帅朱|朱帅's Blog http://www.shuaizhu.com/wordpress Simply is the Best Thu, 03 May 2012 02:20:56 +0000 en hourly 1 http://wordpress.org/?v=3.0.2 php在linux下写文件及换行 http://www.shuaizhu.com/wordpress/php%e5%9c%a8linux%e4%b8%8b%e5%86%99%e6%96%87%e4%bb%b6%e5%8f%8a%e6%8d%a2%e8%a1%8c/ http://www.shuaizhu.com/wordpress/php%e5%9c%a8linux%e4%b8%8b%e5%86%99%e6%96%87%e4%bb%b6%e5%8f%8a%e6%8d%a2%e8%a1%8c/#comments Thu, 03 May 2012 02:18:54 +0000 admin http://www.shuaizhu.com/wordpress/?p=2179 <?php $fp=fopen('url.txt',"a"); if(!$fp){ die("fopen error"); } for($i=0;$i<9999;$i++){ $line_url="http://".rand(19999,99999).'.com'; fputs($fp,$line_url."\\nn"); } fclose($fp); echo "Done"; ]]> http://www.shuaizhu.com/wordpress/php%e5%9c%a8linux%e4%b8%8b%e5%86%99%e6%96%87%e4%bb%b6%e5%8f%8a%e6%8d%a2%e8%a1%8c/feed/ 0 吉德昂·逊德巴克,Google今日Doodle拉链 拉锁是谁在什么时候发明的? http://www.shuaizhu.com/wordpress/%e5%90%89%e5%be%b7%e6%98%82%c2%b7%e9%80%8a%e5%be%b7%e5%b7%b4%e5%85%8bgoogle%e4%bb%8a%e6%97%a5doodle%e6%8b%89%e9%93%be-%e6%8b%89%e9%94%81%e6%98%af%e8%b0%81%e5%9c%a8%e4%bb%80%e4%b9%88%e6%97%b6%e5%80%99/ http://www.shuaizhu.com/wordpress/%e5%90%89%e5%be%b7%e6%98%82%c2%b7%e9%80%8a%e5%be%b7%e5%b7%b4%e5%85%8bgoogle%e4%bb%8a%e6%97%a5doodle%e6%8b%89%e9%93%be-%e6%8b%89%e9%94%81%e6%98%af%e8%b0%81%e5%9c%a8%e4%bb%80%e4%b9%88%e6%97%b6%e5%80%99/#comments Tue, 24 Apr 2012 01:09:39 +0000 admin http://www.shuaizhu.com/wordpress/?p=2173 今天在Google的首页,出现了一个大拉链,拉链很多时候也被叫做拉锁,这个拉链拉开是 吉德昂·逊德巴克 在Google的搜索介绍

百度百科说:

拉链（zipper） 拉链是依靠连续排列的链牙，使物品并合或分离的连接件，现大量用于服装、包袋 、帐篷等 。 1、由两条带上各有一排金属齿或塑料齿组成的扣件，用于连接开口的边缘（如衣服或袋口）,有一滑动件可将两排齿拉入联锁位置使开口封闭； 2、连结于某物（作为被吊起或放落的物体）上以拉紧、稳定或引导该物的链。

其实拉链分很多种,用于各种各样的场合,有兴趣的可以看下 拉链的百度百科

]]> http://www.shuaizhu.com/wordpress/%e5%90%89%e5%be%b7%e6%98%82%c2%b7%e9%80%8a%e5%be%b7%e5%b7%b4%e5%85%8bgoogle%e4%bb%8a%e6%97%a5doodle%e6%8b%89%e9%93%be-%e6%8b%89%e9%94%81%e6%98%af%e8%b0%81%e5%9c%a8%e4%bb%80%e4%b9%88%e6%97%b6%e5%80%99/feed/ 61 php禁用函数(disable_function)危险等级分析 http://www.shuaizhu.com/wordpress/php%e7%a6%81%e7%94%a8%e5%87%bd%e6%95%b0disable_function%e5%8d%b1%e9%99%a9%e7%ad%89%e7%ba%a7%e5%88%86%e6%9e%90/ http://www.shuaizhu.com/wordpress/php%e7%a6%81%e7%94%a8%e5%87%bd%e6%95%b0disable_function%e5%8d%b1%e9%99%a9%e7%ad%89%e7%ba%a7%e5%88%86%e6%9e%90/#comments Tue, 17 Apr 2012 07:22:29 +0000 admin http://www.shuaizhu.com/wordpress/?p=2167 phpinfo()
功能描述：输出 PHP 环境信息以及相关的模块、WEB 环境等信息。
危险等级：中

passthru()
功能描述：允许执行一个外部程序并回显输出，类似于 exec()。
危险等级：高

exec()
功能描述：允许执行一个外部程序（如 UNIX Shell 或 CMD 命令等）。
危险等级：高

system()
功能描述：允许执行一个外部程序并回显输出，类似于 passthru()。
危险等级：高

chroot()
功能描述：可改变当前 PHP 进程的工作根目录，仅当系统支持 CLI 模式
PHP 时才能工作，且该函数不适用于 Windows 系统。
危险等级：高

