agid])) {
            foreach ($g_flag_thread[$flagid] as &$val) {
                flag_thread_filter($val);
            }
            flag_thread_set($flagid, $g_flag_thread[$flagid]);
        }
    }
    return $g_flag_thread[$flagid];
}

// 设置缓存 $key = flagid / $val = flagid下tid数组
function flag_thread_set($key, $val)
{
    global $g_flag_thread;
    FALSE === $g_flag_thread and $g_flag_thread = website_get('flag_thread');
    empty($g_flag_thread) and $g_flag_thread = array();
    $g_flag_thread[$key] = $val;
    return website_set('flag_thread', $g_flag_thread);
}

// 删除flag下tid缓存
function flag_thread_delete_cache($flagid)
{
    global $g_flag_thread;
    FALSE === $g_flag_thread and $g_flag_thread = website_get('flag_thread');
    empty($g_flag_thread) and $g_flag_thread = array();
    if (isset($g_flag_thread[$flagid])) {
        unset($g_flag_thread[$flagid]);
        website_set('flag_thread', $g_flag_thread);
    }
    return TRUE;
}

// Delete by tid / 通过tid删除flag下的主题和对应flagid缓存
function flag_thread_delete_by_tid($tid)
{
    global $g_flag_thread;
    FALSE === $g_flag_thread and $g_flag_thread = website_get('flag_thread');

    if (empty($g_flag_thread)) {
        $g_flag_thread = array();
    } else {

        $thread = well_thread_read_cache($tid);
        $arrlist = flag_thread_find($tid, 1, $thread['flags']);

        $flagarr = $ids = array();
        foreach ($arrlist as $val) {
            $flagarr[] = $val['flagid'];
            $ids[] = $val['id'];

            if (isset($g_flag_thread[$val['flagid']])) unset($g_flag_thread[$val['flagid']]);
        }

        website_set('flag_thread', $g_flag_thread);

        // 主键更新
        flag_update($flagarr, array('count-' => 1));

        // 主键删除
        flag_thread_delete($ids);
    }

    return TRUE;
}

// 主键删除 通过$flagid删除flag下的主题和对应flagid缓存
function flag_thread_delete_by_flagid($flagid)
{
    global $g_flag_thread;

    

    FALSE === $g_flag_thread and $g_flag_thread = website_get('flag_thread');

    

    $read = flag_read_cache($flagid);
    if (empty($read)) return TRUE;

    $arrlist = flag_thread_find_by_flagid($flagid, 1, $read['count']);
    if (empty($arrlist)) return TRUE;

    

    $flagarr = $ids = array();
    $n = 0;
    foreach ($arrlist as $val) {
        ++$n;
        $flagarr[] = $val['flagid'];
        $ids[] = $val['id'];

        if (isset($g_flag_thread[$flagid])) unset($g_flag_thread[$flagid]);
        
    }

    website_set('flag_thread', $g_flag_thread);

    // 主键更新
    flag_update($flagarr, array('count-' => $n));

    

    // 主键删除
    $r = flag_thread_delete($ids);

    
    return $r;
}




?>break;
    }
    $r = array('filesize' => filesize($tmpfile), 'width' => $des_width, 'height' => $des_height);;
    copy($tmpfile, $destfile);
    is_file($tmpfile) && unlink($tmpfile);
    imagedestroy($img_dst);
    return $r;
}

/**
 * 图片裁切
 *
 * @param string $sourcefile 原图片路径(绝对路径/abc.jpg)
 * @param string $destfile 裁切后生成新名称(绝对路径/rename.jpg)
 * @param int $clipx 被裁切图片的X坐标
 * @param int $clipy 被裁切图片的Y坐标
 * @param int $clipwidth 被裁区域的宽度
 * @param int $clipheight 被裁区域的高度
 * image_clip('xxx/x.jpg', 'xxx/newx.jpg', 10, 40, 150, 150)
 */
function well_image_clip($sourcefile, $destfile, $clipx, $clipy, $clipwidth, $clipheight, $getimgsize = '')
{
    global $conf;
    empty($getimgsize) AND $getimgsize = getimagesize($sourcefile);
    if (empty($getimgsize)) {
        return 0;
    } else {
        $imgwidth = $getimgsize[0];
        $imgheight = $getimgsize[1];
        if (0 == $imgwidth || 0 == $imgheight) {
            return 0;
        }
    }

