### PIP 更换下载源加速下载

```shell
# 腾讯源
https://mirrors.cloud.tencent.com/pypi/simple
# 阿里源
https://mirrors.aliyun.com/pypi/simple
```

>临时使用源
```shell
pip install -i https://mirrors.aliyun.com/pypi/simple some-package
```

>设为默认源
```shell
# Python2
pip2 install -U pip==18.1 -i https://mirrors.aliyun.com/pypi/simple/
pip2 config set global.index-url https://mirrors.aliyun.com/pypi/simple

# Python3
pip3 install -U pip==21.3.1 -i https://mirrors.aliyun.com/pypi/simple/ # Python 3.6
pip3 config set global.index-url https://mirrors.aliyun.com/pypi/simple
```

>修改 requirements.txt 文件，在 requirements.txt 开头加入一行。
``` requirements.txt
--index-url=https://mirrors.aliyun.com/pypi/simple/
```


pip 相关设置

### 搭建 virtualenv 虚拟环境

```shell
pip install virtualenv
virtualenv -p python3 venv
```

### 搭建 virtualenvwrapper （可以集中管理）虚拟环境

安装 virtualenv 和 virtualenvwrapper
```shell
pip install virtualenv virtualenvwrapper
```

配置 virtualenv 环境
```shell
# 1、创建目录，存放虚拟环境
mkdir ~/.virtualenvs

# 2、打开 ~/.profile 文件：
cat << EOF >> ~/.profile
export WORKON_HOME=$HOME/.virtualenvs
source /usr/local/bin/virtualenvwrapper.sh
EOF

# 3、环境变量生效
source ~/.profile
```

创建虚拟环境
```shell
# 不指定 Python 版本
mkvirtualenv XXX

# 指定 Python 版本
mkvirtualenv -p python2 XXX
mkvirtualenv -p python3 XXX
```

查看所有的虚拟环境
```
workon
```

进入虚拟环境
```
workon XXX
```

退出虚拟环境
```
deactivate
```

删除虚拟环境（先退出才能删除）
```
rmvirtualenv XXX
```

使用 Python 内置的HTTP服务器
```shell
# Python2
python2 -m SimpleHTTPServer 80
# Python3
python3 -m http.server 80
```


### 关于 setuptools 新版本升级导致不兼容的错误信息

> error in XXX setup command: use_2to3 is invalid.
```shell
pip install setuptools==57.5.0
```

> ImportError: cannot import name 'Feature'
```shell
pip install setuptools==45.3.0
```


Python 使用笔记

### 配置文件路径
> 根据请求的Url查找配置文件里的Url匹配选项，去增加选项

```shell
# OpenResty
/usr/local/openresty/nginx/conf/conf.d/*.conf
# Nginx
/etc/nginx/conf.d/*.conf
```

### 跨域问题
```
proxy_set_header Access-Control-Allow-Origin *.uing.vip;
proxy_set_header Access-Control-Allow-Credentials true;
proxy_set_header Access-Control-Allow-Headers: Origin,X-Requested-With,Content-Type,Accept,Authorization;
proxy_set_header Access-Control-Allow-Methods GET,POST,PUT,DELETE,OPTIONS,PATCH;
```

### 转发真实 IP
```
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Real-Port $remote_port;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
```

### 代理转发
```
  location /ws {  
    if ($http_upgrade != "websocket") {  
      return 404;
    }
    proxy_pass http://127.0.0.1:1080;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
```

```
server {  
  listen 80 default_server;
  listen [::]:80 default_server;
  return 301 https://$host$request_uri;
}  
  
server {  
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name uing.vip;
  
  ssl_certificate /etc/ssl/cert.pem;
  ssl_certificate_key /etc/ssl/key.pem;
  ssl_client_certificate /etc/ssl/certificate.crt;
  ssl_verify_client on;
  ssl_session_timeout 1d;
  ssl_session_cache shared:MozSSL:10m;# about 40000 sessions  
  ssl_session_tickets off;
  # intermediate configuration
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
  ssl_prefer_server_ciphers off;
  # HSTS (ngx_http_headers_module is required) (63072000 seconds)  
  add_header Strict-Transport-Security "max-age=63072000" always;
  root /var/www/html;
  index index.html index.htm index.nginx-debian.html;
  
  
  location / {
    try_files $uri $uri/ =404;
  }
  
  location /XXX {
    if ($http_upgrade != "websocket") {
      return 404;
    }
    proxy_redirect off;
    proxy_pass http://127.0.0.1:10000;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
  
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
}
```


### 创建 HTTP 身份验证文件
```bash
sudo apt install apache2-utils -y

htpasswd -Bc htpasswd cainiao
# 输入密码
```

Nginx & OpenResty

# Golang 环境搭建

配置 GO
```shell
go env -w GOPATH=C:\\source\\mycode\\Go
go env -w GOPROXY=https://mirrors.aliyun.com/goproxy/,direct
```

跨平台 build
```shell
CGO_ENABLED=0 GOOS=Windows GOARCH=amd64 go build xxx.go
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build xxx.go
CGO_ENABLED=0 GOOS=darwin GOARCH=amd64 go build xxx.go
```


Golang 环境搭建

# GoLang 逆向分析

### 获取二进制Go语言版本
```shell
go version XXX
```

### 获取二进制所依赖的模块信息
```shell
go version -m XXX
```

### 提取二进制参与编译的GO文件列表
```shell
strings XXX | grep -E '^/.+\.go\>' | sort | uniq -u > go_src_files.txt

# 过滤掉Go自带库
strings XXX | grep -E '^/.+\.go\>' | grep -v '/usr/local/go/src/' | sort > go_src_files.txt
```


### 提取指定包名中的方法
```shell
strings XXX | grep -E '^包名' | sort | uniq -u > go_package_methods.txt
```

### 使用 **redress**  还原出 Go 二进制内部信息
> https://github.com/goretk/redress
```shell
redress -compiler -pkg -unknown -vendor -std  runtool > go_info.txt
redress -src runtool > go_src.txt
redress -type runtool > go_type.txt
redress -struct runtool > go_struct.txt
redress -method runtool > go_method.txt
redress -interface runtool > go_interface.txt
```
