基本情况 开发系统环境 系统：Windows 10 专业版 22H2 19045.3693 开发软件IDE：Microsoft Visual Studio Community 2022 (64 位) - Current 版本 17.6.5 项目框架：Blazor Server 应用 目标框架：.NET 6.0 系统架构：x64 发布系统环境 系统：Ubuntu 20.04.6 LTS focal 架构：arm64 系统信息 lsb_release -a
No LSB modules are available.Distributor ID: UbuntuDescription: Ubuntu 20.04.6 LTSRelease: 20.04Codename: focal
查看架构 sudo dpkg --print-architecture
arm64
二、部署 2.1 准备部署文件 2.1.1 发布 配置: Release 目标框架(F): net6.0 部署模式(M): 框架依赖 目标运行时(U): 可移植 2.1.2 打包文件 - 压缩zip
如：RSS_NCD_MINI_BlazorServer.zip
2.1.3 将打包文件从Windows拷贝到Ubuntu系统推荐将文件放在/home/<用户>/<新建公司名/产品名>/<项目名>目录下 如：/home/signway/rsszy/webapp3/
2.1.4 释放文件 - 解压zip 打开Ubuntu终端跳转到RSS_NCD_MINI_BlazorServer.zip所在目录 cd /home/signway/rsszy/webapp3/ 使用unzip指令解压RSS_NCD_MINI_BlazorServer.zip文件 unzip RSS_NCD_MINI_BlazorServer.zipArchive: RSS_NCD_MINI_BlazorServer.zipinflating: Microsoft.IdentityModel.Protocols.OpenIdConnect.dll inflating: Microsoft.IdentityModel.Tokens.dll inflating: RSS_NCD(MINI)_BlazorServer.deps.json inflating: RSS_NCD(MINI)_BlazorServer.dll inflating: RSS_NCD(MINI)_BlazorServer.exe inflating: RSS_NCD(MINI)_BlazorServer.pdb inflating: RSS_NCD(MINI)_BlazorServer.runtimeconfig.json inflating: System.IdentityModel.Tokens.Jwt.dll inflating: web.config creating: wwwroot/creating: wwwroot/css/creating: wwwroot/css/bootstrap/inflating: wwwroot/css/bootstrap/bootstrap.min.css inflating: wwwroot/css/bootstrap/bootstrap.min.css.map creating: wwwroot/css/open-iconic/creating: wwwroot/css/open-iconic/font/creating: wwwroot/css/open-iconic/font/css/inflating: wwwroot/css/open-iconic/font/css/open-iconic-bootstrap.min.css creating: wwwroot/css/open-iconic/font/fonts/inflating: wwwroot/css/open-iconic/font/fonts/open-iconic.eot inflating: wwwroot/css/open-iconic/font/fonts/open-iconic.otf inflating: wwwroot/css/open-iconic/font/fonts/open-iconic.svg inflating: wwwroot/css/open-iconic/font/fonts/open-iconic.ttf inflating: wwwroot/css/open-iconic/font/fonts/open-iconic.woff inflating: wwwroot/css/open-iconic/FONT-LICENSE inflating: wwwroot/css/open-iconic/ICON-LICENSE inflating: wwwroot/css/open-iconic/README.md inflating: wwwroot/css/site.css inflating: wwwroot/favicon.ico inflating: wwwroot/RSS_NCD(MINI)_BlazorServer.styles.css inflating: appsettings.Development.json inflating: appsettings.json inflating: Microsoft.AspNetCore.Authentication.JwtBearer.dll inflating: Microsoft.IdentityModel.JsonWebTokens.dll inflating: Microsoft.IdentityModel.Logging.dll inflating: Microsoft.IdentityModel.Protocols.dll
2.2 安装框架 2.2.1 下载框架
.NET 6.0下载地址
dotnet-runtime-6.0.25-linux-arm64.tar.gz
dotnet-sdk-6.0.417-linux-arm64.tar.gz
aspnetcore-runtime-6.0.25-linux-arm64.tar.gz注意： 必须安装SDK,才能使用dotnet指令运行程序。
2.2.2 安装dotnet-sdk 将下载的文件拷贝到Ubuntu系统目录 推荐将文件放在/home/<用户>/<功能>/<框架名>目录下 如：/home/signway/install/dotnet/打开终端跳转到文件目录 cd /home/signway/install/dotnet/ 安装dotnet-sdk、dotnet-runtime 、aspnetcore-runtime mkdir -p $HOME/dotnet && tar zxf dotnet-sdk-6.0.417-linux-arm64.tar.gz -C $HOME/dotnetmkdir -p $HOME/dotnet && tar zxf dotnet-runtime-6.0.25-linux-arm64.tar.gz -C $HOME/dotnetmkdir -p $HOME/dotnet && tar zxf aspnetcore-runtime-6.0.25-linux-arm64.tar.gz -C $HOME/dotnetexport DOTNET_ROOT=$HOME/dotnetexport PATH=$PATH:$HOME/dotnet上述指令只会在运行它的终端生效。 你可以编辑shell配置文件以永久添加命令。Linux有几个不同的shell，每个shell都有不同的配置文件。例如：
Bash Shell: ~/.bash_profile 或 ~/.bashrc Korn Shell: ~/.kshrc 或 .profile Z Shell: ~/.zshrc 或 .zprofile编辑shell的相应源文件，并在现有PATH语句的末尾添加：$HOME/dotnet。如果没有包含PATH语句，则添加一个新行，export DOTNET_ROOT=$HOME/dotnet。同时将export PATH=$PATH:$HOME/dotnet添加到文件末尾。
# ...export DOTNET_ROOT=$HOME/dotnetexport PATH=$PATH:$HOME/dotnet 2.3 安装证书 2.3.1 安装证书 dotnet dev-certs https --trustdotnet dev-certs https -tsignway@RK3588:~/rsszy/webapp2$ dotnet dev-certs https --trustTrusting the HTTPS development certificate was requested. Trusting the certificate on Linux distributions automatically is not supported. For instructions on how to manually trust the certificate on your Linux distribution, go to https://aka.ms/dev-certs-trustA valid HTTPS certificate is already present.
