/*mashimaro*/ Learning by Doing; 說 (下午 11:49):
你快自己寫一個
快!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!11
<打滾吧！阿貞> 說 (下午 11:49):
你快點告訴我
/*mashimaro*/ Learning by Doing; 說 (下午 11:50):
不要
<打滾吧！阿貞> 說 (下午 11:50):
我的比電視vista
/*mashimaro*/ Learning by Doing; 說 (下午 11:50):
我也是
<打滾吧！阿貞> 說 (下午 11:50):
去
/*mashimaro*/ Learning by Doing; 說 (下午 11:50):
自己寫 比較有印象
快拉!!!!!!!!!
<打滾吧！阿貞> 說 (下午 11:50):
那你把code給我
/*mashimaro*/ Learning by Doing; 說 (下午 11:50):
dev C 裝一下阿
不要
<打滾吧！阿貞> 說 (下午 11:50):
好啦
/*mashimaro*/ Learning by Doing; 說 (下午 11:50):
不好
才不到20行
<打滾吧！阿貞> 說 (下午 11:50):
我說好啦 我自己寫！
你在部好瞎毀
/*mashimaro*/ Learning by Doing; 說 (下午 11:50):
XDDDDDDDDDDDDDDD
/*mashimaro*/ Learning by Doing; 說 (下午 11:51):
XDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD...
Read more ...
首先，一些常見的template會包含<span class="fullpost"></span>的功能。但是這種方式來隱藏內文最大的問題就是：
內文只是沒顯示，內容(ex.圖片)還是會被完整載入！
網路上就
有人提供了相關解法，不過他的做法是特別處理圖片，所以當撰寫 blog 時，原本<img src="_link">的 html 語法要改為自訂的 javascrpt 函式，相當不直覺，對一般使用者來講太不友善。
於是我就部分採用了他的 javascript 方式，進一步將內文的多媒體資料
完全不預先載入!
限制 1. 內文不能有單引號(')，請用(`)或(
'+"'"+')代替！
2. 內文不能有 </script>，請改用
</script'+'>代替！
同樣的，要先到 template 裡面加入一段code，利用 Blogger 預先提供的變數來判斷頁面。
Code:
<script language="javascript">
var blog_paetype="<data:blog.pagetype>";
</script>
再來就是文章了，這邊是我用的文章範本：
Code:
要顯示的提要
<script>if(blog_pageType=='index') document.write('<span class="fullpost"></span>');else if(blog_pageType=='item') document.write('<hr />
會隱藏的內文
');</script>
可以測試網頁載入速度，比較看看吧!...
Read more ...
Last Update:
2009/04/25
Environment:Vista
VMWare 6.5.0 build-118166
Ubuntu 8.10 Desktop Version
Ref:[1]
http://ubuntuforums.org/showthread.php?t=987631[2]
http://open-vm-tools.sourceforge.net/[3]
https://edge.launchpad.net/ubuntu/intrepid/i386/xserver-xorg-input-vmmouse/[4]
https://bugs.launchpad.net/ubuntu/+source/xserver-xorg-input-vmmouse/+bug/248521Step 1 - Update & UpgradeCode:
sudo apt-get update
sudo apt-get upgrade
Code:
sudo apt-get install build-essential linux-headers-$(uname -r) psmisc
sudo apt-get install gcc binutils make wget
Step 3 - Prepare Compile Environment for OPEN VM TOOLSAnd for the hack with the open tools I also installed the following (although some of these were found on sites describing what's needed for Ubuntu with a GUI, some might be unnecessary):
Code:
sudo apt-get install libgtk2.0-dev libgtkmm-2.4-dev
sudo apt-get install libproc-dev libdumbnet-dev xorg-dev
cd /tmp
sudo mkdir liburiparser
cd liburiparser
sudo wget http://ftp.ie.debian.org/debian/pool/main/u/uriparser/liburiparser1_0.7.4-1_i386.deb
sudo wget http://ftp.ie.debian.org/debian/pool/main/u/uriparser/liburiparser-dev_0.7.4-1_i386.deb
sudo dpkg -i liburiparser1_0.7.4-1_i386.deb
sudo dpkg -i liburiparser-dev_0.7.4-1_i386.deb
sudo apt-get install libicu-dev
Notice: You need to go
http://ftp.ie.debian.org/debian/pool/main/u/uriparser/ to find and
download the latest version of liburiparser corresponding with your VM hardware.
Go to /tmp and download the open source version of the tools from
http://open-vm-tools.sourceforge.net/.
Code:
sudo wget http://internap.dl.sourceforge.net/sourceforge/open-vm-tools/open-vm-tools-2009.04.23-162451.tar.gz
Unpack and build the open-vm-tools:
Code:
sudo tar xzvf open-vm-tools-*.tar.gz
cd open-vm-tools-*
sudo ./configure --includedir=/usr/include/uriparser
sudo make
In the VMware management console, right click on the VM and tell VMware to install the VM tools then copy the tools:
Code:
sudo mount /media/cdrom0
sudo cp -a /media/cdrom0/VMwareTools*.gz /tmp/
cd /tmp/
sudo tar -xzvf VMwareTools*.gz
From the open source modules/linux folder we have the vmblock, vmhgfs, vmmemctl, vmsync and vmxnet modules that we need to tar up and place into the official VMware tools tarball:
Code:
cd /tmp/open-vm-tools-*/modules/linux/
for i in *; do sudo mv ${i} ${i}-only; sudo tar -cf ${i}.tar ${i}-only; done
cd ../../..
sudo mv -f open-vm-tools-*/modules/linux/*.tar vmware-tools-distrib/lib/modules/source/
Now we can run the regular VMware tools installer accepting all the defaults:
Code:
cd /tmp/vmware-tools-distrib/
sudo ./vmware-install.pl
Go
https://edge.launchpad.net/ubuntu/intrepid/i386/xserver-xorg-input-vmmouse and download
http://launchpadlibrarian.net/19327138/xserver-xorg-input-vmmouse_12.5.1-1ubuntu5.1_i386.debCode:
sudo wget http://launchpadlibrarian.net/19327138/xserver-xorg-input-vmmouse_12.5.1-1ubuntu5.1_i386.deb
sudo dpkg -i xserver-xorg-input-vmmouse_12.5.1-1ubuntu5.1_i386.deb
...
Read more ...
首先, 題目有提示是VB程式, 先用VB-Decompiler掃過
Private Sub Command1_Click() '4058B0
看到這個function裡面的
loc_0040592D: Form1.Unknown_405A60(arg_8, eax, Form1.QueryInterface, eax+03h, "")
用ollydbg追進去
這段很明顯是在判斷數字正確性, 錯誤的話會跳到00405b02
所以就下幾個數字進去測試
發現, 全部數字加起來必須為16h, 且確定的位數為 4__09, 10次內搞定: )...
Read more ...
觀察 sourcecode.txt，由下面兩段code可以發現
//register
fputs($hfile, ";::".$HTTP_POST_VARS['accessid']."::".$md5_passwd."::;\n");
//login
$datastring = $HTTP_POST_VARS['accessid']."::".$md5_pin;
if(strpos($con_file, $datastring)){
do check...
}
能夠偽裝成別人登入，
不過好像沒有用.....
再觀察別的地方!
// endsess
if((preg_match("/^[a-zA-Z0-9=]+$/i", $HTTP_GET_VARS['sessid'])==true)){
$session_file = "xxxxx/".$HTTP_GET_VARS['sessid'];
if(unlink($session_file)==false){
do something...
}
發現sessid在這邊不像register時候有檢查長度！
於是...DONE!
...
Read more ...
