@echo off
setlocal enabledelayedexpansion
for %%x in (jpg) do (
    set /a c=0
    for %%f in (*.%%x) do (
     set "d=!c!.%%x"
  if exist "!d!" (
     echo "!d!"
  ) else (
  ren "%%f" "!d!" 
  echo %c%
  )
  set /a c+=1
    )
 echo .
)
pause

headers={
'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36',
'Referer':'https://www.3gbizhi.com/wallMV/index.html'
}

import requests
import parsel

url='http://www.3gbizhi.com/wallMV/index.html'
r=requests.get(url=url,headers=headers)

print(pasel.Selector(r.text).xpath('//main/div/ul/li/a/img/@lay-src').getall())

datalist=pasel.Selector(r.text).xpath('//main/div/ul/li/a/img/@lay-src').getall(
)
for data in datalist:
    print(data)

number=1
for data in datalist:
    with open (f'www3gbizhi/{number}.jpg','wb') as p:
        #wb模式针对二进制数据的写入 f表示格式化,不然要加双斜杠
        #www3gbizh是路径,as表示把它重命名为p
        p.write(requests.get(url=data,headers=headers).content)
        #.content表示二进制格式的数据write表示写入
    number+=1
    #让number从一开始,不断+1
    #前提,同目录下一定要有一个空文件夹www3gbizhi

import requests
import parsel
number=1
for page in range(2,35):
    print('=========={}=========='.format(page))
    #{}是一个占位符,范围从1到34
    base_url="https://www.3gbizhi.com/wallMV/index_{}.html".format(page)#同理
    headers={'User-agent' : 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebkit/537.1 (KHTML ,like Gecko) Safari/537.1'}
    response=requests.get(url=base_url) html_data=response.text
    parse=parsel.Selector(html_data)
    data_list=parse.xpath('/html/body/main/div/ul/li/a/img/@lay-src').getall()
    for data in data_list:
        imgdata=requests.get(url=data,headers=headers).content
        with open (f'www3g/{number}.jpg',mode='wb') as f:
            f.write(imgdata)
        number+=1

from itertools import islice,cycle
length = 0
with open("/root/114514.json",'r') as f:
    data = f.read()
data = json.loads(data)
senders = {'1912723': 'gfwrev','19031218': 'bytecategory'}
iterable = iter(data['messages'])
while (item := next(iterable, None)) and item.get("system") is True:
    length +=1
for message in data['messages'][length:]:
    text = message['content']['text']
    first_key = next(iter(senders))
    second_key = next(islice(senders, 1, None))
    first_value = next(iter(senders.values()))
    second_value = next(islice(senders.values(), 1, None))
    text = text.replace(first_key, first_value)
    text = text.replace(second_key, second_value)
    if message['type'] == 'type_1' and message['system'] != True:
        sender_name = message['sender']['name']
    elif message['type'] == 'type_3':
        uid = message['sender']['uid']
        people_name = cycle(senders.values())
        while True:
            name = next(people_name)
            if name == senders[uid]:
                break
        sender_name = next(people_name)
    else:
        del(text)
    if 'text' in vars() and sender_name != None:
        print(sender_name,text)

import urllib3
http = urllib3.PoolManager(
    timeout=urllib3.Timeout(connect=114514,read=1314520),
    retries=False
)
aband = []
act = []
file_path = 'assets_2026211.txt'
with open(file_path,'r',encoding='utf-8') as f:
    for line in f:
        line = line.strip()
        if not line:
            continue
        parts = [p.strip() for p in line.split(',')]
        if len(parts) == 3 and parts[2]:
            aband.append(parts)
        elif len(parts) >= 2:
            act.append(parts[:2])
del aband
for b in act:
    ip = b[0]
    port = b[1]
    url = "http://" + ip + ":" + port + ""
    try:
        response = http.request('GET',url)
        if b'root' in response.data:
            print(ip + ':' + port)
        else:
            print(ip + ';' + port)
    except:
        pass

masscan 0.0.0.0/0 -pU:123 -oX ntp.xml --rate 160000 --exclude 255.255.255.255

from lxml import etree
port = None
address = None
parsedServers = []
#Opens the file used to store single enteries.
outputFile = open('output.txt', 'a')
#Iterates through the masscan XML file.
for event, element in etree.iterparse('ntp.xml', tag="host"):
    for child in element:
        if child.tag == 'address':
            #Assigns the current iterations address to the address variable.
            address = child.attrib['addr']
        if child.tag == 'ports':
            for a in child:
                #Assigns the current iterations port to the port variable.
                port = a.attrib['portid']
        #is both port and IP address are present.

