def print_all(module_):
modulelist = dir(module_)
length = len(modulelist)
for i in range(0,length,1):
print modulelist[i]+' : '+ str(getattr(module_,modulelist[i]))
下面是python2.7代码的实现
import base64
# 密码转成字节码
password = "123456"
passwd = bytearray(password)
def trans_code(trans_type, para_dict):
if trans_type == 'en':
# 编码
for (x,y) in para_dict.items():
# 参数转成字节码
bytecode = bytearray(y)
j = 0
cryptoValue = ''
ascii_words = ''
for i in range( len(bytecode) ):
# 将 参数字节码 与 密码字节码 做异或操作，异或是对称加解密算法
cryptoValue = bin( bytecode[i] ^ passwd[j] )
# 密码长度有限，需要循环使用
j += 1
if j > len(passwd):
j = 0
# 二进制 转 十进制
decimal = int(cryptoValue, 2)
# 十进制 转 ASCII字符
ascii_words += chr( decimal )
# base64 编码 ASCII字符
cipher = base64.b64encode(ascii_words)
print x + ' : ' + y + ' : ' + cipher
print '='*10 + 'encode finish' + '='*10
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
[root@jamka yum.repos.d]# vim remi remi-php70.repo remi-php71.repo remi.repo remi-safe.repo编辑文件 vim remi.repo，把想要升级或者降级的版本enabled打开即可
[remi-php55] name=Remi's PHP 5.5 RPM repository for Enterprise Linux 6 - $basearch #baseurl=http://rpms.remirepo.net/enterprise/6/php55/$basearch/ mirrorlist=http://rpms.remirepo.net/enterprise/6/php55/mirror # NOTICE: common dependencies are in "remi-safe" enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-remi
[root@jamka dvwa]# grep -r -n 'wish to display' . ./vulnerabilities/fi/source/impossible.php:3:// The page we wish to display ./vulnerabilities/fi/source/medium.php:3:// The page we wish to display ./vulnerabilities/fi/source/low.php:3:// The page we wish to display ./vulnerabilities/fi/source/high.php:3:// The page we wish to display
）
Kernel panic-not syncing: VFS: unable to mount root fs on unknown-block(179,6) Kernel panic-not syncing: VFS: unable to mount root fs on unknown-block(179,2)
XYJ-C2960_11#show port-security int f0/10 | in Aging Aging Time : 1 mins Aging Type : Absolute SecureStatic Address Aging : Disabled XYJ-C2960_11(config)#int f0/10 XYJ-C2960_11(config-if)#switchport port-security XYJ-C2960_11(config-if)#switchport port-security violation shutdown XYJ-C2960_11(config-if)#switchport port-security maximum 1 XYJ-C2960_11(config-if)#do show port-s int f0/10 | in Aging Aging Time : 1 mins Aging Type : Absolute SecureStatic Address Aging : Enabled以下三条命令基本上测不出来什么实际效果，虽然有细微不同，所以有与无均可。
switchport port-security aging type inactivity | absolute switchport port-security aging time 1 switchport port-security aging static要说出确切不同，就是没有配置aging，那么mac地址被记录一次后就再也不过期了，让后如果max为3，就是说接了三台pc后，第四台就会触发errdisable。
XYJ-C2960_9#show port-security interface f0/23 add
Secure Mac Address Table
-----------------------------------------------------------------------------
Vlan Mac Address Type Ports Remaining Age
(mins)
---- ----------- ---- ----- -------------
11 000c.29e1.0542 SecureDynamic Fa0/23 -
11 6400.6a95.9017 SecureDynamic Fa0/23 -
-----------------------------------------------------------------------------
Total Addresses: 2
XYJ-C2960_9#conf t
Enter configuration commands, one per line. End with CNTL/Z.