2.3.2 未安装会出现什么情况？ The command could not be loaded, possibly because:* You intended to execute a .NET application:The application 'dev-certs' does not exist.* You intended to execute a .NET SDK command:No .NET SDKs were found.Download a .NET SDK:https://aka.ms/dotnet-downloadLearn about SDK resolution:https://aka.ms/dotnet/sdk-not-found Unable to configure HTTPS endpoint. No server certificate was specified, and the default developer certificate could not be found or is out of date.Unhandled exception. System.InvalidOperationException: Unable to configure HTTPS endpoint. No server certificate was specified, and the default developer certificate could not be found or is out of date.To generate a developer certificate run 'dotnet dev-certs https'. To trust the certificate (Windows and macOS only) run 'dotnet dev-certs https --trust'.For more information on configuring HTTPS see https://go.microsoft.com/fwlink/?linkid=848054.at Microsoft.AspNetCore.Server.Kestrel.KestrelConfigurationLoader.Reload()at Microsoft.AspNetCore.Server.Kestrel.KestrelConfigurationLoader.Load()at Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServerImpl.BindAsync(CancellationToken cancellationToken)at Microsoft.AspNetCore.Server.Kestrel.Core.KestrelServerImpl.StartAsync[TContext](IHttpApplication`1 application, CancellationToken cancellationToken)at Microsoft.AspNetCore.Hosting.GenericWebHostService.StartAsync(CancellationToken cancellationToken)at Microsoft.Extensions.Hosting.Internal.Host.StartAsync(CancellationToken cancellationToken)at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.RunAsync(IHost host, CancellationToken token)at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.RunAsync(IHost host, CancellationToken token)at Microsoft.Extensions.Hosting.HostingAbstractionsHostExtensions.Run(IHost host)at Microsoft.AspNetCore.Builder.WebApplication.Run(String url)at Program.<Main>$(String[] args) in E:\SVN\RCSoft1\RSS_NCD(MINI)\RSS_NCD(MINI)_BlazorServer\RSS_NCD(MINI)_BlazorServerAPI\Program.cs:line 85已放弃 (核心已转储) 2.4 添加环境变量 2.4.1 临时运行
每次打开终端运行以下命令来设置临时变量
export DOTNET_ROOT=$HOME/dotnetexport PATH=$PATH:$HOME/dotnet 2.4.2 永久添加 - 当前登录用户 1. 打开 ~/.bashrc文件 vi ~/.bashrc# ~/.bashrc: executed by bash(1) for non-login shells.# see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)# for examples# If not running interactively, don't do anythingcase $- in*i*) ;;*) return;;esac# don't put duplicate lines or lines starting with space in the history.# See bash(1) for more optionsHISTCONTROL=ignoreboth# append to the history file, don't overwrite itshopt -s histappend# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)HISTSIZE=1000HISTFILESIZE=2000# check the window size after each command and, if necessary,# update the values of LINES and COLUMNS.shopt -s checkwinsize# If set, the pattern "**" used in a pathname expansion context will# match all files and zero or more directories and subdirectories.