Cloud Security

By Xiaofei lankerrLet's talk about theme.The main program sends the entered activation code to the driver for verification. forcible modification of the return value does not work.The program uses ODPS to download powermaster.exe and uses three

Old articles in the past are available today. Let's move them together!For the sample, see the attachment! The PEid shell display is: Microsoft Visual C ++ 6.0However, after loading with OD, a prompt is displayed: After confirmation, the OD stops: 01

Tosec Security Team Blog Attackers who exploit this vulnerability to conduct illegal activities are at your own risk. Assume that the domain name is:Www.abc.comThe attack steps are as follows:1. visit the

[Author]: 8568309[Author's email ]:........[Author's homepage ]:...........[Author's QQ number ]:.................[Software name]: Lan viewing tool V1.70[Software size]: 156kb[]: Search and download by yourself[Shelling method]: None[Protection

The following "crack the folder" is for your reference only! Cracking Process:1. Encrypt this test file 2. This will appear after Encryption 3. Now we are going to decrypt the anti-DDOS service. Let's check the shell first. 4. Let's get

Text/graph TC-XB==========================================We have seen the application of many MD5 algorithms in software registration, and also come to the conclusion that the algorithms are not changed, even if the algorithms are powerful, they

Text/figure laoxuetongPowerShadow Master is a very strange software. After you install and restart your computer, the computer will have a startup Item similar to the two systems installed. After you select the PowerShadow Master startup Item, it is

In the eyes of many people, this is mysterious, right, and indeed mysterious, because there are not many people who know it, and I personally think it is harder to learn than programming. Before the official start, let's talk about the so-called

  Security Triad-CIA Confidentiality. Provides data secrecy. Integrity. Only authorized people can change data. Availability. Data must always be accessible and ready.   Reverse Security Triad-DAD Disclosure. Breach of confidentiality.

  Sort By LengF from the third edition of encryption and decryption 1. character storage Sequence This is a problem that needs to be considered for multi-byte data storage. The actual situation is related to the CPU. The microcomputer processing

  The following uses javascript escape as an example. corresponding to the js unescape, it is called in asp or asp.net as follows:   ==========================================   Place the following parts in the ASP file header. Be sure not to

Today, I read the news and found that 12306 of the false websites www.12306.cm are prepared to make it harmonious. Go to www.12306.cm It seems that all the connections are directed to 12306.cn. it turns out to be fraudulent traffic, so it is

PS: there are many situations in PHP that bypass GPC. This article only summarizes some of the more common ones, and it is very simple to write [because of my limited level]. You are welcome to actively make a brick :) 1. data transfer through the

It took some time to read the source code audit post in wolvez and found many File Inclusion vulnerabilities. Of course, there are also many advanced exploitation posts. In general, I have expanded my thoughts on php vulnerability mining. I will

Indicates that the website was accidentally discovered. It is customary to add an admin to jump out of the background login interface ~Habitually Try weak passwords ~ Admin Login ~ The Administrator has poor security awareness ~It indicates that the

First, check the following code $ pdo-> query ('set NAMES gbk'); $ var = chr (0xbf ). chr (0x27 ). "OR 1 = 1/*"; $ query = "SELECT * FROM test WHERE name =? LIMIT 1 "; $ stmt = $ pdo-> prepare ($ query); $ stmt-> execute (array ($ var); 1. SET names

This article will explain how to use cross-site scripting (XSS) and how to use it. This article will give a brief introduction to JavaScript and XSS vulnerabilities. XSS is short for Cross-Site Scripting, but you may ask why it is not replaced by

This article introduces how to discover SQL injection attacks based on error_log after WordPress enables error records. What attracts Cocoa is that this blog is actually an official blog of the Spiderlab team under TrustWave, which seems interesting.

Http://blog.house365.com/ajaxuser.php? Type = blog & action = atcblogclass & job = add UPDATE pw_userinfo SET dirdb = ...................... Send data: Blogclass = AAAAAAAAAAAAAAAAA "\ & itemid = 1 & uid = 1 & name = Note that you can modify the

The connection insertion at the posting area can be filled in with the xss proxy network. This sending box already has an xss problem. Someone mentioned the vulnerability on wooyun and fixed it later, however, the use of & # encoding bypass keyword