西南赛区数信杯应急响应

PubkeyAuthentication yes

chmod 700 /root/.ssh
chmod 600 /root/.ssh/authorized_keys
chown root:root /root/.ssh
chown root:root /root/.ssh/authorized_keys

restart sshd

<Directory />
    Options FollowSymLinks
    AllowOverride None
    Require all denied
</Directory>

root@d7f81b8b07c5:/etc/apache2# grep -r "ServerTokens" /etc/apache2/
/etc/apache2/conf-available/security.conf:# ServerTokens
/etc/apache2/conf-available/security.conf:#ServerTokens Minimal
/etc/apache2/conf-available/security.conf:ServerTokens OS
/etc/apache2/conf-available/security.conf:#ServerTokens Full
/etc/apache2/apache2.conf:ServerTokens Prod

#ServerTokens Minimal
#ServerTokens OS
#ServerTokens Full

SELECT * FROM pre_user_balance;

vim /etc/redis/redis.conf

find . -name "*.php" -exec grep -l "eval(" {} \\;

vim /etc/redis/redis.conf

find . -name "*.php" -exec grep -l "eval(" {} \\;

service mysql status

service mysql start

sql复制代码CREATE DATABASE openfire_db;
CREATE USER 'pdx'@'localhost' IDENTIFIED BY 'Li4444555635!';
GRANT ALL PRIVILEGES ON openfire_db.* TO 'pdx'@'localhost';
FLUSH PRIVILEGES;

<jive>
  <adminConsole>
    <port>12335</port>
    <securePort>9091</securePort>
  </adminConsole>
  <locale>zh_CN</locale>
  <connectionProvider>
    <className>org.jivesoftware.database.DefaultConnectionProvider</className>
  </connectionProvider>
  <database>
    <defaultProvider>
      <driver>com.mysql.cj.jdbc.Driver</driver>
      <serverURL>jdbc:mysql://localhost:3306/openfire_db?useSSL=false&serverTimezone=UTC</serverURL>
      <username>pdx</username>
      <password>Li4444555635!</password>
      <testSQL>select 1</testSQL>
      <testBeforeUse>true</testBeforeUse>
      <testAfterUse>true</testAfterUse>
      <minConnections>5</minConnections>
      <maxConnections>25</maxConnections>
      <connectionTimeout>1.0</connectionTimeout>
    </defaultProvider>
  </database>
  <setup>true</setup>
</jive>

java -cp /home/user/openfire/lib/hsqldb-2.4.1.jar org.hsqldb.Server --database.0 file:mydb --dbname.0 mydb

java -cp /home/user/openfire/lib/hsqldb-2.4.1.jar org.hsqldb.cmdline.SqlTool --url jdbc:hsqldb:hsql://localhost/mydb --user SA --password '' --sql "SELECT * FROM ofUser" > backup_ofUser.csv

LOAD DATA LOCAL INFILE '/path/to/backup_ofUser.csv' INTO TABLE ofUser
FIELDS TERMINATED BY ',' LINES TERMINATED BY '\n';

LOAD DATA LOCAL INFILE '/path/to/backup_ofGroupUser.csv' INTO TABLE ofGroupUser
FIELDS TERMINATED BY ',' LINES TERMINATED BY '\n';

root@16bb35eba610:/# find / -name "openfire.xml"
/home/user/openfire/conf/openfire.xml

root@16bb35eba610:/# cat  /home/user/openfire/conf/openfire.xml
<?xml version="1.0" encoding="UTF-8"?>

<!--
    This file stores bootstrap properties needed by Openfire.
    Property names must be in the format: "prop.name.is.blah=value"
    That will be stored as:
        <prop>
            <name>
                <is>
                    <blah>value</blah>
                </is>
            </name>
        </prop>

    Most properties are stored in the Openfire database. A
    property viewer and editor is included in the admin console.
-->
<!-- root element, all properties must be under this element -->
<jive> 
  <adminConsole> 
    <!-- Disable either port by setting the value to -1 -->  
    <port>9090</port>  
    <securePort>9091</securePort> 
  </adminConsole>  
  <locale>zh_CN</locale>  
  <!-- Network settings. By default, Openfire will bind to all network interfaces.
      Alternatively, you can specify a specific network interfaces that the server
      will listen on. For example, 127.0.0.1. This setting is generally only useful
       on multi-homed servers. -->  
  <!--
    <network>
        <interface></interface>
    </network>
    -->  
  <!--
        One time token to gain temporary access to the admin console.
    -->  
  <!--
    <oneTimeAccessToken>secretToken</oneTimeAccessToken>
    -->  
  <connectionProvider> 
    <className>org.jivesoftware.database.EmbeddedConnectionProvider</className> 
  </connectionProvider>  
  <setup>true</setup>  
  <fqdn>5f3dfcc60c8a</fqdn> 
</jive>

