好大的标题，北京户口的真可怜啊，要当小白鼠了，幸好我等P民不是北京户口，不住在北京，不用接受小白鼠试验。全国人民向北京人民致敬……

悲剧了……，milw0rm站长因为心脏病去世了……，默哀……

原文地址 http://bl4cksecurity.blogspot.com/2009/11/str0ke-milworms-funeral-is-this-friday.html

Str0ke @ Milworm's Funeral is This Friday
Many of us have wondered where str0ke has been and why milw0rm has not been updated in a good while. I recently was informed that str0ke has been hospitalized due to a strange condition with his heart, which he has had since he was a child.

Sadly....

I've just receiv

终于狠下心来败了一块表，很喜欢，功能太强大了以至于我还没搞明白很多功能是怎么用的。一直都打算升级一下户外装备的，先从手表开始了。

闻到一股塑料烧焦的味道，然后屏幕开始变色，那个好看啊，那个漂亮啊，随后就变成暗红色了……

拆开一看显卡的风扇挂了……，显卡被烤的变形了……悲剧啊……

照旧，先扔个标题，最近发现了metasploit的一些异类的用法，承诺给大家要发出来的。口腔水肿，超级严重，不能进食了，等着被活活饿死……，没饿死再继续发……

，刚看到消息，感到有点小震惊和小意外，估计很块就要走商业路线了……

Rapid7 Acquires Metasploit

Company Brings Richer Exploit Data to Unified Vulnerability Management Solution; Metasploit Receives Dedicated Resources for Continued Growth and Development

BOSTON, Mass. – October 21, 2009 – Rapid7, the leading provider of unified vulnerability

先写个标题，一会继续……
首先就是判断oracle的版本了，这里有好多东西，最基本的就是通过nmap扫描了，或者是通过metasploit带的oracle的tns模块来扫描
从nmap4.9版本以后就支持oracle的版本信息判断了，所以我们只需要扫描一下就可以了
[root@ns nikto]# nmap -sV -P0 -O 121.22.5.200

Starting Nmap 4.85BETA9 ( http://nmap.org ) at 2009-10-22 02:28 JST
Interesting ports on 121.22.5.200:
Not shown: 991 closed ports
PORT  

今天看李.恰尔德的杰克.雷切尔系列的犯罪悬疑小说，<the visitor>,看到第七十八页的时候我就推理出来杀人凶手是谁，凶手行凶的目的，手法，和动机。

因为在第十八页面是时候，雷切尔对了拉马尔的描述是：看上去很廉价的衬衣和浆洗了很多次的短裙，蓬乱的头发看上去有点稀，很邋遢的样子。之后多次描述拉马尔的廉价的衣服和廉价的公文包还有廉价的行李箱，并且按照拉马尔表现出来的，内向，自卑，紧张……

从26页到42页，FBI的布莱克和拉马尔一直用法犯罪行为

那个smb2的溢出，其实在metasploit里面有两个扫描器可以用，效果都差不多，只是一个判断的更加详细，一个只是粗略的判断

在msf里我们搜索smb

msf > search smb
[*] Searching loaded modules for pattern 'smb'...

Exploits
========

Name                              

The last 48 hours has been a whirlwind of development at the Metasploit Project as we prepare for the 3.3 stable release. Efrain Torres completed the screenshot feature of the espia Metepreter module. This command only works when the process meterpreter is executing inside has access to the active desktop (like explorer.exe). You can see an example of this below:

meterpreter > ps

Process list
===========