scandir()
功能描述：列出指定路径中的文件和目录。
危险等级：中

chgrp()
功能描述：改变文件或目录所属的用户组。
危险等级：高

chown()
功能描述：改变文件或目录的所有者。
危险等级：高

shell_exec()
功能描述：通过 Shell 执行命令，并将执行结果作为字符串返回。
危险等级：高

proc_open()
功能描述：执行一个命令并打开文件指针用于读取以及写入。
危险等级：高

proc_get_status()
功能描述：获取使用 proc_open() 所打开进程的信息。
危险等级：高

error_log()
功能描述：将错误信息发送到指定位置（文件）。
安全备注：在某些版本的 PHP 中，可使用 error_log() 绕过 PHP safe mode，
执行任意命令。
危险等级：低

ini_alter()
功能描述：是 ini_set() 函数的一个别名函数，功能与 ini_set() 相同。
具体参见 ini_set()。
危险等级：高

ini_set()
功能描述：可用于修改、设置 PHP 环境配置参数。
危险等级：高

ini_restore()
功能描述：可用于恢复 PHP 环境配置参数到其初始值。
危险等级：高

dl()
功能描述：在 PHP 进行运行过程当中（而非启动时）加载一个 PHP 外部模块。
危险等级：高

pfsockopen()
功能描述：建立一个 Internet 或 UNIX 域的 socket 持久连接。
危险等级：高

syslog()
功能描述：可调用 UNIX 系统的系统层 syslog() 函数。
危险等级：中

readlink()
功能描述：返回符号连接指向的目标文件内容。
危险等级：中

symlink()
功能描述：在 UNIX 系统中建立一个符号链接。
危险等级：高

popen()
功能描述：可通过 popen() 的参数传递一条命令，并对 popen() 所打开的文件进行执行。
危险等级：高

stream_socket_server()
功能描述：建立一个 Internet 或 UNIX 服务器连接。
危险等级：中

putenv()
功能描述：用于在 PHP 运行时改变系统字符集环境。在低于 5.2.6 版本的 PHP 中，可利用该函数
修改系统字符集环境后，利用 sendmail 指令发送特殊参数执行系统 SHELL 命令。
危险等级：高

]]> http://www.shuaizhu.com/wordpress/php%e7%a6%81%e7%94%a8%e5%87%bd%e6%95%b0disable_function%e5%8d%b1%e9%99%a9%e7%ad%89%e7%ba%a7%e5%88%86%e6%9e%90/feed/ 70 CodeIgniter-index-rewrite-htaccess http://www.shuaizhu.com/wordpress/codeigniter-index-rewrite-htaccess/ http://www.shuaizhu.com/wordpress/codeigniter-index-rewrite-htaccess/#comments Mon, 16 Apr 2012 01:55:59 +0000 admin http://www.shuaizhu.com/wordpress/?p=2165 RewriteEngine on RewriteCond $1 !^(index\.php|public|robots\.txt) RewriteRule ^(.*)$ index.php/$1 [L]

2012年4月16日9:56:10  测试可用

]]> http://www.shuaizhu.com/wordpress/codeigniter-index-rewrite-htaccess/feed/ 1 添加自定义的多个搜索引擎到chrome浏览器的右键菜单中 http://www.shuaizhu.com/wordpress/%e6%b7%bb%e5%8a%a0%e8%87%aa%e5%ae%9a%e4%b9%89%e7%9a%84%e5%a4%9a%e4%b8%aa%e6%90%9c%e7%b4%a2%e5%bc%95%e6%93%8e%e5%88%b0chrome%e6%b5%8f%e8%a7%88%e5%99%a8%e7%9a%84%e5%8f%b3%e9%94%ae%e8%8f%9c%e5%8d%95/ http://www.shuaizhu.com/wordpress/%e6%b7%bb%e5%8a%a0%e8%87%aa%e5%ae%9a%e4%b9%89%e7%9a%84%e5%a4%9a%e4%b8%aa%e6%90%9c%e7%b4%a2%e5%bc%95%e6%93%8e%e5%88%b0chrome%e6%b5%8f%e8%a7%88%e5%99%a8%e7%9a%84%e5%8f%b3%e9%94%ae%e8%8f%9c%e5%8d%95/#comments Thu, 12 Apr 2012 05:31:20 +0000 admin http://www.shuaizhu.com/wordpress/?p=2163 开源chrome扩展，QuickSearch，开源谷歌浏览器扩展，添加自定义的搜索引擎到右键菜单中。

项目地址:http://code.google.com/p/searchforchrome/

下载:http://code.google.com/p/searchforchrome/downloads/list

通过添加自定义的多个搜索引擎到chrome浏览器的右键菜单中.

]]> http://www.shuaizhu.com/wordpress/%e6%b7%bb%e5%8a%a0%e8%87%aa%e5%ae%9a%e4%b9%89%e7%9a%84%e5%a4%9a%e4%b8%aa%e6%90%9c%e7%b4%a2%e5%bc%95%e6%93%8e%e5%88%b0chrome%e6%b5%8f%e8%a7%88%e5%99%a8%e7%9a%84%e5%8f%b3%e9%94%ae%e8%8f%9c%e5%8d%95/feed/ 0 chrome 去除Google搜索跳转 http://www.shuaizhu.com/wordpress/chrome-%e5%8e%bb%e9%99%a4google%e6%90%9c%e7%b4%a2%e8%b7%b3%e8%bd%ac/ http://www.shuaizhu.com/wordpress/chrome-%e5%8e%bb%e9%99%a4google%e6%90%9c%e7%b4%a2%e8%b7%b3%e8%bd%ac/#comments Thu, 12 Apr 2012 04:29:26 +0000 admin http://www.shuaizhu.com/wordpress/?p=2161 原文：http://www.chrome.so/archives/1985

