forcepoint web security

This article mainly describes the ideas and common skills in WEB log security analysis, and describes the Security Events in the event of a complete instance, how to track attackers by analyzing WEB logs and combining other clues. WEB logs, as an important part of the

The Scripting.FileSystemObject object is one of many COM objects provided by Scrrun.dll for Vbscript/jscript control. Scripting.FileSystemObject provides a very convenient access to text files and file directories, but it also poses a threat to IIS Web server data security. Filefinder's code is simple, consisting of 3 functions and 30 lines of sequential code. The most critical is the FindFiles function, wh

to access pages that do not have permission to access.If the parameters in the URL of the normal user is l=e, the parameter in the URL of the advanced user is l=s, and the parameter E in the URL will be changed to the S to access the page without permission after logging in as a normal user.9. The non-modifiable parameters in the URL can be modified;10. After uploading an executable such as a file or EXE with the same extension as the server-side language (jsp,asp,php), confirm that it can be r

A brief introduction to PHP and PhpinfoHttps://www.cnblogs.com/fcgfcgfcg/p/9234978.html Deepen understanding through CSRF vulnerabilitiesHttps://www.cnblogs.com/fcgfcgfcg/p/9244626.html PhpMyAdmin 4.7.x CSRF exploit and phpMyAdmin introductionHttps://www.cnblogs.com/fcgfcgfcg/p/9221217.html PhpMyAdmin 4.8.x local file contains exploitHttps://www.cnblogs.com/fcgfcgfcg/p/9235040.html Virtual Machine Detection ProgramHttps://www.cnblogs.com/fcgfcgfcg/p/9272944.html Xampp and Phpstorm

Burpsuite 1.7.32 original + registration machine downloadLink: https://pan.baidu.com/s/1LFpXn2ulTLlcYZHG5jEjyw Password: mie3Note No backdoor file integrity: Burp-loader-keygen.jar md5:a4a02e374695234412e2c66b0649b757 Burpsuite_pro_v1.7.31.jar md5:f29ae39fd23f98f3008db26974ab0d0a Burpsuite_pro_v1.7.32.jar md5:d4d43e44769b121cfd930a13a2b06b4c Decode Password: www.cnblogs.com/xiaoyehack/How to use the registration machineActually very simple, just the first time you need to r

Tags: error storage length allocation application filtering analysis permission data queryBrief introductionThe SQL injection attack refers to the introduction of a special input as a parameter to the Web application, which is mostly a combination of SQL syntax, the execution of SQL statements to perform the actions of the attacker, the main reason is that the program does not carefully filter the user input data, resulting in illegal data intrusion s

First, the principle of SQL injection attackThe attacker injects malicious SQL code into the HTTP request and executes it on the server.For example, user login, enter the user name Camille, password ' or ' 1 ' = ' 1, if you use the method of parameter construction, it will appearSelect * from User where = ' Camille ' and = "' or ' 1 ' = ' 1 'Regardless of the user name and password, the list of users queried is not empty, so you can look at the information of other users.Second, the defense of

Basic Web Site Security Configuration To set the security of the site's partition, allow only two groups of users, administrators and system, to have secure access, as shown in the following figure:jquery110205402204316312018= "1" data-original= "/wp-content/uploads/2009/12/iis_d.png"/> Set site information all put in D: In the Wwwroot folder, where the atte

Web Server Security Policy-Linux Enterprise Application-Linux server application information. For details, refer to the following section. Source: seayuan 'blog time: Tue, 25 Jul 2006 13:39:46 + 0000 Author: seayuan Address: http://www.seayuan.com/read.php/3.htm With the popularization of network technology, application and continuous improvement of Web technolo

The first step in my Web Security Testing journey is to find out the classification of Web security problems. The macro understanding is very important and will give you a sense of high level building and hope to be useful to everyone. There are various Web

The openness of the Internet makes Web systems face the threat of intrusion attacks, and building a secure Web system has always been the goal of people. A practical method is to establish a relatively easy-to-implement relatively secure system and establish a corresponding security auxiliary system according to certain secur