提供与客户端通讯的机制。支持WindVane SDK v2.2 以上版本。
windvane 在客户端中,会将原始UA后面跟上 WindVane/WindVaneSDK的版本号,你可以通过判断UA的方式来检查环境 其中,淘宝主客户端1212版本(IOS 3.4.5 ANDROID 3.9.5)后格式为
提供与客户端通讯的机制。支持WindVane SDK v2.2 以上版本。
windvane 在客户端中,会将原始UA后面跟上 WindVane/WindVaneSDK的版本号,你可以通过判断UA的方式来检查环境 其中,淘宝主客户端1212版本(IOS 3.4.5 ANDROID 3.9.5)后格式为
#!/usr/bin/env python3 | |
""" | |
Very simple HTTP server in python for logging requests | |
Usage:: | |
./server.py [<port>] | |
""" | |
from http.server import BaseHTTPRequestHandler, HTTPServer | |
import logging | |
class S(BaseHTTPRequestHandler): |
#!/usr/bin/perl -w | |
# | |
# $Id: //websites/unixwiz/unixwiz.net/webroot/tools/ftpput.txt#1 $ | |
# | |
# written by : Stephen J. Friedl | |
# Software Consultant | |
# Tustin, California USA | |
# | |
# This very simple program is a kind of inverse to wget for ftp: it | |
# *puts* files to a remote FTP server and returns an exit code that |
<!-- https://www.geeksforgeeks.org/how-to-read-a-local-text-file-using-javascript/ --> | |
<!DOCTYPE html> | |
<html> | |
<head> | |
<title>Read Text File</title> | |
</head> | |
<body> | |
<input type="file" name="inputfile" |
while true | |
do | |
sudo ifconfig tun0 &> /dev/null && echo -e "\033[1;32m" "-- VPN is active --" "\033[0m" | |
sudo ifconfig tun0 &> /dev/null || echo -e "\033[1;31m" "-- VPN is NOT active --" "\033[0m" | |
sleep 5 | |
done |
Purpose: To prevent deobfuscation | |
Symbols are usually stripped during the build process, so you need the compiled byte-code and libraries to verify whether any unnecessary metadata has been discarded. | |
First find the nm binary in your Android NDK and export it (or create an alias). |
Object Serialization | |
Search the source code for the following keywords: | |
import java.io.Serializable | |
implements Serializable | |
JSON | |
Static analysis depends on the library being used. In case of the need to counter memory-dumping, make sure that highly sensitive information is not stored in JSON as you cannot guarantee any anti-memory dumping techniques with the standard libraries. You can check for the following keywords per library: |
X-Azure-ClientIP: 127.0.0.1 | |
X-Azure-SocketIP: 127.0.0.1 | |
X-Originating-IP: 127.0.0.1 | |
X-Forwarded-For: 127.0.0.1 | |
X-Remote-IP: 127.0.0.1 | |
X-Remote-Addr: 127.0.0.1 | |
X-Real-Ip: 127.0.0.1 | |
X-Target-IP: 127.0.0.1 | |
X-Forwarded-Host: localhost | |
True-Client-IP: 127.0.0.1 |
package main | |
import ( | |
"log" | |
//"os" | |
"context" | |
"github.com/ns3777k/go-shodan/shodan" | |
"fmt" | |
"flag" | |
"strings" |
package main | |
import ( | |
"fmt" | |
"regexp" | |
"io/ioutil" | |
"log" | |
"os" | |
) | |
func main() { | |
argsWithoutProg := os.Args[1] |