pentestbox 下安装whatweb后，报IPADDR模块没有配置的解决办法。 pentestbox 下安装whatweb后，报IPADDR模块没有配置，无法运行(whatweb安装过程略）查阅网络无果，根据提示，进到whatweb安装目录如D:\PentestBox\bin\customtools\webApplications\whatweb\：，执行D:\PentestBox\bin\customtools\webApplications\whatweb\plugins > bundle install Fetching source index from https://rubygems.org/ Retrying fetcher due to error (2/4): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. Retrying fetcher due to error (3/4): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. Retrying fetcher due to error (4/4): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. 发现执行代码报错，根据提示找到whatweb安装目录下的Gemfile文件，用记事本打开找到其中的 ## source 'https://rubygems.org' #将https改为http 重新运行bundle install执行安装。问题解决 D:\PentestBox\bin\customtools\webApplications\whatweb > bundle install Fetching gem metadata from http://rubygems.org/.......... Fetching version metadata from http://rubygems.org/.. Resolving dependencies... Installing rake 13.0.0 Gem::InstallError: rake requires Ruby version >= 2.2. Installing public_suffix 4.0.1 Gem::InstallError: public_suffix requires Ruby version >= 2.3. Installing ast 2.4.0 Using bundler 1.11.2 Installing thor 0.20.3 Installing coderay 1.1.2 Installing ipaddr 1.2.2 Installing jaro_winkler 1.5.3 with native extensions Installing json 2.2.0 with native extensions Installing method_source 0.9.2 Installing minitest 5.12.2 Gem::InstallError: minitest requires Ruby version ~> 2.2. Installing parallel 1.18.0 Gem::InstallError: parallel requires Ruby version >= 2.2. Installing rainbow 3.0.0 Installing rb-readline 0.5.5 Installing rdoc 6.2.0 Gem::InstallError: rdoc requires Ruby version >= 2.2.2. Installing ruby-progressbar 1.10.1 Installing unicode-display_width 1.6.0 An error occurred while installing rake (13.0.0), and Bundler cannot continue. Make sure that `gem install rake -v '13.0.0'` succeeds before bundling. D:\PentestBox\bin\customtools\webApplications\whatweb > whatweb .$$$ $. .$$$ $. $$$$ $$. .$$$ $$$ .$$$$$$. .$$$$$$$$$$. $$$$ $$. .$$$$$$$. .$$$$$$. $ $$ $$$ $ $$ $$$ $ $$$$$$. $$$$$ $$$$$$ $ $$ $$$ $ $$ $$ $ $$$$$$. $ `$ $$$ $ `$ $$$ $ `$ $$$ $$' $ `$ `$$ $ `$ $$$ $ `$ $ `$ $$$' $. $ $$$ $. $$$$$$ $. $$$$$$ `$ $. $ :' $. $ $$$ $. $$$$ $. $$$$$. $::$ . $$$ $::$ $$$ $::$ $$$ $::$ $::$ . $$$ $::$ $::$ $$$$ $;;$ $$$ $$$ $;;$ $$$ $;;$ $$$ $;;$ $;;$ $$$ $$$ $;;$ $;;$ $$$$ $$$$$$ $$$$$ $$$$ $$$ $$$$ $$$ $$$$ $$$$$$ $$$$$ $$$$$$$$$ $$$$$$$$$' WhatWeb - Next generation web scanner version 0.5.0. Developed by Andrew Horton (urbanadventurer) and Brendan Coles (bcoles) Homepage: https://www.morningstarsecurity.com/research/whatweb Usage: whatweb [options] <URLs> <TARGETs> Enter URLs, hostnames, IP addresses, filenames or IP ranges in CIDR, x.x.x-x, or x.x.x.x-x.x.x.x format. --input-file=FILE, -i Read targets from a file. --aggression, -a=LEVEL Set the aggression level. Default: 1. 1. Stealthy Makes one HTTP request per target and also follows redirects. 3. Aggressive If a level 1 plugin is matched, additional requests will be made. --list-plugins, -l List all plugins. --info-plugins, -I=[SEARCH] List all plugins with detailed information. Optionally search with a keyword. --verbose, -v Verbose output includes plugin descriptions. Note: This is the short usage help. For the complete usage help use -h or --help.

