From f7f9a408538de528dab97385ac847b26645e0c40 Mon Sep 17 00:00:00 2001 From: Cool-Y <1072916769@qq.com> Date: Mon, 22 Apr 2019 19:50:52 +0800 Subject: [PATCH] Site updated: 2019-04-22 19:50:36 --- 2000/01/01/hello-world/index.html | 2 +- .../BIBA访问控制模型实现(python)/index.html | 2 +- 2018/12/15/miio-control/index.html | 2 +- 2018/12/23/基于规则引擎发现IOT设备/index.html | 2 +- .../wifi半双工侧信道攻击学习笔记/index.html | 2 +- 2019/02/22/qq数据库的加密解密/index.html | 2 +- 2019/03/16/小米固件工具mkxqimage/index.html | 2 +- 2019/03/23/auto-send-WX/index.html | 2 +- 2019/03/25/Samba-CVE/index.html | 2 +- 2019/03/28/逆向工程实验/index.html | 2 +- 2019/04/15/Caving-db-storage/index.html | 2 +- 2019/04/21/XIAOMI-UPnP/index.html | 37 +++++++++++++------ about/index.html | 2 +- archives/2000/01/index.html | 2 +- archives/2000/index.html | 2 +- archives/2018/11/index.html | 2 +- archives/2018/12/index.html | 2 +- archives/2018/index.html | 2 +- archives/2019/01/index.html | 2 +- archives/2019/02/index.html | 2 +- archives/2019/03/index.html | 2 +- archives/2019/04/index.html | 2 +- archives/2019/index.html | 2 +- archives/index.html | 2 +- archives/page/2/index.html | 2 +- baidusitemap.xml | 2 +- bookmarks/index.html | 6 +-- categories/IOT/index.html | 2 +- categories/index.html | 2 +- categories/二进制/index.html | 2 +- categories/加密解密/index.html | 2 +- categories/杂七杂八/index.html | 2 +- categories/理论学习/index.html | 2 +- categories/顶会论文/index.html | 2 +- index.html | 6 +-- page/2/index.html | 2 +- search.xml | 2 +- sitemap.xml | 16 ++++---- tags/CVE/index.html | 2 +- tags/MiniUPnP/index.html | 2 +- tags/QQ/index.html | 2 +- tags/SSH/index.html | 2 +- tags/Samba/index.html | 2 +- tags/USENIX/index.html | 2 +- tags/index.html | 2 +- tags/itchat/index.html | 2 +- tags/miio/index.html | 2 +- tags/python/index.html | 2 +- tags/wifi/index.html | 2 +- tags/中间人/index.html | 2 +- tags/侧信道攻击/index.html | 2 +- tags/取证/index.html | 2 +- tags/复原文件/index.html | 2 +- tags/密码/index.html | 2 +- tags/小米/index.html | 2 +- tags/微信/index.html | 2 +- tags/数据库/index.html | 2 +- tags/数据挖掘/index.html | 2 +- tags/文件格式/index.html | 2 +- tags/模型实现/index.html | 2 +- tags/破解/index.html | 2 +- tags/自然语言处理/index.html | 2 +- tags/访问控制/index.html | 2 +- tags/路由器/index.html | 2 +- tags/远程执行/index.html | 2 +- tags/逆向/index.html | 2 +- tags/重放攻击/index.html | 2 +- 67 files changed, 103 insertions(+), 88 deletions(-) diff --git a/2000/01/01/hello-world/index.html b/2000/01/01/hello-world/index.html index e1ffdb5f..16e97292 100644 --- a/2000/01/01/hello-world/index.html +++ b/2000/01/01/hello-world/index.html @@ -651,7 +651,7 @@ - 20.4k + 21.5k diff --git a/2018/11/16/BIBA访问控制模型实现(python)/index.html b/2018/11/16/BIBA访问控制模型实现(python)/index.html index 732c98ef..3410ff5f 100644 --- a/2018/11/16/BIBA访问控制模型实现(python)/index.html +++ b/2018/11/16/BIBA访问控制模型实现(python)/index.html @@ -839,7 +839,7 @@ - 20.4k + 21.5k diff --git a/2018/12/15/miio-control/index.html b/2018/12/15/miio-control/index.html index e959914c..9faf6c29 100644 --- a/2018/12/15/miio-control/index.html +++ b/2018/12/15/miio-control/index.html @@ -741,7 +741,7 @@ - 20.4k + 21.5k diff --git a/2018/12/23/基于规则引擎发现IOT设备/index.html b/2018/12/23/基于规则引擎发现IOT设备/index.html index e148988c..6d46199f 100644 --- a/2018/12/23/基于规则引擎发现IOT设备/index.html +++ b/2018/12/23/基于规则引擎发现IOT设备/index.html @@ -741,7 +741,7 @@ - 20.4k + 21.5k diff --git a/2019/01/16/wifi半双工侧信道攻击学习笔记/index.html b/2019/01/16/wifi半双工侧信道攻击学习笔记/index.html index 61f85dec..f0151bf6 100644 --- a/2019/01/16/wifi半双工侧信道攻击学习笔记/index.html +++ b/2019/01/16/wifi半双工侧信道攻击学习笔记/index.html @@ -869,7 +869,7 @@ Server -------wire----------| - 20.4k + 21.5k diff --git a/2019/02/22/qq数据库的加密解密/index.html b/2019/02/22/qq数据库的加密解密/index.html index 0e963354..6c18f962 100644 --- a/2019/02/22/qq数据库的加密解密/index.html +++ b/2019/02/22/qq数据库的加密解密/index.html @@ -718,7 +718,7 @@ - 20.4k + 21.5k diff --git a/2019/03/16/小米固件工具mkxqimage/index.html b/2019/03/16/小米固件工具mkxqimage/index.html index 89a43fa7..a327e9fa 100644 --- a/2019/03/16/小米固件工具mkxqimage/index.html +++ b/2019/03/16/小米固件工具mkxqimage/index.html @@ -725,7 +725,7 @@ - 20.4k + 21.5k diff --git a/2019/03/23/auto-send-WX/index.html b/2019/03/23/auto-send-WX/index.html index fb657547..f84f833d 100644 --- a/2019/03/23/auto-send-WX/index.html +++ b/2019/03/23/auto-send-WX/index.html @@ -735,7 +735,7 @@ - 20.4k + 21.5k diff --git a/2019/03/25/Samba-CVE/index.html b/2019/03/25/Samba-CVE/index.html index 189098e3..31f02ebd 100644 --- a/2019/03/25/Samba-CVE/index.html +++ b/2019/03/25/Samba-CVE/index.html @@ -760,7 +760,7 @@ - 20.4k + 21.5k diff --git a/2019/03/28/逆向工程实验/index.html b/2019/03/28/逆向工程实验/index.html index c1ce5293..67148233 100644 --- a/2019/03/28/逆向工程实验/index.html +++ b/2019/03/28/逆向工程实验/index.html @@ -849,7 +849,7 @@ - 20.4k + 21.5k diff --git a/2019/04/15/Caving-db-storage/index.html b/2019/04/15/Caving-db-storage/index.html index d2542b99..23ad792f 100644 --- a/2019/04/15/Caving-db-storage/index.html +++ b/2019/04/15/Caving-db-storage/index.html @@ -784,7 +784,7 @@ - 20.4k + 21.5k diff --git a/2019/04/21/XIAOMI-UPnP/index.html b/2019/04/21/XIAOMI-UPnP/index.html index 16eec98e..8be5a52f 100644 --- a/2019/04/21/XIAOMI-UPnP/index.html +++ b/2019/04/21/XIAOMI-UPnP/index.html @@ -105,7 +105,8 @@ - + + @@ -426,7 +427,7 @@ - 4k 字 + 5.1k 字 @@ -440,7 +441,7 @@ - 15 分钟 + 21 分钟 @@ -595,25 +596,39 @@
  • 模糊测试
    Burp – http://portswigger.net/burp/
    WSFuzzer – https://www.owasp.org/index.php/Category:OWASP_WSFuzzer_Project
    Miranda – http://code.google.com/p/miranda-upnp/