XYJ-C2960_9(config)#int f0/23
XYJ-C2960_9(config-if)#switchport port-security aging time 5
XYJ-C2960_9(config-if)#end
XYJ-C2960_9#show port-security interface f0/23 ad
Secure Mac Address Table
-----------------------------------------------------------------------------
Vlan Mac Address Type Ports Remaining Age
(mins)
---- ----------- ---- ----- -------------
11 000c.29e1.0542 SecureDynamic Fa0/23 5
11 6400.6a95.9017 SecureDynamic Fa0/23 5
-----------------------------------------------------------------------------
Total Addresses: 2
因为是使用shutdown的惩罚，所以要启用自动恢复，才可以避免手动操作的麻烦
XYJ-C2960_11(config)#errdisable recovery cause psecure-violation XYJ-C2960_11(config)#errdisable recovery interval 30 XYJ-C2960_11#show errdisable recovery ErrDisable Reason Timer Status ----------------- -------------- arp-inspection Disabled bpduguard Disabled channel-misconfig (STP) Disabled dhcp-rate-limit Disabled dtp-flap Disabled gbic-invalid Disabled inline-power Disabled link-flap Disabled mac-limit Disabled loopback Disabled pagp-flap Disabled port-mode-failure Disabled pppoe-ia-rate-limit Disabled psecure-violation Enabled security-violation Disabled sfp-config-mismatch Disabled small-frame Disabled storm-control Disabled udld Disabled vmps Disabled psp Disabled Timer interval: 30 seconds Interfaces that will be enabled at the next timeout:
monitor session 1 source interface g1/0/1 - 12 , g2/0/1 - 12 , g1/0/43,g2/0/43 monitor session 1 destination int g2/0/48 no monitor session 1等我做完配置之后，查看这么大流量对CPU于内存的消耗，发现CPU的提高几乎没有，内存的增加几乎可以忽略。
snmpwalk -v 3 -u ITSEC -a sha -A gohciuY2tu -x AES -X il4laht9Pi -l authPriv 172.16.2.2
XYJ-ASA5512-B(config)# show logging message 106001 syslog 106001: default-level critical (enabled) XYJ-ASA5512-B(config)# no logg XYJ-ASA5512-B(config)# no logging me XYJ-ASA5512-B(config)# no logging message 106001 XYJ-ASA5512-B(config)# no logging message 106006 XYJ-ASA5512-B(config)# no logging message 106014 XYJ-ASA5512-B(config)# no logging message 106023 XYJ-ASA5512-B(config)# no logging message 500004 XYJ-ASA5512-B(config)# no logging message 410001 XYJ-ASA5512-B(config)# no logging message 733100 XYJ-ASA5512-B(config)# no logging message 106007
Oct 19 2016 15:10:02: %ASA-5-111008: User 'enable_15' executed the 'no logging message 106001' command. Oct 19 2016 16:38:56: %ASA-5-111008: User 'enable_15' executed the 'no logging message 733100' command.我是用logAnalyzer去收集日志的，以下是删除一些无用日志的sql语句。
delete from SystemEvents where Message like '%Inbound TCP%' and Syslogtag = '%ASA-2-106001:'; delete from SystemEvents where Message like '%Inbound TCP%' and Syslogtag = '%ASA-2-106001:'; delete from SystemEvents where Message like '%inbound UDP%' and Syslogtag = '%ASA-2-106006:'; delete from SystemEvents where Message like '%inbound icmp%' and Syslogtag = '%ASA-3-106014:'; delete from SystemEvents where Message like '%Deny udp src%' and Syslogtag = '%ASA-4-106023:'; delete from SystemEvents where Message like '%Deny icmp src%' and Syslogtag = '%ASA-4-106023:'; delete from SystemEvents where Message like '%Invalid transport field%' and Syslogtag = '%ASA-4-500004:'; delete from SystemEvents where Message like "%executed the 'enable'%" and Syslogtag = '%ASA-5-111008:'; delete from SystemEvents where Message like '%executed the \'enable\'%' and Syslogtag = '%ASA-5-111008:'; delete from SystemEvents where Message like '%Dropped UDP DNS%' and Syslogtag = '%ASA-4-410001:'; delete from SystemEvents where Message like '%User priv level changed%' and Syslogtag = '%ASA-5-502103:'; delete from SystemEvents where Message like '%User logged out: Uname: admin%' and Syslogtag = '%ASA-5-611103:'; delete from SystemEvents where Message like '%Received encrypted packet with no matching SA%' and Syslogtag = '%ASA-5-713904:'; delete from SystemEvents where Message like '%Current burst%' and Syslogtag = '%ASA-4-733100:'; delete from SystemEvents where Message like '%TCP access denied by ACL%' and Syslogtag = '%ASA-3-710003:'; delete from SystemEvents where Message like '%Duplicate TCP SYN from%' and Syslogtag = '%ASA-4-419002:'; delete from SystemEvents where Message like '%Deny inbound UDP from%' and Syslogtag = '%ASA-2-106007:'; delete from SystemEvents where Message like '%No matching connection for ICMP%' and Syslogtag = '%ASA-4-313005:'; delete from SystemEvents where Message like '%Group = spoke1%' and Syslogtag = '%ASA-5-713120:'; delete from SystemEvents where