PentestBox ‘toolsmanager’ 不是内部或外部命令,也不是可运行的程序或批处理文件。解决办法 今天windows10 电脑上安装好PentestBOX后，执行了大量的渗透测试工具命令却出现如下类似的情况：'burpsuite' 不是内部或外部命令,也不是可运行的程序 或批处理文件。 'sqlmap' 不是内部或外部命令,也不是可运行的程序 或批处理文件。 'msfconsole' 不是内部或外部命令,也不是可运行的程序 或批处理文件。 wpscan...... 由于PentestBOX渗透测试工具很多，我就不全部说出来了，总之，一句话：PentestBOX打开后，几乎不能执行任何命令，只有少数几个命令可以执行，例如：nmap是可以的。绝大多数命令都会提示‘xxx’不是内部或外部命令,也不是可运行的程序 或批处理文件。PentestBOX 不是内部或外部命令,也不是可运行的程序或批处理文件。解决办法解决方案也非常的简单，基本上大家可以理解为是windows系统版本兼容的问题，有的是低版本，例如windows7或windows xp，我的却是windows10。我们只需要把cmd命令窗口旧版本控制台打开即可！具体操作步骤如下：1、双击“PentestBox.exe”，弹出“cmd.exe"命令窗口。2、鼠标移动到"cmd.exe" 窗口栏最上面空白处，再点击“右键”。3、选择“Debug" ，再点击“Properties...”。cmd Debug-Properties...4、打勾“使用旧版控制台（需要重新启动）”，再点击“确定”按钮。使用旧版控制台（需要重新启动）5、只需要关闭后，重新再一次启动“PentestBox.exe”即可正常使用里面的各个渗透测试工具了！

composer 安装某个版本的thinkphp框架 composer create-project topthink/think=5.1.0 tp5 --prefer-dist

sql利用CASE WHEN THEN ELSE END选择搜索并分组数据的一个实例 该实例实现不同余额卡的分段SELECT CASE WHEN cdmye <= 100 THEN '1 <100' WHEN cdmye > 100 AND cdmye <= 500 THEN '2 100-500' WHEN cdmye > 500 AND cdmye <= 2000 THEN '3 500-2000' WHEN cdmye > 200 AND cdmye <= 10000 THEN '4 2000-10000' WHEN cdmye >10000 THEN '5 >10000' ELSE NULL END as "等级", COUNT(*) "张数",SUM(cdmye) "金额" FROM CARDMAIN_MZK_BK GROUP BY CASE WHEN cdmye <= 100 THEN '1 <100' WHEN cdmye > 100 AND cdmye <= 500 THEN '2 100-500' WHEN cdmye > 500 AND cdmye <= 2000 THEN '3 500-2000' WHEN cdmye > 200 AND cdmye <= 10000 THEN '4 2000-10000' WHEN cdmye >10000 THEN '5 >10000' ELSE NULL END order by CASE WHEN cdmye <= 100 THEN '1 <100' WHEN cdmye > 100 AND cdmye <= 500 THEN '2 100-500' WHEN cdmye > 500 AND cdmye <= 2000 THEN '3 500-2000' WHEN cdmye > 200 AND cdmye <= 10000 THEN '4 2000-10000' WHEN cdmye >10000 THEN '5 >10000' ELSE NULL END

GitHUB初始化仓库，并重传本地代码 配置GIT1)在本地仓库里右键选择Git Bash进入git命令行，执行$ git init2)查看状态$ git status On branch master Untracked files: (use "git add <file>..." to include in what will be committed) .idea/workspace.xml nothing added to commit but untracked files present (use "git add" to track) Richer@Richer-pc MINGW64 /f/www/cms (master) 3）配置提交用户名称和邮件地址$ git config --global user.name "Richar" Richer@Richer-pc MINGW64 /f/www/cms (master) $ git config --global user.email 2xxxx0@qq.com 4)将当前目录下代码上传至GIT$ git add . $ git commit -m "initial commit" [master 6bf1af6] initial commit 1 file changed, 256 insertions(+) create mode 100644 .idea/workspace.xml Richer@Richer-pc MINGW64 /f/www/cms (master) $ git remote add origin https://github.com/Richerjx/cms.git fatal: remote origin already exists. Richer@Richer-pc MINGW64 /f/www/cms (master) $ git remote rm origin Richer@Richer-pc MINGW64 /f/www/cms (master) $ git remote add origin https://github.com/Richerjx/cms.git Richer@Richer-pc MINGW64 /f/www/cms (master) $ git push origin master Counting objects: 156, done. Delta compression using up to 4 threads. Compressing objects: 100% (153/153), done. Writing objects: 100% (156/156), 1.21 MiB | 376.00 KiB/s, done. Total 156 (delta 24), reused 0 (delta 0) remote: Resolving deltas: 100% (24/24), done. To https://github.com/Richerjx/cms.git * [new branch] master -> master Richer@Richer-pc MINGW64 /f/www/cms (master) $5)多次上传会报错，可先删除后再上传 fatal: remote origin already exists. git remote rm origin