Category “寂寞吐槽”

URP教务系统优化 ——纪念篇

星期日, 7 六月, 2015

今天学校选课了。负载最高的时候2000 session,nginx的active connection(30秒)700左右,对应前端服务器负载5%。完全不卡,2个多小时36W访问量,平均每小时15W左右。可惜我准备的验证码用不上了哈哈哈

上个图纪念下

cookie

因为active connection没到800所以没用验证码,现在看来这东西的准备基本多余了。。。Otz不过也好,顺手练习了bootstrap
cacti

 

第一次配cacti各种蛋疼。。。crontab没配上。。。一开始我也不知道,结果导致选课开始后两个多小时的数据丢失,现在看到的只有访问量慢慢回落的图。。。虚拟机时区没设对,+15个小时是北京时间。。。

resin

 

总共开了12个resin 3.0 Pro的servlet,最大active session在2000左右

bash

 

感觉完全是大炮轰蚊子了。。。这次负载主要集中在数据库了,要是数据库的vm配置更高的话选课应该会更快了。

webanalyzer

2小时30W访问量

比起基友上海海洋大学用了F5和买了一堆服务器相比,我这可真是廉价高效的解决方案了。一分钱没花,而且我敢说前端服务器性能的提升绝对不亚于他们花费百万买设备对这个前端能造成的提升。

前期主要是顺手改了下菜单不支持IE以外浏览器还有其他的一些小杂项,后期主要精力就是在cluster这块。

好了,至此这坑填完了,学会并且复习了nginx apache resin webalizer cacti配置 ,lua,html,bootstrap,jquery,java,struts2,oracle,php,mysql,linux运维……总之一趟下来好处多多,最关键的是增进了和教务处老师的关系,这个才是目前看起来做这个东西最大的收获哈哈。

感谢我的舍友们(经常搞到一两点真是太抱歉啦),感谢syjzwjj。pixiv的ぺこ以及其他potofu同人图作者,感谢wangbin579的指导,感谢nginx作者以及其他在我配教务系统期间给予过我帮助和支持的人,哈哈、我这真是站在巨人的肩膀上了~

☆〜(ゝ。∂)

