Owasp juice shop(二) 靶场难度 ⭐

Bonus Payload(有效载荷)

描述：在 DOM XSS 挑战中使用奖励支付load。
payload：复制代码到搜索框中即可。
DOM XSS

描述：基于DOM型的XSS攻击
payload：
</code></pre><p><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/2675603028.png"></p><h3>机密文件</h3><p>描述：查阅机密文件<br />我们点击关于我们，发现有个超链接。点击超链接并在burp中抓包。<br /><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/4235692897.png"></p><p><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/3349995331.png"><br />修改<code>ftp</code>前面的内容。可以看到如下文件信息。<br />依次点击阅读，这关也就通过了。<br /><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/1596173694.png"></p><h3>Bully Chatbot</h3><p>这关就很简单了，意思是和机器人聊天，获得优惠卷，当聊条内容含有<code>code</code>时，机器人会发你优惠卷。<br /><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/667407355.png"></p><h3>Exposed Metrics</h3><p>描述：找出后端服务使用常见监测软件获得的服务器数据<br />通过访问官网中的文档可查阅到默认的后端入口地址（<code>localhost:3000/metrics</code>）。</p><h3>Missing Encoding</h3><p>描述：检索Bjoern猫"乱斗模式"的照片。<br />点击照片墙，发现一个图片没有加载出来，对图片审查元素发现图片的url为<code><img _ngcontent-utp-c241="" class="image" src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt=" #zatschi #whoneedsfourlegs"style=""data-original="assets/public/images/uploads/-#zatschi-#whoneedsfourlegs-1572600969477.jpg"></code><br />这里图片没有被解析出来，因为URL中包含了特殊的符合需要进行一个转换，就会导致一些异常，这里把url中的 <code>#</code> 改成 <code>%23</code> 即可。</p><h3>Outdated Allowlist</h3><p>在js文件中搜索关键词<code>redirect?</code><br /><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/2971715726.png"><br />访问url即可。</p><h3>Repetitive Registration</h3><p>点击注册页面，审查元素按钮,将<code>disabled="true"</code>删除即可。这时我们只输入用户名，其他为空，便可以直接注册。<br /><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/2716807369.png"></p><h3>Zero Stars</h3><p>点击客户反馈页面，对按钮审查元素，去掉<code>disabled="true"</code><br />这时我们只需要输入验证码就可以提交了。<br /><img src="https://ioku.net/usr/themes/handsome/assets/img/loading.svg" alt="" title="" style="" class="aligncenter"style=""data-original="https://blog.bbskali.cn/usr/uploads/2022/07/356535972.png"></p><p><hr class="content-copyright" style="margin-top:50px"></p><div class="post-copyright" style="font-style:normal"><p class="iconfont-copyright"><i class="glyphicon glyphicon-copyright-mark"></i></p><p class="content-copyright">版权属于：逍遥子大表哥</p><p class="content-copyright">本文链接：https://blog.bbskali.cn/3444.html</p><p class="content-copyright">按照知识共享署名-非商业性使用 4.0 国际协议进行许可，转载引用文章应遵循相同协议。</p></div></div>

