{"id":456,"date":"2026-03-07T17:37:23","date_gmt":"2026-03-07T09:37:23","guid":{"rendered":"https:\/\/qquan.site\/?p=456"},"modified":"2026-05-30T15:00:42","modified_gmt":"2026-05-30T07:00:42","slug":"%e5%ae%89%e5%85%a8%e6%8f%92%e4%bb%b6","status":"publish","type":"post","link":"https:\/\/qquan.site\/index.php\/2026\/03\/07\/%e5%ae%89%e5%85%a8%e6%8f%92%e4%bb%b6\/","title":{"rendered":"\u5b89\u5168\u63d2\u4ef6"},"content":{"rendered":"\n<h4 class=\"wp-block-heading has-medium-font-size\">One For All<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u4e8e\u5b50\u57df\u540d\u67e5\u8be2\uff0c\u80fd\u6db5\u76d6\u4e09\u4e2a\u65b9\u9762\u7684\u5185\u5bb9\uff1a\u2460DNS\u6570\u636e\u2461\u8bc1\u4e66\u67e5\u8be2\u2462\u679a\u4e3e\u89e3\u6790<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/shmilylty\/OneForAll\">https:\/\/github.com\/shmilylty\/OneForAll<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1a<br>python3 oneforall.py &#8211;target example.com run<br>python3 oneforall.py &#8211;targets .\/example.txt run<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">GitHack<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">GitHack\u662f\u4e00\u4e2a.git\u6cc4\u9732\u5229\u7528\u811a\u672c\uff0c\u901a\u8fc7\u6cc4\u9732\u7684.git\u6587\u4ef6\u5939\u4e0b\u7684\u6587\u4ef6\uff0c\u91cd\u5efa\u8fd8\u539f\u5de5\u7a0b\u6e90\u4ee3\u7801\u3002\u6e17\u900f\u6d4b\u8bd5\u4eba\u5458\u3001\u653b\u51fb\u8005\uff0c\u53ef\u4ee5\u8fdb\u4e00\u6b65\u5ba1\u8ba1\u4ee3\u7801\uff0c\u6316\u6398\uff1a\u6587\u4ef6\u4e0a\u4f20\uff0cSQL\u6ce8\u5c04\u7b49web\u5b89\u5168\u6f0f\u6d1e\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/lijiejie\/GitHack\">https:\/\/github.com\/lijiejie\/GitHack<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1apython GitHack.py http:\/\/www.openssl.org\/.git\/<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">CVS<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">CVS\u662f\u4e00\u4e2aC\/S\u7cfb\u7edf\uff0c\u591a\u4e2a\u5f00\u53d1\u4eba\u5458\u901a\u8fc7\u4e00\u4e2a\u4e2d\u5fc3\u7248\u672c\u63a7\u5236\u7cfb\u7edf\u6765\u8bb0\u5f55\u6587\u4ef6\u7248\u672c\uff0c\u4ece\u800c\u8fbe\u5230\u4fdd\u8bc1\u6587\u4ef6\u540c\u6b65\u7684\u76ee\u7684\u3002\u4e3b\u8981\u662f\u9488\u5bf9 CVS\/Root\u4ee5\u53caCVS\/Entries\u76ee\u5f55\uff0c\u76f4\u63a5\u5c31\u53ef\u4ee5\u770b\u5230\u6cc4\u9732\u7684\u4fe1\u606f\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/kost\/dvcs-ripper\">https:\/\/github.com\/kost\/dvcs-ripper<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1arip-cvs.pl -v -u http:\/\/www.example.com\/CVS\/<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">SVNHack<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u4e2aSvn\u4fe1\u606f\u6cc4\u9732\u8f85\u52a9\u5de5\u5177\uff0c\u53ef\u4ee5\u4f7f\u7528\u8fd9\u4e2a\u811a\u672c\u5217\u53d6\u7f51\u7ad9\u76ee\u5f55\uff0c\u8bfb\u53d6\u6e90\u7801\u6587\u4ef6\u4ee5\u53ca\u4e0b\u8f7d\u6574\u7ad9\u4ee3\u7801\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/callmefeifei\/SvnHack\">https:\/\/github.com\/callmefeifei\/SvnHack<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1a<br>\u5217\u53d6\u76ee\u5f55\uff1a\u6839\u76ee\u5f55 python SvnHack.py -u http:\/\/x.x.x.x\/.svn\/entries\u6307\u5b9a\u76ee\u5f55 python SvnHack.py -u http:\/\/x.x.x.x\/.svn\/entries -d scripts<br>\u8bfb\u6e90\u7801\uff1a\u6307\u5b9a\u6587\u4ef6 python SvnHack.py -u http:\/\/x.x.x.x\/.svn\/entries -d scripts -r upd.js<br>\u4e0b\u8f7d\u6574\u7ad9\uff1apython SvnHack.py -u http:\/\/x.x.x.x\/.svn\/entries \u2014download<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">DS Store<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u662f\u4e00\u4e2a .DS_Store \u6587\u4ef6\u6cc4\u6f0f\u5229\u7528\u811a\u672c\uff0c\u5b83\u89e3\u6790.DS_Store\u6587\u4ef6\u5e76\u9012\u5f52\u5730\u4e0b\u8f7d\u6587\u4ef6\u5230\u672c\u5730\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/lijiejie\/ds_store_exp\">https:\/\/github.com\/lijiejie\/ds_store_exp<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1apython