Message like '%Group = spoke1%' and Syslogtag = '%ASA-5-713119:'; delete from SystemEvents where Message like '%Group = spoke1%' and Syslogtag = '%ASA-5-713049:'; delete from SystemEvents where Message like '%Group = spoke1%' and Syslogtag = '%ASA-5-713041:'; delete from SystemEvents where Message like '%Denied ICMP type=3, code=3 from%' and Syslogtag = '%ASA-3-313001:'; delete from SystemEvents where Message like '%Dropped connection for ESMTP Request%' and Syslogtag = '%ASA-4-108004:'; delete from SystemEvents where Message like '%Received Invalid Cookie message for non-existent SA%' and Syslogtag = '%ASA-4-713903:'; delete from SystemEvents where Message like '%tcp flow from lan%' and Syslogtag = '%ASA-4-507003:';
Switch Ports Model SW Version SW Image ------ ----- ----- ---------- ---------- * 1 50 WS-C2960+48TC-L 15.0(2)SE5 C2960-LANBASEK9-M Configuration register is 0xF配置 DHCP snooping后，show ip dhcp snooping 显示都正常
XYJ-C2960_11#show ip dhcp snooping Switch DHCP snooping is enabled DHCP snooping is configured on following VLANs: 1-100 DHCP snooping is operational on following VLANs: 1-2,4-18,20-25,100 DHCP snooping is configured on the following L3 Interfaces: Insertion of option 82 is enabled circuit-id default format: vlan-mod-port remote-id: 84b5.17ea.5c80 (MAC) Option 82 on untrusted port is not allowed Verification of hwaddr field is enabled Verification of giaddr field is enabled DHCP snooping trust/rate is configured on the following Interfaces: Interface Trusted Allow option Rate limit (pps) ----------------------- ------- ------------ ---------------- GigabitEthernet0/1 yes yes unlimited Custom circuit-ids: GigabitEthernet0/2 yes yes unlimited Custom circuit-ids: Port-channel1 yes yes unlimited Custom circuit-ids:
XYJ-C2960_11#show ip dhcp snooping binding MacAddress IpAddress Lease(sec) Type VLAN Interface ------------------ --------------- ---------- ------------- ---- -------------------- Total number of bindings: 0 XYJ-C2960_11# XYJ-C2960_11#
diskutil --list diskutil unmountdisk rdisk2卸载sd卡，
注意：不要使用eject，否则无法dd成功bs是指一次复制多少内容，count是指复制多少次dd bs=10m count=500 if=/dev/rdisk2 of=./backup.img
dd bs=10m count=500 if=/dev/rdisk2 | gzip -9 > ./backup.img.gz
gzip -c -d backup.img.gz | dd bs=10m of=/dev/rdisk2
watch -n 5 killall -USR1 dd
import urllib.parse时，出现了错误，找不到模块importbrew install python32.去官网下载指定版本的安装包
"cmd": ["/usr/local/bin/python3", "-u", "$file"], "file_regex": "^[ ]File \"(...?)\", line ([0-9]*)", "selector": "source.python" } 然后保存文件名为python3.sublime-build，文件会自动保存到sublime的自定义文件夹中 mac下默认路径是~/Library/Application Support/Sublime Text 3/Packages/User然后你就可以根据需要在Build System下切换到不同的python解释器pythonREPL 配置python交互模式
python RUN - Current File 配置文件路径 /Users/sherpper/Library/Application Support/Sublime Text 3/Packages/SublimeREPL/config/python/Main.sublime-menu "cmd": ["python", "-u","-i", "$file_basename"]# 加入-i选项，运行完脚本后进入交互模式。-u 表示不缓冲
import sys
import codecs
sys.stdout = codecs.getwriter("utf-8")(sys.stdout.detach())
pip3 install ipython pip3 install ipython[all]ipython 安装(适用于python2.7)
pip install ipython
os.system('python3 /home/xxx.py') 只能返回0
os.popen('python3 /home/xxx.py') 这可以将脚本返回值进行导出
import urllib.request
import urllib.parse
Request = urllib.request.Request(url)
import bs4
from bs4 import BeautifulSoup
from bs4 import BeautifulSoup
XYJ-C2960_9(config)#
XYJ-C2960_9#show clock
Oct 17 09:24:20: %SYS-5-CONFIG_I: Configured from console by admin on vty0 (172.16.11.198)
17:24:23.290 BeiJing Mon Oct 17 2016
XYJ-C2960_9#
XYJ-C2960_9(config)#
Oct 17 09:21:01: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/23, changed state to down
Oct 17 09:21:02: %LINK-3-UPDOWN: Interface FastEthernet0/23, changed state to down
Oct 17 09:21:05: %LINK-3-UPDOWN: Interface FastEthernet0/23, changed state to up
Oct 17 09:21:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/23, changed state to up
XYJ-C2960_9(config)#
XYJ-C2960_9(config)#service timestamps log datetime msec localtime show-timezone
XYJ-C2960_9(config)#service timestamps debug datetime msec localtime show-timezone
XYJ-C2960_9(config)#
Oct 17 17:25:40.481 BeiJing: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/23, changed state to down
Oct 17 17:25:42.494 BeiJing: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/23, changed state to up
XYJ-C2960_9#copy flash:c2960-lanbasek9-mz.150-2.SE8.bin ftp://ftp:@172.16.2.163
Address or name of remote host [172.16.2.163]?