                              <!--文章页脚的广告位-->
                 <script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3761913540192241"
     crossorigin="anonymous"></script>
<!-- 首页列表最前方广告位 -->
<ins class="adsbygoogle"
     style="display:block"
     data-ad-client="ca-pub-3761913540192241"
     data-ad-slot="8392922618"
     data-ad-format="auto"
     data-full-width-responsive="true"></ins>
<script>
     (adsbygoogle = window.adsbygoogle || []).push({});
</script>                          <!--文章的页脚部件：打赏和其他信息的输出-->
             <div class="show-foot"><div class="notebook" data-toggle="tooltip" data-original-title="2023 年 08 月 04 日 07 : 46  PM">
                     <i class="fontello fontello-clock-o"></i>
                     <span>最后修改：2023 年 08 月 04 日</span>
                 </div><div class="copyright" data-toggle="tooltip" data-html="true" data-original-title="转载请保留本文转载地址，著作权归作者所有"><span>© 允许规范转载</span>
                 </div>
             </div>
                         <!--打赏模块-->
             <div class="support-author">
                 <button id="support_author"  data-toggle="modal" data-target="#myModal" class="box-shadow-wrap-lg btn_post_footer btn btn-pay btn-yellow btn-rounded"><svg fill="none" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg" class="icon" aria-hidden="true"><path d="M10.084 7.606c3.375-1.65 7.65-1.154 10.493 1.487 3.497 3.25 3.497 8.519 0 11.77-3.498 3.25-9.167 3.25-12.665 0-.897-.834-2.488-2.96-2.488-5.085" stroke="currentColor" stroke-width="1.4" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M17.392 14.78s1.532-1.318-.053-2.79c-1.585-1.473-3.17-.404-3.719.403-.549.807.495 2.082.93 2.69.434.61 1.364 2.182-.054 3.202-1.417 1.012-3.002.658-4.153-.708-1.15-1.367-.602-3.365 0-3.924M17.338 11.982l1.159-1.076M9.87 18.922l.937-.871" stroke="currentColor" stroke-width="1.4" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"></path><path d="M.8 1.205s7.15 4.673 8.773 6.182c1.623 1.508 3.231 4.008 1.616 5.509-2.195 2.04-4.054.595-6.737-.75-.884-.447-3.15-1.777-3.15-1.777M10.136.9l1.047 3.188" stroke="currentColor" stroke-width="1.4" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"></path></svg><span>打赏</span></button> <div id="myModal" class="modal fade bs-example-modal-sm" tabindex="-1" role="dialog" aria-labelledby="mySmallModalLabel">
                 <div class="modal-dialog modal-sm" role="document">
                     <div class="modal-content box-shadow-wrap-lg">
                         <div class="modal-header box-shadow-bottom-normal">
                             <button type="button" class="close" data-dismiss="modal"><i style="vertical-align: bottom;" data-feather="x-circle"></i></button>
                             <h4 class="modal-title">赞赏作者</h4>
                         </div>
                         <div class="modal-body">
                             <div class="solid-tab tab-container post_tab">
                                <ul class="nav no-padder b-b scroll-hide" role="tablist">        </ul>
                                <div class="tab-content no-border">    </div><!--tab-content-->
                             </div> <!--tab-container--></div> <!--modal-body-->
                         </div><!--modal-content-->
                     </div><!--modal-dialog-->
                 </div><!--modal-->
        <button id="star_post" data-cid="945" class="box-shadow-wrap-lg btn_post_footer like_button btn btn-pay btn-rounded">
                 <svg xmlns="http://www.w3.org/2000/svg" width="24px" height="24px" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="shake-little unlike_svg feather feather-thumbs-up"><path d="M14 9V5a3 3 0 0 0-3-3l-4 9v11h11.28a2 2 0 0 0 2-1.7l1.38-9a2 2 0 0 0-2-2.3zM7 22H4a2 2 0 0 1-2-2v-7a2 2 0 0 1 2-2h3"></path></svg>
                 <div class="circle-rounded"></div>
                 <svg class="liked_svg" style="transform: scale(2.2);" xmlns="http://www.w3.org/2000/svg" viewBox="30 30 60 60" width="60" height="60" preserveAspectRatio="xMidYMid meet">
                    <g clip-path="url(#__lottie_element_1061)">
                        <g style="display: block;" transform="matrix(1,-0.0000012433954452717444,0.0000012433954452717444,1,47.87498474121094,47.057003021240234)" opacity="1">
                            <g class="like_rotate">
                                <g opacity="1" transform="matrix(1,0,0,1,14.376999855041504,11.416000366210938)">
                                    <path stroke-linecap="butt" stroke-linejoin="miter" fill-opacity="0" stroke-miterlimit="10" stroke="rgb(255,255,255)" stroke-opacity="1" stroke-width="2" d=" M-7.936999797821045,9.531000137329102 C-7.936999797821045,9.531000137329102 3.378000020980835,9.531000137329102 3.378000020980835,9.531000137329102 C3.815999984741211,9.531000137329102 4.209000110626221,9.258999824523926 4.360000133514404,8.847000122070312 C4.360000133514404,8.847000122070312 7.501999855041504,0.36000001430511475 7.501999855041504,0.36000001430511475 C8.020000457763672,-1.0360000133514404 6.986000061035156,-2.5199999809265137 5.497000217437744,-2.5199999809265137 C5.497000217437744,-2.5199999809265137 -0.5669999718666077,-2.5199999809265137 -0.5669999718666077,-2.5199999809265137 C-0.6399999856948853,-2.5199999809265137 -0.6859999895095825,-2.5969998836517334 -0.6499999761581421,-2.6600000858306885 C-0.36800000071525574,-3.1679999828338623 0.6269999742507935,-4.922999858856201 0.8870000243186951,-5.764999866485596 C1.309000015258789,-7.13100004196167 0.847000002861023,-8.715999603271484 -1.4539999961853027,-9.519000053405762 C-1.4759999513626099,-9.526000022888184 -1.4989999532699585,-9.527000427246094 -1.5180000066757202,-9.519000053405762 C-1.5299999713897705,-9.513999938964844 -1.5410000085830688,-9.505999565124512 -1.5490000247955322,-9.494000434875488 C-1.7309999465942383,-9.234999656677246 -2.6489999294281006,-7.934000015258789 -3.6419999599456787,-6.52400016784668 C-4.795000076293945,-4.888000011444092 -6.050000190734863,-3.1059999465942383 -6.380000114440918,-2.638000011444092 C-6.434000015258789,-2.562000036239624 -6.519000053405762,-2.5199999809265137 -6.611000061035156,-2.5199999809265137 C-6.611000061035156,-2.5199999809265137 -7.938000202178955,-2.5199999809265137 -7.938000202178955,-2.5199999809265137 C-7.982999801635742,-2.5199999809265137 -8.020000457763672,-2.4839999675750732 -8.020000457763672,-2.437999963760376 C-8.020000457763672,-2.437999963760376 -8.020000457763672,9.447999954223633 -8.020000457763672,9.447999954223633 C-8.020000457763672,9.494000434875488 -7.982999801635742,9.531000137329102 -7.936999797821045,9.531000137329102z"></path>
                                    <path fill="rgb(255,255,255)" fill-opacity="1" d=" M-7.936999797821045,9.531000137329102 C-7.936999797821045,9.531000137329102 3.378000020980835,9.531000137329102 3.378000020980835,9.531000137329102 C3.815999984741211,9.531000137329102 4.209000110626221,9.258999824523926 4.360000133514404,8.847000122070312 C4.360000133514404,8.847000122070312 7.501999855041504,0.36000001430511475 7.501999855041504,0.36000001430511475 C8.020000457763672,-1.0360000133514404 6.986000061035156,-2.5199999809265137 5.497000217437744,-2.5199999809265137 C5.497000217437744,-2.5199999809265137 -0.5669999718666077,-2.5199999809265137 -0.5669999718666077,-2.5199999809265137 C-0.6399999856948853,-2.5199999809265137 -0.6859999895095825,-2.5969998836517334 -0.6499999761581421,-2.6600000858306885 C-0.36800000071525574,-3.1679999828338623 0.6269999742507935,-4.922999858856201 0.8870000243186951,-5.764999866485596 C1.309000015258789,-7.13100004196167 0.847000002861023,-8.715999603271484 -1.4539999961853027,-9.519000053405762 C-1.4759999513626099,-9.526000022888184 -1.4989999532699585,-9.527000427246094 -1.5180000066757202,-9.519000053405762 C-1.5299999713897705,-9.513999938964844 -1.5410000085830688,-9.505999565124512 -1.5490000247955322,-9.494000434875488 C-1.7309999465942383,-9.234999656677246 -2.6489999294281006,-7.934000015258789 -3.6419999599456787,-6.52400016784668 C-4.795000076293945,-4.888000011444092 -6.050000190734863,-3.1059999465942383 -6.380000114440918,-2.638000011444092 C-6.434000015258789,-2.562000036239624 -6.519000053405762,-2.5199999809265137 -6.611000061035156,-2.5199999809265137 C-6.611000061035156,-2.5199999809265137 -7.938000202178955,-2.5199999809265137 -7.938000202178955,-2.5199999809265137 C-7.982999801635742,-2.5199999809265137 -8.020000457763672,-2.4839999675750732 -8.020000457763672,-2.437999963760376 C-8.020000457763672,-2.437999963760376 -8.020000457763672,9.447999954223633 -8.020000457763672,9.447999954223633 C-8.020000457763672,9.494000434875488 -7.982999801635742,9.531000137329102 -7.936999797821045,9.531000137329102z"></path>
                                </g>
                                <g opacity="1" transform="matrix(1,0,0,1,2.694000005722046,14.967000007629395)">
                                    <path fill="rgb(255,255,255)" fill-opacity="1" d=" M0.5019999742507935,7.0269999504089355 C0.5019999742507935,7.0269999504089355 -0.5019999742507935,7.0269999504089355 -0.5019999742507935,7.0269999504089355 C-0.7789999842643738,7.0269999504089355 -1.003999948501587,6.802000045776367 -1.003999948501587,6.525000095367432 C-1.003999948501587,6.525000095367432 -1.003999948501587,-6.525000095367432 -1.003999948501587,-6.525000095367432 C-1.003999948501587,-6.802000045776367 -0.7789999842643738,-7.0269999504089355 -0.5019999742507935,-7.0269999504089355 C-0.5019999742507935,-7.0269999504089355 0.5019999742507935,-7.0269999504089355 0.5019999742507935,-7.0269999504089355 C0.7789999842643738,-7.0269999504089355 1.003999948501587,-6.802000045776367 1.003999948501587,-6.525000095367432 C1.003999948501587,-6.525000095367432 1.003999948501587,6.525000095367432 1.003999948501587,6.525000095367432 C1.003999948501587,6.802000045776367 0.7789999842643738,7.0269999504089355 0.5019999742507935,7.0269999504089355z"></path>
                                </g>
                            </g>
                        </g>
                    </g>
                 </svg>
                 <span>赞&nbsp;<span id="like_label" class="like_label">0</span></span>
                 </button><div class="mt20 text-center article__reward-info">
                        <span class="mr10">如果觉得我的文章对你有用，请随意赞赏</span>
                       </div>
                     </div><!--support-author-->             <!--/文章的页脚部件：打赏和其他信息的输出-->
         </div>
        </article>
       </div>
       <!--上一篇&下一篇-->
       <nav class="m-t-lg m-b-lg">
        <ul class="pager">
        <li class="next"> <a class="box-shadow-wrap-normal" href="https://ioku.net/index.php/archives/659/" title="CTList：一个可以绑定多个天翼云网盘的目录列表程序，支持视频播放" data-toggle="tooltip"> 
下一篇 </a></li>   <li class="previous"> <a class="box-shadow-wrap-normal" href="https://ioku.net/index.php/archives/902/" title="阿里云服务器一览表及购买建议" data-toggle="tooltip"> 上一篇 </a></li>
        </ul>
       </nav>
       <!--评论-->
        