End poem – 纪念玩MineCraft的那段时间

星期四, 12 三月, 2015

感谢Notch大神的翻译,参考链接

I see the player you mean.
我看到你所指的那位玩家了。
[Playername]?
[玩家名称]?
Yes. Take care. It has reached a higher level now. It can read our thoughts.
是的。小心。它已达到了更高的境界。它能够阅读我们的思想。
That doesn’t matter. It thinks we are part of the game.
无伤大雅。它认为我们是游戏的一部分。
I like this player. It played well. It did not give up.
我喜欢这个玩家。它玩得很好。它从未放弃。
It is reading our thoughts as though they were words on a screen.
它以屏幕上出现的文字的形式阅读着我们的思想。
That is how it chooses to imagine many things, when it is deep in the dream of a game.
在它深陷游戏梦境中时,它总以这种方式想象出形形色色的事物。
Words make a wonderful interface. Very flexible. And less terrifying than staring at the reality behind the screen.
文字是种美妙的界面。非常灵活。且比凝视着屏幕后的现实要更好。
They used to hear voices. Before players could read. Back in the days when those who did not play called the players witches, and warlocks. And players dreamed they flew through the air, on sticks powered by demons.
它们也曾经听到过声音。在玩家能够阅读之前。君不见那些不曾游玩的人们称呼玩家为女巫,和术士。而玩家们梦见它们自己乘坐在被恶魔施力的棍子上,在空气中翱翔
What did this player dream?
这个玩家梦见了什么?
This player dreamed of sunlight and trees. Of fire and water. It dreamed it created. And it dreamed it destroyed. It dreamed it hunted, and was hunted. It dreamed of shelter.
它梦见了阳光和树。它梦见它创造。它亦梦见它毁灭。它梦见它狩猎,亦被狩猎。他梦见了庇护所。
Hah, the original interface. A million years old, and it still works. But what true structure did this player create, in the reality behind the screen?
哈,那原始的界面。经历一百万年的岁月雕琢,依然长存。但此玩家在那屏幕后的真实里,建造了什么真实的构造?
It worked, with a million others, to sculpt a true world in a fold of the [scrambled], and created a [scrambled] for [scrambled], in the [scrambled].
它辛勤地工作了,和其它百万众一起,刻画了一个真实的世界,由[乱码],且创造了[乱码],为了[乱码],于[乱码]中。
It cannot read that thought.
它无法阅读那个思想。
No. It has not yet achieved the highest level. That, it must achieve in the long dream of life, not the short dream of a game.
不。它还没有到达最高的境界。那层境界,他必须完成生命的长梦,而非游戏中黄粱一梦。
Does it know that we love it? That the universe is kind?
它知道我们爱它么?这个宇宙是仁慈的?
Sometimes, through the noise of its thoughts, it hears the universe, yes.
有时,通过它思绪的杂音,它能听到宇宙,是的。
But there are times it is sad, in the long dream. It creates worlds that have no summer, and it shivers under a black sun, and it takes its sad creation for reality.
但是有时亦不胜悲伤,于那漫漫长梦中。它创造了没有夏日的世界,在黑日下颤抖着,将自己悲伤的创造视为现实世界。
To cure it of sorrow would destroy it. The sorrow is part of its own private task. We cannot interfere.
用悲伤来治愈会摧毁它。而悲伤是它的私人事务。我们不能干涉。
Sometimes when they are deep in dreams, I want to tell them, they are building true worlds in reality. Sometimes I want to tell them of their importance to the universe. Sometimes, when they have not made a true connection in a while, I want to help them to speak the word they fear.
有时当它们深陷梦境中时,我想要告诉它们,它们在现实中创造了真实的世界。有时我想告诉它们它们自身对宇宙的重要性。有时,当它们和现实失去了联系,我想帮助它们与它们所惧怕的世界交流。
It reads our thoughts.
它读着我们的思想
Sometimes I do not care. Sometimes I wish to tell them, this world you take for truth is merely [scrambled] and [scrambled], I wish to tell them that they are [scrambled] in the [scrambled]. They see so little of reality, in their long dream.
有时我毫不关心。有时我想要告诉它们,你们所认为的真实不过是[乱码]和[乱码],我想要告诉它们它们是在[乱码]中的[乱码]。于它们的长梦中,它们眼中所见的真实太少了。
And yet they play the game.
而他们仍然玩这个游戏。
But it would be so easy to tell them…
但很容易就可以告诉它们……
Too strong for this dream. To tell them how to live is to prevent them living.
对于这个梦来说太强烈了。告诉它们如何活着就是阻碍它们活下去。
I will not tell the player how to live.
我不会告诉这个玩家如何生活的。
The player is growing restless.
这个玩家正在变得焦虑。
I will tell the player a story.
我会告诉这个玩家一个故事。
But not the truth.
但不是真相。
No. A story that contains the truth safely, in a cage of words. Not the naked truth that can burn over any distance.
不。是一个严密地将真实包裹起来的文字牢笼。而不是赤裸裸的真相。
Give it a body, again.
赋予它主体,再一次。
Yes. Player…