    • 对小米WIFI路由器的UPnP分析

    使用工具扫描

      -
    1. 使用Metasploit检查
      1
      2
      3
      4
      5
      6
      7
      8
      9
      10
      msfconsole
      msf5 > use auxiliary/scanner/upnp/ssdp_msearch
      msf5 auxiliary(scanner/upnp/ssdp_msearch) > set RHOSTS 192.168.31.0/24
      RHOSTS => 192.168.31.0/24
      msf5 auxiliary(scanner/upnp/ssdp_msearch) > run

      [*] Sending UPnP SSDP probes to 192.168.31.0->192.168.31.255 (256 hosts)
      [*] 192.168.31.1:1900 SSDP MiWiFi/x UPnP/1.1 MiniUPnPd/2.0 | http://192.168.31.1:5351/rootDesc.xml | uuid:f3539dd5-8dc5-420c-9070-c6f66d27fc8c::upnp:rootdevice
      [*] Scanned 256 of 256 hosts (100% complete)
      [*] Auxiliary module execution completed
      -
      2. +
    2. 使用Metasploit检查
    +
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    msfconsole
    msf5 > use auxiliary/scanner/upnp/ssdp_msearch
    msf5 auxiliary(scanner/upnp/ssdp_msearch) > set RHOSTS 192.168.31.0/24
    RHOSTS => 192.168.31.0/24
    msf5 auxiliary(scanner/upnp/ssdp_msearch) > run

    [*] Sending UPnP SSDP probes to 192.168.31.0->192.168.31.255 (256 hosts)
    [*] 192.168.31.1:1900 SSDP MiWiFi/x UPnP/1.1 MiniUPnPd/2.0 | http://192.168.31.1:5351/rootDesc.xml | uuid:f3539dd5-8dc5-420c-9070-c6f66d27fc8c::upnp:rootdevice
    [*] Scanned 256 of 256 hosts (100% complete)
    [*] Auxiliary module execution completed

    从中可以得到这些信息：

      -
    1. 使用nmap进行扫描
      1
      2
      3
      4
      5
      nmap -p1900，5351 192.168.31.1

      PORT     STATE    SERVICE
      1900/tcp filtered upnp
      5351/tcp open     nat-pmp
      -
      2. +
    2. 使用nmap进行扫描
    +
    1
    2
    3
    4
    5
    nmap -p1900，5351 192.168.31.1

    PORT     STATE    SERVICE
    1900/tcp filtered upnp
    5351/tcp open     nat-pmp

    nat-pmp
    NAT端口映射协议（英语：NAT Port Mapping Protocol，缩写NAT-PMP）是一个能自动创建网络地址转换（NAT）设置和端口映射配置而无需用户介入的网络协议。该协议能自动测定NAT网关的外部IPv4地址，并为应用程序提供与对等端交流通信的方法。NAT-PMP于2005年由苹果公司推出，为更常见的ISO标准互联网网关设备协议（被许多NAT路由器实现）的一个替代品。该协议由互联网工程任务组（IETF）在RFC 6886中发布。
    NAT-PMP使用用户数据报协议（UDP），在5351端口运行。该协议没有内置的身份验证机制，因为转发一个端口通常不允许任何活动，也不能用STUN方法实现。NAT-PMP相比STUN的好处是它不需要STUN服务器，并且NAT-PMP映射有一个已知的过期时间，应用可以避免低效地发送保活数据包。
    NAT-PMP是端口控制协议（PCP）的前身。
    2014年10月，Rapid7安全研究员Jon Hart公布，因厂商对NAT-PMP协议设计不当，估计公网上有1200万台网络设备受到NAT-PMP漏洞的影响。NAT-PMP协议的规范中特别指明，NAT网关不能接受来自外网的地址映射请求，但一些厂商的设计并未遵守此规定。黑客可能对这些设备进行恶意的端口映射，进行流量反弹、代理等攻击。

      -
    1. netstat扫描
      1
      2
      3
      4
      Proto Recv-Q Send-Q Local Address         Foreign Address    State    in out PID/Program name
      tcp   0      0      :::5351               :::*               LISTEN   0 0 18068/miniupnpd
      udp   0      0      192.168.31.1:5351     0.0.0.0:*          0        0 18068/miniupnpd
      udp   0      0      0.0.0.0:1900          0.0.0.0:*          1414113  1827652 18068/miniupnpd
      -
      2. +
    2. netstat扫描
    +
    1
    2
    3
    4
    Proto Recv-Q Send-Q Local Address         Foreign Address    State    in out PID/Program name
    tcp   0      0      :::5351               :::*               LISTEN   0 0 18068/miniupnpd
    udp   0      0      192.168.31.1:5351     0.0.0.0:*          0        0 18068/miniupnpd
    udp   0      0      0.0.0.0:1900          0.0.0.0:*          1414113  1827652 18068/miniupnpd

    端口1900在UPnP发现的过程中使用，5351通常为端口映射协议NAT-PMP运行的端口

    -

    浏览配置文件

    SmartController

    messagingagent

    +
      +
    1. miranda
      2. +
    +
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    89
    90
    91
    92
    93
    94
    95
    96
    97
    98
    99
    100
    101
    102
    103
    104
    105
    106
    107
    108
    109
    110
    111
    112
    113
    114
    115
    116
    117
    118
    119
    120
    121
    122
    123
    124
    125
    126
    127
    128
    129
    130
    131
    132
    133
    134
    135
    136
    137
    138
    139
    140
    141
    142
    143
    144
    sudo python2 miranda.py -i wlx44334c388fbd -v

    Miranda v1.3
    The interactive UPnP client
    Craig Heffner, http://www.devttys0.com


    Binding to interface wlx44334c388fbd ...