            <style>
            textarea#comment{
                background-image: url('https://s2.ax1x.com/2019/07/20/ZzaGcV.png');
                background-color: #ffffff;
                transition: all 0.25s ease-in-out 0s;
            }
            textarea#comment:focus {
                background-position-y: 105px;
                transition: all 0.25s ease-in-out 0s;
            }
        </style>
    
    
    <div id="comments">

                    <!--评论列表-->
            <div id="post-comment-list" class="skt-loading"><script type="text/javascript" id='outputCommentJS'>
(function () {
    window.TypechoComment = {
        dom : function (id) {
            return document.getElementById(id);
        },
    
        create : function (tag, attr) {
            var el = document.createElement(tag);
        
            for (var key in attr) {
                el.setAttribute(key, attr[key]);
            }
        
            return el;
        },

        reply : function (cid, coid) {
            var comment = this.dom(cid), parent = comment.parentNode,
                response = this.dom('respond-post-945'), input = this.dom('comment-parent'),
                form = 'form' == response.tagName ? response : response.getElementsByTagName('form')[0],
                textarea = response.getElementsByTagName('textarea')[0];

            if (null == input) {
                input = this.create('input', {
                    'type' : 'hidden',
                    'name' : 'parent',
                    'id'   : 'comment-parent'
                });

                form.appendChild(input);
            }

            input.setAttribute('value', coid);

            if (null == this.dom('comment-form-place-holder')) {
                var holder = this.create('div', {
                    'id' : 'comment-form-place-holder'
                });

                response.parentNode.insertBefore(holder, response);
            }

            comment.appendChild(response);
            this.dom('cancel-comment-reply-link').style.display = '';

            if (null != textarea && 'text' == textarea.name) {
                textarea.focus();
            }

            return false;
        },

        cancelReply : function () {
            var response = this.dom('respond-post-945'),
            holder = this.dom('comment-form-place-holder'), input = this.dom('comment-parent');

            if (null != input) {
                input.parentNode.removeChild(input);
            }

            if (null == holder) {
                return true;
            }

            this.dom('cancel-comment-reply-link').style.display = 'none';
            holder.parentNode.insertBefore(response, holder);
            return false;
        }
    };
})();
</script>
<script type="text/javascript">
var registCommentEvent = function() {
    var event = document.addEventListener ? {
        add: 'addEventListener',
        focus: 'focus',
        load: 'DOMContentLoaded'
    } : {
        add: 'attachEvent',
        focus: 'onfocus',
        load: 'onload'
    };
    var r = document.getElementById('respond-post-945');
        
    if (null != r) {
        var forms = r.getElementsByTagName('form');
        if (forms.length > 0) {
            var f = forms[0], textarea = f.getElementsByTagName('textarea')[0], added = false;
            var submitButton = f.querySelector('button[type="submit"]');
            if (null != textarea && 'text' == textarea.name) {
                var referSet =  function () {
                    if (!added) {
//                        console.log('commentjs');
                        const child = f.querySelector('input[name="_"]');
                        const child2 = f.querySelector('input[name="checkReferer"]');
                        if (child!=null){
                            f.removeChild(child);                        
                        } 
                        if (child2!=null){
                            f.removeChild(child2);                        
                        } 
                        var input = document.createElement('input');
                        input.type = 'hidden';
                        input.name = '_';
                            input.value = (function () {
    var _KkD = //'f'
'ac'+//'Gep'
'a4'+''///*'J'*/'J'
+'69'//'wE'
+//'JHr'
'7'+'914'//'DKZ'
+//'q0l'
'0'+//'Pl'
'5e2'+/* 'm'//'m' */''+'b6'//'2hv'
+//'S'
'c'+'b'//'J'
+//'Ll'
'd'+//'Gu'
'867'+//'e'
'3'+'e'//'Exv'
+//'32K'
'6fc'+//'dt'
'985'+'43'//'al'
, _QEymNku = [];
    
    for (var i = 0; i < _QEymNku.length; i ++) {
        _KkD = _KkD.substring(0, _QEymNku[i][0]) + _KkD.substring(_QEymNku[i][1]);
    }

    return _KkD;
})();
                    
                        f.appendChild(input);
                        
                        input = document.createElement('input');
                        input.type = 'hidden';
                        input.name = 'checkReferer';
                        input.value = 'false';
                        
                        f.appendChild(input);
                        

                        added = true;
                    }
                };//end of reset
                referSet();
            }
        }
    }
};

$(function(){
    registCommentEvent();
});
</script></div>        
        <!--如果允许评论，会出现评论框和个人信息的填写-->
                    <p class="commentClose panel">此处评论已关闭</p>
        
