{"id":401,"date":"2024-01-29T21:46:05","date_gmt":"2024-01-29T13:46:05","guid":{"rendered":"https:\/\/blog.yiming1234.cn\/?p=401"},"modified":"2024-02-22T19:59:45","modified_gmt":"2024-02-22T11:59:45","slug":"%e5%a6%82%e4%bd%95%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%ba%e4%b8%aa%e4%ba%ba%e9%9d%b6%e5%9c%ba%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/blog.yiming1234.cn\/index.php\/2024\/%e5%a6%82%e4%bd%95%e5%bf%ab%e9%80%9f%e6%90%ad%e5%bb%ba%e4%b8%aa%e4%ba%ba%e9%9d%b6%e5%9c%ba%ef%bc%9f\/","title":{"rendered":"\u5982\u4f55\u5feb\u901f\u642d\u5efa\u4e2a\u4eba\u9776\u573a\uff1f"},"content":{"rendered":"\n

\u524d\u8a00<\/h2>\n\n\n\n
\"\"<\/div><\/figure>\n\n\n\n

\u4eca\u5929\u4e3b\u8981\u4ecb\u7ecd\u7684\u4e09\u4e2a\u4f9b\u4e2a\u4eba\u90e8\u7f72\u7684\u9776\u573a\u9879\u76ee\u5206\u522b\u4e3a\uff1a pikachu\uff0cDVWA\uff08Damn Vulnerable Web Application\uff09\u548cOWASP mutillidae\uff08Open Web Application Security Project\uff09\u3002<\/p>\n\n\n\n

\u8fd9\u4e9b\u9776\u573a\u9879\u76ee\u90fd\u662f\u9488\u5bf9OWASP Top10\u6f0f\u6d1e\u9488\u5bf9\u6027\u5f00\u53d1\u7684\u9776\u573a\u3002<\/p>\n\n\n\n

\u5f53\u7136\uff0c\u7f51\u4e0a\u4f9b\u8fd9\u79cdCTF\u7684\u5728\u7ebf\u9776\u573a\u4e5f\u6709\u5f88\u591a\u6837\u5f0f\u4e5f\u66f4\u4e3a\u4e30\u5bcc\uff0c\u53ea\u4e0d\u8fc7\u53ef\u80fd\u4f1a\u9700\u8981\u4ed8\u8d39\u4f7f\u7528\uff0c\u6bd4\u5982\u8bf4\uff1aCTFshow\uff0cCTF\u8bba\u5251\u573a\u7b49\u7b49\u3002\u6709\u9700\u8981\u5927\u5bb6\u53ef\u4ee5\u81ea\u884c\u524d\u5f80\u4e86\u89e3\u3002<\/p>\n\n\n\n

\u6b63\u6587<\/h2>\n\n\n\n

\u4e3b\u8981\u9700\u8981\u7528\u5230\u7684\u662f\u8f6f\u4ef6\u662fphpStudy\uff08\u5c0f\u76ae\uff09\uff0c\u9009\u62e9\u5c0f\u76ae\u7684\u539f\u56e0\u662f\u8fd9\u6b3e\u8f6f\u4ef6\u5bf9\u65b0\u624b\u8f83\u4e3a\u53cb\u597d\uff0c\u4e14\u80fd\u63d0\u4f9b\u6784\u5efa\u7f51\u7ad9\u6240\u9700\u7684Apache\uff0cNgnix\uff0cMySQL\u7b49\u73af\u5883\u3002\u5f53\u7136\u4e5f\u53ef\u4ee5\u9009\u62e9\u901a\u8fc7XAMPP\u7b49\u8f6f\u4ef6\u8fdb\u884c\u66ff\u4ee3\uff0c\u4e0d\u8fc7\u4e0b\u9762\u6211\u90fd\u901a\u8fc7phpStudy\u8fdb\u884c\u6f14\u793a\u3002\u4e0b\u8f7d\u5927\u5bb6\u5c31\u76f4\u63a5\u901a\u8fc7\u6d4f\u89c8\u5668\u641c\u7d22\u8bbf\u95ee\u5b98\u7f51\u8fdb\u884c\u4e0b\u8f7d\u5373\u53ef\u3002<\/p>\n\n\n\n

\u81f3\u4e8e\u9776\u573a\u5728Github\u4e0a\u90fd\u53ef\u4ee5\u76f4\u63a5\u641c\u5230\u5bf9\u5e94\u7684\u9879\u76ee\uff0c\u4e0b\u9762\u53ea\u63d0\u4f9b\u4e2a\u4eba\u4e0b\u8f7d\u94fe\u63a5\uff1a<\/p>\n\n\n\n

\u94fe\u63a5\uff1ahttps:\/\/pan.baidu.com\/s\/1UxFYy2FWDuKwc5eJOy3_jA<\/a>
\u63d0\u53d6\u7801\uff1ayjsl<\/p>\n\n\n\n