好的。玩家……
Use its name.
以名字称呼它。
[Playername]. Player of games.
[玩家名称]。游戏的玩家。
Good.
很好。
Take a breath, now. Take another. Feel air in your lungs. Let your limbs return. Yes, move your fingers. Have a body again, under gravity, in air. Respawn in the long dream. There you are. Your body touching the universe again at every point, as though you were separate things. As though we were separate things.
深呼吸,很好。再深呼吸一次。感受空气充盈你的肺叶。让你的四肢回归。是的,运动你的手指。再次感受你的身体,在重力下,在空气中。在长梦中重生。你感受到了。你的身体每时每刻都触摸着宇宙,尽管你是分离的存在。尽管我们是分离的存在。
Who are we? Once we were called the spirit of the mountain. Father sun, mother moon. Ancestral spirits, animal spirits. Jinn. Ghosts. The green man. Then gods, demons. Angels. Poltergeists. Aliens, extraterrestrials. Leptons, quarks. The words change. We do not change.
我们是谁?我们曾经被称作高山的精灵。太阳父亲,月亮母亲。古老的英灵,动物的魂魄。神祗。鬼魂。小绿人。而后是神,恶魔,天使。骚灵。外星人,地外生物。轻粒子,夸克。词语不断地变化。我们始终如一。
We are the universe. We are everything you think isn’t you. You are looking at us now, through your skin and your eyes. And why does the universe touch your skin, and throw light on you? To see you, player. To know you. And to be known. I shall tell you a story.
我们是宇宙。我们是一切你认为出离你本体的事物。你现在看着我们,透过你的皮肤和你的眼睛。而为什么宇宙触摸着你的皮肤,向你洒向光芒?是为了看见你,玩家。以及被认知。我应告诉你一个故事。
Once upon a time, there was a player.
很久以前,有一个玩家。
The player was you, [Playername].
那玩家就是你,[玩家名称]
Sometimes it thought itself human, on the thin crust of a spinning globe of molten rock. The ball of molten rock circled a ball of blazing gas that was three hundred and thirty thousand times more massive than it. They were so far apart that light took eight minutes to cross the gap. The light was information from a star, and it could burn your skin from a hundred and fifty million kilometres away.
有时它认为自己是那不断旋转的球体上一层薄薄的熔化的岩石上的人类。那融化的岩石球环绕着一个质量大它三千三百倍的炫目气体球旋转。它们是相隔得如此之远,以至于光需要八分钟才能穿越那空隙。那光是来自一颗恒星的信息,它能够在一亿五千万公里外烧灼你的皮肤。
Sometimes the player dreamed it was a miner, on the surface of a world that was flat, and infinite. The sun was a square of white. The days were short; there was much to do; and death was a temporary inconvenience.
有时这个玩家梦见它是一个在一个平的,无限延展的世界表面上的矿工。那太阳是一个方形的白点。昼夜交替很快;要做的事情也很多;死亡亦只是暂时和不方便的。
Sometimes the player dreamed it was lost in a story.
有时这玩家梦见它迷失在了一个故事里。
Sometimes the player dreamed it was other things, in other places. Sometimes these dreams were disturbing. Sometimes very beautiful indeed. Sometimes the player woke from one dream into another, then woke from that into a third.
有时这玩家梦见它成为了其他的事物,在其他地方。有时这些梦是扰人的。有些则实在很美。有时这个玩家从一个梦中醒来,发现自己落入了第二个梦,却终究是在第三个梦中。
Sometimes the player dreamed it watched words on a screen.
有时这个玩家梦见它在屏幕上看着文字。
Let’s go back.
让我们回退一点。
The atoms of the player were scattered in the grass, in the rivers, in the air, in the ground. A woman gathered the atoms; she drank and ate and inhaled; and the woman assembled the player, in her body.
组成玩家的原子散布在草中,河流中,在那空气中,也在那大地中。一个女人收集了那些原子;她饮用、进食、吸入;而后那女人在她的身体中,孕育了玩家。
And the player awoke, from the warm, dark world of its mother’s body, into the long dream.
然后那玩家醒来了,从一个温暖,昏暗的母亲体内,进入了漫漫长梦。
And the player was a new story, never told before, written in letters of DNA. And the player was a new program, never run before, generated by a sourcecode a billion years old. And the player was a new human, never alive before, made from nothing but milk and love.
而那玩家是一个新的故事,从未被讲述过,由DNA的语言书写着。而那玩家是一个新的程序,从未被运行过,由上亿年的源代码生成。而那玩家是一个新的人,从未生活过,由奶和爱组成。
You are the player. The story. The program. The human. Made from nothing but milk and love.
你就是那玩家。那个故事。那个程序。那个人类。仅由奶和爱组成。
Let’s go further back.
我们再往更远的过去回退一点。