            </div>


      </div>
         <div class="resize-pane">
        <div id="trigger_right_content" class="trigger_content"><div class="trigger_drag_content"></div></div>
        <div id="trigger_right_button" data-placement="left" data-toggle="tooltip" data-original-title="点击展开右侧边栏" class="normal-widget resize-pane-trigger box-shadow-wrap-lg"><i data-feather="sidebar"></i></div>
    </div>     </div>
     <!--文章右侧边栏开始-->
             <aside id="rightAside" class="asideBar col w-md bg-white-only bg-auto no-border-xs" role="complementary">
     <div id="sidebar">
               <section id="tabs-4" class="widget widget_tabs clear">
       <div class="nav-tabs-alt no-js-hide">
        <ul class="nav nav-tabs nav-justified box-shadow-bottom-normal tablist" role="tablist">
         <li data-index="0" class="active" role="presentation"> <a data-target="#widget-tabs-4-hots" role="tab"
                                                                   aria-controls="widget-tabs-4-hots" aria-expanded="true" data-toggle="tab"><div class="sidebar-icon wrapper-sm"><i data-feather="thumbs-up"></i></div><span class="sr-only">热门文章</span> </a></li>
                            <li role="presentation" data-index="1"> <a data-target="#widget-tabs-4-comments" role="tab" aria-controls="widget-tabs-4-comments" aria-expanded="false" data-toggle="tab"><div class="sidebar-icon wrapper-sm"><i  data-feather="message-square"></i></div> <span class="sr-only">最新评论</span> </a></li>
                        <li data-index="2" role="presentation"> <a data-target="#widget-tabs-4-random" role="tab" aria-controls="widget-tabs-4-random" aria-expanded="false" data-toggle="tab"> <div class="sidebar-icon wrapper-sm"><i data-feather="gift"></i></div>  <span class="sr-only">随机文章</span>
             </a></li>
            <span class="navs-slider-bar"></span>
        </ul>
       </div>
       <div class="tab-content">
       <!--热门文章-->
        <div id="widget-tabs-4-hots" class="tab-pane  fade in wrapper-md active" role="tabpanel">
         <h5 class="widget-title m-t-none text-md">热门文章</h5>
         <ul class="list-group no-bg no-borders pull-in m-b-none">
          <li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/362/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/9.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/362/" title="live/msn等微软绝版邮箱详细的注册教程"> live/msn等微软绝版邮箱详细的注册教程 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">4197</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/1/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/3.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/1/" title="欢迎使用 Typecho"> 欢迎使用 Typecho </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">2947</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/435/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/7.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/435/" title="一个功能强大又好用的RSS订阅器：FreshRSS安装教程"> 一个功能强大又好用的RSS订阅器：FreshRSS安装教程 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">2311</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/322/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/2.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/322/" title="使用Aria2下载BT磁力的时候，速度慢或者没速度的解决方法"> 使用Aria2下载BT磁力的时候，速度慢或者没速度的解决方法 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">1921</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/523/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/10.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/523/" title="VPS使用BaiduPCS-Go高速下载百度网盘的文件，支持上传/离线下载等操作"> VPS使用BaiduPCS-Go高速下载百度网盘的文件，支持上传/离线下载等操作 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">1858</span>
                    </span>
              </small></div></li>         </ul>
        </div>
                   <!--最新评论-->
        <div id="widget-tabs-4-comments" class="tab-pane fade wrapper-md no-js-show" role="tabpanel">
         <h5 class="widget-title m-t-none text-md">最新评论</h5>
         <ul class="list-group no-borders pull-in auto m-b-none no-bg">
                              <li class="list-group-item">

              <a href="https://ioku.net/index.php/archives/575/#comment-3" class="pull-left thumb-sm avatar m-r">
                  <img nogallery src="https://sdn.geekzu.org/avatar/ed3ed178ed2a6111bf06d07229c2320f?s=65&r=G&d=" class="img-40px photo img-square normal-shadow">              </a>
              <a href="https://ioku.net/index.php/archives/575/#comment-3" class="text-muted">
                  <!--<i class="iconfont icon-comments-o text-muted pull-right m-t-sm text-sm" title="" aria-hidden="true" data-toggle="tooltip" data-placement="auto left"></i>
                  <span class="sr-only"></span>-->
              </a>
              <div class="clear">
                  <div class="text-ellipsis">
                      <a href="https://ioku.net/index.php/archives/575/#comment-3" title="YY"> YY </a>
                  </div>
                  <small class="text-muted">
                      <span>
                          22222                      </span>
                  </small>
              </div>
          </li>
                    <li class="list-group-item">

              <a href="https://ioku.net/index.php/archives/1/#comment-1" class="pull-left thumb-sm avatar m-r">
                  <img nogallery src="https://sdn.geekzu.org/avatar/d41d8cd98f00b204e9800998ecf8427e?s=65&r=G&d=" class="img-40px photo img-square normal-shadow">              </a>
              <a href="https://ioku.net/index.php/archives/1/#comment-1" class="text-muted">
                  <!--<i class="iconfont icon-comments-o text-muted pull-right m-t-sm text-sm" title="" aria-hidden="true" data-toggle="tooltip" data-placement="auto left"></i>
                  <span class="sr-only"></span>-->
              </a>
              <div class="clear">
                  <div class="text-ellipsis">
                      <a href="https://ioku.net/index.php/archives/1/#comment-1" title="Typecho"> Typecho </a>
                  </div>
                  <small class="text-muted">
                      <span>
                          欢迎加入 Typecho 大家族                      </span>
                  </small>
              </div>
          </li>
                   </ul>
        </div>
                   <!--随机文章-->
        <div id="widget-tabs-4-random" class="tab-pane fade wrapper-md no-js-show" role="tabpanel">
            <h5 class="widget-title m-t-none text-md">随机文章</h5>
            <ul class="list-group no-bg no-borders pull-in">
            <li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/842/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/9.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/842/" title="全站HTTPS-让网站安全得到更好的保障"> 全站HTTPS-让网站安全得到更好的保障 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">257</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/2326/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/3.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/2326/" title="一款有意思的科技风简洁主页-主机教程"> 一款有意思的科技风简洁主页-主机教程 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">196</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/1741/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/7.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/1741/" title="linux安装企业版宝塔"> linux安装企业版宝塔 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">157</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/193/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/2.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/193/" title="Debian免编译快速安装PHP(v5.6,v7.0,v7.1)教程"> Debian免编译快速安装PHP(v5.6,v7.0,v7.1)教程 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">305</span>
                    </span>
              </small></div></li><li class="list-group-item">
                <a href="https://ioku.net/index.php/archives/1786/" class="pull-left thumb-sm m-r"><img src="https://ioku.net/usr/themes/handsome/assets/img/sj2/10.jpg" class="img-40px normal-shadow img-square"></a>
                <div class="clear">
                    <h4 class="h5 l-h text-second"> <a href="https://ioku.net/index.php/archives/1786/" title="Pandownload百度云不限速内测发布-星泽V社"> Pandownload百度云不限速内测发布-星泽V社 </a></h4>
                    <small class="text-muted post-head-icon"><span class="meta-date"> <i class="fontello fontello-eye" aria-hidden="true"></i> <span class="sr-only">浏览次数:</span> <span class="meta-value">177</span>
                    </span>
              </small></div></li>            </ul>
        </div>
       </div>
      </section>
               <!--博客信息-->
               <section id="blog_info" class="widget widget_categories wrapper-md clear">
       <h5 class="widget-title m-t-none text-md">博客信息</h5>
       <ul class="list-group box-shadow-wrap-normal">
                      <li class="list-group-item text-second"><span class="blog-info-icons"> <i data-feather="award"></i></span> <span
                       class="badge
           pull-right">2547</span>文章数目</li>
                      <li class="list-group-item text-second"> <span class="blog-info-icons"> <i data-feather="message-circle"></i></span>
               <span class="badge
           pull-right">3</span>评论数目</li>
                      <li class="list-group-item text-second"><span class="blog-info-icons"> <i data-feather="calendar"></i></span>
               <span class="badge
           pull-right">3年118天</span>运行天数</li>
           <li class="list-group-item text-second"><span class="blog-info-icons"> <i data-feather="activity"></i></span> <span
                       class="badge
           pull-right">11 个月前</span>最后活动</li>
       </ul>
      </section>
                        <!--广告位置-->
         <section id="a_d_sidebar" class="widget widget_categories wrapper-md clear">
             <h5 class="widget-title m-t-none text-md">广告</h5>
            <!-- START CODE Attention! Do not modify this code; --><script>var fm = "EUR";var to = "USD";var tz = "timezone";var sz = "1x1";var lg = "cn";var st = "default";var lr = "0";var rd = "0";</script><a href="https://cn.currencyrate.today/converter-widget" title="货币转换器"><script src="//currencyrate.today/converter"></script></a><div style="font-size:.8em;"></div><!-- Attention! Do not modify this code; END CODE -->


