NanoApe's recent timeline updates NanoApe's recent timeline updatesNanoApe's repos on GitHub
C++ · 108 watchers
Ingress-Field-Design
Ingress 多重规划
52 watchers
gugugu-tutorial
手把手教你如何咕咕咕！
C++ · 32 watchers
geekTencent-4-Tetris
🤖《腾讯极客挑战赛第四期：鹅罗斯方块》优胜程序源代码
Python · 21 watchers
auto-kickout-bot
A Telegram bot that automatically removes newly added group members
Python · 16 watchers
CatWatermark
14 watchers
geoguide-in-china
面向国内 Geocaching 新手的入坑指南
C++ · 13 watchers
Artificial-Intelligence-Input-Method
📚 The 1st homework of the Artificial Intelligence Introduction.
C++ · 11 watchers
Artificial-Intelligence-Connect-Four
📚 The 2nd homework of the Artificial Intelligence Introduction.
C++ · 11 watchers
Computational-Graphics-Quadric-Error-Metrics
📚 图形学小作业 基于边收缩的二次误差网格简化
Python · 6 watchers
ctf-flag-generator
A CTF leet flag generator
JavaScript · 6 watchers
jlpt-script
一个辅助 JLPT 考场捡漏的小工具
Python · 5 watchers
CTF-challenges
Python · 4 watchers
dorm-electricity
JavaScript · 4 watchers
iitc-plugins
Custom plugins for ingress-intel-total-conversion
Python · 4 watchers
IngressSojournerReminder
A Telegram Bot that reminds Ingress player to hack daily
Python · 4 watchers
mi-fitness-data-viz
A lightweight Python CLI that turns Xiaomi Mi Fitness exports into yearly activity, sleep, and heart‑rate stories with Matplotlib xkcd‑style charts.
Python · 2 watchers
Artificial-Intelligence-Digit-Recognizer
📚 The 3st homework of the Artificial Intelligence Introduction.
2 watchers
best-windows-apps
推荐好用、优秀的 Windows 应用
C · 2 watchers
Computational-Graphics-Realistic-Image-Rendering
📚 图形学小作业 真实图像渲染
Rust · 2 watchers
decaf-rust-compiler
📚 A decaf compiler written in Rust. Project in Principles and Practice of Compiler Construction.
C++ · 2 watchers
FourColourGift
Project: 拿破仑四色定理
JavaScript · 2 watchers
osu-Download-Button
Download beatmaps from some mirror sites (Bloodcat, Mengsky and inso)
1 watchers
3FS
A high-performance distributed file system designed to address the challenges of AI training and inference workloads.
1 watchers
awesome-deepseek-integration
1 watchers
awesome-telegram-bot
Manual picked bot of Telegram.
C++ · 1 watchers
Botzone-Tetris2
TypeScript · 1 watchers
clone-learn-tsinghua
C++ · 1 watchers
Computational-Graphics-Rasterization
📚 图形学小作业 光栅图形学
Python · 1 watchers
CTF-nc-docker
Build CTF Problems using Netcat in one Docker.
TSQL · 1 watchers
database-special-topic-training-hw
1 watchers
DeepSeek-R1
Python · 1 watchers
dida365-api
An unofficial Python client library for the Dida365/TickTick API.
1 watchers
Digital-Privacy
Information Protection & OSINT resources | 一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
Python · 1 watchers
ErHaBot
A telegram bot which can reply to text triggers, search text, show stats, show edits, etc. Inspired by bot @chinanet created by @paveo
1 watchers
Files
Python · 1 watchers
ingress-mission-arts-bot
Source code of @ingress_mission_arts_bot
Python · 1 watchers
ingress-mission-arts-js-bot
Python · 1 watchers
majsoul-daily-login
通过 GitHub Actions 每日定时登录雀魂
Python · 1 watchers
numerical-analysis-homework
C++ · 1 watchers
OOP-Library-Management-System
📚 OOP 作业——图书管理系统
C++ · 1 watchers
opencv_contrib
Repository for OpenCV's extra modules
Python · 1 watchers
operating-system-homework
Python · 0 watchers
adventofcode25
0 watchers
ArknightsAutoHelper
Arknights Auto Helper based on ADB and Python | 基于python的明日方舟护肝助手
0 watchers
Awesome
:computer: An awesome & curated list of best applications and tools for Windows.