        if port != None and address != None:
            #If the IP hasnt yet been added to the output file.
            if address not in parsedServers:
                print(address)
                #Write the IP address to the file.
                outputFile.write(address + '\n')
                #write the IP to the parsedServers list
                parsedServers.append(address)
            port = None
            address = None
    element.clear()
outputFile.close()
print('End')
from scapy.all import *
import _thread
#Raw packet data used to request Monlist from NTP server
rawData = "\x17\x00\x03\x2a" + "\x00" * 61
#File containing all IP addresses with NTP port open.
logfile = open('output.txt', 'r')
#Output file used to store all monlist enabled servers
outputFile = open('monlistServers.txt', 'a')
def sniffer():
    #Sniffs incomming network traffic on UDP port 48769, all packets meeting thease requirements run through the analyser function.
    sniffedPacket = sniff(filter="udp port 48769", store=0, prn=analyser)

def analyser(packet):
    #If the server responds to the GET_MONLIST command.
    print(len(packet))
    if len(packet) > 200:
        if packet.haslayer(IP):
            print(packet.getlayer(IP).src)
            #Outputs the IP address to a log file.
            outputFile.write(packet.getlayer(IP).src + '\n')

_thread.start_new_thread(sniffer, ())

for address in logfile:
    #Creates a UDP packet with NTP port 123 as the destination and the MON_GETLIST payload.
    address=address.strip()
    send(IP(dst=address)/UDP(sport=48769, dport=123)/Raw(load=rawData))
print('End')

import socket
def q(d):
    e = b'\x12\x34'  
    """
    A 16 bit identifier assigned by the program
    程序分配的16位标识符
    that generates any kind of query
    This identifier is copied 
    the corresponding reply and can be used by the requester
    to match replies to outstanding queries
    RFC1035 section4.1.1
    nslookup程序出自Debian软件包bind9-dnsutils
    它的可执行文件路径是/usr/bin/nslookup
    它的源代码文件路径是/bin/dig/nslookup.c(这是gitlab的路径)
    在其中搜索字符串uint16(_t) 只有一个端口变量 所以我跳过了
    port = (uint16_t)n
    过了一年(度秒如年) 我注意到/usr/lib/x86_64-linux-gnu目录下有libdns-9.20.9-1-Debian.so文件
    以及libisc-9.20.9-1-Debian.so文件
    它们在gitlab上的路径分别为/lib/dns和/lib/isc/
    文件分别为dispatch.c和random.c
    在dispatch.c中搜索id 第4个在第98行
    dns_messageid_t id;
    但它还不是 继续搜索dns_messageid
    第4个在第1416行
    ...
    总之我认为它要么是指针idp所指向的值 
    要么是isc_random16()的返回值
    resp->id = ((options & DNS_DISPATCHOPT_FIXEDID) != 0)
       ? *idp
       : (dns_messageid_t)isc_random16()
    如上
    所以现在我可以在random.c中搜索isc_random16
    isc_random16(void) {
 isc__random_initialize();
 return (uint16_t)next();
}
    返回值是uint16_t类型的 而next不与说明
    """
    h = b'\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00'  
    y = b''
    for p in d.split('.'):
        y += bytes([len(p)])+p.encode('utf-8')
    y += b'\x00' 
    y += b'\x00\x01' 
    y += b'\x00\x01'  
    pkt = e + h + y
    s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
    s.sendto(pkt, ('127.0.0.1', 53))
    r=s.recvfrom(512)[0]
    s.close()
    b = r[slice(-4,None)]
    return '.'.join(str(x) for x in b)
if __name__ == '__main__':
    IP = q('bytecategory.com')
    print(f"bytecategory.com\t{IP}")

#include <sys/socket.h>
#include <sys/types.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <unistd.h>
#include <fcntl.h>
#include <string.h>
int main() {
    int f, d;
    struct sockaddr_in v, c;
    socklen_t client_len = sizeof(c);
    char b[1024];
        f = socket(AF_INET, SOCK_STREAM, 0);
    int p = 1;
    setsockp(f, SOL_SOCKET, SO_REUSEADDR, &p, sizeof(p));
    memset(&v, 0, sizeof(v));
    v.sin_family = AF_INET;
    v.sin_addr.s_addr = INADDR_ANY;
    v.sin_port = htons(80);
    bind(f, (struct sockaddr *)&v, sizeof(v));
    listen(f, 3);
    daemon(1, 1);
    while (1) {
        if ((d = accept(f, (struct sockaddr *)&c, &client_len)) < 0) {
            continue;
        }
        int s = read(d, b, 1024);
        if (s < 0) {
            close(d);
            continue;
        }
                const char *r = "HTTP/1.1 200 OK\r\n\r\n<p style='text-align: center;color: pink;font-size: 24px'>cyw,&#x6211;&#x559C;&#x6B22;&#x4F60;</p>";
                send(d, r, strlen(r), 0);
        close(d);
    }
    close(f);
    return 0;
}

mips-linux-gnu-gcc -march=mips2 -EB -mtune=mips2 -mabi=32 -mhard-float -static -O0 -o E E.c