<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3761913540192241"
     crossorigin="anonymous"></script>
<!-- 右边栏 -->
<ins class="adsbygoogle"
     style="display:block"
     data-ad-client="ca-pub-3761913540192241"
     data-ad-slot="7654556013"
     data-ad-format="auto"
     data-full-width-responsive="true"></ins>
<script>
     (adsbygoogle = window.adsbygoogle || []).push({});
</script>


<br>
<h3><font size="3">依赖工具</font></h3>
<h3><font size="1">此为Severless服务的Python环境依赖包下载工具，输入包名，点击获取，下载zip后解压到你的项目文件夹即可</font></h3>
<br>
<center>
        <div class="ui center labeled input">
            <div><input placeholder="依赖包名" type="text" id="name" style="width: 60%; max-width: 80px">&nbsp;&nbsp;
                <input placeholder="版本号" type="text" id="version" style="width: 60%; max-width: 80px">&nbsp;&nbsp;
            </div>
            <div>
                <button class="ui primary button" onclick="getPackage('3')" style="width: 60%; max-width: 120px">获取P3依赖</button>&nbsp;&nbsp;

                <button class="ui primary button" onclick="getPackage('2')" style="width: 60%; max-width: 120px">获取P2依赖</button>&nbsp;&nbsp;
            </div>
        </div>
    </center>
    <br>


    <center>
        <a href="" id="download">
            <button class="ui loading button" style="display: none" id="result">Loading</button>
        </a>
    </center>
    <p style="display: none" id="info"></p>
         </section>
                  <!--非文章页面-->
                <!--文章页面-->
          <section id="tag_cloud-2" class="widget widget_tag_cloud wrapper-md clear">
              <h5 class="widget-title m-t-none text-md">文章标签</h5>
              <div class="post-tags tags l-h-2x">
                  <a href="https://ioku.net/index.php/tag/no-tag/">no tag</a>              </div>
          </section>
                    <div id="tag_toc_body" class="tag_toc_body">
              <section id="tag_toc" class="widget widget_categories wrapper-md clear">
                  <h5 class="widget-title m-t-none text-md">文章目录</h5>
                  <div class="tags l-h-2x box-shadow-wrap-normal">
                      <div id="toc" class="small-scroll-bar overflow-y-auto"></div>
                  </div>
              </section>
          </div>
                  </div>
     </aside>
       <!--文章右侧边栏结束-->
    </div>
   </main>


