VMWare Workstation 17 Pro 网络设置 桥接模式 网络地址转换(NAT)模式 仅主机模式 网络模式桥接模式:主机与虚拟机对等, 虚拟机注册到主机所在的局域网, 会占用该网络的IP该局域网内的所有机器, 包括主机和其他机器和所有虚拟机, 均可互相访问虚拟机可以访问互联网网络地址转发(NAT)模式:可以认为是在主机下建立了一个虚拟局域网, 虚拟机注册到该网络, 不会占用主机所在局域网的IP虚拟机可通过主机访问互联网主机和所有虚拟机可以互相访问虚拟机可以访问主机局域网中的其他机器. 但是反过来不行(貌似NAT-PAT端口多路复用(不同端口指向不同虚拟机)可以实现该功能)仅主机模式:和NAT类似但是虚拟机只能和主机互相访问不能通过主机访问互联网也不能访问主机局域网中的其他机器

pentestbox 下安装whatweb后，报IPADDR模块没有配置的解决办法。 pentestbox 下安装whatweb后，报IPADDR模块没有配置，无法运行(whatweb安装过程略）查阅网络无果，根据提示，进到whatweb安装目录如D:\PentestBox\bin\customtools\webApplications\whatweb\：，执行D:\PentestBox\bin\customtools\webApplications\whatweb\plugins > bundle install Fetching source index from https://rubygems.org/ Retrying fetcher due to error (2/4): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. Retrying fetcher due to error (3/4): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. Retrying fetcher due to error (4/4): Bundler::Fetcher::CertificateFailureError Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. Could not verify the SSL certificate for https://rubygems.org/. There is a chance you are experiencing a man-in-the-middle attack, but most likely your system doesn't have the CA certificates needed for verification. For information about OpenSSL certificates, see http://bit.ly/ruby-ssl. To connect without using SSL, edit your Gemfile sources and change 'https' to 'http'. 发现执行代码报错，根据提示找到whatweb安装目录下的Gemfile文件，用记事本打开找到其中的 ## source 'https://rubygems.org' #将https改为http 重新运行bundle install执行安装。问题解决 D:\PentestBox\bin\customtools\webApplications\whatweb > bundle install Fetching gem metadata from http://rubygems.org/.......... Fetching version metadata from http://rubygems.org/.. Resolving dependencies... Installing rake 13.0.0 Gem::InstallError: rake requires Ruby version >= 2.2. Installing public_suffix 4.0.1 Gem::InstallError: public_suffix requires Ruby version >= 2.3. Installing ast 2.4.0 Using bundler 1.11.2 Installing thor 0.20.3 Installing coderay 1.1.2 Installing ipaddr 1.2.2 Installing jaro_winkler 1.5.3 with native extensions Installing json 2.2.0 with native extensions Installing method_source 0.9.2 Installing minitest 5.12.2 Gem::InstallError: minitest requires Ruby version ~> 2.2. Installing parallel 1.18.0 Gem::InstallError: parallel requires Ruby version >= 2.2. Installing rainbow 3.0.0 Installing rb-readline 0.5.5 Installing rdoc 6.2.0 Gem::InstallError: rdoc requires Ruby version >= 2.2.2. Installing ruby-progressbar 1.10.1 Installing unicode-display_width 1.6.0 An error occurred while installing rake (13.0.0), and Bundler cannot continue. Make sure that `gem install rake -v '13.0.0'` succeeds before bundling. D:\PentestBox\bin\customtools\webApplications\whatweb > whatweb .$$$ $. .$$$ $. $$$$ $$. .$$$ $$$ .$$$$$$. .$$$$$$$$$$. $$$$ $$. .$$$$$$$. .$$$$$$. $ $$ $$$ $ $$ $$$ $ $$$$$$. $$$$$ $$$$$$ $ $$ $$$ $ $$ $$ $ $$$$$$. $ `$ $$$ $ `$ $$$ $ `$ $$$ $$' $ `$ `$$ $ `$ $$$ $ `$ $ `$ $$$' $. $ $$$ $. $$$$$$ $. $$$$$$ `$ $. $ :' $. $ $$$ $. $$$$ $. $$$$$. $::$ . $$$ $::$ $$$ $::$ $$$ $::$ $::$ . $$$ $::$ $::$ $$$$ $;;$ $$$ $$$ $;;$ $$$ $;;$ $$$ $;;$ $;;$ $$$ $$$ $;;$ $;;$ $$$$ $$$$$$ $$$$$ $$$$ $$$ $$$$ $$$ $$$$ $$$$$$ $$$$$ $$$$$$$$$ $$$$$$$$$' WhatWeb - Next generation web scanner version 0.5.0. Developed by Andrew Horton (urbanadventurer) and Brendan Coles (bcoles) Homepage: https://www.morningstarsecurity.com/research/whatweb Usage: whatweb [options] <URLs> <TARGETs> Enter URLs, hostnames, IP addresses, filenames or IP ranges in CIDR, x.x.x-x, or x.x.x.x-x.x.x.x format. --input-file=FILE, -i Read targets from a file. --aggression, -a=LEVEL Set the aggression level. Default: 1. 1. Stealthy Makes one HTTP request per target and also follows redirects. 3. Aggressive If a level 1 plugin is matched, additional requests will be made. --list-plugins, -l List all plugins. --info-plugins, -I=[SEARCH] List all plugins with detailed information. Optionally search with a keyword. --verbose, -v Verbose output includes plugin descriptions. Note: This is the short usage help. For the complete usage help use -h or --help.