    if (!function_exists('imagecreatefromjpeg')) {
        copy($sourcefile, $destfile);
        return filesize($destfile);
    }
    switch ($getimgsize[2]) {
        case 1 :
            $imgcolor = imagecreatefromgif($sourcefile);
            break;
        case 2 :
            $imgcolor = imagecreatefromjpeg($sourcefile);
            break;
        case 3 :
            $imgcolor = imagecreatefrompng($sourcefile);
            break;
        case 15: // WBMP
            $imgcolor = imagecreatefromwbmp($sourcefile);
            break;
        case 18: // WEBP
            $imgcolor = imagecreatefromwebp($sourcefile);
            break;
    }

    if (!$imgcolor) return 0;

    $img_dst = imagecreatetruecolor($clipwidth, $clipheight);
    imagefill($img_dst, 0, 0, 0xFFFFFF);
    imagecopyresampled($img_dst, $imgcolor, 0, 0, $clipx, $clipy, $imgwidth, $imgheight, $imgwidth, $imgheight);

    $tmppath = isset($conf['tmp_path']) ? $conf['tmp_path'] : ini_get('upload_tmp_dir') . '/';
    '/' == $tmppath AND $tmppath = './tmp/';

    $tmpfile = $tmppath . md5($destfile) . '.tmp';
    imagejpeg($img_dst, $tmpfile, 75);
    $n = filesize($tmpfile);
    copy($tmpfile, $destfile);
    is_file($tmpfile) && unlink($tmpfile);
    return $n;
}

function well_image_ext($filename) {
    return strtolower(substr(strrchr($filename, '.'), 1));
}


?><!DOCTYPE html><html lang="zh-cn"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta http-equiv="Cache-Control" content="no-transform" /><meta http-equiv="Cache-Control" content="no-siteapp" /><meta name="viewport" content="width=device-width,minimum-scale=1,maximum-scale=1,initial-scale=1,maximum-scale=1" /><meta name="referrer" content="origin-when-cross-origin"><meta name="applicable-device" content="pc,mobile" /><meta name="MobileOptimized" content="width" /><meta name="HandheldFriendly" content="true" /><meta name="renderer" content="webkit" /><meta name="keywords" content="【漏洞复现】永恒之蓝 MS17-010 远程溢出漏洞(CVE-2017-0143)" /><meta name="description" content="【漏洞复现】永恒之蓝 MS17-010 远程溢出漏洞(CVE-2017-0143)" /><title>【漏洞复现】永恒之蓝 MS17-010 远程溢出漏洞(CVE-2017-0143)-软件玩家 - 软件改变生活！
    </title><link rel="shortcut icon" href="/view/img/favicon.ico" /><link rel="icon" sizes="32x32" href="/view/img/favicon.ico"><link rel="Bookmark" href="/view/img/favicon.ico" /><link rel="stylesheet" href="/view/template/quzhiwa/css/style.css?2.3.0"><script src="/view/template/quzhiwa/js/jquery-2.2.4.min.js?2.3.0" type="text/javascript"></script></head><body><div class="box-wrap"><div class="header"><div class="logo-wrap"><a href="/" title="编程频道|软件玩家 - 软件改变生活！" class="logo-img-wrap"><img src="/view/template/quzhiwa/img/logo.png" alt="编程频道|软件玩家 - 软件改变生活！" class="logo" /><h2>编程频道|软件玩家 - 软件改变生活！</h2></a><div class="sub-title">软件玩家提供编程技术学习平台。欢迎大家踊跃投稿！</div></div><div class="menu-header-container"><ul class="menu"><li class="navbar-item" data-active="fid-0"><a href="/" title="首页"><i class="mico-home"></i>首页</a></li><li class="navbar-item" data-active="fid-1"><a href="/biancheng" title="编程"><i class="mico-tuwen"></i>编程</a></li><li class="navbar-item" data-active="fid-4"><a href="/web" title="IT技术"><i class="mico-tuwen"></i>IT技术</a></li><li class="navbar-item" data-active="fid-5"><a href="/shuma" title="数码大全"><i class="mico-tuwen"></i>数码大全</a></li><li class="navbar-item"><a href="/my" title="会员"><i class="mico-gengduo"></i>会员
</a></li></ul></div><div class="wx-code"><i class="mcico mico-erweima"></i>扫一扫
<img src="/view/template/quzhiwa/img/wx.png" alt="扫一扫" class="wx-code-img" /></div></div>
<div class="betaflare-com main"><div class="betaflare-com top-bar"><div class="betaflare-com crumbs"><a href="/">首页</a><a href="/biancheng">编程</a><span>正文内容</span></div><form method="post" class="search-form" action="/operate/search.html" ><button class="mcico mico-search" type="submit"></button><input type="text" class="search-input" name="keyword" placeholder="关键词" /><input type="hidden" name="range" value="1"></form></div><div class="betaflare-com post-wrap"><div class="betaflare-com post-header"><h1 class="post-title">【漏洞复现】永恒之蓝 MS17-010 远程溢出漏洞(CVE-2017-0143)</h1><div class="betaflare-com post-meta"><ul class="post-categories"><li><a href="/biancheng">编程</a></li></ul><span>更新时间：2024-09-28</span><span><i class="mcico mico-huo"></i>195</span><div class="betaflare-com tag-wrap post-header-tags"></div></div></div><div class="betaflare-com post-content"><blockquote style="padding: 0px; margin: 0;" class="author_bq"><a href="/user/1.html" title="admin"><div class="betaflare-com video_docimg"><img src="/upload/avatar/000/1.png?1696565124"></div><div class="betaflare-com video_docinfo"><div><span>admin</span><span class="professional">管理员组</span></div><p class="video_hospital">文章数量:1516870</p></div></a></blockquote><path stroke-linecap="round" d="M5,0 0,2.5 5,5z"  style="-webkit-tap-highlight-color: rgba(0, 0, 0, 0);"></path>
                    </svg>
                    <p></p> 
 