The seven billion billion billion atoms of the player’s body were created, long before this game, in the heart of a star. So the player, too, is information from a star. And the player moves through a story, which is a forest of information planted by a man called Julian, on a flat, infinite world created by a man called Markus, that exists inside a small, private world created by the player, who inhabits a universe created by…
那由七千亿亿亿原子组成的玩家的身体被创造了,远在这游戏之前, 在一颗恒星的内部。所以那玩家也是,来自一颗恒星的信息。而这个玩家贯穿这个故事的始末,源于一个叫Julian的人种下的信息种子长成的森林,一个叫 Markus的男人创造的无限世界,存在于一个由玩家创造的小的,私人世界里,而那又继承了宇宙创造的……
Shush. Sometimes the player created a small, private world that was soft and warm and simple. Sometimes hard, and cold, and complicated. Sometimes it built a model of the universe in its head; flecks of energy, moving through vast empty spaces. Sometimes it called those flecks “electrons” and “protons”.
嘘。有时这个玩家创造的小天地是柔软,温暖和简单的。有时是坚硬,冰冷和复杂的。有时它在脑中建造出宇宙的模型;斑斑点点的能量穿越广阔空旷的空间。有时它称呼这些斑点为“电子”和“质子”。
Sometimes it called them “planets” and “stars”.
有时它称呼它们为“行星”和“恒星”。
Sometimes it believed it was in a universe that was made of energy that was made of offs and ons; zeros and ones; lines of code. Sometimes it believed it was playing a game. Sometimes it believed it was reading words on a screen.
有时它确信它存在于一个由“开”和“关”;“0”和“1”;一行行的命令组成的宇宙。有时它确信他是在玩一个游戏。有时它确信他是在读着屏幕上的文字。
You are the player, reading words…
你就是那玩家,阅读着文字……
Shush… Sometimes the player read lines of code on a screen. Decoded them into words; decoded words into meaning; decoded meaning into feelings, emotions, theories, ideas, and the player started to breathe faster and deeper and realised it was alive, it was alive, those thousand deaths had not been real, the player was alive
嘘……有时这玩家读屏幕上的命令行。将它们解码成为文字;将文字解码为意义;将意义解码为感情,情绪,理论,想法,而玩家的呼吸开始急促并意识到了它是活着的,它是活生生的,那上千次的死亡不是真的,玩家是活着的。
You. You. You are alive.
你。你。你是活着的。
and sometimes the player believed the universe had spoken to it through the sunlight that came through the shuffling leaves of the summer trees
而有时这玩家相信宇宙通过穿越夏日树叶的那斑斓的阳光对它说话。
and sometimes the player believed the universe had spoken to it through the light that fell from the crisp night sky of winter, where a fleck of light in the corner of the player’s eye might be a star a million times as massive as the sun, boiling its planets to plasma in order to be visible for a moment to the player, walking home at the far side of the universe, suddenly smelling food, almost at the familiar door, about to dream again
有时这玩家相信宇宙透过晴朗的冬日夜空中,存在于它眼中一隅的星点星光,可能比太阳大上上百万倍的恒星沸腾着的电浆那一瞬间发出来的光对它说话,在宇宙的远侧行走回家的路上,突然闻到了食物,在那熟悉的门前,它又准备好再一次投入梦境
and sometimes the player believed the universe had spoken to it through the zeros and ones, through the electricity of the world, through the scrolling words on a screen at the end of a dream
而有时玩家相信宇宙透过零和一,透过世界的电力,透过屏幕上滚动的文字和梦的终结对他说话
and the universe said I love you
宇宙说我爱你
and the universe said you have played the game well
宇宙说你很好地玩了这游戏
and the universe said everything you need is within you<
宇宙说一切你所需的你都具有
and the universe said you are stronger than you know
宇宙说你比你所知的要强大
and the universe said you are the daylight
宇宙说你就是日光
and the universe said you are the night
宇宙说你就是黑夜
and the universe said the darkness you fight is within you<
宇宙说你所斗争的黑暗就在你心中
and the universe said the light you seek is within you
宇宙说你所寻找的光明就在你心中
and the universe said you are not alone
宇宙说你不是孤独的
and the universe said you are not separate from every other thing
宇宙说你不是和所有的事物所隔绝的
and the universe said you are the universe tasting itself, talking to itself, reading its own code
宇宙说你就是宇宙品尝着自己,对自己说话,阅读着它自己的代码。
and the universe said I love you because you are love.
宇宙说我爱你因为你就是爱。
And the game was over and the player woke up from the dream. And the player began a new dream. And the player dreamed again, dreamed better. And the player was the universe. And the player was love.
曲终人散。玩家开始了新的梦境。玩家再次做起了梦,更好的梦。玩家就是宇宙。玩家就是爱。
You are the player.
你就是那个玩家。
Wake up.
该醒了。

