Cloud Security

Advantages and risks of iOS remote hot patch0x00 Preface Apple has made a lot of efforts to build and maintain a healthy and clean application environment. The Apple app store, which plays a major role in the current situation, is protected by a

Getting started with shellcode development on Windows (switch the left and right mouse buttons)I. Introduction In the last part of the "Windows shellcode development getting started" series, we will compile a simple "SwapMouseButton" shellcode,

Researchers found new Mac malware on HackingTeam   Researchers found a newly developed Mac malware on HackingTeam, a result of speculation. Since last July, this notorious malware has caused the outflow of private emails and source code from several

A health system in Liaoning Province has command execution (involving a massive amount of personal details/obtaining data in a difficult environment)   **. **. **. **/Nhis/index. the jsp has command execution. Let's talk about the data. The million

Introduction and use of ELK 01 what is ELK? ELK is the abbreviation of three applications: ElasticSearch, Logstash, and Kibana. ElasticSearch (ES) is mainly used to store and retrieve data. Logstash mainly writes data to and from ES. Kibana is

A rare MSSQL injection vulnerability in the Google Rewards Program The author is going to share a fairly rare vulnerability found in last year's Google rewards program, the only one that the author has encountered throughout his penetration testing

A backend of Baidu has SQL Injection involving multiple databases. Involving multiple databases Http: // 111.13.112.18: 8080/A weak password is found in the background in Section C of Baidu.Account admin password 111111      An injection is found

The barley wheat field APP under barley can find the SMS verification code encryption and decryption Function Test version: barley wheat field V2.0.21. The APP can be decompiled and you can find the SMS verification code encryption and decryption

SQL Injection in the official APP of Wei Feng (Analysis of SQL map full POST Base64 encoding instance) SQL Injection for APP security Objective: To view the Apsara stack IOS APPSQL Injection exists in the following areas:  POST

We can't say that two pieces of chicken are useless. People often want it, but if you don't want it right, it's hard to steal rice. Let's talk about two things we have seen recently:Remote control does not kill 360-same as it is true My colleague

The problems raised by wood ant have affected multiple sites (involving 3.87 million user data \ and cool ant) Put several station databases together ~ Issues raised by cool antInjection point: POST /index.php?s=/Home/Game/zhifumycard HTTP/1.1Host:

Analysis on common usage of File Upload Vulnerabilities Principle File Upload is a common feature in Web applications. It allows users to upload files to the server and save them to a specific location. This is a very sensitive issue for security.

A time-blind injection vulnerability in a tobacco app Rt   This wonderful appTobacco ECOM login site Injection  python sqlmap.py -u "http://sjdy.inspur.com/app/servlet/validate" --data "userid=admin&pwd=034232d0d08907880acefc5efc0408eb&mobile=188888

Financial security-copper treasurer SQL injection vulnerability can leak all information of the master database The data interface of the copper treasurer is not strictly verified, and the SQL injection vulnerability exists. This vulnerability can

Boya interactive's SQL Injection on a website involves tens of thousands of users and passwords Boya interactive (Hong Kong) Co., Ltd. is headquartered in Hong Kong and was successfully listed on the Hong Kong Stock Exchange in November 12, 2013.

Siteserver has an SQL injection vulnerability in the spatial module. An injection vulnerability exists in the space module.SQL Injection Vulnerability

A vulnerability in Meituan cloud service main site involves a large amount of user information and allows you to control VM instances. A vulnerability in Meituan cloud service main site involves a large amount of user information and allows you to

Getshell/affects multiple hosts on the Intranet at a certain station in Mavis Rt Jeves joins Online Order System  http://58.255.193.196/     E:\jboss\server\default\.\deploy\gsjmwo.war\fckeditor\> net viewServer Name Remark---------------

Arbitrary File Download from a substation in Sina Arbitrary File Download from a substation in Sina When testing Sina Weibo, a website was found along with the band. Many code files can be downloaded in combination with path

Tens of thousands of WordPress sites are used to launch layer-4 DDos attacks Recently, Sucuri security researchers found that tens of thousands of WordPress sites were used for layer-3 DDos attacks. A total of 26,000 different WordPress sites