 <h4>文章目录</h4> 
 <ul>
  <li>声明</li>
  <li>前言</li>
  <li>一、漏洞原理简述</li>
  <li>二、漏洞代码深层解析</li>
  <li>三、实验步骤</li>
  <li>四、漏洞补丁</li>
  <li>总结</li>
 </ul> 
 
<p></p> 
<h2>声明</h2> 
<p>本篇文章仅用于技术研究与技术学习，切勿用于非授权下攻击行为，切记！</p> 
<hr> 
<h2>前言</h2> 
<p>Windows7 存在 MS17-010 永恒之蓝(远程溢出漏洞) ，该漏洞是方程式组织在其漏洞利用框架中一个针对SMB服务进行攻击的漏洞，该漏洞导致攻击者在目标系统上可以执行任意代码</p> 
<hr> 
<h2>一、漏洞原理简述</h2> 
<p>MS17-010漏洞出现在Windows SMB v1中的内核态函数 <strong>srv!SrvOs2FeaListToNt</strong> 在处理FEA(File Extended Attributes)转换时，在大非分页池(Large Non-Paged Kernel Pool)上存在缓冲区溢出。</p> 
<p>函数 <strong>srv!SrvOs2FeaListToNt</strong> 在将FEA list转换成NTFEA(Windows NT FEA) list前会调用<strong>srv!SrvOs2FeaListSizeToNt</strong> 去计算转换后的FEA lsit的大小，因计算大小错误，而导致<strong>缓冲区溢出</strong>。</p> 
<hr> 
<h2>二、漏洞代码深层解析</h2> 
<p><strong>参考如下文章对Windows7 MS17-010 永恒之蓝漏洞做了详细的解析，代码层面的漏洞产生方式</strong></p><p class="tag">
                本文标签：
                <a style="margin-right: 10px" href="/tag/812.html" target="_blank">漏洞</a><a style="margin-right: 10px" href="/tag/11466.html" target="_blank">CVE</a></p><div class="betaflare-com copyright"><blockquote><p>
                        版权声明：本文标题：【漏洞复现】永恒之蓝 MS17-010 远程溢出漏洞(CVE-2017-0143) 内容由网友自发贡献，该文观点仅代表作者本人，
                        转载请联系作者并注明出处：<a href="https://www.betaflare.com/biancheng/1727511622a1261453.html">https://www.betaflare.com/biancheng/1727511622a1261453.html</a>，
                        本站仅提供信息存储空间服务，不拥有所有权，不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容，一经查实，本站将立刻删除。
                    </p></blockquote></div></div><div class="betaflare-com block-wrap single-relative"><h2 class="block-title">更多相关文章</h2><div class="betaflare-com post-list"><div class="betaflare-com post-item"><a href="/biancheng/1727340726a1239354.html" class="post-item-title" title="kali linux利用MS12-020漏洞入侵windows xp ,windows 7"><h3>kali linux利用MS12-020漏洞入侵windows xp ,windows 7</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-9-26</div></div><p class="post-item-summary">实验环境&amp;#xff1a; 攻击机&amp;#xff1a;kali linux  ip:192.168.172.134 目标机&amp;#xff1a;windows server 2003 Enterprise x64 SP2  i</p></div><div class="betaflare-com post-item"><a href="/biancheng/1727359988a1242624.html" class="post-item-title" title="[漏洞挖掘与防护] 02.漏洞利用之MS08-067远程代码执行漏洞复现及深度防御"><h3>[漏洞挖掘与防护] 02.漏洞利用之MS08-067远程代码执行漏洞复现及深度防御</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-9-26</div></div><p class="post-item-summary">这是作者新开的一个专栏——“漏洞挖掘与防护”，前期会复现各种经典和最新漏洞，并总结防护技巧；后期尝试从零学习漏洞挖掘技术，包括Web漏洞和二进制及IOT相关漏洞，以及Fuzzing技术。新的征程，新的开启，漫漫长征路，偏向虎山行。享受过程，</p></div><div class="betaflare-com post-item"><a href="/biancheng/1728673739a1399133.html" class="post-item-title" title="分享-黑客论坛软件下载-手把手教漏洞自学路线"><h3>分享-黑客论坛软件下载-手把手教漏洞自学路线</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-10-12</div></div><p class="post-item-summary">分享-黑客论坛软件下载-手把手教漏洞自学路线 1.计算机之家 开放注册了&amp;#xff0c;没有ID的快去抢咯。 计算机之家 开放注册了 刚去抢了个3位的号 2.原创地位开放 3.