CTF_Web: deserialization details CTF classic test questions from shallow to deep
0x00 deserialization problem in CTF
In this kind of problems, we mainly use deserialization to bypass or call various magic methods, so as to construct qualified serialized strings and complete specific functions. At this point, we should be very clear about the execution process of the whole code segment. Let's start with the simplest.
0x01 ...
Added by kemper on Wed, 29 Dec 2021 21:49:17 +0200
Basic learning of HTTP Hypertext Transfer Protocol
HTTP Hypertext Transfer Protocol
Concept: Hyper Text Tranfer Protocol
Transmission protocol: it defines that the communication between client and server is the format of sending datacharacteristic:
Advanced protocol based on TCP/IPDefault port number: 80Based on request / response model: one request corresponds to one responseStateless ...
Added by zarathu on Thu, 23 Dec 2021 14:20:52 +0200
Notes on Web front end development -- Chapter 3 CSS language section 2 CSS selector
preface
CSS code consists of a selector and one or more declarations. A selector is an HTML tag that needs to change its style. In CSS, each code is separated by semicolons. Each code is a declaration, and the declaration is enclosed in curly braces {}.
Previously, we explained the basic concept of CSS. Selectors are HTML tags that ...
Added by leena on Sat, 18 Dec 2021 17:52:59 +0200
vue3.2 ref efficient secret: dependent collection of error level bit operation (bit/dep.w/dep.n)
preface
As we all know, the core responsive principle of vue reactivity has not changed significantly for one year.
In vue the latest version 3.2, immortal Bas van Meurs A refactoring scheme for ref is proposed, which can increase the comprehensive speed of ref by 3 times!
feat(reactivity): ref-specific track/trigger and miscellaneous optimi ...
Added by quiettech on Sat, 18 Dec 2021 11:32:39 +0200
Express + Vue development environment (front and back end separation)
1, Introduction
The express framework is based on node JS web application framework can help you create a website with complete functions from front-end to back-end; Vue is a popular front-end framework, which is mainly used to build user interface, and has the characteristics of componentization and responsiveness; Therefore, it is understood ...
Added by TravisJRyan on Fri, 17 Dec 2021 14:11:02 +0200
commitlint specification for web front end integration
preface
Recently, when the front-end team submitted the code, it was found that the commit was really messy and varied. In order to eliminate this chaos, it thought of git's hook mechanism and wrote shell scripts to implement it. Of course, JavaScript has a good tool to implement this template, which is commitlint. Next, we will explain ho ...
Added by leeue on Wed, 15 Dec 2021 14:41:31 +0200
SylixOS software development - porting WEB Services
This time, we need to port a web service in SylixOS and support standard cgi. So I collected a very small web service - tinyhttpd on the Internet. How small is the web service of this single C file? The source c file is only 16kb. There are a total of more than a dozen functions to realize the http service. It is the best starting program to le ...
Added by leetee on Tue, 14 Dec 2021 21:21:41 +0200
[Jsp] Lesson 13 MVC + three tier architecture
concept
The core idea of MVC mode is to separate the input, processing and output processes of an application in the way of Model, View and Controller. Such an application is divided into three layers: Model layer, View layer and control layer
The MVC pattern defines the interaction between these three parts in detail:
The user interacts wit ...
Added by tourer on Sat, 11 Dec 2021 05:53:18 +0200
Python Web Framework -- the second day of Django learning
1: Install and create a Django project
1. Install Django package
pip install django
2. Command to create a Django project Django admin startproject + (file name)
django-admin startproject my_site
3. Run Django file Note: the command must be in the Django file directory you created, that is, the upper level file directory of manage.py
...
Added by bkanmani on Tue, 07 Dec 2021 20:23:42 +0200
On the exploitation of Phar deserialization vulnerability: N1CTF 2021 easyphp & an Xun cup 2021 EZ_TP
Phar
What is Phar
PHp ARchive, like a Java JAR, but for PHP.
Phar (PHp ARchive) is a packaged file similar to JAR. PHP ≥ 5.3 supports phar suffix files by default. You can use it without any other installation.
The phar extension provides a way to put an entire PHP application into a. Phar file for easy movement and installation The bigge ...
Added by phpjaco on Sun, 28 Nov 2021 08:12:23 +0200