https://1lnk.top/tags/%E7%9B%AE%E5%BD%95%E7%A9%BF%E8%B6%8A/Recent content in 目录穿越 on Link's BlogHugo -- gohugo.iozh-CN© 2026 LinkMon, 17 Nov 2025 21:08:07 +0800https://1lnk.top/2025/11/17/filesystem/Mon, 17 Nov 2025 21:08:07 +0800https://1lnk.top/2025/11/17/filesystem/<h1 class="relative group">前置知识 <div id="前置知识" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e5%89%8d%e7%bd%ae%e7%9f%a5%e8%af%86" aria-label="锚点">#</a> </span> </h1> <h2 class="relative group">软链接 <div id="软链接" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#%e8%bd%af%e9%93%be%e6%8e%a5" aria-label="锚点">#</a> </span> </h2> <p>ln -s <code>&lt;path_to_file&gt;</code> <code>&lt;link_name&gt;</code> zip -y <code>&lt;zip_filename&gt;</code>.zip <code>&lt;link_name&gt;</code></p> <h2 class="relative group">express框架session伪造 <div id="express框架session伪造" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#express%e6%a1%86%e6%9e%b6session%e4%bc%aa%e9%80%a0" aria-label="锚点">#</a> </span> </h2> <p>Express Session 伪造的核心原理是<strong>绕过服务器的会话验证机制，构造一个能被服务器认可的虚假会话（Session）</strong>。其本质是利用会话管理的核心逻辑漏洞（如密钥泄露、签名规则被破解等），生成符合服务器验证格式的会话标识。</p>