在点击google搜索结 果时，google会在结果的URL前做个跳转，且有时这个跳转地址会被墙，这样极大的影响对搜索引擎的使用体验。近期，Google的基本搜索功能又开 始间歇性的被重置，更别说那些早已被压在大墙底下的Google应用了，现在每天搜索几乎都是在无止尽的RESET中，找到瞬间，而且打开地址，还经常需 要复制链接，然后粘贴到地址栏，才能打开，否则，只要你点击Google搜索结果中的链接就会被重置，而不管你是搜IT、工程、或是技术问题、医药等，现 在似乎关键词已经不再重要，重要的是RESET谁。

遇到地址超长的搜索结果，没有办法复制地址，因为复制链接仍然会带Google的自跟踪跳转地址，尽管手动删剪也可以提出来但很麻烦。所以只能看摘要而无法点击。本来已经决定减少写这类无病呻吟的文章的，但最近或许是真的病了，亦或是要大病了。

如果能把Google的跳转链接去掉，那样可以减小被GFW重置的概率，网上有说，只有在Firefox上才会如此，有说要关闭网络历史记录就可以 关闭搜索跟踪功能，对目前的Google搜索结果显示似乎都不适应，至少在Firefox上，未安装任何扩展的条件下，的却都会出现这个跳转链接（类似http://www.google.com.hk/url?sa=t…这样的跳转。

这个跳转链接是用于Google统计分析的，属于mousedown事件，第一次载入时，mousemove会显示真实的链接地址，一旦右键复制链接或左键点击，就会自动切换链接地址到跳转地址上，然后经由跳转地址再到目标网址，接着就可能会被伟大的重置。

本方法只针对google chrome浏览器，解决方法很简单，因为chrome已经原生支持Greasemonkey脚本，所以只需要写下面一段脚本，然后导chrome既可：

01 var url = window.location.href.toLowerCase();
02 //alert(url);
03 if (url.indexOf("www.google.com.hk") >= 0 || url.indexOf("www.google.com") >= 0 || url.indexOf("/search") >= 0)
04 {
05 var all = document.querySelectorAll("*");
06 for (var i = 0; i < all.length; i ++)
07 {
08 all[i].onmousedown = null;
09 all[i].setAttribute("onmousedown", " ");
10 /*
11 all[i].onmousedown = function(){
12 alert("nowamagic");
13 }
14 */
15 }
16 }

最新版的Chrome直接支持油猴脚本，不需要进行任何设置。比如userscript.org上的脚本，点击 install 就可以安装了。

找到扩展所在的目录，默认在 C:\Documents and Settings\username\Local Settings\Application Data\Chromium\User Data\Default\Extensions\ （username换成你电脑的用户名），里面那些名字很长且看不出意义的就是所有的扩展和脚本，找到你要修改的脚本（提示，根据版本号来找可能会快一 些），点开，里面有个script.js，修改这个文件就可以了。

如果不修改的话，可以在 chrome URL栏输入 chrome://settings/extensionSettings，然后选择载入正在开发的程序，然后打开包含 js 的文件夹即可。下面是打包下载：

js 包下载

现在，你的Google搜索就不会因为跳转被 reset 了。如果程序有什么问题，或者你有更好的办法，请告知我～

via Veda

]]> http://www.shuaizhu.com/wordpress/chrome-%e5%8e%bb%e9%99%a4google%e6%90%9c%e7%b4%a2%e8%b7%b3%e8%bd%ac/feed/ 46 vim设置自动插入文件头 http://www.shuaizhu.com/wordpress/vim%e8%ae%be%e7%bd%ae%e8%87%aa%e5%8a%a8%e6%8f%92%e5%85%a5%e6%96%87%e4%bb%b6%e5%a4%b4/ http://www.shuaizhu.com/wordpress/vim%e8%ae%be%e7%bd%ae%e8%87%aa%e5%8a%a8%e6%8f%92%e5%85%a5%e6%96%87%e4%bb%b6%e5%a4%b4/#comments Wed, 11 Apr 2012 05:34:08 +0000 admin http://www.shuaizhu.com/wordpress/?p=2159 "进行版权声明的设置 "添加或更新头 map <F4> ms:call TitleDet()<cr>'s function AddTitle() call append(0,"//#####################################################") call append(1,"//#") call append(2,"//# Author: ZhuShuai") call append(3,"//#") call append(4,"//# Mail: bjzhush@gmail.com ") call append(5,"//#") call append(6,"//# Last modified: ".strftime("%Y-%m-%d %H:%M")) call append(7,"//#") call append(8,"//# Filename: ".expand("%:t")) call append(9,"//#") call append(10,"//#") call append(11,"//#") call append(12,"//####################################################") echohl WarningMsg | echo "Add copyright Over." | echohl None endf "更新最近修改时间和文件名 function UpdateTitle() endf "判断前10行代码里面，是否有Last modified这个单词， "如果没有的话，代表没有添加过作者信息，需要新添加； "如果有的话，那么只需要更新即可 function TitleDet() let n=1 "默认为添加 while n < 10 let line = getline(n) if line =~ '^\#\s*\S*Last\smodified:\S*.*$' call UpdateTitle() return endif let n = n + 1 endwhile call AddTitle() endfunction

