content.json

{"posts":[{"title":"VIM笔记","text":"自用的一些VIM基础配置 .vimrc123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899set nuset autoreadset clipboard+=unnamed " 共享剪贴板set rulerset tabstop=4set softtabstop=4set shiftwidth=4set expandtabset mouse=asyntax on " 打开语法高亮colorschem gruvboxfiletype plugin indent on" 自动补全括号引号大括号回车" inoremap ' ''<ESC>i" inoremap " ""<ESC>i" inoremap ( ()<ESC>i" inoremap [ []<ESC>iinoremap { {}<ESC>i" inoremap {<CR> {<CR>}<ESC>O" function! ClosePair(char)" if getline('.')[col('.') - 1] == a:char" return "\\<Right>"" else" return a:char" endif" endfunction" 把快速按jj映射为Esc键 inoremap jj <Esc>" Plugins will be downloaded under the specified directory.call plug#begin(has('nvim') ? stdpath('data') . '/plugged' : '~/.vim/plugged')" Declare the list of plugins.Plug 'tpope/vim-sensible'Plug 'junegunn/seoul256.vim'Plug 'scrooloose/nerdtree'Plug 'scrooloose/syntastic'Plug 'vim-airline/vim-airline'Plug 'vim-airline/vim-airline-themes'Plug 'valloric/youcompleteme'Plug 'github/copilot.vim'Plug 'rust-lang/rust.vim'" List ends here. Plugins become visible to Vim after this call.call plug#end()" 文件导航 https://vimawesome.com/plugin/nerdtree-red" NERDtree 键盘映射nnoremap <leader>n :NERDTreeFocus<CR>nnoremap <C-n> :NERDTree<CR>nnoremap <C-t> :NERDTreeToggle<CR>nnoremap <C-f> :NERDTreeFind<CR>" NERDtree 自动关闭" Exit Vim if NERDTree is the only window remaining in the only tab.autocmd BufEnter * if tabpagenr('$') == 1 && winnr('$') == 1 && exists('b:NERDTree') && b:NERDTree.isTabTree() | quit | endif" Close the tab if NERDTree is the only window remaining in it.autocmd BufEnter * if winnr('$') == 1 && exists('b:NERDTree') && b:NERDTree.isTabTree() | quit | endif" 防止其他缓冲区替代NERDtree" If another buffer tries to replace NERDTree, put it in the other window, and bring back NERDTree.autocmd BufEnter * if bufname('#') =~ 'NERD_tree_\\d\\+' && bufname('%') !~ 'NERD_tree_\\d\\+' && winnr('$') > 1 | \\ let buf=bufnr() | buffer# | execute "normal! \\<C-W>w" | execute 'buffer'.buf | endif" 语法高亮 https://vimawesome.com/plugin/syntastic" Syntastic 配置set statusline+=%#warningmsg#set statusline+=%{SyntasticStatuslineFlag()}set statusline+=%*let g:syntastic_always_populate_loc_list = 1let g:syntastic_auto_loc_list = 1let g:syntastic_check_on_open = 1let g:syntastic_check_on_wq = 0" 底部状态栏 https://vimawesome.com/plugin/vim-airline-supermanlet g:airline#extensions#tabline#enabled = 1let g:airline#extensions#tabline#formatter = 'default'" 自动补全 https://vimawesome.com/plugin/youcompletemelet g:ycm_autoclose_preview_window_after_completion=1let