ds_store_exp.py http:\/\/www.example.com\/.DS_Store<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">Unexpected_information\uff08BP\u63d2\u4ef6\uff09<\/h4>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\">\u7528\u6765\u6807\u8bb0\u8bf7\u6c42\u5305\u4e2d\u7684\u4e00\u4e9b\u654f\u611f\u4fe1\u606f\u3001JS\u63a5\u53e3\u548c\u4e00\u4e9b\u7279\u6b8a\u5b57\u6bb5\uff0c\u9632\u6b62\u6211\u4eec\u758f\u5ffd\u4e86\u4e00\u4e9b\u6570\u636e\u5305\uff0c\u4f7f\u7528\u5b83\u53ef\u80fd\u4f1a\u6709\u610f\u5916\u7684\u6536\u83b7\u4fe1\u606f\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/ScriptKid-Beta\/Unexpected_information\">https:\/\/github.com\/ScriptKid-Beta\/Unexpected_information<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">HaE\uff08BP\u63d2\u4ef6\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u57fa\u4e8eBurpSuite\u63d2\u4ef6JavaAPI\u5f00\u53d1\u7684\u8bf7\u6c42\u9ad8\u4eae\u6807\u8bb0\u4e0e\u4fe1\u606f\u63d0\u53d6\u7684\u8f85\u52a9\u578b\u63d2\u4ef6\u3002\u8be5\u63d2\u4ef6\u53ef\u4ee5\u901a\u8fc7\u81ea\u5b9a\u4e49\u6b63\u5219\u7684\u65b9\u5f0f\u5339\u914d\u54cd\u5e94\u62a5\u6587\u6216\u8005\u8bf7\u6c42\u62a5\u6587\uff0c\u53ef\u4ee5\u81ea\u884c\u51b3\u5b9a\u7b26\u5408\u8be5\u81ea\u5b9a\u4e49\u6b63\u5219\u5339\u914d\u7684\u54cd\u5e94\u8bf7\u6c42\u662f\u5426\u9700\u8981\u9ad8\u4eae\u6807\u8bb0\u3001\u4fe1\u606f\u63d0\u53d6\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/gh0stkey\/HaE\">https:\/\/github.com\/gh0stkey\/HaE<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">FindSomething\uff08\u6d4f\u89c8\u5668\u63d2\u4ef6\uff09<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u6682\u65f6\u4e0a\u4f20\u4e0d\u4e86\uff0c\u53ef\u4ee5\u81ea\u5df1\u5728\u7f51\u4e0a\u641c\u7f57\u4e00\u4e0b<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">JSFinder<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u6b3e\u7528\u4f5c\u5feb\u901f\u5728\u7f51\u7ad9\u7684js\u6587\u4ef6\u4e2d\u63d0\u53d6URL\uff0c\u5b50\u57df\u540d\u7684\u5de5\u5177<br>\u4f46\u662f\u6839\u636e\u5c0f\u8fea\u8bf4\uff0c\u8fd9\u4e2a\u6709\u70b9\u8001\u4e86\uff0c\u4e0d\u597d\u7528<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/Threezh1\/JSFinder\">https:\/\/github.com\/Threezh1\/JSFinder<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">URLFinder<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u6b3e\u7528\u4e8e\u5feb\u901f\u63d0\u53d6\u68c0\u6d4b\u9875\u9762\u4e2dJS\u4e0eURL\u7684\u5de5\u5177\u3002\u529f\u80fd\u7c7b\u4f3c\u4e8eJSFinder\uff0c\u4f46JSFinder\u597d\u4e45\u6ca1\u66f4\u65b0\u4e86<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/pingc0y\/URLFinder\">https:\/\/github.com\/pingc0y\/URLFinder<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">JSINFO-SCAN<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u9012\u5f52\u722c\u53d6\u57df\u540d\uff08netloc\/domain\uff09\uff0c\u4ee5\u53ca\u9012\u5f52\u4eceJS\u4e2d\u83b7\u53d6\u4fe1\u606f\u7684\u5de5\u5177<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/p1g3\/JSINFO-SCAN\">https:\/\/github.com\/p1g3\/JSINFO-SCAN<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">ffuf<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u529f\u80fd\u5f3a\u5927\u7684\u6a21\u7cca\u5316\u5de5\u5177\uff0c\u7528\u5b83\u6765FUZZ\u6a21\u7cca\u5316js\u6587\u4ef6\u3002\u627e\u5230\u66f4\u591a\u7684js\u6587\u4ef6\u5206\u6790\u66f4\u591a\u7684\u4fe1\u606f<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/ffuf\/ffuf\">https:\/\/github.com\/ffuf\/ffuf<\/a><br>\u5b57\u5178\u5730\u5740\uff1a<a href=\"https:\/\/wordlists.assetnote.io\/\">https:\/\/wordlists.assetnote.io\/<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1affuf.exe -w wordlist.txt -u http:\/\/www.example.org<mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-amber-color\">\/FUZZ<\/mark> -t 