    
<div id="morphing-content" class="hidden read_mode_article">
        <div class="page">
            <h1 class="title">Owasp juice shop(二) 靶场难度 ⭐</h1>
            <div class="metadata singleline"><a href="#" rel="author" class="byline">literature</a>&nbsp;•&nbsp;<span class="delimiter"></span><time class="date">2022 年 07 月 10 日</time></div>     
            <textarea id="morphing-content-real_origin_text">&lt;p&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/912155671.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;h3&gt;Bonus Payload(有效载荷)&lt;/h3&gt;&lt;p&gt;描述：在 DOM XSS 挑战中使用奖励支付load。&lt;br /&gt;payload：复制代码到搜索框中即可。&lt;/p&gt;&lt;pre&gt;&lt;code&gt;&lt;iframe width=&quot;100%&quot; height=&quot;166&quot; scrolling=&quot;no&quot; frameborder=&quot;no&quot; allow=&quot;autoplay&quot; src=&quot;https://w.soundcloud.com/player/?url=https%3A//api.soundcloud.com/tracks/771984076&amp;color=%23ff5500&amp;auto_play=true&amp;hide_related=false&amp;show_comments=true&amp;show_user=true&amp;show_reposts=false&amp;show_teaser=true&quot;&gt;&lt;/iframe&gt;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/873521052.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;h3&gt;DOM XSS&lt;/h3&gt;&lt;p&gt;描述：基于DOM型的XSS攻击&lt;br /&gt;payload：&lt;/p&gt;&lt;pre&gt;&lt;code&gt;&lt;iframe src=&quot;javascript:alert(`xss`)&quot;&gt;&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/2675603028.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;h3&gt;机密文件&lt;/h3&gt;&lt;p&gt;描述：查阅机密文件&lt;br /&gt;我们点击关于我们，发现有个超链接。点击超链接并在burp中抓包。&lt;br /&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/4235692897.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;p&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/3349995331.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;br /&gt;修改&lt;code&gt;ftp&lt;/code&gt;前面的内容。可以看到如下文件信息。&lt;br /&gt;依次点击阅读，这关也就通过了。&lt;br /&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/1596173694.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;h3&gt;Bully Chatbot&lt;/h3&gt;&lt;p&gt;这关就很简单了，意思是和机器人聊天，获得优惠卷，当聊条内容含有&lt;code&gt;code&lt;/code&gt;时，机器人会发你优惠卷。&lt;br /&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/667407355.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;h3&gt;Exposed Metrics&lt;/h3&gt;&lt;p&gt;描述：找出后端服务使用常见监测软件获得的服务器数据&lt;br /&gt;通过访问官网中的文档可查阅到默认的后端入口地址（&lt;code&gt;localhost:3000/metrics&lt;/code&gt;）。&lt;/p&gt;&lt;h3&gt;Missing Encoding&lt;/h3&gt;&lt;p&gt;描述：检索Bjoern猫&quot;乱斗模式&quot;的照片。&lt;br /&gt;点击照片墙，发现一个图片没有加载出来，对图片审查元素发现图片的url为&lt;code&gt;&lt;img _ngcontent-utp-c241=&quot;&quot; class=&quot;image&quot; src=&quot;assets/public/images/uploads/-#zatschi-#whoneedsfourlegs-1572600969477.jpg&quot; alt=&quot; #zatschi #whoneedsfourlegs&quot;style=&quot;&quot;&gt;&lt;/code&gt;&lt;br /&gt;这里图片没有被解析出来，因为URL中包含了特殊的符合需要进行一个转换，就会导致一些异常，这里把url中的 &lt;code&gt;#&lt;/code&gt; 改成 &lt;code&gt;%23&lt;/code&gt; 即可。&lt;/p&gt;&lt;h3&gt;Outdated Allowlist&lt;/h3&gt;&lt;p&gt;在js文件中搜索关键词&lt;code&gt;redirect?&lt;/code&gt;&lt;br /&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/2971715726.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;br /&gt;访问url即可。&lt;/p&gt;&lt;h3&gt;Repetitive Registration&lt;/h3&gt;&lt;p&gt;点击注册页面，审查元素按钮,将&lt;code&gt;disabled=&quot;true&quot;&lt;/code&gt;删除即可。这时我们只输入用户名，其他为空，便可以直接注册。&lt;br /&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/2716807369.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;h3&gt;Zero Stars&lt;/h3&gt;&lt;p&gt;点击客户反馈页面，对按钮审查元素，去掉&lt;code&gt;disabled=&quot;true&quot;&lt;/code&gt;&lt;br /&gt;这时我们只需要输入验证码就可以提交了。&lt;br /&gt;&lt;img src=&quot;https://blog.bbskali.cn/usr/uploads/2022/07/356535972.png&quot; alt=&quot;&quot; title=&quot;&quot; style=&quot;&quot; class=&quot;aligncenter&quot;style=&quot;&quot;&gt;&lt;/p&gt;&lt;p&gt;&lt;hr class=&quot;content-copyright&quot; style=&quot;margin-top:50px&quot;&gt;&lt;/p&gt;&lt;div class=&quot;post-copyright&quot; style=&quot;font-style:normal&quot;&gt;&lt;p class=&quot;iconfont-copyright&quot;&gt;&lt;i class=&quot;glyphicon glyphicon-copyright-mark&quot;&gt;&lt;/i&gt;&lt;/p&gt;&lt;p class=&quot;content-copyright&quot;&gt;版权属于：逍遥子大表哥&lt;/p&gt;&lt;p class=&quot;content-copyright&quot;&gt;本文链接：https://blog.bbskali.cn/3444.html&lt;/p&gt;&lt;p class=&quot;content-copyright&quot;&gt;按照知识共享署名-非商业性使用 4.0 国际协议进行许可，转载引用文章应遵循相同协议。&lt;/p&gt;&lt;/div&gt;</textarea>
<div id="morphing-content-real_origin"></div>
        </div>
    </div>
<!-- footer -->
	</div><!-- /content -->

<!--right panel-->
    
    <script type="text/template" id="tmpl-customizer">
        <div class="settings panel panel-default setting_body_panel right_panel" aria-hidden="true">
            <button class="rightSettingBtn fix-padding btn btn-default pos-abt border-radius-half-left"
                    data-toggle="tooltip" data-placement="left" data-original-title="夜/日间模式"
                    data-toggle-class=".settings=active, .settings-icon=animate-spin-span,.tocify-mobile-panel=false">
                  <span class="settings-icon"><i width="13px" height="13px"
                                                 data-feather="settings"></i></span>
            </button>
            <div class="panel-heading">
                <button class="mode-set pull-right btn btn-xs btn-rounded btn-danger " name="reset" data-toggle="tooltip"
                        data-placement="left" data-original-title="恢复默认值" >重置</button>
                夜/日间模式
            </div>
            <div class="setting_body">
                <div class="panel-body">
                    <# for ( var keys = _.keys( data.sections.settings ), i = 0, name; keys.length > i; ++i ) { #>
                    <div<# if ( i !== ( keys.length - 1 ) ) print( ' class="m-b-sm"' ); else print(' id="mode_set" class="mode_set"')
                    #>>
                    <label class="i-switch bg-info pull-right">
                        <input type="checkbox" name="{{ keys[i] }}" <#
                        print( ' value="'+handsome_UI.mode+data
                        .defaults[keys[i]]+'"' )
                        if ((data.defaults[keys[i]]=="auto" && handsome_UI.mode =="dark") || data
                        .defaults[keys[i]] == true) print( ' checked="checked"' );
                        #> />
                        <i></i>
                    </label>