root@16bb35eba610:/# echo '<?xml version="1.0" encoding="UTF-8"?>
> <jive> 
>   <adminConsole> 
>     <port>12335</port>  
>     <securePort>9091</securePort> 
>   </adminConsole>  
>   <locale>zh_CN</locale>  
>   <connectionProvider> 
>     <className>org.jivesoftware.database.EmbeddedConnectionProvider</className> 
>   </connectionProvider>  
>   <setup>true</setup>
>   <fqdn>5f3dfcc60c8a</fqdn>
> </jive>' > /home/user/openfire/conf/openfire.xml

<jive>
  <adminConsole>
    <port>12335</port>
    <securePort>9091</securePort>
  </adminConsole>
  <locale>zh_CN</locale>
  <connectionProvider>
    <className>org.jivesoftware.database.DefaultConnectionProvider</className>
  </connectionProvider>
  <database>
    <defaultProvider>
      <driver>com.mysql.cj.jdbc.Driver</driver>
      <serverURL>jdbc:mysql://localhost:3306/openfire_db?useSSL=false&serverTimezone=UTC</serverURL>
      <username>pdx</username>
      <password>Li4444555635!</password>
      <testSQL>select 1</testSQL>
      <testBeforeUse>true</testBeforeUse>
      <testAfterUse>true</testAfterUse>
      <minConnections>5</minConnections>
      <maxConnections>25</maxConnections>
      <connectionTimeout>1.0</connectionTimeout>
    </defaultProvider>
  </database>
  <setup>true</setup>
</jive>

sudo /home/user/openfire/bin/openfire start

import cv2
import numpy as np
import matplotlib.pyplot as plt

def add_salt_and_pepper_noise(image):
    amount = 0.04  # 设置添加的噪声占原始图像的比例
    s_vs_p = 0.5  # 设置噪声中salt和pepper的比例

    noise_attacked_image = np.copy(image)
    # 设置添加的salt噪声的数量
    num_salt = np.ceil(amount * s_vs_p * image.size)
    # 设置添加噪声的坐标位置
    coords = [np.random.randint(0, i - 1, int(num_salt)) for i in image.shape]
    # 添加salt噪声
    noise_attacked_image[tuple(coords)] = 255

    # 设置添加的pepper噪声的数量
    num_salt = np.ceil(amount * (1 - s_vs_p) * image.size)
    # 设置添加噪声的坐标位置
    coords = [np.random.randint(0, i - 1, int(num_salt)) for i in image.shape]
    # 添加pepper噪声
    noise_attacked_image[tuple(coords)] = 0

    return noise_attacked_image

# 读取图片
image = cv2.imread("embedded.png")
image = image[:, :, [2, 1, 0]]  # 转换为RGB格式

# 添加盐和胡椒噪声
noise_attacked_image = add_salt_and_pepper_noise(image)

# 保存添加了噪声后的图像
plt.imsave("embedded1.png", noise_attacked_image)

curl -F "file=@/home/2024-09-05_12-03-51.pcapng" <http://106.53.212.184:6666>

import http.server
import socketserver
import cgi
import tarfile
import os

PORT = 6666

class CustomHTTPRequestHandler(http.server.SimpleHTTPRequestHandler):
    def do_POST(self):
        # Parse the form data posted  
        form = cgi.FieldStorage(
            fp=self.rfile,
            headers=self.headers,
            environ={'REQUEST_METHOD': 'POST'}
        )

        # Extract file information  
        if 'file1' in form:
            file_item = form['file1']
            if file_item.file:
                # Define file path to save the uploaded tar file in the current directory  
                file_path = file_item.filename

                # Write the tar file to the current directory  
                with open(file_path, 'wb') as output_file:
                    output_file.write(file_item.file.read())

                # Check if the file is a tar file and extract it
                if tarfile.is_tarfile(file_path):
                    with tarfile.open(file_path, 'r') as tar:
                        tar.extractall(path="./")  # Extract all files to current directory

                    self.send_response(200)
                    self.end_headers()
                    self.wfile.write(b"Tar file uploaded and extracted successfully")
                else:
                    os.remove(file_path)  # Remove the file if it's not a valid tar
                    self.send_error(400, "Uploaded file is not a valid tar file")
            else:
                self.send_error(400, "No file uploaded")
        else:
            self.send_error(400, "No file uploaded")

if __name__ == "__main__":
    with socketserver.TCPServer(("", PORT), CustomHTTPRequestHandler) as httpd:
        print(f"Serving on port {PORT}")
        httpd.serve_forever()