g:ycm_autoclose_preview_window_after_insertion=1let g:ycm_confirm_extra_conf=0set completeopt-=previewautocmd InsertLeave * if pumvisible() == 0|pclose|endif "离开插入模式后自动关闭预览窗口let g:ycm_seed_identifiers_with_syntax=1 " 语法关键字补全let g:ycm_enable_diagnostic_signs = 1" copilot插件配置imap <silent><script><expr> <C-J> copilot#Accept("\\<CR>")let g:copilot_no_tab_map = v:true" copilot选择下一个提示imap <silent><script><expr> <C-]> copilot#Next()" copilot选择上一个提示imap <silent><script><expr> <C-[> copilot#Prev() 列删除 光标定位到要操作的地方。 CTRL+v 进入“可视 块”模式，选取这一列操作多少行。 d 删除。 列插入插入操作的话稍有区别。例如我们在每一行前都插入”() “： 光标定位到要操作的地方。 CTRL+v 进入“可视 块”模式，选取这一列操作多少行。 SHIFT+i(I) 输入要插入的内容。 ESC 按两次，会在每行的选定的区域出现插入的内容。 列替换方法一： ctrl + v ，切换到块操作模式。 使用j. l等键进行上下左右操作，选中要替换的列。 选中之后，按下 c 键，输入要替换的内容。这个时候会看到只有第一行被键入。 按下 esc 键，退出块操作模式，这时所有列的字符都会被替换。 方法二：选区，在 Visual 模式下选择区域后输入 : Vim 即可自动补全为 :'<,'>。 1:'<,'>s/foo/bar/g","link":"/posts/24ef6d80.html"},{"title":"溯源案例","text":"在某次演练中溯源到了4个红队仔，这里列举一个稍微有点曲折的案例。 百度ID攻击者在某次演练中，踩了公司部署的蜜罐，留下了百度ID 百度账号忘记密码 贴吧资料、历史发言https://www.82cat.com访问某个百度ID的贴吧主页推测攻击者是莆田人，一眼看上去是个女生，不过也有可能是攻击者养的号。 猜测手机号通过百度账号忘记密码的功能得到了攻击者手机号码的前三后二，又推测是莆田的人，所以可以搜索一下莆田移动手机号码的范围。一共20个号段，星号有100种组合方式，所以可以确定到2000个可能的号码。编写代码输出2000个可能的号码： 12345678910111213141516171819202122232425262728293031323334from itertools import productoriginal_array = [ "1835040**X1", "1835041**X1", "1835042**X1", "1835043**X1", "1835044**X1", "1835900**X1", "1835901**X1", "1835902**X1", "1835903**X1", "1835904**X1", "1839600**X1", "1839601**X1", "1839602**X1", "1839603**X1", "1839604**X1", "1839605**X1", "1839606**X1", "1839607**X1", "1839608**X1", "1839609**X1"]combinations = [f"{i:02}" for i in range(100)]result = []for item in original_array: for combo in combinations: result.append(item.replace("**", combo))for res in result: print(res) CSDN+百度网盘确定手机号搞网络安全的，猜测他注册过CSDN不过分吧。可以通过找回密码的形式确定这个手机号是否注册过CSDN，并且不需要输入验证码。拿这些注册过CSDN账号的手机号，去百度网盘中搜索用户，如果头像一样，那么手机号就确定了。 尾声拿到手机号去社工库搜索，可以确定到姓名、身份证号码、毕业院校这些。后面就提交报告，让主办方确认到具体的人扣分就行了。","link":"/posts/d3a82281.html"}],"tags":[{"name":"VIM","slug":"VIM","link":"/tags/VIM/"},{"name":"蓝队","slug":"蓝队","link":"/tags/%E8%93%9D%E9%98%9F/"},{"name":"溯源","slug":"溯源","link":"/tags/%E6%BA%AF%E6%BA%90/"}],"categories":[{"name":"VIM配置","slug":"VIM配置","link":"/categories/VIM%E9%85%8D%E7%BD%AE/"},{"name":"攻防","slug":"攻防","link":"/categories/%E6%94%BB%E9%98%B2/"}],"pages":[{"title":"","text":"google-site-verification: google3cff2a5bdd6598b0.html","link":"/google3cff2a5bdd6598b0.html"},{"title":"404","text":"404 Not Found.","link":"/404.html"},{"title":"About Me","text":"今天把工作以前的博客全部下架，一切从零开始。","link":"/about/index.html"}]}