    Verbose mode enabled!
    upnp> msearch

    Entering discovery mode for 'upnp:rootdevice', Ctl+C to stop...

    ****************************************************************
    SSDP reply message from 192.168.31.1:5351
    XML file is located at http://192.168.31.1:5351/rootDesc.xml
    Device is running MiWiFi/x UPnP/1.1 MiniUPnPd/2.0
    ****************************************************************

    upnp> host get 0

    Requesting device and service info for 192.168.31.1:5351 (this could take a few seconds)...

    Device urn:schemas-upnp-org:device:WANDevice:1 does not have a presentationURL
    Device urn:schemas-upnp-org:device:WANConnectionDevice:1 does not have a presentationURL
    Host data enumeration complete!

    upnp> host list

    	[0] 192.168.31.1:5351

    upnp> host info 0

    xmlFile : http://192.168.31.1:5351/rootDesc.xml
    name : 192.168.31.1:5351
    proto : http://
    serverType : MiWiFi/x UPnP/1.1 MiniUPnPd/2.0
    upnpServer : MiWiFi/x UPnP/1.1 MiniUPnPd/2.0
    dataComplete : True
    deviceList : {}

    upnp> host info 0 deviceList

    InternetGatewayDevice : {}
    WANDevice : {}
    WANConnectionDevice : {}

    upnp> host info 0 deviceList WANConnectionDevice

      manufacturerURL : http://miniupnp.free.fr/
      modelName : MiniUPnPd
      UPC : 000000000000
      modelNumber : 20180830
      friendlyName : WANConnectionDevice
      fullName : urn:schemas-upnp-org:device:WANConnectionDevice:1
      modelDescription : MiniUPnP daemon
      UDN : uuid:f3539dd5-8dc5-420c-9070-c6f66d27fc8e
      modelURL : http://miniupnp.free.fr/
      manufacturer : MiniUPnP
      services : {}

    upnp> host info 0 deviceList WANConnectionDevice services WANIPConnection

        eventSubURL : /evt/IPConn
        controlURL : /ctl/IPConn
        serviceId : urn:upnp-org:serviceId:WANIPConn1
        SCPDURL : /WANIPCn.xml
        fullName : urn:schemas-upnp-org:service:WANIPConnection:1
        actions : {}
        serviceStateVariables : {}

    upnp> host info 0 deviceList WANConnectionDevice services WANIPConnection actions

          AddPortMapping : {}
          GetNATRSIPStatus : {}
          GetGenericPortMappingEntry : {}
          GetSpecificPortMappingEntry : {}
          ForceTermination : {}
          GetExternalIPAddress : {}
          GetConnectionTypeInfo : {}
          GetStatusInfo : {}
          SetConnectionType : {}
          DeletePortMapping : {}
          RequestConnection : {}

    upnp> host info 0 deviceList WANConnectionDevice services WANIPConnection serviceStateVariables

            InternalClient : {}
            Uptime : {}
            PortMappingLeaseDuration : {}
            PortMappingDescription : {}
            RemoteHost : {}
            PossibleConnectionTypes : {}
            ExternalPort : {}
            RSIPAvailable : {}
            ConnectionStatus : {}
            PortMappingNumberOfEntries : {}
            ExternalIPAddress : {}
            ConnectionType : {}
            NATEnabled : {}
            LastConnectionError : {}
            InternalPort : {}
            PortMappingProtocol : {}
            PortMappingEnabled : {}

