OWASP Top 10 Parameter Overview Top 25 Parameters Cross-Site Scripting (XSS) Parameters Server-Side Request Forgery (SSRF) Parameters Loca...

Python Crash String List dictionary Tuple Sorted Functions lambda zip, map filter test except RegularExpression Data ...

Python Package 1 example Python Package main.py mypackage/ __init__.py mymodule.py myothermodule.py …a mymodule.py like this… #!/usr/bin/env python3 # Exp...

Asynchronous Programming 异步编程简介 Python Asynchronous model Mastering Concurrency in Python 01. 并发 Concurrency 并发与顺序 Concurrent vs Sequential ...

Web scraping Code test HTMLParser 解析 html Web scraping Code test Target # python main.py url: xx.com 'APT', 'Beds / Bath...

Meow’s CyberAttack - IP Spoofing [toc] IP Spoofing Each IP packet includes a place to specify the destination and source IP addresses. The validity of the source addres s is never check...

Meow’s CyberAttack - ARP Poisoning ARP spoofing [toc] ARP ARP resolves the IP addresses to MAC address stores the result in an memory, ARP cache. TCP/IP uses IP address to ...

theHarvester [toc] bacis theharvester -h theharvester -d microsoft.com -l 50 -b google -h myresults.html -d : specific the domain/company name. -l : limit result to 50 -b : defines data so...

sslstrip Encrypted messages are problematic when it comes to capturing traffic. Encryption is intended to be end to end, no way to sit in the middle. Any mechanism to sit in the middle defeat...

[toc] searchsploit command line search tool for Exploit-DB that also allows you to take a copy of Exploit Database with you, everywhere you go. SearchSploit gives you the power to perform detai...

Recon-ng [toc] Recon-ng git clone https://github.com/lanmaster53/recon-ng.git cd recon-ng pip install -r REQUIREMENTS recon-ng marketplace install all i workspaces create tesla workspaces l...

Postman Postman basic Postman的操作环境 Postman install Postman安装 Navigating Postman main modes: Find and replace History ...

[toc] Nmap free download, port scan machines. can reveal what services are running as well as info about the target machine’s operating system. 17-20 sec can scan a range of IP addre...

Nikto [toc] bacis open source web server scanner scans for malicious files and CGIs on a variety of servers. Perl-based vulnerability tool that scans Websleuth screen rapidly detectabl...

netcat [toc] Netcat Fundamentals nc [options] [host] [port] # by default this will execute a port scan nc -l [host] [port] # initiates a listener on the given port Netcat Command Flags nc -4...