自由之翼开放注册 为了提升论坛人气让更多人加</p></div><div class="betaflare-com post-item"><a href="/biancheng/1729045266a1445628.html" class="post-item-title" title="Windows各版本以及漏洞"><h3>Windows各版本以及漏洞</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-10-16</div></div><p class="post-item-summary">目录 MS-Dos Win 9X Win NT Windows Server .NET FrameWork PowerShell IIS6.0漏洞 解析漏洞 IIS7.07.5漏洞 畸形解析漏洞 MS-Dos 版本号发布时间</p></div><div class="betaflare-com post-item"><a href="/biancheng/1731684198a1634067.html" class="post-item-title" title="攻下windows7第二天——永恒之蓝（MS017-010）漏洞"><h3>攻下windows7第二天——永恒之蓝（MS017-010）漏洞</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-11-15</div></div><p class="post-item-summary">攻下windows7第二天——永恒之蓝&amp;#xff08;MS017-010&amp;#xff09;漏洞 一、永恒之蓝介绍 永恒之蓝是在Windows的SMB服务处理SMB v1请求时发生的漏洞&amp;#xff0c;这个漏洞导致攻</p></div><div class="betaflare-com post-item"><a href="/biancheng/1731734035a1636754.html" class="post-item-title" title="Windows远程桌面授权服务远程代码执行漏洞CVE-2024-38077"><h3>Windows远程桌面授权服务远程代码执行漏洞CVE-2024-38077</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-11-16</div></div><p class="post-item-summary">一、 简述     根据2024年8月9日&amp;#xff0c;国家信息安全漏洞共享平台&amp;#xff08;CNVD&amp;#xff09;收录了Windows远程桌面许可服务远程代码执行漏洞&amp;#xff08;CNVD-202</p></div><div class="betaflare-com post-item"><a href="/biancheng/1731878539a1644570.html" class="post-item-title" title="利用永恒之蓝漏洞(ms17-010)对win7上传勒索病"><h3>利用永恒之蓝漏洞(ms17-010)对win7上传勒索病</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-11-18</div></div><p class="post-item-summary">攻击机kali&amp;#xff1a;192.168.83.136 靶机win7&amp;#xff1a;192.168.83.144 注意开始攻击前要设置快照 一、漏洞复现 1.启动msf 简介&amp;#xff1a; Metaspl</p></div><div class="betaflare-com post-item"><a href="/biancheng/1734802327a1804981.html" class="post-item-title" title="用永恒之蓝漏洞攻击Windows 7 的靶机"><h3>用永恒之蓝漏洞攻击Windows 7 的靶机</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-12-22</div></div><p class="post-item-summary">永恒之蓝 Ms17010 准备环境&amp;#xff1a; Windows 7 kali linux 先查看ip 然后双方网络互ping&amp;#xff0c;确认双方的网络是可以互通的 在kali上用nmap扫描Windows的ip 回显</p></div><div class="betaflare-com post-item"><a href="/biancheng/1735483292a1867606.html" class="post-item-title" title="win7四大基础漏洞复现(死亡蓝屏,构造payload,永恒之蓝shift5)，以及修复方案"><h3>win7四大基础漏洞复现(死亡蓝屏,构造payload,永恒之蓝shift5)，以及修复方案</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2024-12-29</div></div><p class="post-item-summary">玩转win7四大漏洞的俩天以及解决方案 前言 本教程旨在向安全研究人员和IT专业人士展示如何发现和应对潜在的安全威胁&amp;#xff0c;而非鼓励任何非法或未经授权的活动。在使用本教程中的技术时&amp;#xff0c;请确保遵守所有适用</p></div><div class="betaflare-com post-item"><a href="/biancheng/1737887489a2031560.html" class="post-item-title" title="漏洞又来！ windows远程桌面服务远程执行代码漏洞"><h3>漏洞又来！ windows远程桌面服务远程执行代码漏洞</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2025-1-26</div></div><p class="post-item-summary">声明&amp;#xff1a;本文引用翻译来源于微软官网&amp;#xff08;链接查看&amp;#xff1a;https:portal.msrc.microsoften-USsecurity-guidanceadvisoryCV</p></div><div class="betaflare-com post-item"><a href="/biancheng/1737956082a2040832.html" class="post-item-title" title="Web 漏洞扫描工具 AppScan 和 AWVS 使用方式"><h3>Web 漏洞扫描工具 AppScan 和 AWVS 使用方式</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2025-1-27</div></div><p class="post-item-summary">Web 漏洞扫描工具 AppScan 和 AWVS 使用方式 文章目录 Web 漏洞扫描工具 AppScan 和 AWVS 使用方式0x01 AppScan 基本操作1.AppScan 简介1.1 win10 永恒之黑漏洞简介1.2 影响版</p></div><div class="betaflare-com post-item"><a href="/biancheng/1738020156a2050394.html" class="post-item-title" title="Windows系统组件漏洞"><h3>Windows系统组件漏洞</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2025-1-28</div></div><p class="post-item-summary">目录 什么是组件1.CVE-2017-8464原理复现环境部署远程监听 2.MS11_003 溢出漏洞原理复现下一步提权 3.CVE-2019-07084.CVE-2020-0796&amp;#xff08;永恒之黑&amp;#xff09;5</p></div><div class="betaflare-com post-item"><a href="/biancheng/1739729724a2188279.html" class="post-item-title" title="如何通过微软MS漏洞编号下载WINDWOS补丁"><h3>如何通过微软MS漏洞编号下载WINDWOS补丁</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2025-2-17</div></div><p class="post-item-summary">https:www.catalog.update.microsofthome.aspx 进入微软补丁下载链接&amp;#xff0c;搜索框中搜索MS编号如下图所示&amp;#xff1a; products列为补丁对应的系统版本&am</p></div><div class="betaflare-com post-item"><a href="/biancheng/1740354429a2265696.html" class="post-item-title" title="windows server 2008漏洞修复后无法正常开机解决办法"><h3>windows server 2008漏洞修复后无法正常开机解决办法</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2025-2-24</div></div><p class="post-item-summary">windows server 2008漏洞修复后无法正常开机解决办法 今天客户的一台服务器由于装了EDR杀毒软件，自动修复了漏洞，重启后无法正常进入windows界面，后来通过CMD编写代码+寻找合适阵列驱动，成功恢复。现在来讲下过程 1、</p></div><div class="betaflare-com post-item"><a href="/biancheng/1740414184a2273291.html" class="post-item-title" title="【漏洞复现】H3C Web网管登录任意文件读取漏洞"><h3>【漏洞复现】H3C Web网管登录任意文件读取漏洞</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">2025-2-25</div></div><p class="post-item-summary">Nx01 产品简介 H3C设备的Web网管是指H3C公司生产的网络设备的网络管理界面。它可以通过Web浏览器进行访问和操作&amp;#xff0c;以实现对网络设备的配置、管理和监控。 Nx02 漏洞描述 jquery旧版本存在任意文件读取</p></div><div class="betaflare-com post-item"><a href="/biancheng/1743866122a2552615.html" class="post-item-title" title="黑莓隐瞒数月后承认自家系统存在漏洞，大众、宝马纷纷“躺枪”"><h3>黑莓隐瞒数月后承认自家系统存在漏洞，大众、宝马纷纷“躺枪”</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">12月前</div></div><p class="post-item-summary">黑莓手机作为将全键盘设计做得最成功的手机&amp;#xff0c;黑莓曾是无数用户的手机首选。近年来随着安卓和iOS的快速崛起&amp;#xff0c;黑莓早已放弃硬件业务&amp;#xff0c;向移动安全和通信软件服务商转型&amp;#xff</p></div><div class="betaflare-com post-item"><a href="/biancheng/1747698529a2745957.html" class="post-item-title" title="红队白帽必经之路(20)——实战之使用 ms17-010 永恒之蓝漏洞对 win7 进行渗透[既然是红队，那就对自己狠一点]"><h3>红队白帽必经之路(20)——实战之使用 ms17-010 永恒之蓝漏洞对 win7 进行渗透[既然是红队，那就对自己狠一点]</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">10月前</div></div><p class="post-item-summary">欢迎各位彦祖与热巴畅游本人专栏与博客 你的三连是我最大的动力 以下图片仅代表专栏特色 [点击箭头指向的专栏名即可闪现] 专栏跑道一 ➡️网络空间安全——全栈前沿技术持续深入学习  