测试可用,按F4后在当前文件头部插入一个注释

]]> http://www.shuaizhu.com/wordpress/vim%e8%ae%be%e7%bd%ae%e8%87%aa%e5%8a%a8%e6%8f%92%e5%85%a5%e6%96%87%e4%bb%b6%e5%a4%b4/feed/ 96 Syngress安全丛书 http://www.shuaizhu.com/wordpress/syngress%e5%ae%89%e5%85%a8%e4%b8%9b%e4%b9%a6/ http://www.shuaizhu.com/wordpress/syngress%e5%ae%89%e5%85%a8%e4%b8%9b%e4%b9%a6/#comments Mon, 09 Apr 2012 03:42:15 +0000 admin http://www.shuaizhu.com/wordpress/?p=2157 Syngerss – Configuring and Troubleshooting Windows XP Professional.pdf
Syngress – 10 Cool Lego Mindstorms Robotics Invention System 2 Projects.pdf
Syngress – Aggressive network self-defense.(2005).pdf
Syngress – Application Service Provider (Isp) Configuration Handbook.pdf
Syngress – ASP Dot.NET Web Developers Guide.pdf
Syngress – ASP.NET – Web developer’s guide.pdf
Syngress – Asterisk Hacking (2007).pdf
Syngress – Best Damn Firewall Book Period.pdf
Syngress – BizTalk Server 2000 Developers Guide for.NET (VBL).pdf
Syngress – Bluetooth Application Developers Guide.pdf
Syngress – Botnets.The.Killer.Web.App.pdf
Syngress – Buffer Overflow Attacks – Detect, Exploit, Prevent.pdf
Syngress – Building a Cisco Wireless LAN.pdf
Syngress – Building Cisco Networks for Win2K.pdf
Syngress – Building Dmzs For Enterprise Networks.pdf
Syngress – Building Robots With Lego Mindstorms.pdf
Syngress – Building Sans With Brocade Fabric Switches.pdf
Syngress – Business Continuity and Disaster Recovery Planning for IT Professionals.pdf
Syngress – C# for Java Programmers (VBL).pdf
Syngress – CD And Dvd Forensics Dec 2006 Ebook-Bbl.pdf
Syngress – Check Point NG VPN-1 FireWall-1 Advanced Configuration and Troubleshooting.pdf
Syngress – Check Point NG–Next Generation Security Administration.pdf
Syngress – Checkpoint Ng – Vpn-1 Firewall-1 – Advanced Configuration And Troubleshooting.pdf
Syngress – CheckPoint NG Security Administration.pdf
Syngress – Cisco AVVID & IP Telephony – Design & Implementation.pdf
Syngress – Cisco Security Specialist’s Guide to PIX Firewall.pdf
Syngress – Combating.Spyware.in.the.Enterprise.pdf
Syngress – Configuring Check Point NGX VPN-1 FireWall-1.pdf
Syngress – Configuring Cisco Voice Over IP Second Edition.pdf
Syngress – Configuring Citrix Xp.pdf
Syngress – Configuring Exchange Server 2007.pdf
Syngress – Configuring IPv6 for Cisco IOS(2002).pdf
Syngress – Configuring ISA Server 2000 – Building Firewalls for Windows 2000.pdf
Syngress – Configuring Juniper Networks Netscreen and SSG Firewalls.pdf
Syngress – Configuring NetScreen Firewalls – 2005 – (By Laxxuss).pdf
Syngress – Configuring SonicWALL Firewalls(2006).pdf
Syngress – Configuring Windows 2000 Server Security.pdf
Syngress – Consumer’s Guide to Cell Phones & Wireless Services.pdf
Syngress – Creating Security Policies and Implementing Identity Management with Active Directory.pdf
Syngress – CYA Securing Exchange Server 2003 and Outlook Web Access.pdf
Syngress – CYA Securing IIS 6.0.pdf
Syngress – Cyber Adversary Characterization. Auditing the Hacker Mind.pdf
Syngress – Defragmentation, Recovery And Administration Field Guide.pdf
Syngress – Developers.Guide.to.Web.Application.Security.pdf
Syngress – Developing .NET Web Services with XML.pdf
Syngress – Dr Tom Shinder’s Configuring Isa Server 2004 (2006).pdf
Syngress – Dr. Tom Shinder’s Configuring ISA Server 2004 (2005).pdf
Syngress – Dr.Tom.Shinders.ISA Server 2006 Migration Guide Aug 2007 eBook-BBL.pdf
Syngress – Essential Computer Security (Oct 2006).pdf
Syngress – Ethereal Packet Sniffing.pdf
Syngress – Ferrari-Hempel – Building Robots With LEGO Mindstorms.pdf
Syngress – Game Console Hardware Hacking (Xbox, Playstation, Nintendo, Atari and Gamepark 32).pdf
Syngress – Google Hacking for Penetration Testers – 2005.pdf
Syngress – Hack Proofing Your Network.pdf
Syngress – Hack Proofing Linux – A Guide to Open Source Security.pdf
Syngress – Hack Proofing Sun Solaris 8 (2001).pdf
Syngress – Hack Proofing Windows 2000 Server.pdf
Syngress – Hack Proofing XML.pdf
Syngress – Hack Proofing Your Network (2nd Edition).pdf
Syngress – Hack the Stack – Using Snort and Ethereal to Master the 8 Layers of an Insecure Network.pdf
Syngress – Hacking A Terror Network – The Silent Threat Of Covert Channels – 2005 – (By Laxxuss).pdf
Syngress – Hacking a Terror Network. The Silent Threat of Covert Channels.pdf
Syngress – Have.Fun.While.Voiding.Your.Warranty].Hardware.Hacking.pdf
Syngress – Host Integrity Monitoring – Using Osiris and Samhain – Jun 2005.pdf
Syngress – How to Cheat – Deploying Exchange Server 2000 with Active Directory.pdf
Syngress – How to Cheat at Administering Office Communicator.pdf
Syngress – How to Cheat at Configuring Exchange Server 2007 – Including Outlook Web, Mobile, and Voice Access.pdf
Syngress – How to Cheat at Configuring ISA Server 2004.pdf
Syngress – How to Cheat at Configuring VMware ESX Server.pdf
Syngress – How to Cheat at Deploying and Securing RFID.pdf
Syngress – How To Cheat At Installing, Configuring & Troubleshooting Windows 2000 File Systems.pdf
Syngress – How to Cheat at Installing, Configuring and Troubleshooting Active Directory and DNS.pdf
Syngress – How To Cheat At Managing Windows SBS 2003.pdf
Syngress – How To Cheat At Managing Windows Small Business Server 2003.pdf
Syngress – How To Cheat At Managing WSUS Dec2005.pdf
Syngress – How to Cheat at Securing a Wireless Network.ShareConnector.pdf
Syngress – How to Cheat at Securing Linux.pdf
Syngress – How to Cheat at Securing SQL Server 2005.pdf
Syngress – How to Cheat at Securing Windows 2000 Server TCP-IP Connections.pdf
Syngress – How To Cheat At VoIP Security.pdf