#shopt -s globstar# make less more friendly for non-text input files, see lesspipe(1)[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"# set variable identifying the chroot you work in (used in the prompt below)if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; thendebian_chroot=$(cat /etc/debian_chroot)fi# set a fancy prompt (non-color, unless we know we "want" color)case "$TERM" inxterm-color|*-256color) color_prompt=yes;;esac# uncomment for a colored prompt, if the terminal has the capability; turned# off by default to not distract the user: the focus in a terminal window# should be on the output of commands, not on the prompt#force_color_prompt=yesif [ -n "$force_color_prompt" ]; thenif [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then# We have color support; assume it's compliant with Ecma-48# (ISO/IEC-6429). (Lack of such support is extremely rare, and such# a case would tend to support setf rather than setaf.)color_prompt=yeselsecolor_prompt=fifiif [ "$color_prompt" = yes ]; thenPS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ 'elsePS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ 'fiunset color_prompt force_color_prompt# If this is an xterm set the title to user@host:dircase "$TERM" inxterm*|rxvt*)PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1";;*);;esac# enable color support of ls and also add handy aliasesif [ -x /usr/bin/dircolors ]; thentest -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"alias ls='ls --color=auto'#alias dir='dir --color=auto'#alias vdir='vdir --color=auto'alias grep='grep --color=auto'alias fgrep='fgrep --color=auto'alias egrep='egrep --color=auto'fi# colored GCC warnings and errors#export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'# some more ls aliasesalias ll='ls -alF'alias la='ls -A'alias l='ls -CF'# Add an "alert" alias for long running commands. Use like so:# sleep 10; alertalias alert='notify-send --urgency=low -i "$([ $? = 0 ] && echo terminal || echo error)" "$(history|tail -n1|sed -e '\''s/^\s*[0-9]\+\s*//;s/[;&|]\s*alert$//'\'')"'# Alias definitions.# You may want to put all your additions into a separate file like# ~/.bash_aliases, instead of adding them here directly.# See /usr/share/doc/bash-doc/examples in the bash-doc package.if [ -f ~/.bash_aliases ]; then. ~/.bash_aliasesfi# enable programmable completion features (you don't need to enable# this, if it's already enabled in /etc/bash.bashrc and /etc/profile# sources /etc/bash.bashrc).if ! shopt -oq posix; thenif [ -f /usr/share/bash-completion/bash_completion ]; then. /usr/share/bash-completion/bash_completionelif [ -f /etc/bash_completion ]; then. /etc/bash_completionfifiexport PATH=$PATH:$HOME/dotnetexport DOTNET_ROOT=$HOME/dotnet
2. 设置环境变量
按I键，退出命令模式进入编辑模式， ~/.bashrc文件末尾添加以下内容设置环境变量。
export PATH=$PATH:$HOME/dotnetexport DOTNET_ROOT=$HOME/dotnet 3. 保存退出按Esc键，退出编辑模式进入命令模式，输入以下指令保存。
:wq!2.4.3 永久添加 - 所有用户 1. 打开 /etc/profile文件 sudo vim /etc/profile
# /etc/profile: system-wide .profile file for the Bourne shell (sh(1))# and Bourne compatible shells (bash(1), ksh(1), ash(1), ...).if [ "${PS1-}" ]; thenif [ "${BASH-}" ] && [ "$BASH" != "/bin/sh" ]; then# The file bash.bashrc already sets the default PS1.# PS1='\h:\w\$ 'if [ -f /etc/bash.bashrc ]; then. /etc/bash.bashrcfielseif [ "`id -u`" -eq 0 ]; thenPS1='# 'elsePS1='$ 'fififiif [ -d /etc/profile.d ]; thenfor i in /etc/profile.d/*.sh; doif [ -r $i ]; then. $ifidoneunset ifi 2. 设置环境变量
按I键，退出命令模式进入编辑模式， ~/.bashrc文件末尾添加以下内容设置环境变量。
export PATH=$PATH:$HOME/dotnetexport DOTNET_ROOT=$HOME/dotnet 3. 保存退出按Esc键，退出编辑模式进入命令模式，输入以下指令保存。
:wq! 4. 重新加载执行以下指令生效
source /etc/profile 2.4.4 查看设置的环境变量 1 只看PATH变量 echo $PATH/sbin:/bin:/usr/bin:/usr/local/bin:/snap/bin:/home/signway/dotnet
2 查看所有环境变量 env