0 watchers
blog-comment
C++ · 0 watchers
Botzone-Pacman2
the Bot in Botzone.
0 watchers
BurpSuitePro-2.1
什么? 你想用免费的BurpSuitePro版本!!!
0 watchers
bzip2
Fork of the bzip2 repository with a Meson build system
0 watchers
ccf-deadlines
⏰ Collaboratively track deadlines of conferences recommended by CCF (Website, Python Cli, Wechat Applet) / If you find it useful, please star this project, thanks~
Java · 0 watchers
cgeo-cn
c:geo - The powerful Android geocaching app. (CN Patched)
0 watchers
chromium-downloads
A website that helps users to find and download archived Chromium versions.
0 watchers
cipher_machine
Integrated tools to solve ciphers with only single html page.
0 watchers
cpython
The Python programming language
0 watchers
ctf-archives-fork
CTF Archives: Collection of CTF Challenges.
JavaScript · 0 watchers
ctf-writeup
0 watchers
CVE-2021-3156
TeX · 0 watchers
deeplearningbook-chinese
Deep Learning Book Chinese Translation
0 watchers
DeepSeek-V3
VHDL · 0 watchers
Digital_Electronics_Source
📚 数字逻辑实验
Shell · 0 watchers
docker-openvpn
🔒 OpenVPN server in a Docker container complete with an EasyRSA PKI CA
0 watchers
docker-zerotier-planet
一分钟私有部署 ZeroTier planet 服务
Python · 0 watchers
ehForwarderBot
An extensible message tunneling chat bot framework. Delivers messages between platforms and remotely control your other accounts.
0 watchers
exploits
0 watchers
fonteditor
在线字体编辑器
0 watchers
FontPruner
0 watchers
Fuzzing-Dicts
Web Security Dictionary
JavaScript · 0 watchers
GC-Assist
A userscript to enhance the geocaching.com experience.
0 watchers
github-profile-summary-cards
自用改版
JavaScript · 0 watchers
GitHubGraduation-2021
Join the GitHub Graduation Yearbook and "walk the stage" on June 5.
JavaScript · 0 watchers
greasyfork-script
0 watchers
gs-backend
Project Guiding Star: The Backend
0 watchers
Harry-Chen
TypeScript · 0 watchers
hb-helper
华宝条件单助手，快速打开华宝智投条件单网页，一键延期所有条件单
0 watchers
Hello_CTF-Shell
合法反弹shell一站式最廉价解决方案！！！！我VPS呢！卧槽过期了！！我要弹shell！！我一血没了！！！
JavaScript · 0 watchers
Historical-ranking-data-visualization-based-on-d3.js
这是一个数据可视化项目，能够将历史数据排名转化为动态柱状图图表
Rascal · 0 watchers
hosts
:statue_of_liberty:最新可用的google hosts文件。国内镜像：
0 watchers
IFSolver
JavaScript · 0 watchers
ingress-intel-total-conversion
intel.ingress.com total conversion user script with some new features. Should allow easier extension of the intel map.
0 watchers
Konano
TypeScript · 0 watchers
Learn-Project
清华大学网络学堂优化工具
Python · 0 watchers
Library-Seat-Status
A simple program to get the number of the remaining seats.
0 watchers
markeasting.github.io
0 watchers
Mastodon.py
Python wrapper for the Mastodon ( https://github.com/mastodon/mastodon/ ) API.
Verilog · 0 watchers
mips32-cpu
奋战一学期，造台计算机（编译出的bit文件在release中，可以直接食用）
JavaScript · 0 watchers
ModernWebPrograming
Web programing
0 watchers
MoYu
Android News APP - 2019 THU Java Summer Project
0 watchers
MoYu-backend
简易的用户系统 - MoYu 后端
Java · 0 watchers
MyFirstApp
0 watchers
NachtgeistW
Welcome to my GitHub profile!
Python · 0 watchers
NanoCDN
0 watchers
oh-my-tuna
Keep calm and use TUNA mirrors.