200\uff08\u8868\u793a\u4ece\u8fd9\u91ccFUZZ\uff09<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">Packer-Fuzzer<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e00\u6b3e\u9488\u5bf9Webpack\u7b49\u524d\u7aef\u6253\u5305\u5de5\u5177\u6240\u6784\u9020\u7684\u7f51\u7ad9\u8fdb\u884c\u5feb\u901f\u4f20\u9012\u3001\u9ad8\u6548\u5b89\u5168\u68c0\u6d4b\u7684\u626b\u63cf\u5de5\u5177\u3002\u9488\u5bf9JS\u6846\u67b6\u5f00\u53d1\u6253\u5305\u5668Webpack\u7684\u68c0\u6d4b\u3002<br>Webpack\uff1a\u4e00\u6b3e\u6253\u5305\u5de5\u5177\uff0c\u4e00\u822c\u5728js\u6253\u5305\u65f6\u4f1a\u9047\u5230\uff0c\u4f7f\u7528Wappalyzer\u65f6\u4f1a\u51fa\u73b0\u5728\u6742\u9879\u4e2d\u3002<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/rtcatc\/Packer-Fuzzer\">https:\/\/github.com\/rtcatc\/Packer-Fuzzer<\/a><br>\u4f7f\u7528\u6f14\u793a\uff1apython PackerFuzzer.py -u http:\/\/example.org<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">wafw00f<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u4e8e\u68c0\u6d4b\u9632\u706b\u5899\u7684\u4e00\u4e2a\u5de5\u5177<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/EnableSecurity\/wafw00f\">https:\/\/github.com\/EnableSecurity\/wafw00f<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">fuckcdn<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u539f\u7406\u5c31\u662f\u5c06\u5bf9\u9762 cdn \u7684\u6d41\u91cf\u8017\u5b8c\uff0c\u8fd9\u6837\u5c31\u80fd\u663e\u793a\u51fa\u771f\u5b9e IP<br>1\u3001\u5224\u65ad\u52a0\u901f\u5382\u5546<br>2\u3001IP \u5e93\u7b5b\u9009\u5730\u5740\u6bb5<br>3\u3001\u914d\u7f6e\u8303\u56f4\u626b\u63cf<br>\u5382\u5546\u67e5\u8be2\uff1ahttps:\/\/tools.ipip.net\/cdn.php<br>\u5de5\u5177\u9879\u76ee\uff1ahttps:\/\/www.cz88.net\/geo-public\uff08IP \u5e93\u6536\u96c6\uff09||https:\/\/github.com\/Tai7sy\/fuckcdn<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/Tai7sy\/fuckcdn\">https:\/\/github.com\/Tai7sy\/fuckcdn<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">Gotoscan<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u6307\u7eb9\u8bc6\u522b<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/newbe3three\/gotoscan\">https:\/\/github.com\/newbe3three\/gotoscan<\/a><\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">wedecode<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u4e8e\u5c0f\u7a0b\u5e8f\u53cd\u7f16\u8bd1<br>\u6559\u7a0b\uff1a\u89c1\u5c0f\u8fea\u5b89\u516815day<\/p>\n\n\n\n<h4 class=\"wp-block-heading has-medium-font-size\">ENScan<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u7528\u4e8e\u4f01\u4e1a\u4fe1\u606f\u67e5\u8be2<br>\u5730\u5740\uff1a<a href=\"https:\/\/github.com\/wgpsec\/ENScan_GO\">https:\/\/github.com\/wgpsec\/ENScan_GO<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>One For All \u7528\u4e8e\u5b50\u57df\u540d\u67e5\u8be2\uff0c\u80fd\u6db5\u76d6\u4e09\u4e2a\u65b9\u9762\u7684\u5185\u5bb9\uff1a\u2460DNS\u6570\u636e\u2461\u8bc1\u4e66\u67e5\u8be2\u2462\u679a\u4e3e\u89e3\u6790\u5730\u5740\uff1ahttps [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1,17],"tags":[18],"class_list":["post-456","post","type-post","status-publish","format-standard","hentry","category-web","category-17","tag-18"],"_links":{"self":[{"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/posts\/456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/comments?post=456"}],"version-history":[{"count":21,"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/posts\/456\/revisions"}],"predecessor-version":[{"id":663,"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/posts\/456\/revisions\/663"}],"wp:attachment":[{"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/media?parent=456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/categories?post=456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qquan.site\/index.php\/wp-json\/wp\/v2\/tags?post=456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}