https://fupcode.com/blog/categories/%E9%80%86%E5%90%91%E6%B8%97%E9%80%8F/南冥鹏影Hugo 0.168.0 & FixIt v1.0.0-beta.4zh-CNFri, 07 Nov 2025 00:08:32 +0800https://fupcode.com/blog/posts/reverse-engineering/learning-reverse5/Fri, 07 Nov 2025 00:08:32 +0800https://fupcode.com/blog/posts/reverse-engineering/learning-reverse5/逆向渗透<p><strong>远程命令注入</strong>（Remote Command Injection，简称 RCE）是一类严重的安全漏洞，通常出现在 Web 应用或网络服务中。它允许攻击者向目标服务器发送恶意命令，从而在服务器上执行任意代码。对渗透测试者而言，远程命令注入不仅提供了直接控制目标系统的途径，还能帮助进一步扩展攻击面，提升权限或植入持久后门。</p>https://fupcode.com/blog/posts/reverse-engineering/learning-reverse4/Fri, 07 Nov 2025 00:03:25 +0800https://fupcode.com/blog/posts/reverse-engineering/learning-reverse4/逆向渗透<h2 class="heading-element" id="一反弹shell"><span>一、反弹Shell</span> <a href="#%e4%b8%80%e5%8f%8d%e5%bc%b9shell" class="heading-mark"><svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg></a> </h2><p>渗透测试中，如果发现命令执行漏洞，通常会希望获得一个交互式 shell。如果无法添加新账户、SSH 密钥或 <code>.rhosts</code> 文件来直接登录，下一步通常是尝试建立反向 shell 或绑定 shell 到一个 TCP 端口。</p>https://fupcode.com/blog/posts/reverse-engineering/learning-reverse3/Thu, 06 Nov 2025 23:46:13 +0800https://fupcode.com/blog/posts/reverse-engineering/learning-reverse3/逆向渗透<h2 class="heading-element" id="一sqlmap简介"><span>一、sqlmap简介</span> <a href="#%e4%b8%80sqlmap%e7%ae%80%e4%bb%8b" class="heading-mark"><svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg></a> </h2><p><code>sqlmap</code> 是一个强大的开源工具，用于自动化检测和利用SQL注入漏洞。它支持多种数据库类型，包括MySQL、Oracle、PostgreSQL、SQL Server等。<code>sqlmap</code>能够帮助渗透测试人员快速检测注入点、获取数据库结构、甚至直接获取数据库中的敏感数据。</p>https://fupcode.com/blog/posts/reverse-engineering/learning-reverse2/Thu, 06 Nov 2025 02:21:38 +0800https://fupcode.com/blog/posts/reverse-engineering/learning-reverse2/逆向渗透<h2 class="heading-element" id="一metasploit"><span>一、Metasploit</span> <a href="#%e4%b8%80metasploit" class="heading-mark"><svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg></a> </h2><h3 class="heading-element" id="msf简介"><span>MSF简介</span> <a href="#msf%e7%ae%80%e4%bb%8b" class="heading-mark"><svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg></a> </h3><p>Metasploit Framework(MSF)是一款开源安全漏洞检测工具，附带数千个已知的软件漏洞，并保持持续更新。Metasploit可以用来信息收集、漏洞探测、漏洞利用等渗透测试的全流程。</p>https://fupcode.com/blog/posts/reverse-engineering/learning-reverse1/Thu, 06 Nov 2025 00:29:26 +0800https://fupcode.com/blog/posts/reverse-engineering/learning-reverse1/逆向渗透<h2 class="heading-element" id="一主机发现"><span>一、主机发现</span> <a href="#%e4%b8%80%e4%b8%bb%e6%9c%ba%e5%8f%91%e7%8e%b0" class="heading-mark"><svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg></a> </h2><h3 class="heading-element" id="arp-scan与arping"><span>arp-scan与arping</span> <a href="#arp-scan%e4%b8%8earping" class="heading-mark"><svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg></a> </h3><p>arp-scan 可用于快速发现同一局域网下的主机：</p>