0 watchers
ohmyzsh-offline
Install oh-my-zsh offline
TypeScript · 0 watchers
OI-wiki
:star2: Wiki of OI / ICPC for everyone. （某大型游戏线上攻略，内含炫酷算术魔法）
0 watchers
opencv_extra
OpenCV extra data
JavaScript · 0 watchers
OPR-Tools
Go · 0 watchers
oss-auto-cert
阿里云 OSS 证书自动化工具
0 watchers
playwright_stealth
playwright stealth
0 watchers
pm2-webui
PM2 WebUI. Opensource Alternative to PM2 Plus. Minimalistic App Manager and Log Viewer
0 watchers
podzol
A docker container scaling, port forwarding & lifetime manager
 |
NanoApeV2EX member #241382, joined on 2017-07-19 23:56:46 +08:00 |
Konano
| 如何绕过黑名单刷爆七牛云？只需一点 XFF 魔法！
14 宽带症候群 • NanoApe • Sep 2, 2024 • Lastly replied by EastHorse
|
21 |
| 没想到在腾讯云上的服务器遭受到了来自腾讯云的重放攻击 程序员 • NanoApe • Jun 21, 2022 • Lastly replied by opengps | 17 |
NanoApe's recent replies
Jul 26, 2024 Replied to a topic by NanoApe › 宽带症候群 › 如何绕过黑名单刷爆七牛云？只需一点 XFF 魔法！ |
@Oohuo 阿里云都这样，那也太缺心眼了，明摆着 XFF 就不应该可信还加到 log 里面……
Jul 25, 2024 Replied to a topic by doveyoung › NGINX › 近期在 nginx 日志发现几个奇怪的 IP 访问记录，怎么往下查没思路了，也不想查了，交给有缘的大佬吧 |
就是被重放了，但意图大概不是为了攻击。参照 https://www.v2ex.com/t/860476
Jul 25, 2023 Replied to a topic by FeifeiJin › 分享发现 › 33 岁从外包主动辞职独自移居东京---伟大与失败 |
@a0z9x7 好奇下你是基于宏观层面下的判断吗？因为我感觉美国并不安全啊，枪击案之类的
Jul 24, 2023 Replied to a topic by airycanon › 问与答 › 家人的 Apple ID 开了双重认证，仍然被钓鱼，求大佬解惑，也顺便给大家提个醒 |
@airycanon 都上升到诈骗了为啥还要联系苹果？警察不太会？
Jul 24, 2023 Replied to a topic by airycanon › 问与答 › 家人的 Apple ID 开了双重认证，仍然被钓鱼，求大佬解惑，也顺便给大家提个醒 |
@fuliti 主要这个密码弹窗是伪造 Apple UI 的，迷惑性特别强（除了「 AppLe 」和「登陆」）
https://arstechnica.com/information-technology/2017/10/beware-of-sketchy-ios-popups-that-want-your-apple-id/
也算是个历史问题了
https://arstechnica.com/information-technology/2017/10/beware-of-sketchy-ios-popups-that-want-your-apple-id/
也算是个历史问题了
Jun 9, 2023 Replied to a topic by baobao1270 › 信息安全 › acme.sh 存在 RCE 漏洞，已经被国产 HiCA 利用 |
看了眼，并不是恶性利用，只是为了显示付款信息和收款二维码之类的
Sep 8, 2022 Replied to a topic by KomeijiSatori › 宽带症候群 › Everything 更新服务疑被劫持 |
无法复现，要不看看用 HTTPS 还能被劫持吗？
Jun 18, 2022 Replied to a topic by NanoApe › 程序员 › 没想到在腾讯云上的服务器遭受到了来自腾讯云的重放攻击 |
@jim9606 你说的有道理，这里的确应该使用 POST 而不是 GET ，算是一种错误的实现了。等我修改完看看还会不会有类似的现象产生。
依赖端口号和路径来保密当然不够安全，只是一种性价比高的简单保护罢了，现在加上有意义的 Token 也可以防止重放攻击，挺好的。（主要是整证书太麻烦了
依赖端口号和路径来保密当然不够安全，只是一种性价比高的简单保护罢了，现在加上有意义的 Token 也可以防止重放攻击，挺好的。（主要是整证书太麻烦了
Jun 18, 2022 Replied to a topic by NanoApe › 程序员 › 没想到在腾讯云上的服务器遭受到了来自腾讯云的重放攻击 |
@eason1874 得看具体使用场景吧，我一般是脚本访问，所以不存在别的中间件能够获得请求 URL ，除了流量嗅探
Select Language