专栏跑道二 ➡️ 24 Network Security -</p></div><div class="betaflare-com post-item"><a href="/biancheng/1766070742a3250038.html" class="post-item-title" title="获得管理员权限的技术途径与风险分析"><h3>获得管理员权限的技术途径与风险分析</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">3月前</div></div><p class="post-item-summary"></p></div><div class="betaflare-com post-item"><a href="/biancheng/1766557735a3252189.html" class="post-item-title" title="微软MS17-010漏洞全解：原理、防护与修复措施"><h3>微软MS17-010漏洞全解：原理、防护与修复措施</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/biancheng" target="_blank">编程</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">3月前</div></div><p class="post-item-summary"></p></div><div class="betaflare-com post-item"><a href="/web/1771526686a3266524.html" class="post-item-title" title="掌握MS17-010永恒之蓝漏洞：简单指南，让您的Windows 2008R2免受攻击"><h3>掌握MS17-010永恒之蓝漏洞：简单指南，让您的Windows 2008R2免受攻击</h3><div class="betaflare-com post-item-cover" style="display:inline-grid"><ul class="post-categories"><li><a href="/web" target="_blank">IT技术</a></li></ul></div></a><div class="betaflare-com post-item-footer"><div class="betaflare-com tag-wrap"></div><div class="betaflare-com post-item-meta">1月前</div></div><p class="post-item-summary">【1】Microsoft Windows SMB 输入验证漏洞(CVE-2017-0143)(方程式工具-永恒之蓝)[原理扫描] 【2】Microsoft Windows SMB 输入验证漏洞(CVE-2017-0144)(方</p></div></div></div><div class="betaflare-com comments"><div class="betaflare-com postcomm block-wrap" id="divCommentPost"><h2 class="block-title">发表评论</h2><form id="saypl" target="_self" method="post" name="saypl" action="/comment/create/1261453.html?safe_token=QsZAaqMEM9KRaJ33QNuETue_2FeQwVKT7LrhqXrHLv7tmB5KTdvjFhZO3wt_2B1akGGlz9E5OyctwlSQ3NTNgO3Etw_3D_3D"><input type="hidden" name="doctype" value="1" /><input type="hidden" name="quotepid" value="0" /><div class="betaflare-com comment-box comment-textarea"><textarea name="message" id="txaArticle" class="text" cols="50" rows="4" tabindex="5" placeholder="评论内容"></textarea></div><input name="sumbit" type="submit" tabindex="6" value="发表评论" class="sub"></form></div></div><div class="sn-comments"><div class="sn-comments__title">全部评论&nbsp;0</div><div class="sn-comments__body"><div class="sn-empty">暂无评论</div></div></div></div></div><div class="aside"><div class="block-wrap" id="side-top-dxt"><h2 class="block-title">推荐文章<i class="mcico mico-right"></i></h2><div class="mcdas"><a href="/biancheng/1772310639a3273410.html" title="遇到QQ打开不了网页的尴尬？试试这些快速修复方法！" class="photo-item" target="_blank" style="background:#364cc6"><div class="photo-item-inner"><h3 class="photo-item-title">遇到QQ打开不了网页的尴尬？试试这些快速修复方法！