODE EXECUTION API ENDPOINT EXPOSED DATABASE DUMPED ⚠ MISSION COMPLETE

HACKING NOW...

# cmd 小技巧

# 快速打开系统变量

Ctrl + R 输入 sysdm.cql 可以快捷打开高级系统设置含有环境变量等修改

Net stop wuauserv 关闭 window 更新

Net start wuauserv 打开 window 更新

# 查看唤醒设备

查看能唤醒设备 powercfg /devicequery wake_armed

允许唤醒 powercfg /deviceenablewake "XXX"

拒绝唤醒 powercfg /devicedisablewake "XXX"

不会就不要乱搞哦

# bat 脚本

# 简单介绍

reg add \ABC\HKLM\Software\MyCo

添加或修改远程机器 ABC 上的一个注册表项 HKLM\Software\MyCo

reg add HKLM\Software\MyCo /v Data /t REG_BINARY /d fe340ead

添加或修改一个值 (名称: Data，类型: REG_BINARY，数据: fe340ead)

reg add HKLM\Software\MyCo /v MRU /t REG_MULTI_SZ /d fax\0mail

添加或修改一个值 (名称: MRU，类型: REG_MUTLI_SZ，数据: fax\0mail\0\0)

reg add HKLM\Software\MyCo /v Path /t REG_EXPAND_SZ /d %%systemroot%%

添加或修改一个值 (名称: Path，类型: REG_EXPAND_SZ，数据: % systemroot%)

注意：在扩充字符串中使用双百分比符号 (%%)

# Linux

# 网卡设置

nmcli connection modify ens160 ipv4.method manual +ipv4.addresses 192.168.189.131/24 autoconnect yes

设置第一个 ip 与掩码

nmcli connection modify ens160 ipv4.method manual +ipv4.addresses 192.168.189.132/24 autoconnect yes

设置第二个 ip 与掩码

nmcli connection down ens160 && nmcli connection up ens160

重新启动网卡

# window

启动报错 Win32Bridge.Server.exe 函数不正确
删除了 Cortana 系统的文件导致

在自带卸载应用界面，找到 Cortana 应用选择高级选项
选择充值此应用即可
重启
修好