当windows下连接vpn使用nmap报出下列错误时：

dnet: Failed to open device eth0

QUITTING!

在nmap命令中增加 –unprivileged 一般就能解决问题，如果增加之后仍未解决，尝试重装winpcap/npcap

nmap -A -Pn 10.222.10.110 --unprivileged

PHP里面的三种压缩函数压缩率比较

<?php
$s = '我就是要压缩的代码';
$s1 = gzencode($s);
$s2 = gzdeflate($s);
$s3 = gzcompress($s);
echo($s1),"\n";
echo($s2),"\n";
echo($s3),"\n";
echo base64_encode($s), "\n";
echo bin2hex($s), "\n";
echo urlencode($s), "\n";
?>

使用searchsploit 搭配nmap扫描结果自动寻找组件漏洞

首先放出searchsploit 的部分说明：

=========
 Options
=========
   -c, --case [Term] Perform a case-sensitive search (Default is inSEnsITiVe).
   -e, --exact [Term] Perform an EXACT match on exploit title (Default is AND) [Implies "-t"].
   -h, --help Show this help screen.
   -j, --json [Term] Show result in JSON format.
   -m, --mirror [EDB-ID] Mirror (aka copies) an exploit to the current working directory.
   -o, --overflow [Term] Exploit titles are allowed to overflow their columns.
   -p, --path [EDB-ID] Show the full path to an exploit (and also copies the path to the clipboard if possible).
   -t, --title [Term] Search JUST the exploit title (Default is title AND the file's path).
   -u, --update Check for and install any exploitdb package updates (deb or git).
   -w, --www [Term] Show URLs to Exploit-DB.com rather than the local path.
   -x, --examine [EDB-ID] Examine (aka opens) the exploit using $PAGER.
       --colour Disable colour highlighting in search results.
       --id Display the EDB-ID value rather than local path.
       --nmap [file.xml] Checks all results in Nmap's XML output with service version (e.g.: nmap -sV -oX file.xml).
                                Use "-v" (verbose) to try even more combinations
       --exclude="term" Remove values from results. By using "|" to separated you can chain multiple values.
                                e.g. --exclude="term1|term2|term3".

可以看到有这么一行 --nmap [file.xml] Checks all results in Nmap's XML output with service version (e.g.: nmap -sV -oX file.xml). 所以我们可以用nmap对模板进行扫描然后让searchsploit从nmap的xml格式扫描结果里面检查是否有已知的组件漏洞。nmap扫描参数里面必须包含 -v (e.g.: nmap -sV -oX file.xml)

扫描完成后这么调用：

searchsploit --nmap file.xml

可能有如下提示：

[!] Please install xmllint
[i] Kali Linux -> apt -y install libxml2-utils

这样需要我们先执行命令apt -y install libxml2-utils安装libxml2-utils，安装完毕后再执行

searchsploit --nmap file.xml

回显如下：

[i] SearchSploit's XML mode (without verbose enabled). To enable: searchsploit -v --xml...
[i] Reading: 'file.xml'

[i] /usr/local/bin/searchsploit -t apache httpd 2 4 28
...

巡风一键安装后，需要临时远程操作数据库时的启动命令

/opt/xunfeng/xunfengdb/bin/xunfeng_db --bind_ip 0.0.0.0 --port 65521 --dbpath=/var/lib/xunfeng --logpath=/var/log/xunfeng/xunfeng_db.log --auth

Python 大小写转换

代码：

# Filename : test.py
# author by : AAAA.COM

str = "aaaa.com bbb.com"
print(str.upper())          # 把所有字符中的小写字母转换成大写字母
print(str.lower())          # 把所有字符中的大写字母转换成小写字母
print(str.capitalize())     # 把第一个字母转化为大写字母，其余小写
print(str.title())          # 把每个单词的第一个字母转化为大写，其余小写 

输出结果：

AAAA.COM BBB.COM
aaaa.com bbb.com
Aaaa.com bbb.com
Aaaa.Com Bbb.Com