wcc526

CSS Convention

• 一律使用 SCSS 撰寫 CSS
• CSS 裡用到的圖片放在 assets/stylesheets/images
• 站上的圖片如 logo.png、search.png 放在 assets/images 下
• 永遠不會改的靜態檔案如 robots.txt、favicon.ico 放在 public/ 下
• 太大的圖片也放在 public/ 下

wcc526

scss

sass --watch style.scss:style.css --style expanded
sass --watch style.scss:style.css --style compressed

wcc526

缓存

强制刷新的话,会在请求头部添加

Pragma:no-cache 和 Cache-Control:no-cache 字段

Last-Modified

表示资源的最后修改时间,浏览器在请求的时候会在请求头中添加一个 If-Modified-Since 字段,查询是否是最新的，如果是返回304

wcc526

常见 workflow

assets

• icons
• logos
• stock

html

wcc526

IE

<img ... title=""onerror="alert(1)">
<img ... title=``onerror=`alert(1)`>

wcc526

#!/usr/bin/env python

'''
Blind SQL injection Python shell

BSIShell is a simple python script that permits blind SQL injection.

by Rodrigo Marcos

'''

wcc526

description = [[ Attempt to get App ]]

author = "wcc526 <949409306@qq.com>"
license = "Same as Nmap"
categoriese = {"default","discovery","safe"}

local shortport = require "shortport"
local http = require "http"

portrule = shortport.port_or_service({80,8081},{"http"})

wcc526

-- The Head Section --
-- https://thesprawl.org/research/writing-nse-scripts-for-vulnerability-scanning/
description = [[Sample script to detect a fictional vulnerability
in a fictional ArcticFission 1.0 web server]]

---
-- @usage
-- nmap --script http-vuln-check <target>
-- @output
-- PORT   STATE SERVICE

wcc526

1. alpha release

   example 1.2a1
   unstable missing features 
2. beta release 

   example 2.3.1b2
   feature complete still buggy
   
3. release candidate 

wcc526

sysbench --test=cpu --cpu-max-prime=20000 run

sysbench --test=fileio --num-threads=16 --file-rw-ratio=5 \
--file-total-size=300M --file-test-mode=rndrw prepare

sysbench --test=fileio --num-threads=16 --file-rw-ratio=5 \
--file-total-size=300M --file-test-mode=rndrw run

sysbench --test=memory --num-threads=16 \
--memory-block-size=8192 --memory-total-size=1G run