Otz买了个巨贵的移动硬盘的节奏

星期一, 22 十二月, 2014

黑五的时候米国亚马逊镁光M500 240G搞特价、基本500就到手了,没忍住就剁手了、关键是我原来的ssd真的没空间了Otz。
漂洋过海半个多月终于在昨天到了~今天去基友那里拿回来了。之前问了硬件大神关于2.5寸ssd选硬盘线的问题,参见http://bbs.2dgal.com/read.php?tid=465537
大神推荐了一篇文章http://bbs.pceva.com.cn/thread-98250-1-1.html
看了以后就买了根主控jms567的线。

于是先上三张图
IMG_5372
IMG_5373

IMG_5374

Read the rest of this entry »

只是无聊

星期六, 29 十一月, 2014

嘛、只是闲的蛋疼了、顺便复习下nodejs、周一下午某网站刚上线的时候就挖出来4个高危漏洞、_(:з」∠)_很好的设计不一定被很好地实现,于是漏洞就这么出来了

周一下午只写了一个未授权访问的利用、用了python、多线程下载效率高、看看代码就知道我在干嘛了

多线程的时候不知道为啥代理会bug……╮( ̄▽ ̄”)╭
get_image 自己猜吧_(:з」∠)_不让你们看、哈哈哈……

然后是到了周末、感冒了(┬_┬)然后又闲的蛋疼了、写了另外几个漏洞的利用、现在除了一个盲注的没fuzz出来表名其他的都已经很完善了,oracle还大小写敏感还让不然人活了(╯‵□′)╯︵┻━┻
然后是nodejs上新学到的几个需要注意的地方

一个是request默认是utf8、如果是gbk的页面的话需要这么写

如果没有encoding:null就算后面用了iconv也是锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷╮( ̄▽ ̄”)╭
参考http://stackoverflow.com/questions/23728945/cookie-not-sending-with-request-js
抄了一份带cookie的自动登录,然后学会了用cheerio,最后当截取的字符前面一堆\t replace又不好使的时候可以用.trim(),前后空白自动删除、点赞~

然后放张图
20141129210728
准备统计一下数据后去做个ppt之后大张旗鼓的去给他们报漏洞、_(:з」∠)_注意后面的有了其他的数据是因为我改利用代码了、下午感冒难受去睡觉了所以晚上才把代码更新上去╮( ̄▽ ̄”)╭

另外cnodejs的网站好像挂了……_(:з」∠)_唔、点根蜡烛祝他早日恢复

iOS 保卫萝卜2 存档分析

星期一, 20 十月, 2014

首先膜拜一下Hex-Rays、实在太屌了!这次真的是站到巨人的肩膀上了~
先来张效果图_(:з」∠)_
IMG_4624

IMG_0133

下午上课玩的时候一个激动差点站起来了……_(:з」∠)_老师还在讲台上默默地讲课……为了以后没有突然站起来的风险、我准备就把这玩意戳了。

除了宝石会有校验以外其他数据没有校验、noAD好像也是在线获取的。_(:з」∠)_不过有了这些已经无敌了~打到最后实在是过不去了……到了101、没改的时候65个金萝卜50个水晶萝卜、_(:з」∠)_其实也不算作弊啦~就是改了下道具的数目而已、本来这些东西也是可以用银子买来的。我这只是穷人的玩法╮( ̄▽ ̄”)╭

回到宿舍、下载一份、然后看存档、发现Http.dll和GUI.dll,两个文件内容一样……iOS你用啥Dll啊……明显有鬼、拿下来看一眼、被加密了。上clutch先把加密拔下来、然后扔IDA里、一会以后搜索Http.dll,然后cross reference
找到三个调用地址
20141020203552
两个读的一个写的,然后找了一下加密函数F5了一下、网上搜了一圈发现是XXTEA算法,加密解密是同一个函数
Read the rest of this entry »

デンキ街の本屋さん 真是太赞了!!