Destination filename [c2960-lanbasek9-mz.150-2.SE8.bin]?
Writing c2960-lanbasek9-mz.150-2.SE8.bin
%Error opening ftp://*****@172.16.2.163/c2960-lanbasek9-mz.150-2.SE8.bin (Incorrect Login/Password) XYJ-C2960_9#copy flash:c2960-lanbasek9-mz.150-2.SE8.bin tftp:
Address or name of remote host []? 172.16.2.163
Destination filename [c2960-lanbasek9-mz.150-2.SE8.bin]?
!!.!.!.!!.!.!.....
%Error writing tftp://172.16.2.163/c2960-lanbasek9-mz.150-2.SE8.bin (Timed out)...
使用 yum 安装 vsftpd：
sudo yum install vsftpd
如果需要连接其他 FTP 服务器，则可以安装 FTP 客户端。
sudo yum install ftp 添加用户
adduser userftp
passwd userftp
禁止用户的 ssh 登录权限，只允许 FTP 访问:
usermod -s /sbin/nologin userftp 配置 VSFTP
打开配置文件：
sudo vi /etc/vsftpd/vsftpd.conf
关闭匿名访问：
anonymous_enable=NO
去掉 local_enable 的注释，修改为开启：
local_enable=YES
限制用户仅能访问自己的主目录：
chroot_local_user=YES
设置用户的主目录：(不设置时，默认为用户的家目录/home/userftp)
local_root=/data/test
重启服务：
sudo service vsftpd restart 设置开机自启动：
chkconfig vsftpd on
连接测试
ftp userftp@112.126.74.124
ftp> pwd
Remote directory: /home/userftp
ftp> quit
221 Goodbye.
XYJ-C2960_9#copy flash:c2960-lanbasek9-mz.150-2.SE8.bin ftp://imageup:!@#admin@172.16.1.1
Address or name of remote host [172.16.2.163]?
Destination filename [c2960-lanbasek9-mz.150-2.SE8.bin]?
Writing c2960-lanbasek9-mz.150-2.SE8.bin !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
11834846 bytes copied in 48.864 secs (242200 bytes/sec)
1: @DELL-PC[C:startups]|1> a = 'sdafasdfhjkj\r\nsadfasdf'
2: @DELL-PC[C:startups]|2> a
3: <2> 'sdafasdfhjkj\r\nsadfasdf'
4: @DELL-PC[C:startups]|3> print a
5: sdafasdfhjkj
6: sadfasdf
7: @DELL-PC[C:startups]|4> str(a)
8: <4> 'sdafasdfhjkj\r\nsadfasdf'
1: import sys
2: sys.module['__main__'].vars
1: 附：模块查找的顺序
2: sys.path 可以查看到
3: sys.path.append 可以增加搜索路径
4: 先是查找当前路径下
5: 再去查找lib目录
6: 最后是 site-packages
#将下面两行加入/etc/rc.local
ifconfig eth1 up
ifconfig eth1 promisc
BMPRU. Flag details are as follows:B flag is for broadcastM flag is for multicastP flag is for promisc modeR is for runningU is for up No local hosts can be found
--local-networks="10.0.0.0/24,172.16.0.0/16,192.168.0.0/16"