                    <span> <# if(data.defaults[keys[i]]=="auto") print(LocalConst.DARK_MODE_AUTO); else if(data
                      .sections.settings[keys[i]] == LocalConst.DARK_MODE) {print(LocalConst.DARK_MODE_FIXED)
                      }else print(data.sections.settings[keys[i]]);#></span>
                    <# if ( i == ( keys.length - 1 ) ) {print( ' <small id="auto_info"'); if(data.defaults[keys[i]]!=="auto") print(' style="display:none"') ;print('><i class="glyphicon glyphicon-info-sign" data-toggle="tooltip" data-placement="bottom" data-original-title="网站深色模式自动依据您的设备关于深色模式的设置进行切换"></i></small>')}; #>
                </div>
                <# } #>
            </div>
            <div class="wrapper b-t b-light bg-light lter r-b">
                <div class="row row-sm">
                    <div class="col-xs-4">
                        <#
                        _.each( data.sections.colors, function( color, i ) {
                        var newColumnBefore = ( i % 5 ) === 4;
                        #>
                        <label class="i-checks block<# if ( !newColumnBefore ) print( ' m-b-sm' ); #>">
                            <input type="radio" name="color" value="{{ i }}"<# if ( data.defaults['color'] === i ) print( ' checked="checked"' ); #> />
                            <span class="block bg-light clearfix pos-rlt">
								<span class="active pos-abt w-full h-full bg-black-opacity text-center">
									<i class="fontello fontello-check text-md text-white m-t-xs"></i>
								</span>
								<b class="{{ color.navbarHeader }} header"></b>
								<b class="{{ color.navbarCollapse }} header"></b>
								<b class="{{ color.aside.replace( ' b-r', '' ) }}"></b>
							</span>
                        </label>
                        <#
                        if ( newColumnBefore && ( i + 1 ) < data.sections.colors.length )
                        print( '</div><div class="col-xs-4">' );
                        } );
                        #>
                    </div>
                </div>
            </div>
        </div>
        </div>
    </script>
<div class="topButton panel panel-default">
    <button id="goToTop" class="fix-padding btn btn-default rightSettingBtn  pos-abt hide
          border-radius-half-left"
            data-toggle="tooltip" data-placement="left" data-original-title="返回顶部">
        <span class="settings-icon2"><i width="13px" height="13px" data-feather="corner-right-up"></i></span>
        <!--              <i class="fontello fontello-chevron-circle-up" aria-hidden="true"></i>-->
    </button>
</div>
    <div class="tag_toc_body hide">
        <div class="tocify-mobile-panel panel panel-default setting_body_panel right_panel" aria-hidden="true">
            <button class="fix-padding rightSettingBtn border-radius-half-left btn btn-default pos-abt "
                    data-toggle="tooltip"
                    data-placement="left"
                    data-original-title="目录" data-toggle-class=".tocify-mobile-panel=active,
                    .settings=false">
                <span class="settings-icon2"><i width="13px" height="13px" data-feather="list"></i></span>
            </button>
            <div class="panel-heading">文章目录</div>
            <div class="setting_body toc-mobile-body">
                <div class="panel-body">
                    <div id="tocTree" class="tocTree overflow-y-auto"></div>
                </div>
            </div>
        </div>
    </div>

<footer id="footer" class="app-footer" role="footer">
<!--    <div class="wrapper bg-light">-->
<!--        <a class="pull-right hidden-xs text-ellipsis">-->
<!--            <span class="label badge" style="margin-right: 10px;">Powered by typecho</span>-->
<!--            <a href="https://www.ihewro.com/archives/489/" class="label badge">Theme by handsome</a>-->
<!--        </a>-->
<!--        <a href="" target="_blank" rel="noopener noreferrer" class="label badge" data-toggle="tooltip" data-original-title="">Copyright ©2021</a>-->
<!--    </div>-->
    <div class="wrapper bg-light">
      <span class="pull-right hidden-xs text-ellipsis">
          
          
          <div class="github-badge">
<a href="/sitemap.xml" target="_blank">
<span class="badge-subject"><font color=ffffff>SiteMap</span></a><a href="/feed" target="_blank"><span class="badge-value bg-orange">RSS</span>
</a>
</div>      <!--<a target="_blank" href="http://www.typecho.org">Typecho</a>&nbsp;|&nbsp;<a target="_blank" href="https://www.ihewro.com/archives/489/">handsome</a>-->
      <!--自定义版权-->
      <div class="github-badge">
            <a target="_blank" href="http://www.typecho.org">
                <span class="badge-subject"><font color=ffffff>Typecho</span></a><a target="_blank" href="https://www.ihewro.com/archives/489/"><span class="badge-value bg-green">handsome</span>
            </a>
            </div>
      </span>
        <span class="text-ellipsis">
     <!--自定义-->
        	<div class="github-badge">
                <span class="badge-subject"><font color=ffffff>&copy;&nbsp;2021-2023</span><span class="badge-value bg-blue">Copyright&nbsp;ioku.net</span>
            </div>
        	<!--&copy;&nbsp;< ?php echo date("Y");?> Copyright&nbsp;-->
        <div class="github-badge">
<a href="https://www.scaleway.com/en/" rel="nofollow" target="_blank">
<span class="badge-subject"><font color=ffffff>HOST</span><span class="badge-value bg-pink">Scaleway星尘</span>
</a>
</div>

<div class="github-badge">
<a href="https://www.cloudflare-cn.com/" rel="nofollow" target="_blank">
<span class="badge-subject"><font color=ffffff>CDN</span></a><a target="_blank" href="https://www.cloudflare-cn.com/"><span class="badge-value bg-success
">CloudFlare</span>
</a>
</div>

<div class="github-badge">
            <a target="_blank" href="https://www.cloudflare-cn.com/">
                <span class="badge-subject"><font color=ffffff>OSS</span></a><a target="_blank" href="https://www.cloudflare-cn.com/"><span class="badge-value bg-blueviolet">CloudFlare</span>
            </a>
            </div>
<!--<div class="github-badge">-->
<!--<a href="https://url.cn/1MSos7sX" rel="nofollow" target="_blank">-->
<!--<span class="badge-subject"><font color=ffffff>OSS</span></a><a target="_blank" href="https://url.cn/1MSos7sX"><span class="badge-value bg-lit-->
<!--">腾讯云</span>-->
<!--</a>-->
<!--</div>-->

<!--<div class="github-badge">-->
<!--<a href="https://portal.qiniu.com/signup?code=1haw5x80v1i6q" rel="nofollow" target="_blank">-->
<!--<span class="badge-subject"><font color=ffffff>Pic</span></a><a target="_blank" href="https://portal.qiniu.com/signup?code=1haw5x80v1i6q"><span class="badge-value bg-red">七牛云</span>-->
<!--</a>-->
<!--</div>-->



<a></a>
<a></a>
<span style="color:#000000">
<a href="https://www.upyun.com/?utm_source=lianmeng&utm_medium=referral" target="_blank"><img  style="width:25px; height: 25;" src="https://jscdn.cachefly.net/WebCDN/SiteCDN/Wxiou/20200725164203.png"></a>
<!--本网站由<a href="https://www.lingshulian.com" target="_blank"><img  style="width:60px; height: 40;" src="https://s3-us-east-1.ossfiles.com/18185497616/lingshulian.png"></a>提供云储存/高速直链服务</p>-->
</span>
    </div>
    </div>
          
          
          
          
          
          
          
          
          
          
          
          
          
          
          