Syngress – How to Cheat at Windows System Administration Using Command Line Scripts.pdf
Syngress – How.to.Cheat.at.Configuring.Open.Source.Security.Tools.pdf
Syngress – How.to.Cheat.at.Microsoft.Vista.Administration.pdf
Syngress – InfoSecurity 2008 Threat Analysis.pdf
Syngress – Insider Threat – Protecting the Enterprise from Sabotage, Spying, and Theft – 2006.pdf
Syngress – Intrusion Prevention and Active Response.pdf
Syngress – IP Addressing And Subnetting (Including IPv6).pdf
Syngress – IT Security Project Management Handbook.pdf
Syngress – Journey To The Center of the Internet.pdf
Syngress – Juniper Networks Secure Access SSL VPN Configuration Guide.pdf
Syngress – LEGO Mindstorms Masterpieces Building and Programming Advanced Robots [found viawww.FileDonkey.com].pdf
Syngress – Lego Mindstorms Masterpieces Building And Programming Advanced Robots.pdf
Syngress – Linksys Wrt54G Ultimate Hacking May 2007 Ebook-Bbl.pdf
Syngress – Managing And.Securing A Cisco Structured Wireless Aware Network.pdf
Syngress – Managing Cisco Network Security 2Nd Edition.pdf
Syngress – MCSA MCSE Exam 70-291 Windows Server 2003 Network Infrastructure.pdf
Syngress – MCSA MCSE Exam 70-293 Planning & Maintaining a Windows Server 2003 Network Infrastructure.pdf
Syngress – MCSA.MCSE.Exam.70-292.Study.Guide.ShareReactor.pdf
Syngress – MCSA.MCSE.Exam.70-298 Designing Security For A Windows Server 2003 Network Study Guide – 2004.pdf
Syngress – MCSA_MCSE Exam 70-290.Windows Server 2003 Environment.pdf
Syngress – MCSA_MCSE Exam 70-294 Win Server 2003 Active Directory Infrastructure.pdf
Syngress – MCSA_MCSE Exam 70-296 Study Guide.pdf
Syngress – MCSA_MCSE Exam 70-297 Designing A Windows Server 2003 Active Directory And Network Infrastructure Study Guide.pdf
Syngress – Metasploit Toolkit – For Penetration Testing Exploit Development and Vulnerability Research – Sep 2007.pdf
Syngress – Microsoft Log Parser Toolkit [2005].pdf
Syngress – Microsoft.Forefront.Security.Administration.Guide.Jan.2008.pdf
Syngress – Mission Critical Internet Security.pdf
Syngress – Nessus Network Auditing (2004).pdf
Syngress – Nessus Snort and Ethereal Power Tools 2005.pdf
Syngress – Network Security Assessment, From Vulnerability To Patch – [Syngress, 2007].pdf
Syngress – Nokia Network Security Solutions Handbook.pdf
Syngress – Open Source Fuzzing Tools.pdf
Syngress – PCI DSS Compliance-Understand Implement Effective PCI Data Security Standard Compliance.pdf
Syngress – Penetration Tester’s Open Source Toolkit (2006).pdf
Syngress – Perl Scripting for IT Security Dec 2007.eBook-BBL.pdf
Syngress – PIX Firewall Access Lists.pdf
Syngress – Practical oracle Security Aug 2007 eBook-BBL.pdf
Syngress – Practical VoIP Security.pdf
Syngress – Projects for Wi-Fi Enthusiasts.pdf
Syngress – RFID plus Study Guide and Practice(2007).pdf
Syngress – RFID Security.pdf
Syngress – Ruby Developer’S Guide – 2002 – (By Laxxuss).pdf
Syngress – Sarbanes.Oxley.IT.Compliance.Using.COBIT.and.Open.Source.Tools..pdf
Syngress – Scene of the Cybercrime – Computer Forensics Handbook.pdf
Syngress – Scripting Vmware Power Tools Oct 2006.pdf
Syngress – Secrets of Network Cartography – A Comprehensive Guide to Nmap – Complete.pdf
Syngress – Secure Your Network for Free Using.pdf
Syngress – Securing Exchange Server and Outlook Web Access.pdf
Syngress – Security Assessment Case Studies for Implementing.pdf
Syngress – Security Log Management – Identifying Patterns in the Chaos (2005).pdf
Syngress – Security+ StudyGuide.pdf
Syngress – Sniffer Pro – Network Optimization And Troubleshooting Handbook.pdf
Syngress – Snort 2.1 Intrusion Detection Second Edition 2004.pdf
Syngress – Snort IDS and IPS Toolkit [Caswell,Beale,Baker].pdf
Syngress – Sockets Shellcode Porting and Coding, Reverse Engineering Exploits and Tool Coding for Security Professionals.pdf
Syngress – Stealing the Network – How to Own the Box (2003).pdf
Syngress – Techno Security’s Guide to Managing Risks for IT Managers, Auditors, and Investigators – 2007.pdf
Syngress – The Best Damn Exchange SQL and IIS Book Period.pdf
Syngress – The Best Damn Firewall Book Period 2Nd Edition Nov 2007 Ebook-Bbl.pdf
Syngress – The Best Damn Server Virtualization Book Period.pdf
Syngress – The Official CHFI Study Guide Exam.pdf
Syngress – VB.NET Developers guide 2001.pdf
Syngress – Video Conferencing over IP Configure Secure and Troubleshoo(2006).pdf
Syngress – Virtualization With Vmware Esx Server (2008).pdf
Syngress – Virtualization.with.Xen.May.2007.eBook-BBL.pdf
Syngress – Vista for IT Security Professionals.pdf
Syngress – WarDriving and Wireless Penetration Testing (2007).pdf
Syngress – Web Application Vulnerabilities Detect, Exploit, Prevent.pdf
Syngress – Web Services With Java.pdf
Syngress – Webmasters Guide To The Wireless Internet.pdf
Syngress – Windows 2000 Active Directory Second Edition.pdf
Syngress – Windows Forensic Analysis DVD Toolkit.pdf
Syngress – Winternals – Defragmentation, Recovery and Administration Field Guide.pdf
Syngress – Wireless Hacking. Projects for Wi-Fi Enthusiasts.pdf
Syngress – Wireshark & Ethereal Network Protocol Analyzer Toolkit.2007.pdf
Syngress – Writing Security Tools And Exploits (2006) Ddu.pdf
Syngress – Xss Attacks – Cross Site Scripting Exploits And Defense.pdf
Syngress – Zero-Day Exploit – Countdown to Darkness.pdf
Syngress -.Net Mobile Web Developer’s Guide (VBL).pdf
下载地址：总大小共1.9G左右
电驴下载（好像有点慢）
[安全盛典]Syngress安全丛书.rar (1.87 GB)
旋风下载（速度很快，赞一个）
qqdl://aHR0cDovLzQwMGcuaGFjazU4Lm5ldDo1MjUzMS8lQkElREElQkYlQ0QlQjklQTQlQkUlREYvc3luZ3Jlc3MlQjAlQjIlQzglQUIlQjQlRDQlQ0ElRTkucmFyP3ZzUHVibGljPQ==