    upnp> host summary 0

              Host: 192.168.31.1:5351
              XML File: http://192.168.31.1:5351/rootDesc.xml
              InternetGatewayDevice
              	manufacturerURL: http://www.mi.com
              	modelName: MiWiFi Router
              	UPC: 000000000000
              	modelNumber: 20180830
              	presentationURL: http://miwifi.com/
              	friendlyName: MiWiFi router
              	fullName: urn:schemas-upnp-org:device:InternetGatewayDevice:1
              	modelDescription: MiWiFi Router
              	UDN: uuid:f3539dd5-8dc5-420c-9070-c6f66d27fc8c
              	modelURL: http://www1.miwifi.com
              	manufacturer: Xiaomi
              WANDevice
              	manufacturerURL: http://miniupnp.free.fr/
              	modelName: WAN Device
              	UPC: 000000000000
              	modelNumber: 20180830
              	friendlyName: WANDevice
              	fullName: urn:schemas-upnp-org:device:WANDevice:1
              	modelDescription: WAN Device
              	UDN: uuid:f3539dd5-8dc5-420c-9070-c6f66d27fc8d
              	modelURL: http://miniupnp.free.fr/
              	manufacturer: MiniUPnP
              WANConnectionDevice
              	manufacturerURL: http://miniupnp.free.fr/
              	modelName: MiniUPnPd
              	UPC: 000000000000
              	modelNumber: 20180830
              	friendlyName: WANConnectionDevice
              	fullName: urn:schemas-upnp-org:device:WANConnectionDevice:1
              	modelDescription: MiniUPnP daemon
              	UDN: uuid:f3539dd5-8dc5-420c-9070-c6f66d27fc8e
              	modelURL: http://miniupnp.free.fr/
              	manufacturer: MiniUPnP
    + +
    1
    2
    3
    upnp> host send 0 WANConnectionDevice WANIPConnection GetExternalIPAddress

    NewExternalIPAddress : 172.16.173.231
    +

    增加一个端口映射，将路由器上端口为1900的服务映射到外网端口8080

    +
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    upnp> host send 0 WANConnectionDevice WANIPConnection AddPortMapping

    Required argument:
    	Argument Name:  NewPortMappingDescription
    	Data Type:      string
    	Allowed Values: []
    	Set NewPortMappingDescription value to: HACK

    Required argument:
    	Argument Name:  NewLeaseDuration
    	Data Type:      ui4
    	Allowed Values: []
    	Value Min:      0
    	Value Max:      604800
    	Set NewLeaseDuration value to: 0

    Required argument:
    	Argument Name:  NewInternalClient
    	Data Type:      string
    	Allowed Values: []
    	Set NewInternalClient value to: 192.168.31.1

    Required argument:
    	Argument Name:  NewEnabled
    	Data Type:      boolean
    	Allowed Values: []
    	Set NewEnabled value to: 1

    Required argument:
    	Argument Name:  NewExternalPort
    	Data Type:      ui2
    	Allowed Values: []
    	Set NewExternalPort value to: 8080

    Required argument:
    	Argument Name:  NewRemoteHost
    	Data Type:      string
    	Allowed Values: []
    	Set NewRemoteHost value to:

    Required argument:
    	Argument Name:  NewProtocol
    	Data Type:      string
    	Allowed Values: ['TCP', 'UDP']
    	Set NewProtocol value to: TCP

    Required argument:
    	Argument Name:  NewInternalPort
    	Data Type:      ui2
    	Allowed Values: []
    	Value Min:      1
    	Value Max:      65535
    	Set NewInternalPort value to: 1900
    +
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    upnp> host send 0 WANConnectionDevice WANIPConnection GetSpecificPortMappingEntry

      Required argument:
      	Argument Name:  NewExternalPort
      	Data Type:      ui2
      	Allowed Values: []
      	Set NewExternalPort value to: 8080

      Required argument:
      	Argument Name:  NewRemoteHost
      	Data Type:      string
      	Allowed Values: []
      	Set NewRemoteHost value to:

      Required argument:
      	Argument Name:  NewProtocol
      	Data Type:      string
      	Allowed Values: ['TCP', 'UDP']
      	Set NewProtocol value to: TCP

      NewPortMappingDescription : HACK
      NewLeaseDuration : 0
      NewInternalClient : 192.168.31.1
      NewEnabled : 1
      NewInternalPort : 1900
    +

    可以无需验证地删除映射

    1
    upnp> host send 0 WANConnectionDevice WANIPConnection DeletePortMapping

    +


    虽然UPnP是一种很少理解的协议，但它在绝大多数家庭网络上都很活跃，甚至在某些公司网络上也是如此。许多设备支持UPnP以便于消费者使用，但是，它们通常支持不允许任何服务自动执行的操作，尤其是未经授权的情况下。更糟糕的是，协议实现本身很少以安全思维构建，使其可以进一步利用。
    防止本地/远程利用UPnP的最佳方法是在任何/所有网络设备上禁用该功能。然而，考虑到这个协议和其他“自动魔术”协议旨在帮助懒惰的用户，他们可能不知道这些协议的危险，唯一真正的解决方案是让供应商更加关注他们的设计和实施，并且更加安全。