SHELL=/bin/bashSESSION_MANAGER=local/RK3588:@/tmp/.ICE-unix/20779,unix/RK3588:/tmp/.ICE-unix/20779QT_ACCESSIBILITY=1COLORTERM=truecolorXDG_MENU_PREFIX=gnome-GNOME_DESKTOP_SESSION_ID=this-is-deprecatedGNOME_KEYRING_CONTROL=/home/signway/.cache/keyring-ZRVEE2DOTNET_ROOT=/home/signway/dotnetSSH_AUTH_SOCK=/home/signway/.cache/keyring-ZRVEE2/sshXMODIFIERS=@im=ibusSSH_AGENT_PID=20915GTK_MODULES=gail:atk-bridgePWD=/home/signwayLOGNAME=signwayXDG_SESSION_TYPE=x11GPG_AGENT_INFO=/run/user/1000/gnupg/S.gpg-agent:0:1PULSE_SCRIPT=/etc/xrdp/pulse/default.paHOME=/home/signwayLANG=zh_CN.UTF-8LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=00:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.m4a=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.oga=00;36:*.opus=00;36:*.spx=00;36:*.xspf=00;36:XDG_CURRENT_DESKTOP=GNOMEVTE_VERSION=6003XRDP_SOCKET_PATH=/run/xrdp/sockdirXRDP_PULSE_SOURCE_SOCKET=xrdp_chansrv_audio_in_socket_10GNOME_TERMINAL_SCREEN=/org/gnome/Terminal/screen/af8cf72d_9406_4502_87df_7737e813f8a2LESSCLOSE=/bin/lesspipe %s %sXDG_SESSION_CLASS=userTERM=xterm-256colorLESSOPEN=| /bin/lesspipe %sUSER=signwayGNOME_TERMINAL_SERVICE=:1.393XRDP_SESSION=1DISPLAY=:10.0XRDP_PULSE_SINK_SOCKET=xrdp_chansrv_audio_out_socket_10SHLVL=1QT_IM_MODULE=ibusXDG_DATA_DIRS=/usr/share/gnome:/usr/local/share:/usr/share:/var/lib/snapd/desktopPATH=/sbin:/bin:/usr/bin:/usr/local/bin:/snap/bin:/home/signway/dotnetDBUS_SESSION_BUS_ADDRESS=unix:abstract=/tmp/dbus-LY2CUzKESO,guid=88d0510cbc94cdf2015ed92765542918UID=1000_=/bin/env
2.5 运行
**注意：一定要到根目录下运行，不要使用全路径，不然一些资源加载不了导致页面显示不正常**
2.5.1 临时变量运行程序 export DOTNET_ROOT=$HOME/dotnetexport PATH=$PATH:$HOME/dotnetcd /home/signway/rsszy/webapp2/dotnet 'RSS_NCD(MINI)_BlazorServer.dll' 2.5.2 永久变量运行程序 cd /home/signway/rsszy/webapp2/dotnet 'RSS_NCD(MINI)_BlazorServer.dll'signway@RK3588:~$ cd /home/signway/rsszy/webapp2/signway@RK3588:~/rsszy/webapp2$ signway@RK3588:~/rsszy/webapp2$ dotnet 'RSS_NCD(MINI)_BlazorServer.dll'info: Microsoft.Hosting.Lifetime[14]Now listening on: http://[::]:9002info: Microsoft.Hosting.Lifetime[14]Now listening on: https://[::]:9003info: Microsoft.Hosting.Lifetime[0]Application started. Press Ctrl+C to shut down.info: Microsoft.Hosting.Lifetime[0]Hosting environment: Productioninfo: Microsoft.Hosting.Lifetime[0]Content root path: /home/signway/rsszy/webapp2/
2.5.3 永久变量静默运行（后台运行） cd /home/signway/rsszy/webapp2/nohup dotnet 'RSS_NCD(MINI)_BlazorServer.dll' > /dev/null 2>&1 &
signway@RK3588:~/rsszy/webapp2$ cd /home/signway/rsszy/webapp2/signway@RK3588:~/rsszy/webapp2$ signway@RK3588:~/rsszy/webapp2$ nohup dotnet 'RSS_NCD(MINI)_BlazorServer.dll' > /dev/null 2>&1 &[1] 70286signway@RK3588:~/rsszy/webapp2$
2.5.4 查看后台运行
ps aux | grep <运行程序名称>
ps aux | grep BlazorServersignway@RK3588:~/rsszy/webapp2$ ps aux | grep BlazorServersignway 70286 0.6 2.2 24527624 90396 pts/2 Sl 17:59 0:01 dotnet RSS_NCD(MINI)_BlazorServer.dllsignway 70327 0.0 0.0 11664 664 pts/2 S+ 18:03 0:00 grep --color=auto BlazorServer
2.5.5 终止运行程序
kill <PID>
kill 70286signway@RK3588:~/rsszy/webapp2$ kill 70286signway@RK3588:~/rsszy/webapp2$
2.5.6 强制终止运行程序
kill -9 <PID>
kill -9 70286signway@RK3588:~/rsszy/webapp2$ kill -9 70336signway@RK3588:~/rsszy/webapp2$
![【PWN · 栈迁移-off-by-one-伪随机-爆破】[HDCTF 2023]Makewish,东芝m808](https://wap.0ev.cc/zb_users/cache/thumbs/23e6181118b51d9a0b36fcaeaa9a7ece-80-80-1.jpg)