venenof.com
Veneno's BlogThe harder you struggle today,the more glorious you will be tomorrow.
http://www.venenof.com/
The harder you struggle today,the more glorious you will be tomorrow.
http://www.venenof.com/
TODAY'S RATING
>1,000,000
Date Range
HIGHEST TRAFFIC ON
Tuesday
LOAD TIME
0.6 seconds
PAGES IN
THIS WEBSITE
16
SSL
EXTERNAL LINKS
97
SITE IP
133.130.122.233
LOAD TIME
0.594 sec
SCORE
6.2
Veneno's Blog | venenof.com Reviews
https://venenof.com
The harder you struggle today,the more glorious you will be tomorrow.
分类 杂 下的文章 - Veneno's Blog
http://www.venenof.com/index.php/category/杂
The harder you struggle today,the more glorious you will be tomorrow. 因为17年立的flag有一个是提升英语level. 所以自己就决定拿英语写blog. 这也导致了.可能自己的水平太渣,写出来的基本都是有点强行翻译,甚至都不知道怎么出来的. 对此,对看我blog的各位大佬深表歉意.我会尽快提升自己,还望见谅X.
Veneno's Blog
http://www.venenof.com/index.php/page/3
The harder you struggle today,the more glorious you will be tomorrow. One day,my friend-xiaojunjie send a url to me and our friend melody:'Come on,Let's do PHP code audit. When I bulit this cms on my lo. About Join - - SQLi. To improve my english level,i decided to write my blog by using EN.Maybe now my english level is very looooow:) A SQLi task in 33C3.
一个re题 - Veneno's Blog
http://www.venenof.com/index.php/archives/236
The harder you struggle today,the more glorious you will be tomorrow. R n; if ( v17 = 587290150531i64 ) v13 = LCongratulations, decryption success! R n; sub 140001190(v13); sub 140001300(pause); return 0i64; }. Char v15[255]; / [sp 20h] [bp-E0h]@. V17 = 0i64; v10 = 5; v11 = 0i64; do { v12 = (unsigned int8)v10; v10 = *( BYTE *)&v20 v11); v0; *(&v16 v11) = v15[v12]; } while ( (unsigned int64)v0 4 ); BYTE4(v17) = v15[(unsigned int8)v10]; v13 = LUnfortunately, decryption failed! R n; sub 140001190(v13);.
分类 CTF 下的文章 - Veneno's Blog
http://www.venenof.com/index.php/category/CTF
The harder you struggle today,the more glorious you will be tomorrow. 有幸作为题目的出题人,强行给晨升大佬的pwn套了一个web another php共分为两部分,web&pwn Web web部分的关键代码其实是去年打韩国一个CTF比赛碰到的,当时线上解出都是用了非预期的做法,包括ctftime上也没有详细的解题思路,. 题目一开始打开,我们会发现根本打不开,仔细观察: 百度一发UNSAFE.PORT,发现只要在chrome浏览器加入- explicitly-allowedports=6666即可。 访问时一个md5的提交网站,有用的页面只有四个页面 max.php min.p. About Join - - SQLi. To improve my english level,i decided to write my blog by using EN.Maybe now my english level is very looooow:) A SQLi task in 33C3.
Veneno's Blog
http://www.venenof.com/index.php/page/1
The harder you struggle today,the more glorious you will be tomorrow. 有幸作为题目的出题人,强行给晨升大佬的pwn套了一个web another php共分为两部分,web&pwn Web web部分的关键代码其实是去年打韩国一个CTF比赛碰到的,当时线上解出都是用了非预期的做法,包括ctftime上也没有详细的解题思路,. 题目一开始打开,我们会发现根本打不开,仔细观察: 百度一发UNSAFE.PORT,发现只要在chrome浏览器加入- explicitly-allowedports=6666即可。 访问时一个md5的提交网站,有用的页面只有四个页面 max.php min.p. Php $link = mysqli connect('localhos.