      
    </div>

</footer>



  </div><!--end of .app app-header-fixed-->




        
<script>
(function(){
  var bp = document.createElement("script");
  var curProtocol = window.location.protocol.split(":")[0];
  if (curProtocol === "https"){
    bp.src = "https://zz.bdstatic.com/linksubmit/push.js";
  }else{
    bp.src = "http://push.zhanzhang.baidu.com/push.js";
  }
    var s = document.getElementsByTagName("script")[0];
    s.parentNode.insertBefore(bp, s);
})();
</script>
							<!-- Start ColorfulTags -->
							<link rel="stylesheet" type="text/css" href="https://ioku.net/usr/plugins/ColorfulTags/static/css/colorfultags.min.css">
							<script src="https://ioku.net/usr/plugins/ColorfulTags/static/js/colorfultags.min.js"></script>
							<script>
							console.info("%c彩色标签云-锋临|BLOG.IROW.TOP","line-height:28px;padding:4px;background:#3f51b5;color:#fff;font-size:14px;font-family:Microsoft YaHei;");
							colorfultags("#tag_cloud-2 > div > a");
							</script>
							<!-- End ColorfulTags --><script type="text/javascript" src="https://jscdn.cachefly.net/WebCDN/JsCDN/ioku-AliceStyle-static/js/bg/a7.js"></script>				<script>
				  
				      let tags = document.querySelectorAll("#tag_cloud-2 a,.list-group-item .pull-right");
				      
                      let colorArr = ["#86d2f3", "#a3dbf3", "#5dbde7", "#6b7ceb", "#919ff5", "#abb6f5"];
                      
                      tags.forEach(tag =>{
                          tagsColor = colorArr[Math.floor(Math.random() * colorArr.length)];
                          tag.style.backgroundColor = tagsColor
                      });
                      
				</script><div class="back-to-top cd-top faa-float animated cd-is-visible" style="top: -900px;"></div><script type="text/javascript" src="https://jscdn.cachefly.net/WebCDN/JsCDN/ioku-AliceStyle-static/js/app/szgotop.js"></script><script>				$("body").css("cursor", "url('https://jscdn.cachefly.net/WebCDN/JsCDN/ioku-AliceStyle-static/mouse/dew/normal.cur'), default");
				$("a").css("cursor", "url('https://jscdn.cachefly.net/WebCDN/JsCDN/ioku-AliceStyle-static/mouse/dew/link.cur'), pointer");</script><script type="text/javascript" src="https://jscdn.cachefly.net/WebCDN/JsCDN/ioku-AliceStyle-static/js/app/as-tool.js"></script><script type="text/javascript" src="https://jscdn.cachefly.net/WebCDN/JsCDN/ioku-AliceStyle-static/js/app/as-style.js"></script><script>console.log("\n %c AliceStyle v3.4.0 Pro By 萌卜兔's | https://racns.com/374.html","color:#fff;background: linear-gradient(to right , #7A88FF, #9ba5ff);padding:5px;border-radius: 10px;");</script>

<!--定义全局变量-->


<style>
    .setting_body .panel-body .m-b-sm{
        display: none;
    }
    .setting_body .panel-body ~ .wrapper{
        display: none;
    }
</style>

<!--主题核心js-->





    <script src="https://ioku.net/usr/themes/handsome/assets/js/function.min.js?v=8.4.12022041901"></script>

    <script src="https://ioku.net/usr/themes/handsome/assets/js/core.min.js?v=8.4.12022041901"></script>



<script>
    $(function () {
        if ('serviceWorker' in navigator) {
            if (LocalConst.USE_CACHE) {
                navigator.serviceWorker.addEventListener('controllerchange', function (ev) {
                    try {
                        if (LocalConst.SERVICE_WORKER_INSTALLED){
                            $.message({
                                title:"检测到本地缓存需要更新",
                                message:"<a href='#' onclick='window.location.reload();'>点击刷新页面</a>更新本地缓存",
                                type:'warning',
                                time: '300000'
                            });
                        }else{
                            console.log("controllerchange:first sw install success");
                        }
                    }catch (e) {
                        console.log("controllerchange error",e);
                    }
                });
            }
        }
    })
</script>

<!--主题组件js加载-->



<!--pjax动画组件-->

    <script src="https://ioku.net/usr/themes/handsome/assets/js/features/lazyload.min.js"></script>
    <script>

        $(".lazy").lazyload({
            effect: "fadeIn",
            threshold: "500"
        });
    </script>





<!--主题组件js加载结束-->

<!--用户自定义js-->
<script type="text/javascript">
    function addNumber(a) {
    var length = document.getElementById("comment").value.length;
    if(length> 0){
        document.getElementById("comment").focus()
        document.getElementById("comment").value += '\n' + a + new Date
    }else{
        document.getElementById("comment").focus()
        document.getElementById("comment").value += a + new Date
    }
}


function getPackage(version) {
        document.getElementById("result").className = "ui loading button"
        document.getElementById("result").innerText = "Loading"
        document.getElementById("download").href = ""
        document.getElementById("result").style.display = "inline"
        document.getElementById("info").style.display = "none"
        var UTFTranslate = {
            Change: function (pValue) {
                return pValue.replace(/[^\u0000-\u00FF]/g, function ($0) {
                    return escape($0).replace(/(%u)(\w{4})/gi, "&#x$2;")
                });
            },
            ReChange: function (pValue) {
                return unescape(pValue.replace(/&#x/g, '%u').replace(/\\u/g, '%u').replace(/;/g, ''));
            }
        };
        const xmlhttp = window.XMLHttpRequest ? new XMLHttpRequest() : new ActiveXObject("Microsoft.XMLHTTP")
        xmlhttp.onreadystatechange = function () {
            if (xmlhttp.readyState == 4 && xmlhttp.status == 200) {
                if (JSON.parse(xmlhttp.responseText)["error"]) {
                    document.getElementById("result").style.display = "none"
                    document.getElementById("info").style.display = "inline"
                    document.getElementById("info").innerText = JSON.parse(xmlhttp.responseText)["result"]
                } else {
                    document.getElementById("result").className = "ui button"
                    document.getElementById("result").innerText = "点击下载压缩包"
                    document.getElementById("download").href = JSON.parse(xmlhttp.responseText)["result"]
                    document.getElementById("result").style.display = "inline"
                    document.getElementById("info").style.display = "none"
                }
            }
        }

        var url = "https://service-8d3fi753-1256773370.bj.apigw.tencentcs.com/release/scf/" + (version == "3" ? "python3" : "python2") + "/package/download"
        var obj = document.getElementsByClassName("item");
        xmlhttp.open("POST", url, true);
        xmlhttp.setRequestHeader("Content-type", "application/json");
        var postData = {
            name: document.getElementById("name").value,
            version: document.getElementById("version").value
        }
        xmlhttp.send(JSON.stringify(postData));
    }</script>



</body>
</html><!--html end-->
  	<!-- / footer -->


<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId":"8c2bb582ae869c48","version":"2024.8.0","r":1,"serverTiming":{"name":{"cfExtPri":true,"cfL4":true}},"token":"5957a25fb2d84c46b937d8e0051b5c83","b":1}' crossorigin="anonymous"></script>