Code Monkey home page Code Monkey logo

web-security-attack's Introduction

Web安全攻防实战系列

大家好，我们是红日安全-Web安全攻防小组。此项目是关于Web安全的系列文章分享，还包含一个HTB靶场供大家练习，我们给这个项目起了一个名字叫 Web安全实战 ，希望对想要学习Web安全的朋友们有所帮助。如果你愿意加入我们，一起完善这个项目，欢迎通过邮件形式（[email protected]）联系我们。

Part1

Part1 部分属于项目 第一阶段 的内容，：

Part2

Part2 部分属于项目 第二阶段 的内容，主要是实战HTB(hack the box)上面实战靶场练习，提高整体安全攻防能力：

项目维护

  • 小峰（团队@红日)
  • ruanruan宋

免责说明

请勿用于非法的用途，否则造成的严重后果与本项目无关

转载

转载请注明来自

https://github.com/hongriSec/-Security-holes/

投搞

欢迎大家投搞

[email protected]

web-security-attack's People

Contributors

hongrisec avatar redbull2015 avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Forkers

xiaoq190309 sry309 explorer1092 superf0sh liuxuehao junneyang gdft2112 jywah crashiers michaelxin23 sholway haihaihihihi bollwarm rudrasingh99 kenny941 5up3rc harry1080 do0dl3 swarupsro tuongntk pengtao007 luhxiiii zm79287 fengjixuchui savesafely explife0011 shadow-zz r3cr4ck npusoldier47 boluoha gayhub-blackerie guesslu cream-sec simoncaogit dyzsoft flaray randlily shenliehuozhi fiveaourthe can0ri k4ge hackxf ad-calcium herewshow windf411 lyzliyunzhe he1dan blockchainguard wang0098 qingcaozhu getblackjake demossl odin1314 ctf2do lynx-1 huangsunsky mstsc-haha radon6 zzy1d redfiresmile hadesangel appleorbanana b1gd0g l34rner xuehua312741499 jumpyyy chaozai1028l tiroy mespoding 1261381634 pyking fu1lmetal flywithoutwings skysec666 kaminged gscr10 yangkai-sz kingferr vidocapt xsstta jlubaqy adminliuqi hi-kk georgepei w4nde3 javalangclass pymmrd cwxsss mydawn2 securitydark kbjsdy 5l1v3r1 winny1001 yinwc lddp nicedabin chinaums-tech ca1ma warren-jace michaelcandoo

web-security-attack's Issues

Web安全Day1:SQL注入文章中存在问题

在文章的2.6中，写到：

前面不存在才会执行后面的语句，一般配合的是布尔类型的盲注

这句话不准确，UNION操作符会合并两个或多个查询的结果集，并不是必须前面不存在后面才会执行。
sqli-labs中需要将前面的查询结果置空，是因为源码中写到只返回一个结果集，如果不置空，后面查询的结果就无法显示，但并不一定所有UNION注入都存在这个问题，所以此处描述不太严谨。

欢迎指正。

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.