PentestBox ‘toolsmanager’ 不是内部或外部命令,也不是可运行的程序或批处理文件。解决办法 今天windows10 电脑上安装好PentestBOX后，执行了大量的渗透测试工具命令却出现如下类似的情况：'burpsuite' 不是内部或外部命令,也不是可运行的程序 或批处理文件。 'sqlmap' 不是内部或外部命令,也不是可运行的程序 或批处理文件。 'msfconsole' 不是内部或外部命令,也不是可运行的程序 或批处理文件。 wpscan...... 由于PentestBOX渗透测试工具很多，我就不全部说出来了，总之，一句话：PentestBOX打开后，几乎不能执行任何命令，只有少数几个命令可以执行，例如：nmap是可以的。绝大多数命令都会提示‘xxx’不是内部或外部命令,也不是可运行的程序 或批处理文件。PentestBOX 不是内部或外部命令,也不是可运行的程序或批处理文件。解决办法解决方案也非常的简单，基本上大家可以理解为是windows系统版本兼容的问题，有的是低版本，例如windows7或windows xp，我的却是windows10。我们只需要把cmd命令窗口旧版本控制台打开即可！具体操作步骤如下：1、双击“PentestBox.exe”，弹出“cmd.exe"命令窗口。2、鼠标移动到"cmd.exe" 窗口栏最上面空白处，再点击“右键”。3、选择“Debug" ，再点击“Properties...”。cmd Debug-Properties...4、打勾“使用旧版控制台（需要重新启动）”，再点击“确定”按钮。使用旧版控制台（需要重新启动）5、只需要关闭后，重新再一次启动“PentestBox.exe”即可正常使用里面的各个渗透测试工具了！

composer 安装某个版本的thinkphp框架 composer create-project topthink/think=5.1.0 tp5 --prefer-dist

sql利用CASE WHEN THEN ELSE END选择搜索并分组数据的一个实例 该实例实现不同余额卡的分段SELECT CASE WHEN cdmye <= 100 THEN '1 <100' WHEN cdmye > 100 AND cdmye <= 500 THEN '2 100-500' WHEN cdmye > 500 AND cdmye <= 2000 THEN '3 500-2000' WHEN cdmye > 200 AND cdmye <= 10000 THEN '4 2000-10000' WHEN cdmye >10000 THEN '5 >10000' ELSE NULL END as "等级", COUNT(*) "张数",SUM(cdmye) "金额" FROM CARDMAIN_MZK_BK GROUP BY CASE WHEN cdmye <= 100 THEN '1 <100' WHEN cdmye > 100 AND cdmye <= 500 THEN '2 100-500' WHEN cdmye > 500 AND cdmye <= 2000 THEN '3 500-2000' WHEN cdmye > 200 AND cdmye <= 10000 THEN '4 2000-10000' WHEN cdmye >10000 THEN '5 >10000' ELSE NULL END order by CASE WHEN cdmye <= 100 THEN '1 <100' WHEN cdmye > 100 AND cdmye <= 500 THEN '2 100-500' WHEN cdmye > 500 AND cdmye <= 2000 THEN '3 500-2000' WHEN cdmye > 200 AND cdmye <= 10000 THEN '4 2000-10000' WHEN cdmye >10000 THEN '5 >10000' ELSE NULL END