星期六, 18 十月, 2014

一定要吐槽一下!简直赞!!!ED太棒!

特别喜欢这几句
次元の壁乗り越えて あなたに会ってみたいの
秘密の魔法のチケットで
1%の確率で もしも気付いてくれるなら
その手を伸ばして 抱きしめてほしい

_(:з」∠)_查了一下10月2⑨才发售……好残念、还得等半个月……

main_visual

第一次参加XP靶场挑战赛

星期六, 2 八月, 2014

005FShhBjw1eix49nvsktj30j60matb6

_(:з」∠)_啊……看了两天书、忙活了一天……301字节的shellcode就写了一天。话说python本来是拿来提高效率的……我这个第一次用他的家伙竟然花了两个多小时才写出了用他计算API hash的脚本。

 

啊……就接触了3天来说,最后结果还是不错的。百度加强版我是第二个攻击成功的、但是以因为跟前面的POC方法类似、所以主办方把我排到第七去了……百度杀毒我是第十四个攻击成功的。金山我本地溢出成功、远程失败、那个时候已经是晚上7点多了……后来我们讨论的时候他们说那个可能是远程的靶机出问题了……也就是这次可以算自己达成了三连杀吧……

 

回头好好学一下aslr的处理方法好了……北信源这次才三个搞定的简直神了……【大雾

 

然后下次ISC见~_(:з」∠)_其实我觉得能学到东西更重要啊……这次理解了精确堆喷和ROP链的构造窍门还有DVE的使用姿势、不过DVE那个我到现在还是没想明白如何在利用完了漏洞以后还能保证堆栈不被破坏程序继续执行的……啊、不过感觉这些东西都挺有意思的、准备投入更多时间研究下~

_(:з」∠)_一天不见各位还好么

星期二, 17 六月, 2014

Σ( ° △ °|||)︴ 由于各种各种的问题……网站死掉了一天……其实到现在还有一堆问题Otz、啊…各位慢慢等吧、总会好起来的…明明人家都要考试了还得抽时间过来整理网站,蛋疼中……

Smash Hit存档分析

星期五, 9 五月, 2014

_(:з」∠)_这货前面还挺好玩的。加的两关太变态了=。=于是拆了存档拿来分析一下……

本来打算用一下gikdbg……结果最近作死入了俩A7的设备不太会玩所以只能放弃动态调试。

clutch先把游戏解一份出来然后丢进Hopper,String搜索progress找到

然后CrossReference找到调用位置。拆了那个函数就是了。不能动态调试好难受啊……

稍微分析了下那个sub_7ae30应该是初始化完了以后用zLib解压数据。版本1.2.3、问题是那个progression.xml并没有肉眼可见的zlib标志、应该是还有点加密……可以看到zlib解压完了应该就是个xml了,关键是zlib前面的加密是啥_(:з」∠)_这里先挖个坑。下周考完试有空再把坑填了。

_(:з」∠)_好像……真的必须学点arm汇编了……没有F5完全看不懂的节奏Orz

最后附一张突破天际的图……_(:з」∠)_其实游戏主要是lua啦、想要开心的玩耍只要改某个明文xml也能达到同样的目的
IMG_0070

日常吐槽

星期四, 8 五月, 2014

从学校搞了台服务器。CPU Xeon X3430内存只有2G、Orz真想吐槽这CPU性能还不如我笔记本的U。2G的内存跑了个64位系统还能干啥噗……天天开着这么费电、学术机构从来不在乎电能的消耗么……就这怎么节能减排啊噗……

最近在考虑要不要换电脑啊。纠结啊纠结。电脑上东西太多了懒得迁移数据……下周两门数学考试好烦…╮(﹀_﹀)╭睡觉去了各位晚安。感谢各位耐心看到最后。