通过[安全盛典]Syngress安全丛书 想真正学习的进来_技术文献_应用交流 卡饭论坛 -.

]]> http://www.shuaizhu.com/wordpress/syngress%e5%ae%89%e5%85%a8%e4%b8%9b%e4%b9%a6/feed/ 107 信息安全行业里面一些很不错的书 http://www.shuaizhu.com/wordpress/%e4%bf%a1%e6%81%af%e5%ae%89%e5%85%a8%e8%a1%8c%e4%b8%9a%e9%87%8c%e9%9d%a2%e4%b8%80%e4%ba%9b%e5%be%88%e4%b8%8d%e9%94%99%e7%9a%84%e4%b9%a6/ http://www.shuaizhu.com/wordpress/%e4%bf%a1%e6%81%af%e5%ae%89%e5%85%a8%e8%a1%8c%e4%b8%9a%e9%87%8c%e9%9d%a2%e4%b8%80%e4%ba%9b%e5%be%88%e4%b8%8d%e9%94%99%e7%9a%84%e4%b9%a6/#comments Mon, 09 Apr 2012 03:06:53 +0000 admin http://www.shuaizhu.com/wordpress/?p=2155 A Practical Guide to Federal Enterprise Architecture.pdf FEA架构的书，内容不错，可惜不大适用于企业，更适用于我国政务网结构；
A Supply Chain Management Guide To BCP.pdf 另一个角度看BCP，增长知识；
Adaptive Security Management Architecture.pdf 介绍安全管理架构（ESA）的书，不过思想较老，不推荐；
Agile.IT.Security.Implementation.Methodology.Nov.2011.pdf IBM的几个研究员写的书，算是新思路，不过并不适用于敏捷开发（Agile），整个思想体系还是较为生涩；
Auerbach.Complete.Guide.to.CISM.Certification.Dec.2006.pdf 较老的CISM教材，但内容不错，值得学习；
Auerbach.Publications.Official.ISC.2.Guide.to.the.CISSP-ISSEP.CBK.eBook.pdf ISSEP CBK，值得认真学习；
BCM-Building an Effective Incident Management Plan.pdf 比较细致深入的从Incident角度讲解了BCM，里面大量案例非常值得参考；
BackTrack 4_Assuring_Security_by_Penetration_Testing_2011.rar 还没看；
BackTrack.5.Wireless.Penetration.Testing.Beginners.Guide.rar 内容一般；
Build.Your.Own.Security.Lab.rar Matespoit的书，可以学习一下；
CISA_Review_Manual_2011.pdf
CISM Review Questions, Answers & Explanations Manual 2009.pdf
CISSP Practice Exams – Book.pdf
CISSP Questions, Answers & Explanations.pdf
CPA_Exam_Review_2011.rar
CRC.Press.Building.an.Effective.Information.Security.Policy.Architecture.pdf 讲解如何编写安全策略、制度的书，流程写的较细致，但内容不够精辟；
Cisco Switching Black Book.pdf
Cisco.Security.Little.Black.Book.eBook-EEn.pdf
Computer Forensics Investigating Data and Image Files.pdf 一本非常好的取证分析书，推荐；
Computer Forensics for Dummies.pdf
Computer and Information Security Handbook.rar 类似于Information Security Engneering，内容非常广泛庞杂，增长知识的书，但不精深；
Defining Incident Management Processes for CSIRTs A Work in Progress.pdf CERT官方指南，教科书；
EC Council – ECSA-LPT Training V 4.0.pdf EC-Council ECSA官方教材，内容一般，不推荐；
ECSAv4-LPTv4 Instructor slides.rar
EMC Cloud Computing Security Overview.rar EMC的云安全培训材料，简单入门；
Elsevier_Security_Risk_Management_2011.pdf 一本好书，务实的讲解信息安全管理，非常推荐；
Enterprise Risk Management Best Practices.pdf 一本不错的书，不过是讲COSO/ERM的，并非针对information security，而且也不贴近，不过书本身还是不错的；
Expert.Oracle.and.Java.Security.pdf Oracle和相关开发安全的书，内容不错，尤其入门者可以学习；
Fundamentals of Project Management.pdf 项目管理书，内容一般，入门级别，不如学习Sybex PMP review；
Gray Hat Python.pdf python高阶内容的书，偏重于逆向工程和程序调试，资深逆向和python爱好者可以看下；
HACKING EXPOSED MALWARE AND ROOTKITS- Malware and Rootkits Secrets and SolutionsHACKING EXPOSED MALWARE AND ROOTKITS- Malware and Rootkits Secrets and Solutions.pdf 黑客大曝光系列，讲解rootkit类的，不错的incident handling & forensics参考书；
Hackers Heroes of the Computer Revolution – 25th Anniversary Edition.pdf 历史书；
Hackers.and.Painters.pdf 另一本历史书，内容还行；
Hacking Exposed Computer Forensics Secrets & Solutions, Second Edition – Aaron Philipp.pdf 黑客大曝光取证，内容不错；
Hacking Exposed Web Applications 3rd.pdf web安全第三版，好像2011的，内容很好，同类中的佼佼者；
Handbook for Computer Security Incident Response Teams (CSIRTs).pdf cert教科书；
How to Achieve 27001.pdf 27001认证建设的书，不过其实主要篇幅都在写合规性管理，不如看Building.an.Effective.Information.Security.Policy.Architecture和CISO Handbook；
How to Prepare Business Cases.pdf 附加资料，如何编写business case，合格的manager和pm应该看；
Human Resource Management fundamentals.pdf
ISACA CISA Exam Review 2011.rar
ISC Official Guide to CISSP Exam.rar CISSP OIG v2；
Incident Management Capability Metrics Version 0.1_07tr008.pdf cert教科书，讲incident management度量的；
Incident Response and Computer Forensics.pdf 另一本incident和forensics的书，推荐；
