HTTP attack Apache Server

A month ago, Allah in some places to see someone to the great God's description-the company and foreign aid to engage in a few days did not solve the network problems, saw that the person grabbed the data packet, analyzed the data header information error, and then used a tool to change 1 to 0, then the network recovery.

Allah thought it was a magical skill. Until today, the magic of the skills of all can be learned.

Alas, I can't even say it's magical. is just a category of professional accomplishment. 650) this.width=650; "src=" Http://img.baidu.com/hi/face/i_f29.gif "alt=" I_f29.gif "/> is probably the door of a fierce master who leads Allah, Allah feels that he will be omnipotent.

Although the knowledge of many predecessors, Allah on the understanding of the lateral point of grounding gas things. I hope you can also understand obscure words in peers's discourse, and then gradually form a system of knowledge exploration that suits you.

before Allah has written The actual process of network communication between hosts is discussed. Now there seems to be a lot of criticism. Knowledge is progressive, not modular, we always overturn their views before, that what, right, the innovation, and so on. Ah ah, in fact, is not perfect, want to be too leisurely at that time, write things also slow not, efficiency catch urgent 0.0.

In order to be as comprehensive as possible, Allah does not speak in depth, and even every small part is brainiac. Here is the width of the main, depth to you.

Well, look.

PART1. Internet network communication

Socket address

At each end of the communication connection, there are two flags to transfer between processes:

IP address and port number, collectively referred to as socket address

The client socket address defines a unique client process

The server socket address defines a unique server process

The IP address determines the host, and the port number determines the application. It's like receiving a courier with the address of the big category also need to have mobile phone number name implemented to individuals.

Default ports are often ignored and not written. The default port for HTTP is 80, and if the port number is 8080, it should be written in the form of 192.168.0.10:80.

Socket sockets

An implementation of interprocess communication IPC that allows communication and data exchange between different processes on different hosts or on the same host.

Socket API (Application interface): Encapsulates the system calls related to socket communication provided in the kernel (the application is in user space, the memory information is called by kernel, and then the processed information is communicated by kernel to the application, this process uses sockets. )

Socket Domain: According to the address used is divided into

Af_inet:address Family,ipv4

Af_inet6:ipv6

Af_unix: used when communicating between different processes on the same host (for easy data transfer. Same host different process also cross the network is too troublesome! ）

Socket Type: Based on the Transport layer protocol used

Sock_stream: Stream, TCP socket, reliable transmission, connection oriented

Sock_dgram: Datagram, UDP socket, unreliable transfer, no connection

Sock_raw: Bare sockets, without TCP or Udp,app directly through the IP packet communication (that is, the same host different process communication use)

650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M02/A7/4C/wKioL1nkpbPjGZauAADMpSbVsVA080.png "width=" 550 " height= "306" border= "0" hspace= "0" vspace= "0" title= "style=" WIDTH:550PX;HEIGHT:306PX; "alt=" Wkiol1nkpbpjgzauaadmpsbvsva080.png "/>

Socket socket Function:

650) this.width=650; "src=" Https://s2.51cto.com/wyfs02/M00/A7/4C/wKioL1nkpbOQvke-AAFqrv8mvnc012.png "width=" 550 " height= "329" border= "0" hspace= "0" vspace= "0" title= "style=" WIDTH:550PX;HEIGHT:329PX; "alt=" Wkiol1nkpboqvke-aafqrv8mvnc012.png "/>

Socket-related system calls: Socket (): Create a Socket; bind (): Bind IP and port; listen (): listen; accept (): Receive request; Connect (): request connection; write (): send; Read (): Receive; close (): Closes the connection.

HTTP Service Communication process:

650) this.width=650; "src=" Https://s1.51cto.com/wyfs02/M00/A7/4C/wKioL1nkqDKw0hiEAAH2jR0ISNE613.png "width=" 550 " height= "331" alt= "Wkiol1nkqdkw0hieaah2jr0isne613.png"/>

URL: Uniform Resource Locator. The long URL of the browser's address bar.

URL composition

<scheme>://<user>:<password>@

Schame: Scenarios, which protocol to use when accessing the server to obtain resources

User: The user name that is required for some scenarios to access resources

Password: password, user-corresponding password, intermediate: delimited

Host: The host name or IP address of the resource host server

Ports: port, resource host server is listening on port number, many scenarios have default port number

Path: The local name of the server resource, separated by A/to the preceding URL component

Params: parameters, specifying input parameters, parameters for name/value pairs, multiple parameters, separating

Query: Queries, pass parameters to the program, such as database, with? Delimited, multiple queries separated by &

Frag: The name of a fragment or part of a resource, this component is used on the client, separated by #

Http://www.magedu.com:8080/images/logo.jpg

Ftp://mage:[email protected]/pub/linux.ppt

rtsp://videoserver/video_demo/

Real Time Streaming Protocol

Http://www.magedu.com/bbs/hello;gender=f/send;type=title

Https://list.jd.com/list.html?cat=670,671,672&ev=149_2992&sort=sort_totalsales15_desc&trans=1

Http://apache.org/index.html#projects-list

Necessary Toolkit

Http-tools

Configuration file Feature Configuration

(not finished)

This article is from the "RightNow" blog, make sure to keep this source http://amelie.blog.51cto.com/12850951/1972990

HTTP attack Apache Server