TOTAL PAGES IN THIS WEBSITE
16
virusdefender's blog
https://virusdefender.net/index.php/page/3
分为16个扇区 0-15 ,每个扇区又分为4个区域块 0-63. Http:/ 104.199.132.251/4dm1n/show.php. 后来看到提示,说可以探测内网,想起使用webrtc,参考 http:/ www.wooyun.org/bugs/wooyun-2014-076685. What is Same Origin Policy? The flag is at http:/ 127.0.0.1:8080/secret. After you submitted a url, a monkey will browse the url. The monkey will stay 2 minutes on your page. Try to find a string $str so that (substr(md5( $str), 0, 6) = = '54d7ed'). Import hashlib for i in xrange(1000000000): print i, hashlib.md5(str(i) .hexdigest(). Cat md5.txt grep xxxx.
好奇心 - virusdefender's blog
https://virusdefender.net/index.php/archives/413
Kepler 452b上的一年大约385天,其围绕运行的是一颗与太阳相似的恒星,使得Kepler 452b成为到目前为止最接近 另一个地球 的系外行星。 和原文链接 https:/ virusdefender.net/index.php/archives/413/. January 8th, 2016 at 01:30 pm. ๑ ㅂ )و 博主 此处省略3个字. January 9th, 2016 at 12:14 am. 下一篇: Python内部机制(1) - 垃圾回收. Just Rock It 2016. Sql注入时case when . then . else .end 的应用. 为什么不用 Lua 好像 OpenWRT 的界面都是用 Lua .
qq空间某被利用的xss分析 - virusdefender's blog
https://virusdefender.net/index.php/archives/347
Document.getElementById("footad").src="http:/ yyyy.qq.com/cgi-bin/privateblog/privateblog output data? Http:/ yyyy.qq.com/cgi-bin/privateblog/privateblog output data? Uin=842362834&blogid=1268155622&imgdm=xxxx.com%2fimgcache.qq.com&bdm=b.qzone.qq.com&vid=19. Script src="1.js" /script. 就会访问baidu.com/1.js,而不是qq.com/1.js,导致xss漏洞。 而我发现这个地方腾讯其实是有过滤的,因为url里面直接使用xxx.com是不可以的,必须是xxx.com/cache.qq.com才行,但是这样的过滤并没有什么卵用。 Iframe name='xframe' ":"iframe"); }catch(e){} try{ if(! Eframe){eframe = document.createElem...
分类 django 下的文章 - virusdefender's blog
https://virusdefender.net/index.php/category/django
Select for update 带来的性能问题. Query time: 1.480138 Lock time: 0.000084 Rows sent: 1 Rows examined: 13061 SET timestamp=1433606761; SELECT `一大堆字段` FROM `usergamedata` WHERE `usergamedata`.`uid` = 5396 FOR UPDATE;. 我用的是django 1.8,文档在这里 https:/ docs.djangoproject.com/en/1.8/topics/migrations/. Python manage.py makemigrations account(app的名字). Migrations for 'account': 0001 initial.py: - Create model account. Python manage.py migrate. Python manage.py makemigrations account. Python manage.py migrate. Location / ...
气死禅师的勒洛三角形 - virusdefender's blog
https://virusdefender.net/index.php/archives/381
定宽曲线 英文 Curve of constant width 定义 平面上一凸形封闭曲线,不论如何转动,其宽度永远不变,则称之定宽曲线或恒宽曲线。 通过勒贝格积分可以算出,勒洛三角是定宽曲线所能构成的面积最小的图形,其面积为${1 over2}( pi - sqrt3)s 2$,s为定宽宽度。 图片 Construction triangle Reuleaux. Travail personnel (my own work)。 采用 CC BY-SA 3.0. 图片 Rouleaux triangle Animation. 采用 CC BY-SA 3.0. 和原文链接 https:/ virusdefender.net/index.php/archives/381/. Just Rock It 2016. Sql注入时case when . then . else .end 的应用. 为什么不用 Lua 好像 OpenWRT 的界面都是用 Lua .