Information Security Governace 2008.pdf 信息安全治理和管理，内容不错，很精简，初建安全管理体系者可以以之为参考；
Information Security Harmonisation.pdf 短小的读物，讲解一系列信息安全管理、治理标准之间的对比；
Information Security and Cryptography.pdf 加密学教科书，内容中规中矩，还是很详细的，但可读性不如RSA三件套；
Metasploit_The_Penetration_Tester’s_Guide_2011.rar metaspoit的书，这本内容还不错；
Mind Tools_Practical Thinking Skills for an Excellent Life_2007.pdf 管理工具和技能培训，所有的职业人都应当学习，非常推荐；
Moving_from_Project_Management_to_Project_Leadership.pdf
Network-Infrastructure-Security.pdf
Network.Security.Bible.Jan.2005.pdf 第一章内容还行，后面一般；
Ninja Hacking – Unconventional Penetration Testing – T. Wilhelm, et al., (Syngress, 2011).pdf 很另类的书…反正很另类就是了，但是内容太装B，不实在，不推荐；
No-Drama.Project.Management.pdf
No.Starch.Practical.Packet.Analysis.2nd.Edition.Jun.2011.pdf 实用厚道的网络协议分析书，推荐；
O’Reilly – Hardening Cisco Routers.rar
O’Reilly – Programming Python (Fourth Edition).pdf
O-ESA.pdf
Offensive.Security.Collection.rar offensive的安全系列集合；
Offensve Security WiFu Training.rar offensive的wifi培训，主要讲解backtrack，内容不错；
Official ISC2 Guide to The ISSAP CBK.pdf ISSAP CBK；
Oracle_LiveResponse.pdf
PKI_Implementing_and_Managing_E-Security.pdf RSA的PKI经典，值得学习；
PMBOK2008cn.pdf
PMP_Exam_Prep_6th_Edition.pdf
PMP_Project_Management_Professional_Exam_Review_Guide.pdf 前面三本经典的PMP教材，值得任何想走的长远的人学习；
PassGuide CISM V3.21.pdf
Penetration Testing and Vulnerability Analysis Class.rar
Practical Enterprise Risk Management A Business Process Approach.pdf 另一本讲解ERM的书，与信息安全关系不大，但内容不错；
Practical Oracle Security.pdf Oracle安全的书，很容很不错，可以和前面那个oracle & java一起阅读；
Presentation Secret.pdf jobs的演讲技巧，非常推荐，值得学习；
Project Management 5ed -The Managerial Process.pdf
Project_Management_A_Complete_Guide.pdf pmp的书，不如前面两个，不推荐；
Python Standard Library.pdf
RSA_Securitys_Official_Guide_to_Cryptography.pdf RSA加密的经典，推荐；
SANS_GCIA_503_Intrusion_Detection.rar
SANS_SEC531.pdf
Sams.VBScript.WMI.and.ADSI.Unleashed.May.2007.pdf
Security Planning Using Zachman Framework for Enterprises.pdf
Security Policies and Implementing Identify Management with AD.pdf 使用AD构建IDM的书，内容一般；
Security for Microsoft Administrator.rar windows安全，内容基础，不适合于做安全服务的人；
Security Monitoring.rar 安全日志分析的书；
Sockets, Shellcode, Porting, & Coding, RE.rar 一本历史悠久的shellcode经典教材；
Syngress – Business Continuity and Disaster Recovery Planning for IT Professionals.pdf 非常全面的BCP书，偏重于IT BCP/DRP，非常推荐；
Syngress – Hack Proofing Your Network (2nd Edition).pdf
Syngress Security for Microsoft Windows System Administrators(2010).pdf
Syngress Wireshark and Ethereal Network Protocol Analyzer Toolkit(2006).pdf 另一本讲wireshark的书，内容也不错，可以和前面那本一起看；
Syngress Writing Security Tools and Exploits(2006).pdf
The Mac Hacker’s Handbook.pdf osx exploit开发；
The Official CHFI Study Guide 2007.pdf CHFI v4官方教材，取证，内容经典，可以作为主要教材；
The_CISO_Handbook.pdf CISO Handbook，信息安全管理，对不不同人可能相差很大；
Wiley.Security.Engineering.2nd.Edition.Apr.2008.pdf 增长见识的经典教材，内容庞杂，可以作为cissp补充阅读资料；
Write Great Code.rar
Writing Exploits Tuts from Corelan Team.rar
cisa_study_guide_2011_Sybex_3rd.rar sybex的cisa备考书，内容组织比CRM好很多，推荐用此替代CISA Review Manual；
crc press – cyber crime investigator’s field guide.pdf 较老的取证书，CISSP ISSxP CIB中推荐的补充材料，但内容一般；
designing-security-architecture-solutions.pdf
ence_v6_study_guide.pdf encase认证的培训教材；
iOS Forensic Analysis for iPhone, iPad and iPod Touch.pdf
incident-handlers-handbook.pdf
nmap-cookbook-the-fat-free-guide-to-network-scanning.pdf nmap的pocket手册，快速查阅可以看看，不过一般是用不到；
syngress – Eleventh Hour CISSP Study Guide.pdf 一本不错的cissp书，适合考前总复习快速回忆知识点；
togaf_v9.pdf togaf白皮书；
windows_internal_5ed.pdf 经典的windows材料；
Volonino – Computer Forensics for Dummies (Wiley, 2008).pdf
Syngress.Penetration.Testers.Open.Source.Toolkit.3rd.Edition.Aug.2011
Syngress SQL Injection Attacks and Defense.pdf
Managing Successful Projects with Prince2

