DOCSEARCHbyAlgolia
Submit Docs

lieyan16 Knowledge Base

website·Indexed 30 days ago

https://lieyan16.eu.org

A collection of technical notes and guides covering CTF (Capture The Flag) tools, vulnerability scanning with Wapiti and Nmap, and web development fundamentals including HTML, CSS, JavaScript, PHP, and SQL.

Tokens
14.6K
Snippets
71
Records
127
Agent score
49%

What's inside lieyan16

  1. Overview of System Operations Tool features

    System Operations Tool is a portable, ad-free Windows maintenance software designed for IT professionals and general users. Its core capabilities are divided into four main categories:

    • System Management: Windows/Office activation management, Windows Update control, Microsoft Defender management, desktop icon control, system optimization, junk cleaning, and quick access to Control Panel, Registry, and Services.
    • Troubleshooting: One-click repair for common system faults, printer sharing and repair, LAN sharing settings, and driver installation/repair (including camera drivers).
    • Security & Control: Camera enable/disable, USB write protection and control, program execution blocking, file encryption, and network control tools.
    • Utility Toolbox: Forced software uninstallation, hardware information detection, message recall prevention, and printer technical resources.

  2. Introduction to CTF competition modes

    Capture The Flag (CTF) competitions generally fall into three categories based on complexity and style:

    1. Jeopardy (解题模式): Solve technical challenges (Reverse, Web, Crypto) to earn points. Best for beginners.
    2. Attack-Defense (攻防模式): Teams attack other servers while defending their own. Requires high skill in vulnerability discovery and patching.
    3. Mixed (混合模式): A combination of both Jeopardy and Attack-Defense styles.

  3. Overview of TscanPlus

    TscanPlus is a comprehensive network security detection and operation tool. It is designed for rapid asset discovery, identification, and detection to help security teams build asset information libraries and identify attack surfaces and weaknesses.

  4. Overview of CTF competition modes

    Capture The Flag (CTF) competitions are technical contests in the cybersecurity field. They generally fall into three categories based on difficulty and format:

    1. Jeopardy (解题模式): The most accessible entry point. Participants solve individual technical challenges (e.g., reverse engineering, web penetration, cryptography) to earn points.
    2. Attack-Defense (攻防模式): Teams attack opposing servers while defending their own. This requires high proficiency in vulnerability discovery and patching.
    3. Mix (混合模式): A combination of both Jeopardy and Attack-Defense, testing comprehensive security skills.

  5. Understand SQL case sensitivity and statement termination

    SQL is case-insensitive, meaning keywords like SELECT and select function identically. Regarding statement termination, semicolons (;) are the standard method to separate multiple SQL statements in a single request to a server. While some database systems (like MS Access and SQL Server 2000) do not require them for every statement, other software may mandate their use.

  6. Modify existing data using the UPDATE statement

    The UPDATE statement is used to modify existing records in a table. It is typically used with a WHERE clause to target specific rows; otherwise, all rows in the table will be updated.
    -- Update the City to 'ppone' where the Address is 'ol'
UPDATE Persons SET City = 'ppone' WHERE Address = 'ol';

  7. Perform vulnerability scanning with Nuclei

    Nuclei is a template-based fast scanning tool. It allows for highly configurable targets and extensible templates for detecting vulnerabilities.
    # Basic usage: scan a target with a specific template
nuclei -t test.yaml -u http://exam.com

# Batch scan multiple targets from a file
nuclei -t test.yaml -l target.txt

# Update templates to the latest version
nuclei -update-templates

# Validate a template's format
nuclei -t test.yaml -validate

# Scan with a proxy (SOCKS5)
nuclei -t test.yaml -u http://exam.com -p socks5://127.0.0.1:7890

# Debugging: view sent and received packets
nuclei -t test.yaml -u http://exam.com -debug

# Monitor scanning progress
nuclei -t test.yaml -l target.txt -stats Debug

  8. Define and call functions in PHP

    Functions are declared using the function keyword. They can accept parameters with optional default values and return values using the return statement.
    <?php
// Function with a default parameter value
function setHeight($minheight = 50) {
    echo "Height is: $minheight <br>";
}
setHeight(350); // Output: 350
setHeight();     // Output: 50 (default)

// Function that returns a value
function pot($x, $y) {
    $z = $x + $y;
    return $z;
}
echo "5 + 10 = " . pot(5, 10) . "<br>";
?>

  10. Embed JavaScript in HTML

    JavaScript can be integrated into HTML pages using four primary methods: placing scripts in the head, placing scripts in the body, using inline event attributes, or linking to an external .js file.
    <!-- 1. In the <head> -->
<head>
  <script type="text/javascript">
    // JS code here
  </script>
</head>

<!-- 2. In the <body> -->
<body>
  <script type="text/javascript">
    // JS code here
  </script>
</body>

<!-- 3. Inline Event Attribute -->
<input type="button" onClick="alert('Hello')" value="Button" />

<!-- 4. External JS File (Recommended) -->
<script src="js/index.js" type="text/javascript"></script>

  11. Generate and analyze Wapiti reports

    Wapiti supports multiple report formats including HTML (default), JSON, TXT, and XML. Reports include vulnerability summaries, detailed descriptions, affected URLs/parameters, payloads used, HTTP request/response examples, and remediation suggestions.
    # Generate HTML report
wapiti -u http://target.com -f html -o html_report

# Generate JSON report
wapiti -u http://target.com -f json -o json_report

# Generate TXT report
wapiti -u http://target.com -f txt -o txt_report

# Generate XML report
wapiti -u http://target.com -f xml -o xml_report

# Generate multiple formats simultaneously
wapiti -u http://target.com -f "html,json" -o multi_report

  12. Perform batch scans with Wapiti

    Wapiti can scan multiple targets using a text file or limit the scope to specific folders.
    # Method 1: Use a text file containing target URLs (one per line)
wapiti -l targets.txt -o batch_scan

# Method 2: Scan within a specific folder scope
wapiti -u http://target.com --scope folder -o folder_scan