</h3></div></a><a href="/biancheng/1772427416a3274270.html" title="VMware中‘****’磁盘引发的快照无法开启之谜" class="photo-item" target="_blank" style="background:#364cc6"><div class="photo-item-inner"><h3 class="photo-item-title">VMware中‘****’磁盘引发的快照无法开启之谜</h3></div></a><a href="/web/1772450335a3274530.html" title="理解你的电脑：解码hiberfil.sys和pagefile.sys这两个重要文件的作用与影响" class="photo-item" target="_blank" style="background:#364cc6"><div class="photo-item-inner"><h3 class="photo-item-title">理解你的电脑：解码hiberfil.sys和pagefile.sys这两个重要文件的作用与影响</h3></div></a><a href="/web/1772585351a3275432.html" title="NVIDIA显卡实力榜2023：最新排名公布" class="photo-item" target="_blank" style="background:#364cc6"><div class="photo-item-inner"><h3 class="photo-item-title">NVIDIA显卡实力榜2023：最新排名公布</h3></div></a><a href="/biancheng/1773097204a3276662.html" title="遇到《庄园领主》的vcomp100.dll丢失？这篇攻略帮你修复游戏难题！" class="photo-item" target="_blank" style="background:#364cc6"><div class="photo-item-inner"><h3 class="photo-item-title">遇到《庄园领主》的vcomp100.dll丢失？这篇攻略帮你修复游戏难题！</h3></div></a></div></div><div class="block-wrap" id="side-hot-view-item"><h2 class="block-title">热门文章<i class="mcico mico-right"></i></h2><ul><li class="mclas"><div class="list-content"><a title="Windows XP下部署Cisco TFTP服务的简易步骤详解" target="_blank" href="/web/1772287368a3273155.html"><h3>Windows XP下部署Cisco TFTP服务的简易步骤详解</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="想在Win10上玩点不一样的？学会「烟雾弹」设置，让你的游戏画面更酷炫！" target="_blank" href="/web/1772293380a3273222.html"><h3>想在Win10上玩点不一样的？学会「烟雾弹」设置，让你的游戏画面更酷炫！</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="AlmaLinux环境下的Kubernetes部署挑战？看这里，实现K8s集群离线安装全流程（含Windows镜像打包技巧）！" target="_blank" href="/biancheng/1772303927a3273340.html"><h3>AlmaLinux环境下的Kubernetes部署挑战？看这里，实现K8s集群离线安装全流程（含Windows镜像打包技巧）！</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="MSVCP110.dll出错不慌张，快速修复指南在此！" target="_blank" href="/biancheng/1772456471a3274601.html"><h3>MSVCP110.dll出错不慌张，快速修复指南在此！</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="从新手到高手：电脑开关机故障全攻略" target="_blank" href="/biancheng/1772475139a3274791.html"><h3>从新手到高手：电脑开关机故障全攻略</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="让你的Win7游戏不再卡顿！修复DirectX错误小技巧" target="_blank" href="/web/1772487491a3274927.html"><h3>让你的Win7游戏不再卡顿！修复DirectX错误小技巧</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="CentOS7.6远程桌面连接秘籍：添加子账户实例" target="_blank" href="/biancheng/1772586561a3275445.html"><h3>CentOS7.6远程桌面连接秘籍：添加子账户实例</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="一学就会：利用Adobe Flash Player高效分享文件" target="_blank" href="/web/1772621797a3275844.html"><h3>一学就会：利用Adobe Flash Player高效分享文件</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="电脑自动休眠？3步快速设置自动关机！" target="_blank" href="/biancheng/1772654340a3276213.html"><h3>电脑自动休眠？3步快速设置自动关机！</h3></a><span class="post-date">1月前</span></div></li><li class="mclas"><div class="list-content"><a title="QQ安装XP系统，卡壳了？故障排查指南！" target="_blank" href="/web/1773234643a3277135.html"><h3>QQ安装XP系统，卡壳了？故障排查指南！</h3></a><span class="post-date">24天前</span></div></li></ul></div><div class="block-wrap" id="side-new-view-item"><h2 class="block-title">最新文章<i class="mcico mico-right"></i></h2>