通过[由liuxuan0527推荐]信息安全行业里面一些很不错的书.

]]> http://www.shuaizhu.com/wordpress/%e4%bf%a1%e6%81%af%e5%ae%89%e5%85%a8%e8%a1%8c%e4%b8%9a%e9%87%8c%e9%9d%a2%e4%b8%80%e4%ba%9b%e5%be%88%e4%b8%8d%e9%94%99%e7%9a%84%e4%b9%a6/feed/ 69 VIM查找时需要转义的字符 at 在河里抓鱼的熊 http://www.shuaizhu.com/wordpress/vim%e6%9f%a5%e6%89%be%e6%97%b6%e9%9c%80%e8%a6%81%e8%bd%ac%e4%b9%89%e7%9a%84%e5%ad%97%e7%ac%a6-at-%e5%9c%a8%e6%b2%b3%e9%87%8c%e6%8a%93%e9%b1%bc%e7%9a%84%e7%86%8a/ http://www.shuaizhu.com/wordpress/vim%e6%9f%a5%e6%89%be%e6%97%b6%e9%9c%80%e8%a6%81%e8%bd%ac%e4%b9%89%e7%9a%84%e5%ad%97%e7%ac%a6-at-%e5%9c%a8%e6%b2%b3%e9%87%8c%e6%8a%93%e9%b1%bc%e7%9a%84%e7%86%8a/#comments Fri, 30 Mar 2012 02:48:10 +0000 admin http://www.shuaizhu.com/wordpress/?p=2153 对于这些将在VIM Search时需要转义的字符总结如下：

|

&

+

=

?

\{n,m}  n到m个，按最多匹配

\{-n,m}  n到m个，按最少匹配

<>  匹配单词边缘

通过VIM查找时需要转义的字符 at 在河里抓鱼的熊.

]]> http://www.shuaizhu.com/wordpress/vim%e6%9f%a5%e6%89%be%e6%97%b6%e9%9c%80%e8%a6%81%e8%bd%ac%e4%b9%89%e7%9a%84%e5%ad%97%e7%ac%a6-at-%e5%9c%a8%e6%b2%b3%e9%87%8c%e6%8a%93%e9%b1%bc%e7%9a%84%e7%86%8a/feed/ 94