Security injection of 516 card and board game websites and solutions by bypassing Baidu cloud

Security injection of 516 card and board game websites and solutions by bypassing Baidu cloud

Search for the website's historical website evaluation and evaluation through Baidu, and obtain the real IP address of the site through the SEO record cache.
In addition, through HTTP pollution, you can directly bypass the details of Baidu cloud without changing the announcement.

 

 

 

 

 

 

 

 

 

 

Solution:

In the security process, the attack results were found to be blocked for the sake of laziness. After ASP. NET error is returned, the error echo injection cannot be used, but the injection vulnerability still exists and can be injected.