    +

    浏览配置文件

    root@XiaoQiang:/# find -name upnp
    ./etc/rc.d/S95miniupnpd
    ./etc/init.d/miniupnpd
    ./etc/hotplug.d/iface/50-miniupnpd
    ./etc/config/upnpd
    ./tmp/upnp.leases
    ./tmp/etc/miniupnpd.conf
    ./tmp/run/miniupnpd.pid
    ./usr/lib/lua/luci/view/web/setting/upnp.htm
    ./usr/sbin/miniupnpd
    ./usr/share/miniupnpd
    ./www/xiaoqiang/web/css/upnp.css
    ./data/etc/rc.d/S95miniupnpd
    ./data/etc/init.d/miniupnpd
    ./data/etc/hotplug.d/iface/50-miniupnpd
    ./data/etc/config/upnpd

    +

    SmartController

    messagingagent

    @@ -879,7 +894,7 @@ - 20.4k + 21.5k diff --git a/about/index.html b/about/index.html index f7999dc1..388f656e 100644 --- a/about/index.html +++ b/about/index.html @@ -460,7 +460,7 @@ - 20.4k + 21.5k diff --git a/archives/2000/01/index.html b/archives/2000/01/index.html index 30ebc8a7..f189275f 100644 --- a/archives/2000/01/index.html +++ b/archives/2000/01/index.html @@ -490,7 +490,7 @@ - 20.4k + 21.5k diff --git a/archives/2000/index.html b/archives/2000/index.html index de9983fe..9cace67d 100644 --- a/archives/2000/index.html +++ b/archives/2000/index.html @@ -490,7 +490,7 @@ - 20.4k + 21.5k diff --git a/archives/2018/11/index.html b/archives/2018/11/index.html index 0588db7f..9ede4984 100644 --- a/archives/2018/11/index.html +++ b/archives/2018/11/index.html @@ -490,7 +490,7 @@ - 20.4k + 21.5k diff --git a/archives/2018/12/index.html b/archives/2018/12/index.html index d615163f..8fc441f8 100644 --- a/archives/2018/12/index.html +++ b/archives/2018/12/index.html @@ -525,7 +525,7 @@ - 20.4k + 21.5k diff --git a/archives/2018/index.html b/archives/2018/index.html index dbef66f8..e16a0f8a 100644 --- a/archives/2018/index.html +++ b/archives/2018/index.html @@ -560,7 +560,7 @@ - 20.4k + 21.5k diff --git a/archives/2019/01/index.html b/archives/2019/01/index.html index 0f015978..96e68d39 100644 --- a/archives/2019/01/index.html +++ b/archives/2019/01/index.html @@ -490,7 +490,7 @@ - 20.4k + 21.5k diff --git a/archives/2019/02/index.html b/archives/2019/02/index.html index 3c35e535..4ce16cfd 100644 --- a/archives/2019/02/index.html +++ b/archives/2019/02/index.html @@ -490,7 +490,7 @@ - 20.4k + 21.5k diff --git a/archives/2019/03/index.html b/archives/2019/03/index.html index 91236635..49034fa6 100644 --- a/archives/2019/03/index.html +++ b/archives/2019/03/index.html @@ -595,7 +595,7 @@ - 20.4k + 21.5k diff --git a/archives/2019/04/index.html b/archives/2019/04/index.html index fc1bfe90..21214b28 100644 --- a/archives/2019/04/index.html +++ b/archives/2019/04/index.html @@ -525,7 +525,7 @@ - 20.4k + 21.5k diff --git a/archives/2019/index.html b/archives/2019/index.html index e3fa8924..c7cc2ed3 100644 --- a/archives/2019/index.html +++ b/archives/2019/index.html @@ -735,7 +735,7 @@ - 20.4k + 21.5k diff --git a/archives/index.html b/archives/index.html index 6ea92d29..4507cecc 100644 --- a/archives/index.html +++ b/archives/index.html @@ -814,7 +814,7 @@ - 20.4k + 21.5k diff --git a/archives/page/2/index.html b/archives/page/2/index.html index 9f67a918..66be3ee2 100644 --- a/archives/page/2/index.html +++ b/archives/page/2/index.html @@ -534,7 +534,7 @@ - 20.4k + 21.5k diff --git a/baidusitemap.xml b/baidusitemap.xml index 4da87759..e6ad2824 100644 --- a/baidusitemap.xml +++ b/baidusitemap.xml @@ -2,7 +2,7 @@ https://cool-y.github.io/2019/04/21/XIAOMI-UPnP/ - 2019-04-21 + 2019-04-22 https://cool-y.github.io/2019/04/15/Caving-db-storage/ 2019-04-15 diff --git a/bookmarks/index.html b/bookmarks/index.html index 2ca30fd9..139cc2de 100644 --- a/bookmarks/index.html +++ b/bookmarks/index.html @@ -86,7 +86,7 @@ - + @@ -330,7 +330,7 @@