Typecho 反垃圾评论原理和 Python 模拟 - virusdefender's blog
https://virusdefender.net/index.php/archives/438
Typecho 反垃圾评论原理和 Python 模拟. 猜测和反垃圾评论有关,因为机器人直接评论的话,一般都是直接 post 评论数据,如果在评论之前需要先运行一段 js,然后带上这段 js 生成的值再 post 的话,就能挡住一大批低级的机器人了。 现在很多地方用到了这个,比如一些云 WAF,在可疑请求的时候也是返回一段 js 要运行的,更高级点的可以检测浏览器环境,鼠标手势等等。 看 Typecho 的 源码. 我用 Python 写了一个,主要是通过各种注释和换行来混淆 js,虽然不运行 js,直接进行字符串分析肯定也能得到结果,但是相比直接 post 数据,难度大大增大了,而且我们可以随时更换混淆规则,我们的目的也就达到了。 而这个结果在生成 js 的时候就确定了,只要拿到评论数据和 session 中的值比较一下就好了. Ps 这篇文章里面的 Python 代码让 syntaxhighliter 的语法高亮出现了问题,我已经自己修改了这个 bug,在 这个文件. Regex: /([' "]{3})([ 1])*? 1/gm, css: 'comments' }.
分类 数学 下的文章 - virusdefender's blog
https://virusdefender.net/index.php/category/math
定宽曲线 英文 Curve of constant width 定义 平面上一凸形封闭曲线,不论如何转动,其宽度永远不变,则称之定宽曲线或恒宽曲线。 通过勒贝格积分可以算出,勒洛三角是定宽曲线所能构成的面积最小的图形,其面积为${1 over2}( pi - sqrt3)s 2$,s为定宽宽度。 图片 Construction triangle Reuleaux. Travail personnel (my own work)。 采用 CC BY-SA 3.0. 图片 Rouleaux triangle Animation. 采用 CC BY-SA 3.0. 计算公式是 http:/ en.wikipedia.org/wiki/Haversine formula. Havarsin( frac{d}{R}) = haversin(l {2} - l {1}) cos(l {1})cos(l {2})haversin(Δk)$. Havarsin(θ) = sin {2}( frac{θ}{2}) = frac{1 - cos(θ)}{2}$. Http:/ www.zhihu.com/q...先把黑球放...
分类 Python 下的文章 - virusdefender's blog
https://virusdefender.net/index.php/category/python
Error] 54#54: *1644 connect() failed (111: Connection refused) while connecting to upstream, client: 172.18.0.5, server: , request: "POST /log HTTP/1.1", upstream: "http:/ [: 1]:10000/log", host: "mgt-api". 127001 localhost : 1 localhost. 已经发在了乌云知识库 http:/ drops.wooyun.org/papers/16905. Nc -l -p 12345. Fetch3.py http:/ 127.0.0.1:12345/foo. GET /foo HTTP/1.1 Accept-Encoding: identity User-Agent: Python-urllib/3.4 Connection: close Host: 127.0.0.1:12345. 但是下面的URL是可以正常解析并访问到127.0.0.1的. GET /foo HTTP/1.1...
分类 ctf 下的文章 - virusdefender's blog
https://virusdefender.net/index.php/category/ctf
Http:/ 104.199.132.251/4dm1n/show.php. 后来看到提示,说可以探测内网,想起使用webrtc,参考 http:/ www.wooyun.org/bugs/wooyun-2014-076685. What is Same Origin Policy? The flag is at http:/ 127.0.0.1:8080/secret. After you submitted a url, a monkey will browse the url. The monkey will stay 2 minutes on your page. Try to find a string $str so that (substr(md5( $str), 0, 6) = = '54d7ed'). Import hashlib for i in xrange(1000000000): print i, hashlib.md5(str(i) .hexdigest(). Cat md5.txt grep xxxx. Mozilla/5.0 0ctf by md5 salt. Decry...