\u5176\u5b9e\u90e8\u7f72\u8fc7\u7a0b\u5927\u540c\u5c0f\u5f02\uff0c\u53ea\u9700\u8981\u5c06\u538b\u7f29\u5305\u91cc\u7684\u5185\u5bb9\u5168\u90e8\u79fb\u52a8\u5230\u7ad9\u70b9\u6839\u76ee\u5f55\u4e0b\uff0c\u7136\u540e\u9488\u5bf9\u6027\u7684\u66f4\u6539\u4e00\u4e0b\u6570\u636e\u5e93\u8fde\u63a5\u6587\u4ef6\u7684\u5185\u5bb9\u5c31\u53ef\u4ee5\u4e86\u3002<\/p>\n\n\n\n

\u4e0b\u9762\u5c31\u4e3b\u8981\u4ecb\u7ecd\u9700\u8981\u8fdb\u884c\u4fee\u6539\u7684\u6570\u636e\u5e93\u6587\u4ef6\uff0c\u9700\u8981\u5206\u522b\u521b\u5efa\u7684\u5bf9\u5e94\u7684\u6570\u636e\u5e93\uff08root\u4e3a\u9ed8\u8ba4\u8d77\u59cb\u6570\u636e\u5e93\uff09<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

pikachu<\/h3>\n\n\n\n

\u9700\u8981\u66f4\u6539\u6839\u76ee\u5f55\u4e0b\u7684inc\u6587\u4ef6\u5939\u4e0b\u7684config.inc.php\u6587\u4ef6<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u6b63\u5e38\u8fd0\u884c\u540e\u7684\u753b\u9762\uff1a<\/p>\n\n\n\n

\"\u6b64\u56fe\u7247\u7684alt\u5c5e\u6027\u4e3a\u7a7a\uff1b\u6587\u4ef6\u540d\u4e3a8043a9075302ff5d5f6963a19f27d5d-1024x504.png\"<\/div><\/figure>\n\n\n\n

DVWA<\/h3>\n\n\n\n

\u9700\u8981\u66f4\u6539\u6839\u76ee\u5f55\u4e0b\u7684config\u6587\u4ef6\u5939\u4e0b\u7684config.inc.php.dist\u6587\u4ef6<\/p>\n\n\n\n

\u53bb\u6389\u201c.dist\u201d\u6587\u4ef6\u540e\u7f00\uff0c\u4fee\u6539\u6570\u636e\u5e93\u7528\u6237\u540d\u5bc6\u7801<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u6b63\u5e38\u8fd0\u884c\u540e\u7684\u753b\u9762\uff1a<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

OWASP mutillidae<\/h3>\n\n\n\n

\u9700\u8981\u66f4\u6539\u6839\u76ee\u5f55\u4e0b\u7684includes\u6587\u4ef6\u5939\u4e0b\u7684database-config.inc<\/p>\n\n\n\n

\u53f3\u952e\u7528\u8bb0\u4e8b\u672c\u7f16\u8f91<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u6b63\u5e38\u8fd0\u884c\u540e\u7684\u753b\u9762\uff1a<\/p>\n\n\n\n

\"\"<\/div><\/figure>\n\n\n\n

\u8fd9\u6837\u6211\u4eec\u5c31\u53ef\u4ee5\u6b63\u5f0f\u5f00\u59cb\u6211\u4eec\u7684\u653b\u9632\u7ec3\u4e60\u4e86\uff01<\/p>\n\n\n\n

\u5c3e\u58f0<\/h2>\n\n\n\n

\u65b0\u4eba\u8d77\u6b65\uff0c\u53ea\u6709\u901a\u8fc7\u4e0d\u65ad\u7684\u5b9e\u6218\u7ec3\u4e60\u624d\u80fd\u638c\u63e1\u76f8\u5173\u7684\u77e5\u8bc6\u3002\u9776\u573a\u5c31\u662fCTFer\u6700\u597d\u7684\u73a9\u5177\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

\u524d\u8a00 \u4eca\u5929\u4e3b\u8981\u4ecb\u7ecd\u7684\u4e09\u4e2a\u4f9b\u4e2a\u4eba\u90e8\u7f72\u7684\u9776\u573a\u9879\u76ee\u5206\u522b\u4e3a\uff1a pikachu\uff0cDVWA\uff08Damn Vulnerable […]<\/p>\n","protected":false},"author":1,"featured_media":443,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[9],"tags":[12,38],"class_list":["post-401","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ctfshow","tag-ctfshow","tag-skill-summary"],"_links":{"self":[{"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/posts\/401","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/comments?post=401"}],"version-history":[{"count":6,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/posts\/401\/revisions"}],"predecessor-version":[{"id":450,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/posts\/401\/revisions\/450"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/media\/443"}],"wp:attachment":[{"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/media?parent=401"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/categories?post=401"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.yiming1234.cn\/index.php\/wp-json\/wp\/v2\/tags?post=401"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}