    codeforces  leetcode

    工具

    -

    mitmproxy  msfvenom  shellphish

    +

    mitmproxy  msfvenom  shellphish  KALItools

    资源下载

    Emoji表情  Apk镜像

    @@ -512,7 +512,7 @@ - 20.4k + 21.5k diff --git a/categories/IOT/index.html b/categories/IOT/index.html index 0f62b88f..aad87385 100644 --- a/categories/IOT/index.html +++ b/categories/IOT/index.html @@ -549,7 +549,7 @@ - 20.4k + 21.5k diff --git a/categories/index.html b/categories/index.html index 6a5683c3..093caaa7 100644 --- a/categories/index.html +++ b/categories/index.html @@ -462,7 +462,7 @@ - 20.4k + 21.5k diff --git a/categories/二进制/index.html b/categories/二进制/index.html index 815e52f4..9fb49f7b 100644 --- a/categories/二进制/index.html +++ b/categories/二进制/index.html @@ -471,7 +471,7 @@ - 20.4k + 21.5k diff --git a/categories/加密解密/index.html b/categories/加密解密/index.html index 40fb48b2..4b6a8aa4 100644 --- a/categories/加密解密/index.html +++ b/categories/加密解密/index.html @@ -471,7 +471,7 @@ - 20.4k + 21.5k diff --git a/categories/杂七杂八/index.html b/categories/杂七杂八/index.html index e49b3241..0a2a053d 100644 --- a/categories/杂七杂八/index.html +++ b/categories/杂七杂八/index.html @@ -471,7 +471,7 @@ - 20.4k + 21.5k diff --git a/categories/理论学习/index.html b/categories/理论学习/index.html index 649d5c36..1d7c13cb 100644 --- a/categories/理论学习/index.html +++ b/categories/理论学习/index.html @@ -471,7 +471,7 @@ - 20.4k + 21.5k diff --git a/categories/顶会论文/index.html b/categories/顶会论文/index.html index 3ab2c69c..478ac650 100644 --- a/categories/顶会论文/index.html +++ b/categories/顶会论文/index.html @@ -523,7 +523,7 @@ - 20.4k + 21.5k diff --git a/index.html b/index.html index 6b8bdc86..424cb635 100644 --- a/index.html +++ b/index.html @@ -395,7 +395,7 @@ - 4k 字 + 5.1k 字 @@ -409,7 +409,7 @@ - 15 分钟 + 21 分钟 @@ -2345,7 +2345,7 @@ ettercap嗅探智能设备和网关之间的流量sudo ettercap -i ens33 -T -q - 20.4k + 21.5k diff --git a/page/2/index.html b/page/2/index.html index 2aabad42..6e6aaee5 100644 --- a/page/2/index.html +++ b/page/2/index.html @@ -792,7 +792,7 @@ - 20.4k + 21.5k diff --git a/search.xml b/search.xml index 7a5f25bd..c49a1383 100644 --- a/search.xml +++ b/search.xml @@ -3,7 +3,7 @@ <![CDATA[小米路由器_MiniUPnP协议]]> %2F2019%2F04%2F21%2FXIAOMI-UPnP%2F - + IOT diff --git a/sitemap.xml b/sitemap.xml index 9117f169..c13488b2 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -4,7 +4,14 @@ https://cool-y.github.io/2019/04/21/XIAOMI-UPnP/ - 2019-04-21T07:10:31.297Z + 2019-04-22T11:49:50.684Z + + + + + https://cool-y.github.io/bookmarks/index.html + + 2019-04-22T11:30:25.896Z @@ -36,13 +43,6 @@ - - https://cool-y.github.io/bookmarks/index.html - - 2019-04-15T07:35:38.084Z - - - https://cool-y.github.io/baidu_verify_4WtqA1rZRc.html diff --git a/tags/CVE/index.html b/tags/CVE/index.html index c16b3d69..2342fbdf 100644 --- a/tags/CVE/index.html +++ b/tags/CVE/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/MiniUPnP/index.html b/tags/MiniUPnP/index.html index 7157a63f..de306866 100644 --- a/tags/MiniUPnP/index.html +++ b/tags/MiniUPnP/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/QQ/index.html b/tags/QQ/index.html index 3f48d4c1..47fcbbcc 100644 --- a/tags/QQ/index.html +++ b/tags/QQ/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/SSH/index.html b/tags/SSH/index.html index f902f6e9..6d8d2786 100644 --- a/tags/SSH/index.html +++ b/tags/SSH/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/Samba/index.html b/tags/Samba/index.html index de68b9e3..da150c21 100644 --- a/tags/Samba/index.html +++ b/tags/Samba/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/USENIX/index.html b/tags/USENIX/index.html index e44dc8ea..322e0be2 100644 --- a/tags/USENIX/index.html +++ b/tags/USENIX/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/index.html b/tags/index.html index c053f28a..8398f0ce 100644 --- a/tags/index.html +++ b/tags/index.html @@ -462,7 +462,7 @@ - 20.4k + 21.5k diff --git a/tags/itchat/index.html b/tags/itchat/index.html index 8c41836b..eef7401f 100644 --- a/tags/itchat/index.html +++ b/tags/itchat/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/miio/index.html b/tags/miio/index.html index 66d5881b..614d7af5 100644 --- a/tags/miio/index.html +++ b/tags/miio/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/python/index.html b/tags/python/index.html index 65b38936..e13e14a1 100644 --- a/tags/python/index.html +++ b/tags/python/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/wifi/index.html b/tags/wifi/index.html index c225d39e..bd7806e0 100644 --- a/tags/wifi/index.html +++ b/tags/wifi/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/中间人/index.html b/tags/中间人/index.html index 6aa048fa..e3a1c547 100644 --- a/tags/中间人/index.html +++ b/tags/中间人/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/侧信道攻击/index.html b/tags/侧信道攻击/index.html index 813aca7d..2be400a3 100644 --- a/tags/侧信道攻击/index.html +++ b/tags/侧信道攻击/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/取证/index.html b/tags/取证/index.html index 96bea006..66ff0cbe 100644 --- a/tags/取证/index.html +++ b/tags/取证/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/复原文件/index.html b/tags/复原文件/index.html index 1fcd3c05..8657ef2b 100644 --- a/tags/复原文件/index.html +++ b/tags/复原文件/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/密码/index.html b/tags/密码/index.html index f971d6af..61be7fcb 100644 --- a/tags/密码/index.html +++ b/tags/密码/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/小米/index.html b/tags/小米/index.html index 860b2d13..f5ec2a67 100644 --- a/tags/小米/index.html +++ b/tags/小米/index.html @@ -522,7 +522,7 @@ - 20.4k + 21.5k diff --git a/tags/微信/index.html b/tags/微信/index.html index fe47694f..260efc11 100644 --- a/tags/微信/index.html +++ b/tags/微信/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/数据库/index.html b/tags/数据库/index.html index 1a6f4870..c1417558 100644 --- a/tags/数据库/index.html +++ b/tags/数据库/index.html @@ -496,7 +496,7 @@ - 20.4k + 21.5k diff --git a/tags/数据挖掘/index.html b/tags/数据挖掘/index.html index 22c20da8..9e0397ba 100644 --- a/tags/数据挖掘/index.html +++ b/tags/数据挖掘/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/文件格式/index.html b/tags/文件格式/index.html index 63c69152..fae58d8d 100644 --- a/tags/文件格式/index.html +++ b/tags/文件格式/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/模型实现/index.html b/tags/模型实现/index.html index 7b1686b0..7f42d72f 100644 --- a/tags/模型实现/index.html +++ b/tags/模型实现/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/破解/index.html b/tags/破解/index.html index 06260362..6243e822 100644 --- a/tags/破解/index.html +++ b/tags/破解/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/自然语言处理/index.html b/tags/自然语言处理/index.html index d405a95d..4176ef46 100644 --- a/tags/自然语言处理/index.html +++ b/tags/自然语言处理/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/访问控制/index.html b/tags/访问控制/index.html index 2be6270a..8027e2ad 100644 --- a/tags/访问控制/index.html +++ b/tags/访问控制/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/路由器/index.html b/tags/路由器/index.html index 56713b05..12015510 100644 --- a/tags/路由器/index.html +++ b/tags/路由器/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/远程执行/index.html b/tags/远程执行/index.html index d276e861..652e0647 100644 --- a/tags/远程执行/index.html +++ b/tags/远程执行/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/逆向/index.html b/tags/逆向/index.html index 5a560935..9ac190eb 100644 --- a/tags/逆向/index.html +++ b/tags/逆向/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k diff --git a/tags/重放攻击/index.html b/tags/重放攻击/index.html index 8a0e733d..9abaee3c 100644 --- a/tags/重放攻击/index.html +++ b/tags/重放攻击/index.html @@ -470,7 +470,7 @@ - 20.4k + 21.5k