TOTAL LINKS TO THIS WEBSITE
97
Veneno e poesia em 7 letras
Veneno e poesia em 7 letras. Terça-feira, 21 de maio de 2013. Em seu abraço mergulho na luxúria,. Tomada pela vontade, a minha e a tua;. Perdida no desejo em meio aos. Atenta a tudo, ansiando por nós;. Enlaçada por entre pernas nuas,. Busca a doma do corpo, vontades suas;. Sacie-me o desejo que sou culpada,. Castiga meus sentidos, a pele amada;. Abata sua sede declamando em meu peito,. Desejo aquecendo o furor do nosso leito;. Prende suas mãos, enlace meu cabelo,. Compartilhar com o Pinterest. O mundo ac...
Veneno e Sangue
Pensamentos, dia-a-dia, aleatoriedades. Sexta-feira, 19 de junho de 2015. The Yorkie Chronicles: Ziva! Levamos quase uma semana para decidir o nome da bebê. Havíamos pensado em Ellie, Francesca (Frankie) –. Porque minha avó insistia em Francisca –. Entre alguns outros que não me vem em mente agora, até que pensamos então em um programa de TV que todos gostamos: NCIS. É absolutamente a personagem favorita de todos, então. Porque não? Então, vos apresento. E está sendo –. Sexta-feira, 12 de junho de 2015.
Veneno Estudio
Veneno's Blog
The harder you struggle today,the more glorious you will be tomorrow. About Join - - SQLi. To improve my english level,i decided to write my blog by using EN.Maybe now my english.
venenofan's blog - Marvel blog - Skyrock.com
Site consacré aux bds, vidiosjeux et films marvel. 08/08/2006 at 11:44 AM. 09/09/2006 at 8:54 AM. Subscribe to my blog! Films et series marvels prévus. Voici tos les projets audiovisuels de marvel:. Personages retenus pour films en chair et en os:. Ghost Rider, sony, en post-produccion. Sortie 16 février 2007. Spider-man 3, sony, en production. Sortie 4 mai 2007. Fantastic four 2, en pre production, Sortie 15 juin 2007. Protuits en developpent par Marvel Studios:. Captain américa. Scénariste contraté.
Flúor na Água Não!
Flúor na Água Não! Movimento contra a fluoretação das águas de abastecimento. Total de visualizações de página. Bibliografia sobre Literatura Científica do Flúor (em inglês). 50 razões para opor-se à fluoretação. Flúor Remédio ou Veneno? COMUNIDADE NO ORKUT - Flúor na Água Não! Fluoride - The Greatest Fraud of the Twentieth Century. Bill Osmunson - Com Legenda. Fluoride Alert's Channel (YouTube). Fluoride Call to Action. Entrevista com o Dr. Arvid Carlsson (Parte 1). O Flúor e Outros Vilões da Humanidade.
Veneno Frio
Sábado, 12 de marzo de 2011. Aún a flote pero maltrecha. Jueves, 20 de mayo de 2010. Jueves, 22 de abril de 2010. Domingo, 25 de octubre de 2009. Creo que soy feliz. Más vale tarde que nunca. Jueves, 22 de octubre de 2009. Lunes, 21 de septiembre de 2009. Martes, 30 de septiembre de 2008. No digas nunca, no digas siempre. Miércoles, 27 de agosto de 2008. Acabó mi vida en azules. Gotas dulces, sabores insospechados a estas alturas de amargor. Miércoles, 30 de julio de 2008. Salitre pegado a los pies.
Veneno Gerall
118;enenogeral@ig.com.br. Fretes and Carretos Wilson. Qual é o melhor Game de futebol? Eventstop(event);" href="http:/ venenogerall.webnode.com/servers/poll/? Con=1&poll=200000011&answer=200000024" title="Votar" PES 2011. Eventstop(event);" href="http:/ venenogerall.webnode.com/servers/poll/? Con=1&poll=200000011&answer=200000025" title="Votar" FIFA 2011. Total de votos: 17. Palmeiras 3 X 0 Santos - Duelo de titãns. Santos 1 - 0 América Mineiro - Melhores Momentos. UFC Rio com ingressos esgotados.